last executing test programs: 22m33.291618227s ago: executing program 32 (id=2460): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8845}, 0x4000) r1 = openat$sr(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0x0, 0x3, @buffer={0x0, 0x29, &(0x7f0000000040)=""/41}, &(0x7f0000000200), 0x0, 0x0, 0x1, 0x1, 0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x4080) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000005c0)={r1, &(0x7f00000004c0)="45a42887393502afe737aaf6d9e6178217b89d16b842a11541c0b5d4c9ba47350d97b6ef4070b672eafe97b49d8c394f0b78b3377f87eabe762cdf3a9650b7b5eaae8780c20a91f032c329ccaebf67a8d203ebc8eceb5ed50bf5c97e558b83c40fea1ad070217c04bba196be472bdaa9142beda12c9d0cdc10404f006cfde9b6aff9b45652cedb5a04a6", &(0x7f0000000580)=""/14, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e20, 0x3, 'fo\x00', 0x0, 0x60000000, 0x38}, {@remote, 0x4e26, 0x12002, 0xfffffffc, 0x8001, 0x1}}, 0x44) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @remote, 0xbf}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x10001}, r3, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100004, 0x10001d, 0x40000}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x1, 0x8, "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", 0x0, 0x4, 0x5, 0xf, 0xd, 0x0, 0x6, 0x1}, r3}}, 0x120) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r3, 0x4}}, 0x10) 15m29.515897611s ago: executing program 33 (id=4257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{}, 0x1, 0x927, 0x6}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4m6.886889668s ago: executing program 3 (id=7727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f118db0010000000000000026ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000ac0)="fcd206f7844cfacb73dac58c118e5d", 0xf}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0xb, 0x40, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x7fff, 0x5, 0x2, 0x8}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x4ba8, &(0x7f0000000380)={0x0, 0xfde6, 0x13290, 0x0, 0x1}, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x2000000000000001) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) pselect6(0x40, &(0x7f0000003800)={0x3, 0x6, 0x8, 0x1, 0x4, 0x1, 0x5, 0x7}, 0x0, &(0x7f0000003880)={0x9, 0x3, 0xfffffffffffffffe, 0x8, 0xfffffffffffffc00, 0x8000000000000000, 0x0, 0x5}, &(0x7f00000038c0)={0x0, 0x989680}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x1, 0x10000, 0x0, 0xfffffffffffffffe, 0xb, 0x8b3b, 0xe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xbab4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000000000, 0x4, 0x400, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x100, 0x0, 0x1a, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x3, 0x2, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x80000000000, 0x4, 0x8001, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd]}) 4m6.655534403s ago: executing program 3 (id=7728): syz_open_dev$media(&(0x7f0000000280), 0x0, 0x200200) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r2, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) cachestat(r5, &(0x7f0000000000)={0xa, 0x4000000}, &(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040800) 4m6.530123065s ago: executing program 3 (id=7729): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r6, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x1402, 0x612, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44850}, 0x8000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x14, r9, 0x100, 0x70bd2c, 0x9}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x40801) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700144f8d1773a9e0ab16f912632600"/60], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_emit_ethernet(0xd2, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbfd137b07daa786dd65000000009c1100fc010000000000000000000000000001ff0200000000000000000000000000014e204e22009c90780100000001000000627101eacc10ca6d093bd4577d5d2ae087978621d3b3a2f7707ab6c9f1a27133f3d48c2a6ff47404661725fffb72fab0704cd53365f4a6bf682a93433a6db658c01fe85934b1ad810abc525ab09f287d95d97c0cadc8c751ed7ef36e3db46bb501bc122f9983a006facab04d9fd416645c6bc6031b2570cdcd5f1d9c4c55ec153ce1c27a9aa07b66137c6249"], 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x28, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x5414c2, 0x90) close(r10) open_tree(r10, &(0x7f0000000640)='\x00', 0x89901) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x5c}}, 0x0) 4m5.715097143s ago: executing program 3 (id=7733): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x123) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000019c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@obj_role={'obj_role', 0x3d, '+!,'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) 4m5.622009546s ago: executing program 3 (id=7734): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0], &(0x7f0000000a80)=""/212, 0x26, 0xd4, 0x1, 0x2, 0x10000}, 0x28) cachestat(r2, &(0x7f0000000540)={0x0, 0x200}, &(0x7f0000000580), 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x22, &(0x7f0000000880)=ANY=[@ANYBLOB="1811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000000000", @ANYBLOB="0000000000000000b70500000800", @ANYRES32=r3, @ANYBLOB="00000000f7ffffff1848000007000000000000000000000018400000faffffff00", @ANYRES32=r3, @ANYBLOB="000000000000000018570000100000000000000000", @ANYRES32, @ANYBLOB="00000000bf030000"], &(0x7f00000005c0)='syzkaller\x00', 0x101, 0x16, &(0x7f0000000600)=""/22, 0x41000, 0x10, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000780)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x4, 0x5, 0xc, 0x5}, {0x4, 0x2, 0x4, 0x9}, {0x3, 0x1, 0xf, 0x2}], 0x10, 0x5}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x4, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0xf4b}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x5}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x0, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 4m5.432665564s ago: executing program 3 (id=7735): socket(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 4m5.39606298s ago: executing program 34 (id=7735): socket(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 3m26.257400454s ago: executing program 2 (id=7949): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r5, 0x0, 0x0}, 0x20) chdir(&(0x7f0000000080)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', r2, 0x40, 0x700, 0x3, 0x4, {{0x32, 0x4, 0x2, 0x29, 0xc8, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp_prespec={0x44, 0x24, 0xf6, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x12}, 0xffffffff}, {@loopback, 0xf01}, {@private=0xa010102, 0x3}, {@local, 0x2}]}, @generic={0x88, 0x2}, @lsrr={0x83, 0x1b, 0x84, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0xc}]}, @rr={0x7, 0x17, 0xfb, [@rand_addr=0x64010100, @rand_addr=0x64010102, @multicast2, @local, @multicast1]}, @noop, @noop, @ssrr={0x89, 0x1b, 0xdd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast2, @remote, @empty]}, @timestamp={0x44, 0x8, 0xe3, 0x0, 0x9, [0x0]}, @timestamp_addr={0x44, 0x34, 0xf3, 0x1, 0x9, [{@multicast2, 0xc}, {@dev={0xac, 0x14, 0x14, 0x26}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010100, 0x8c}, {@rand_addr=0x64010101, 0x69}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x401}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf2507000000380001801400020076657468315f766972745f776966690008000100", @ANYRES32=r2, @ANYBLOB="080003000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="48000180080003000100000008000300020000000800030005000000080003000100000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="1400020076657468315f746f5f627269646765002800018008000300020000001400020070696d3672656700000000000000000008000100", @ANYRES32=r2, @ANYBLOB="18000180140002006261746164765f736c6176655f3000007000018008000100", @ANYRES32=r2, @ANYBLOB="0800030001000000140002006261746164765f736c6176655f31000008000300020000001400020076657468315f746f5f6261746164760008000300000000001400020070696d72656700000000000000000000080003000100000008000300010000449a5abc00"], 0x144}, 0x1, 0x0, 0x0, 0x60008000}, 0x24008004) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r8, &(0x7f0000000100)='./file0\x00') syz_open_dev$radio(&(0x7f0000000240), 0x0, 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r3, 0xe, &(0x7f0000000000)={0x8, 0x100008d}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) 3m25.405050081s ago: executing program 2 (id=7963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 3m25.212320974s ago: executing program 2 (id=7964): socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x101, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r2 = fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) open(0x0, 0x108843, 0x190) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) fchdir(r5) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xb2d, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x2}, {0xfff2, 0x3}, {0x0, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1000004, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000400)='ns\x00') readlinkat(r6, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xda, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={r7, 0x58, &(0x7f0000000400)}, 0x10) 3m24.168414144s ago: executing program 2 (id=7969): r0 = openat$ppp(0xffffff9c, &(0x7f0000000240), 0x200802, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000002c0)) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="4c000000140097fa7059ae08060c040002ff0f0200000000000001870182fa73a69d35b5cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000469e", 0x4c}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') writev(r2, &(0x7f0000000e40)=[{&(0x7f0000000bc0)='u', 0x1}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40044103, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000000)=0x9) r5 = socket(0x2b, 0x80801, 0x1) getsockopt$inet6_mtu(r5, 0x29, 0x17, 0x0, &(0x7f0000000080)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000f0000000000000000000af65a6a0fb4e592b0b179028e5ab3d7414af5978d8a9c259139c11ab8edd9cb376bbef952041f8c65d821a627e6990e978261bf0bc840c54bf982e67b51ee32ba6b776a3aa71d69e282d8bc19b5724a36a7cfcd5bb4b9e35b4fdc03b58917e2d49d9340389e1b28fbd7ebc37f46a22430633166882ed7f4387ba0c9ea686284d1f68d7abffa2555d80b29a2e13a617e52811bee4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) futex(&(0x7f0000000040)=0x1, 0x8, 0x2, 0x0, 0x0, 0x1) openat$vga_arbiter(0xffffff9c, &(0x7f0000000200), 0x101000, 0x0) 3m24.081576213s ago: executing program 2 (id=7970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) io_submit(0x0, 0x1, &(0x7f0000000c80)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="4ad4bd82e7394dda629b3f91ec7b1c3d89e4b64a1ad711bad6832ddedb0a8a2973b54b555962aae8354b240c8672c026c539ca3339633599fa", 0x39, 0x7fff, 0x0, 0x2}]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x3ff, 0x1, 0x1, 0x0, 0x8}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001400110200000000fedbdf25ffffffff000000000000000000000000fc0000000000000000000000000000010000000000000000000000001e630000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c06b6e000000000008001f00000000000c0015005c07350009000000"], 0x64}}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x122281f6317eb7c1, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000400)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x22}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a, 0x40000}, 0x20) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r10, 0x2000}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 3m23.832912008s ago: executing program 2 (id=7971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r3 = syz_io_uring_setup(0x2f1, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2de7, 0x4000, 0x0, 0x0, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) (async) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x3, 0xf2, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x2, 0x1, 0x0, 0x40, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'w'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xe5, 0x7, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x1}, [@mdlm_detail={0x45, 0x24, 0x13, 0x9, "2c8e86c765a82c65ea848de7cae320136821d98d7f0c935eb76c30a45873506234c2fa0705869016884096cdd9e3f4566ac13b9c2e02c9c676751d332ba32a6dbe"}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xf5c}, @mdlm={0x15, 0x24, 0x12, 0x5}, @country_functional={0x10, 0x24, 0x7, 0x6, 0x2, [0x5, 0x1, 0x40, 0xfffa, 0x4]}]}, {{0x9, 0x5, 0x81, 0x3, 0x438, 0x0, 0x0, 0x3c}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x4, 0x6}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0x0, 0xb, 0xa, 0x20, 0x10}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x3, [{0xed, &(0x7f00000005c0)=@string={0xed, 0x3, "5b6389955b65378ba6db1d902d86251ce6867a9d7a0d9b72aa19cc2d9ef3a80d9ea12ad132294b80b6c7a24856459ff5ed0600a8e9abe2d9026fbde8a1fa9a90ad77f9faf3314a18458a94188f0100386aa95e838b0fed0a118a67fe6cc342fcb25096719eb4ca31f24e5b36ff1547e938f72cc1c404fb8258bf660be7b5be8f3729a4347a403da25491160e741214e320c8df638b2cae49e4c13d13b470227c08e50651872759381a5a2b1c4a228331245655d92b761985745e85a95c89b073bbb84ed6dbb6c79d77278ad14ac8b064fe6b57a67cd0cdc785c76a2b4ecfe36ce09dda44d9ee811e878bb2"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x443}}, {0x5d, &(0x7f0000000700)=@string={0x5d, 0x3, "b89aa7e767ef18bc7baaf1b2777d034ab5f3693ac61148e616628413759c9c10942db74b401268837c9c81255e2fde68ecff7c2b2dc4700ea42ddc15ddcdabbb03ed064d41420cb387fa841e462c89d7fda5f7a66a7a1cb6849fa4"}}]}) (async) syz_usb_connect$cdc_ncm(0x3, 0xf2, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x2, 0x1, 0x0, 0x40, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'w'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xe5, 0x7, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x1}, [@mdlm_detail={0x45, 0x24, 0x13, 0x9, "2c8e86c765a82c65ea848de7cae320136821d98d7f0c935eb76c30a45873506234c2fa0705869016884096cdd9e3f4566ac13b9c2e02c9c676751d332ba32a6dbe"}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xf5c}, @mdlm={0x15, 0x24, 0x12, 0x5}, @country_functional={0x10, 0x24, 0x7, 0x6, 0x2, [0x5, 0x1, 0x40, 0xfffa, 0x4]}]}, {{0x9, 0x5, 0x81, 0x3, 0x438, 0x0, 0x0, 0x3c}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x4, 0x6}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0x0, 0xb, 0xa, 0x20, 0x10}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x3, [{0xed, &(0x7f00000005c0)=@string={0xed, 0x3, "5b6389955b65378ba6db1d902d86251ce6867a9d7a0d9b72aa19cc2d9ef3a80d9ea12ad132294b80b6c7a24856459ff5ed0600a8e9abe2d9026fbde8a1fa9a90ad77f9faf3314a18458a94188f0100386aa95e838b0fed0a118a67fe6cc342fcb25096719eb4ca31f24e5b36ff1547e938f72cc1c404fb8258bf660be7b5be8f3729a4347a403da25491160e741214e320c8df638b2cae49e4c13d13b470227c08e50651872759381a5a2b1c4a228331245655d92b761985745e85a95c89b073bbb84ed6dbb6c79d77278ad14ac8b064fe6b57a67cd0cdc785c76a2b4ecfe36ce09dda44d9ee811e878bb2"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x443}}, {0x5d, &(0x7f0000000700)=@string={0x5d, 0x3, "b89aa7e767ef18bc7baaf1b2777d034ab5f3693ac61148e616628413759c9c10942db74b401268837c9c81255e2fde68ecff7c2b2dc4700ea42ddc15ddcdabbb03ed064d41420cb387fa841e462c89d7fda5f7a66a7a1cb6849fa4"}}]}) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) read$char_usb(r6, &(0x7f00000002c0)=""/151, 0x97) (async) read$char_usb(r6, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pread64(r1, &(0x7f0000000040)=""/47, 0x2f, 0x9) close(r1) r8 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r8, &(0x7f0000001240)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000d00)="e6ca38b1dd163785", 0x8}], 0x1}}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000000200)={0x1, 0x0, 0x5, 0x0, 0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000000200)={0x1, 0x0, 0x5, 0x0, 0x1}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'ip6gre0\x00', 0x9c8fe963aafb0432}) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000003c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 3m14.708774623s ago: executing program 5 (id=8030): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (fail_nth: 6) 3m14.600322143s ago: executing program 5 (id=8034): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x123) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000019c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@obj_role={'obj_role', 0x3d, '+!,'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) 3m14.59537579s ago: executing program 5 (id=8035): socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x101, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r2 = fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) open(0x0, 0x108843, 0x190) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xb2d, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x2}, {0xfff2, 0x3}, {0x0, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1000004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xda, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={r5, 0x58, &(0x7f0000000400)}, 0x10) 3m13.687947623s ago: executing program 5 (id=8043): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0/../file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x123) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000019c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@obj_role={'obj_role', 0x3d, '+!,'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) 3m13.658292462s ago: executing program 5 (id=8045): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000970400000006000000"], 0x10}}], 0x2, 0xc88c5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x4e, 0x1, 0x3) copy_file_range(r1, 0x0, r1, &(0x7f0000000200)=0x2, 0xe, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x9, 0x28, 0xfc, 0x10, 0x5ac, 0x291, 0x4325, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x3, 0xe1, 0x2}}]}}]}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_io_uring_setup(0x2345, &(0x7f0000000180)={0x0, 0x8d5d, 0x100, 0x3, 0x3d}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) sendmsg(r3, &(0x7f00000005c0)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x80, &(0x7f0000000580), 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="4c00000014010000050000009c285a3bcd927f868a38ff4821d33156fcd22b5ac9e0d04c3caf64657fba5e38c709739a7820a07d39900291d389cb111beb852b95ab593035f583aeea0000005400000084000000df00000004f5445790ecbd847e04f3f0e1ca6bb0bbc986dc92490c6e67ed54aa171d2e45792e94b1275cac6604846b891daa7f5f62cb2af204e73beb580b8f487ebe1475cf1024c61c000000c0000000120100000300000049a30bb30301f42e121607b64afa289d9e92d42f3c0a9cf2182121a13fe0439836a9dff0598a9b3fe201e99cdfdc34fe664de622934d16e5d988deaf498cb5bd02f8d1f6ba1980f9abe87b6b5c07517388eb09cbc41334656a51955223772846b66ca833d754c2d6f2380969bb6978e23171e1af58caac29be74c66222749b4517c60bf2c50c2b99680403dac2eaa3b2aae8e51d6e00f8aa198d2f4c65d2583ec792d575c08a2fa6120b1696fd3c0044ed000000fc0000001301000001000000d04954680a6eda03d5a8690f67d95ba2dfbf40e6adf970e1cd11d90e1145f2c68a7ac62385743c12edc7fc6c0d2e4440196714abd5aee25209c1753059ebc5f05c5889c900f93b1a14db643a98c83eb2d77ea2401f3343985f03d7ed4c6f2e7dd6e73e4c61e1ca3070c8cbd6e6212352c8ec5c477862d4c3ae7041763668ac6e82f2ae83d88d5892d02c5927fe244290ce72a516726cd40f2bb09eb4803c29549b5e41340066b5b7d1087e8888a567951bfe81e7dd0ee63add72d8053ed70ca247f48f7e014c899b958a6e50beb1a79c4bf592620adacf73064c6d271c22a9a9decf3e85fb827138dc9d76dc4ccb00009c0000001801000000000000b62e3db830f080ce362ece4b81bb3250490f1645b2d20e6dbb62c9dbf2436e2224a9dabf0b3a04b66bc08f8d225d5ed660887011d61bb88c3eab1a445d1577cde677920d87f8b36fd6c4c144e1ca32903db81a3e7390e602c8c20c9b0f04ee7f72a4c821be16cd32a3b9490df1dafcca75f14de45bb45d8328ed046c92db0f5fe29724773ceba68fdbe596dba7000000c4000000090100000001000001b1c2f8a79d7d58ede983ecb6c0654c95e25660167887132da5ccc69643df9f9586dfd2933ae5f3dca470a0a9c608d4fb41191e87edd693680d17e73fc0a88123288ee44f33ac2ee3a0542a479056e5d7ab4f6403abc63620cc66d3059e1505e621b20de68c3cfcefd1db469e60138c8cc5d940ef6c4f650af113ab69f9ea8a9fa7b17cf39de1a914bc40032798708f2ffe0ef2b94e60e731d47327103ddf78566342380a427b4561811b2b634a05f21003590cf0ea0000d40000000b0100000101000005323587a0fe45cfc4f2a47eb64c1d2a160ae908c428dcb430fa1ab9acf1e39ff60762bbcadc4f005e294d7ae8fdef118ae1ceeefd26df0431a6802cc0f7ef916b8a8a2d38c02be3b168287fd09540cbb1bc34c2b259bc28814b2b6997e3eed5018aa3aed78beb1af23cf51419c7dee2e8c09dc4abadbeb28b92c4fb8ff53043b97cf24a9c46d5de448094ad439b30a7011b3de104d8880a9f786cd75fc88bee1ebc3813d776d4d44ca3fc5a3973471a2118c39e5d457a785a81ae337c110e74a3e8272a490000000c10000029000000040000001ea8fe068e336c18657bf2aac3e466219208e8c23554ac5459f195d1b91cafb7db5ec4a9421f18bb3dcde6eccc5fa2849b861d287da11bcc2ad829a06144783c5d46c16486d0b0158a829600113a1915f81d5a780c2d6d029cbf6affd0246c8170c15465381c534c60d67ae2dab99418336fa0599cd574b8ec8c2a59f00285b8347236bc1a6af0db6957414e2b4893a1dcdab6abb4355721dee798195d0c512dfbc6dc866e23c8d9d075a79a783c07cc4b74c3cffda643d236ee763854d7758b0ceb94abf100509e5241d4f4d164444cf2a0a8b9ba3af2c10bf65538d124f4abe24e3434bf26041ca19be3e7dcfacff926edb553a8913aeaeb180348b707775327922ad5fdbdb1d054f76fab5f8d6507a802f732b3bc160c6c8fc28200a8bc1171f60c94886b7479bb2cf734e6bf02d069e84550e63e0eea97846c47ff58ec675edc768978e3ac0de0d541228bebe41feeda395e4630e56c558da92f71a16a1724ead6a8d9f45f4276c3cfa8df497bd0c3a8cb97e07d7ed4688c3ac4e7ccc997713f5f8b462b461bf10c2038a45e144abe66a7bd5d18afc09f5bfcc0057765bdb8e6c4bf6fdc510b52d90151c54feff024022998514b72c838f9c32283762b18562d43b1cc23854804dc6fa2f84bc606f79775c2e3b12b3450ba6954c466a40ffeafd46b6c14f71b435722bfd0b512c9ac6cf2e30c4b121f0edd90f701a3d8b2e2e68b79ff5650ec757dddffd7ac38bb0da485747244939014d48c1deefbbd0c08c340d9378c4520ace5fc9ae1c934aa302d2e1f6bff3f49c55f29516e59071df282abe4ae2bb9864418329fc31167600a4603a0d33a20bc3ccb8c4c646a0503c8ede1c891b2484ae847376c13d7c3fc200dad0bfd8649b8330c9589c48e00562f88510eb6f939bca14f7806248951641e8e68dd2c62f770f41aad817d1c9b72907fcb8e8e0d2e3942365c0dfa1f8d5ddb125fd0ecdddfadcbbcd9d27632d060b1786862b5a497d39fb2dc9ddb178e5f88f686e08741db72d52e365fa47e03fb782d538f2cd48c958b9209959c580880eab45a88a0c436d502dc707fcc21e20e9088f36007d424e295b578093408702427a5b6881f422986dbebb631d64c3745a6a24f7675c2e2e5d1e9c95e813347b0adb17dfb13294e5017011ecebfd57416f86462ee46701be0e4a946054b3d532e0ba7d55475e815a49f4860eaa73b648ef3341c005e840a75b4ab76ecdac972ad06bf1f9584a7beb5daabc93815d0e934f22da1357672ff05e42a407b49c75e6a3f75d8374cc4e4d0410d96775f11f1af409418e0c0d86fd746353c386d623c894dcadd115e737a83c7eb65cdaf6436b248b1bb38c54c1f55719a64b81bf10394087d0f48df33780060d977c36aa5aeff9fe781cc0ccd5dcd7ef567dabdb9c8c1611febb1a8dc952cf187520e0c0116c167ae73ca65b2cf88af042d36cebc120711b92044ab7a9d5cdc58d8fb7f6021c6516b5783aca58a2d634a8daf7d9d522edc1b643328a1f6339f3b3d8ec52642455f811ce90f0b4492a839c1ee84d19e2182ea476e3a598f29be74a047a924f035159720d4abc6d58b227d473896e0f7723378a98e45f1151f4a41c865e797d67b7146995621cac86b9bd645aa01497a1962214c0d35b6bbc5640d7caed550e451edea598763064b29e874ad5a89c671fbf64435eb1be194aca2d382a0a3736505772e926fc3a7bd62caff5879a5726057bff6bdb8be0e045262062329461c48321c5a8bc54219ef1a4fd8e09b4dbb0acc8e07c4ae2f033e51e72c77e4f7592c58412d4d7abfd615d7624d954d2d9a5ff1d4c67f60a744609b4488d7a4699f1cc47f791bd5e9434d3c0eb9f6b3120dbfa9bdd74bdec48817605c99aa322d8098cb5c30ab9008b53682c5a8d0d9e6cda72cfaba0abdad45e0476e19b88d1067e02faa754b4e435e3b24df377dd450194817dbcb1f4017d44db176d9af1e85ce259d1482ef1f5128d7e709139f4a982e47832cef41ac80701bdf6cb9a4057f7660727dc410937e50979f6eaa13c7ec297ef0f9c33fcf7079abeb71495e5496ee556530124594702656495819bf5c6a15216bc596c31717825d980d94376e498ea75385612c342abe13e97da2826cf0a58787a8f591d88a26e93128e65040ac3e6b4b61a7e885869edb85862465e44734e279231e3eaced3959ddc3c81b44b1644ca8a28fff44acc79ad135a940f2956c3324418fc2fb096144ad15857c6059c10d5e913fa457ac21559655c37468ecf542faeb48e2546c9de1280917b7dddbfc8f0edb6e856f6f7dcd8f4c9c4f8749236ef1e8cbbaf7c8e0bb187db732fc3572e09982334ecce5a202b0fc04882cbbd8fc02b978b618c0485b772346a16470db74a70549d850b7c502c3182ea829d71e97e25dc5334aec0d7a56140ff2bdebdc5f93871997eb954604ce68b982f4358d6088dedaa18a868546a18a217ea7f3409093b15eede5e1dfedf86e5375d16e61eae58378f7f95158bdd5f77472017df5ded650d2a5d540d9071e3a618f979204661b4a7e5808c50858ac3959a7b68e0253ab9c24dc1c42c0b712bc0c9e6047bd52b119fcd859d2870fde9f507fcd540414f97c9386f621ca1b638e9b6656edd35beb733cc2cca86bc1184e832739c2a12b827444759e64e5783aed63d55ace2db4cf1811182340b92665e7ed6b04a1a33b161dcad1736b450af41c9e71ce111354fd025e4aa637b6ac53a359336509becdf7ca201ff31f883217086e620f078695980c70dcd1bcb990b74d4158a91476a92832598d92e443d733f43a5fa75aafc0e2f77ba717d707c25a2a750bcdf9f2b25d6d4fb4296b16d53bc4bc82f30a6d55fcbf5ab11359beb0183726cf8565ecb18285f2230ac13d813cc5f037b1d1ed6e8ac1c21c032ad7c75d846b73d42b032bbd64a39717652f1d7918fef06bcea584b043aab8138a8c4f5e66416dca94727c669a979f5bc6c32c9665474611a5df2bfe2aa479d636ce0987aeef434fdc74713770fa6027b1efa0a49172a265e5b0db855f380d91e31649c4e390f2d49e7bf44fa14ebb5816d6255a8a297c2dffaa047fc4334f4ed4c4071753addd1526be35a9945721be0f23acef4d8ea215b9765baf1fd337d7d1fb84c126e3dce87f76036328590c2c5905dcfea9360d12a0dd576440b011bf8f19b5b7cd766dae734051c293f480304493dfbf5de4edc1e5b93b0dd49095568ddcf14ae3c9065b43c23357c0d888593c30dd47fb94eb02cf51fa2bd89a0115c8ac1ae0d04d0acf9c673372582a7b9ef85f6427e66245145fb189715eeec415be5870ad0dca5cde50af8572a8b2fef74d4350f768db13dc2c7e57ffde9191f0b38499230ad749c30684b57cd1cf7abaaf3eed43e83e87d5534390bcb5c8032530099cd9fe39283168385b77a93c544f529a2906d181f03a92f12c0e4c7aa78edf25b4c5aa0af6d13214a381134b297118ef2795b3b904cbe881a9a8e55723ca2ad03bfa7374c764b6e4f9d0f395729cbc49357224fb3dab1534461c74407d4de57f6bc4ec143aaeb5dcf3742e11237d05990dd1563e447fc2c73e5421dd9ab7e6f1e683199049f680b3b0052df484b5debff3f9b946d90de1d95a40c89ca94512cce72a89533e007979792d85652ce5599fe00e1b2ff4647e5c4a2beeff4253a5baba8f9cf12f3e07110ff6c113182f2c9494356a8fbd674ca5ac44cd5ac557b5fd5c871e376178c9dd01ddf2019c522e35c05f1441891bb1740e773eedd2a491779b71ae5b13b2d97e00f5604de068554d83b5d7eea4f6d6ede99f22624fdfdba1f98f473e4c85ac0e58c6a5ebd56e520cbb190cf11b9bb15e13ce258c21603f2176d685f608e0405ab91aa2467fd5b9ca75cd6c15daac1591695809002655b2060e180317d0dc260a83e86a309893230adaf6ed69413a58ba5cb8a77e60f7410cb0607f34546b3df770d2ac439caadb92e03311bba6036ddb62d0d965cb56b063811add952e5984e53c8399d4c8024aefcb90619666dfddd0ddbadd9725bcfe0e57ae8588de68a4d01fdd1f6e2f86e6857a17738ab315f8431fe4875769a50c1edf78fe71ea01297ffc6c1c56b402879245581c093a31c9c309d977f31764ff491590ac1e102582e4e766a1b98bca03f69e81d3f470726462f05fe424639fc1c5fb907f34cdf4a65b5f925121599c232b99626b5b1a7804040e365837dc89f2eb30c5f156b4212066dae49d9f47d19e2d655f150ccc5c23d0176ee2a56bafde55a47306954642e5710913955e4f78f0db0cdf9af45263cd5218cf6212be78b8d8d08400e33a744ffc3b6f03d1ef78e769a1631a84ff3dece7a0562ad00dc67b168d53a8d9205ce766ac55654c0188a0e6d6a5161a41448dcb02b1c31622ad82b6b3b7a49c441bbbd1450ccb01142a550ce0adedca08a02fe32440bbba261577cc0893a8bd8133c8a9484dd80b0d4865001898bed87eccdb84bfc409c59bc7cf6fbdceab5a0ab3aa43f18f3ea4d97104e05830c0a1828f82cd10d565e30d3085be853b73033278847358b272fc548f3455fa65203d9b1999539f2cec17780f9a7fb2b79accd3e35605e20138f5890bbeb24b44077a7165962edd18d17044d8483a9e14ba28bfa5db24c677bcc30dc0fc620a7b61aa8c1d2fcf102c75e43d2b1aea6b541ee679ff722519bebb3881108574f1dc761b7febd263ca61fb25312f9a5e40275a23644098a601429ca9a5c691f0e3f969838635ee51bfb5568ca2b48faeffdabde7f6674e11b36ce15caa45b85caca120e6d79dd6178aec8b2cf85536066d60e141354697a0b5d083586401a858001a4f4ec0ee0f2a7922b3a462beace61af52eed3203b217075999d2c8e5b69aff1e651239e78488fdce266360d87f5b8edeb99e09275fa2ab2f44956af3b5ffd5f9c626192abba357e009dca260ae13cdf9d60b3fc59895c0bb82a11900a1dfd8cfc1d4fd9da75fde5af4505a8954d443f762189ff44a7d947fd25c3b48cfe7bb72082b9a2307cc83aa9c1f63cf86f8f38ab02e9e32788f61624dcf816157b44cd6b0395f7e04815c72f597c273fcb63ae2332a3d9f52ac47680143f6d05c00bd5533267f8810b014e4e80859831c3563ea8fb0c56ca7f7645413a60592909b8e9acf0f4ac4ba67e1167fa0d4621d88e1ad845b5a279a12868dbd7ba5e0bfd86a88e4e17f222e37f7e0a0911fdf1835aca9f36faba854bb80de6eb42d02a5838c30106f31bfceb4c9ca6fbb804b9c6a51a4bbaa2ef5b9c995c9cf3a8eb5e460097ca8c23e390a84e266ea6aaae1c0be937eb64859e2d304f130ec17250860c7ac8bd255d81a49585ac9811d68e8705fad8429cb88a8e099ee1dfecec15e6aad050399e5a722c15a53fa62e08dc10654232f763ba31f97607ef6a6f0af9724805d13c84b48378618bc4e7ac6de1ce10a6be6a3831db583e68295677fa3812647fb415ca490d3ce30c518d9451c3e0afb14787df2cb5bacd628d1a8f6c856e627b1c5941bcdf53bb823da3951d11f7cfcf0ac80490fbcead4259d4f00b15ad70f6557c904472c8a657382b3efab3f3effffc4ab482117c82f7a93894557b0d0fc2f162c7aa59af91471d76a1069bcb0a45d4a1707d780d18221ab27190138a7490b718a9248040d43b620f5c890c4bc52c0eabede08d6dac05466be4f6c533ac1d8e2cd7637680d4d26a4d44ed5d1ef7bbdda7804598a3251b1f39c4a031e826f7e139663b30c30de6715815ea641baf98bbfa2a24c0100000600000001000000c0dc4de9558f665ec2ef4088d249515eabf27a341f0711e0cd46d43eef94c680fbb9d92dbba121c414614077e6c209f756693f5d5afc98da5162af9875148deb25c66d1a71a9bab328d4c9d2a1e6dfc7133e47471b341174ae1011f2988206a499d9d1cd74c5a9bf0740fb5432ea2bd132c7dd14639ce3c974e633e6bec6f2e64c925e68857d6fa3fa583f3e2c5a62cc92e7b398a04bfc7c1fc189f690cce5b9e21694d1749b9aa84f9d26daa4cc3d00360ed1a0f5f7dd2f8488e66acc52791f8c248d2b955902507a547babcd4aaac4273efb1c21ae1c959f88d41439bec4596cd6c5a7374f0f148ba1c3753381e1dc178ba7d374023aaf9401545a0431af723a62b3202c9ff751b125577e4c8af7225a392710565c587c36dfa93d03f94349025d037f3f45a82073a45b6dd843021f5a35a45d127802d5943f48f5e45800007e09f0aebc5a6439b09b97f87ada94e72104b638a1d64f8f20f649ecbf76691fb6670c50e7a0fd56532e27e0c094131143478a16846346dae64e9ceb86edee55c86689652a3b4f8eff80b7fc9746f81318a0956596a6c2be011fb2c6c3d5222a95a95fa6433ab0553de894469fcb06c966af8ce59c00dfd4d1dd62ae331189b8b6d7e00e92c46f8de956d937277b68"], 0x15e8}, 0x40040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x21, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="11fe941d0102538ad56a440bc8473b3f76c82db725f9ada9e9cedfe70b67927200a4b460da1b37a61cdd9e1a424c9fbe3b698272f4b34c1aeee23b28dde1ddf17ed9484feee0a8b6b6cb7a0f7b21ebc40373b8f1ac24c90852", 0x59, 0x2100}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x5}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x9}, @IFLA_MACSEC_VALIDATION={0x5, 0xd, 0xff}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m13.315838415s ago: executing program 5 (id=8048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x2, 0x296a, 0xf7f, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0xfd, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x8, '\x00', 0xe}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x9, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x3}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0xff, '\x00', 0x8}, {0x6, 0x6, 0x4, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xb, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185647, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x8000000, '\x00', @p_u16=0x0}}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @empty, 0x23}, 0x1c) getsockname$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000300)=0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000340)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 3m13.315684666s ago: executing program 6 (id=8049): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lremovexattr(0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0x94}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m13.26877214s ago: executing program 35 (id=8048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x2, 0x296a, 0xf7f, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0xfd, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x8, '\x00', 0xe}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x9, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x3}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0xff, '\x00', 0x8}, {0x6, 0x6, 0x4, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xb, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185647, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x8000000, '\x00', @p_u16=0x0}}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @empty, 0x23}, 0x1c) getsockname$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000300)=0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000340)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 3m13.222128884s ago: executing program 6 (id=8051): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x4000) (fail_nth: 6) 3m13.221809961s ago: executing program 6 (id=8052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r6, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000da4d4aea00000000000000000071100400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xfffffffffffffffe, 0x2004cb, 0x0, 0x2, 0x5, 0x891, 0x7, 0x4, 0x2, 0x8, 0x6], 0x8080000}) (async, rerun: 32) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000280)={0x9}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000, 0x1140}) (async, rerun: 32) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async, rerun: 32) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000240), &(0x7f0000000300)=0x4) (async) syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m12.986577002s ago: executing program 6 (id=8054): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0/../file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x123) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000019c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@obj_role={'obj_role', 0x3d, '+!,'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) 3m12.978214246s ago: executing program 6 (id=8056): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x71, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000300)=0xfffffffc, 0x4) connect$inet6(r3, &(0x7f0000001fc0)={0xa, 0x4e23, 0xff, @remote, 0x1}, 0x1c) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) openat$adsp1(0xffffff9c, &(0x7f00000000c0), 0x20882, 0x0) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x10da) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x44) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @private2, 0x0, 0x3}, 0xffffffffffffff65) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 3m12.811959248s ago: executing program 6 (id=8057): socket$l2tp6(0xa, 0x2, 0x73) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m12.719572718s ago: executing program 36 (id=8057): socket$l2tp6(0xa, 0x2, 0x73) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m9.361375651s ago: executing program 37 (id=7971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r3 = syz_io_uring_setup(0x2f1, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2de7, 0x4000, 0x0, 0x0, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) (async) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x3, 0xf2, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x2, 0x1, 0x0, 0x40, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'w'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xe5, 0x7, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x1}, [@mdlm_detail={0x45, 0x24, 0x13, 0x9, "2c8e86c765a82c65ea848de7cae320136821d98d7f0c935eb76c30a45873506234c2fa0705869016884096cdd9e3f4566ac13b9c2e02c9c676751d332ba32a6dbe"}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xf5c}, @mdlm={0x15, 0x24, 0x12, 0x5}, @country_functional={0x10, 0x24, 0x7, 0x6, 0x2, [0x5, 0x1, 0x40, 0xfffa, 0x4]}]}, {{0x9, 0x5, 0x81, 0x3, 0x438, 0x0, 0x0, 0x3c}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x4, 0x6}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0x0, 0xb, 0xa, 0x20, 0x10}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x3, [{0xed, &(0x7f00000005c0)=@string={0xed, 0x3, "5b6389955b65378ba6db1d902d86251ce6867a9d7a0d9b72aa19cc2d9ef3a80d9ea12ad132294b80b6c7a24856459ff5ed0600a8e9abe2d9026fbde8a1fa9a90ad77f9faf3314a18458a94188f0100386aa95e838b0fed0a118a67fe6cc342fcb25096719eb4ca31f24e5b36ff1547e938f72cc1c404fb8258bf660be7b5be8f3729a4347a403da25491160e741214e320c8df638b2cae49e4c13d13b470227c08e50651872759381a5a2b1c4a228331245655d92b761985745e85a95c89b073bbb84ed6dbb6c79d77278ad14ac8b064fe6b57a67cd0cdc785c76a2b4ecfe36ce09dda44d9ee811e878bb2"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x443}}, {0x5d, &(0x7f0000000700)=@string={0x5d, 0x3, "b89aa7e767ef18bc7baaf1b2777d034ab5f3693ac61148e616628413759c9c10942db74b401268837c9c81255e2fde68ecff7c2b2dc4700ea42ddc15ddcdabbb03ed064d41420cb387fa841e462c89d7fda5f7a66a7a1cb6849fa4"}}]}) (async) syz_usb_connect$cdc_ncm(0x3, 0xf2, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x2, 0x1, 0x0, 0x40, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'w'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xe5, 0x7, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x1}, [@mdlm_detail={0x45, 0x24, 0x13, 0x9, "2c8e86c765a82c65ea848de7cae320136821d98d7f0c935eb76c30a45873506234c2fa0705869016884096cdd9e3f4566ac13b9c2e02c9c676751d332ba32a6dbe"}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xf5c}, @mdlm={0x15, 0x24, 0x12, 0x5}, @country_functional={0x10, 0x24, 0x7, 0x6, 0x2, [0x5, 0x1, 0x40, 0xfffa, 0x4]}]}, {{0x9, 0x5, 0x81, 0x3, 0x438, 0x0, 0x0, 0x3c}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x4, 0x6}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0x0, 0xb, 0xa, 0x20, 0x10}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x3, [{0xed, &(0x7f00000005c0)=@string={0xed, 0x3, "5b6389955b65378ba6db1d902d86251ce6867a9d7a0d9b72aa19cc2d9ef3a80d9ea12ad132294b80b6c7a24856459ff5ed0600a8e9abe2d9026fbde8a1fa9a90ad77f9faf3314a18458a94188f0100386aa95e838b0fed0a118a67fe6cc342fcb25096719eb4ca31f24e5b36ff1547e938f72cc1c404fb8258bf660be7b5be8f3729a4347a403da25491160e741214e320c8df638b2cae49e4c13d13b470227c08e50651872759381a5a2b1c4a228331245655d92b761985745e85a95c89b073bbb84ed6dbb6c79d77278ad14ac8b064fe6b57a67cd0cdc785c76a2b4ecfe36ce09dda44d9ee811e878bb2"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x443}}, {0x5d, &(0x7f0000000700)=@string={0x5d, 0x3, "b89aa7e767ef18bc7baaf1b2777d034ab5f3693ac61148e616628413759c9c10942db74b401268837c9c81255e2fde68ecff7c2b2dc4700ea42ddc15ddcdabbb03ed064d41420cb387fa841e462c89d7fda5f7a66a7a1cb6849fa4"}}]}) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) read$char_usb(r6, &(0x7f00000002c0)=""/151, 0x97) (async) read$char_usb(r6, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pread64(r1, &(0x7f0000000040)=""/47, 0x2f, 0x9) close(r1) r8 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r8, &(0x7f0000001240)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000d00)="e6ca38b1dd163785", 0x8}], 0x1}}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000000200)={0x1, 0x0, 0x5, 0x0, 0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000000200)={0x1, 0x0, 0x5, 0x0, 0x1}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'ip6gre0\x00', 0x9c8fe963aafb0432}) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000003c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 3m5.504450035s ago: executing program 7 (id=8050): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000000, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = inotify_init1(0x0) lsetxattr$security_capability(&(0x7f0000000c00)='./file0/file0\x00', 0x0, &(0x7f0000000c80)=@v2={0x2000000, [{0x67, 0x3}, {0x7, 0x6}]}, 0x14, 0x1) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x10000a0) fcntl$getownex(r0, 0x10, &(0x7f0000000d80)={0x0, 0x0}) r6 = getuid() sendmsg$unix(r1, &(0x7f0000000e40)={&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)="8b9dbb098a164ac063f006397293c9e44cf38dbf557124d6925787655b677f3ff8c3894bbe0d1baf373e7ff5bc81596282c999563c6dfa5c951062de408498ea3286f8f43b", 0x45}, {&(0x7f00000009c0)="1a64201dcb7091dba0970cff518c4c979e70eea61a6e4d741d80130869875c190a34a447744ae4d1c0895765b0885c12b8c9c46ee4a2e267fd69b719358501ff76571c987c5a55eab074644d6e54653e067940201c58f402aa04153d89b856e6fa6ffe94d361313f6d3e7947f7850337f25f2ed030d8b055df48209adba518edc98de19fe6c323a4df9b85fe17a60b80c4e881c34647bad642", 0x99}, {0x0}], 0x3, &(0x7f0000000dc0)=[@rights={{0x10, 0x1, 0x1, [r2]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r5, r6, 0xee01}}}], 0x54, 0x20000040}, 0x4000880) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) inotify_rm_watch(r3, r4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6, 0x0, r8}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000240)='%*.(\x00', &(0x7f0000000300)='batadv0\x00', &(0x7f0000000340)='/dev/snd/seq\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='&\x00', &(0x7f0000000440)='/[\x00', &(0x7f0000000480)=']:+)\x00', &(0x7f00000004c0)='!-\x00']}, &(0x7f0000000780)={[&(0x7f0000000540)='/dev/snd/seq\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='$\x00', &(0x7f0000000600)='wlan0\x00', &(0x7f0000000640)='/dev/snd/seq\x00', 0x0, &(0x7f00000006c0)='\\,\x00', &(0x7f0000000700)='%&\x00', 0x0]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 3m5.004810795s ago: executing program 9 (id=8066): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000000), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x4) 3m4.454119809s ago: executing program 7 (id=8069): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'pim6reg1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffe1e, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1a, 0x3, 0x7) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000088c31c5e000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000240)="dfd9", 0x2, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r3 = socket(0x2, 0x80805, 0x0) io_setup(0x80, &(0x7f0000000440)) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x71) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f00000002c0)=[{&(0x7f00000007c0)='d', 0x1}, {0x0}, {&(0x7f0000000880)="32afef6daacb8e30e57eec572f6c3e1f2213c2a749fb70002570dc4d93a28101610438cf9be20e8d9dc4a72cc27722267b240df60272cf8c6b73ba205af02d782272b2d9c95857523890796bd20574de0b709f6f787f7d1cd7b1fa80685a109126702bbf9b5b92f30c379b38fc42d5a1383dae9c61201fe9ab64c531dd049bcaab0ef933542b890b344635", 0x8b}], 0x3) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff55) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}}) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0x7f9, 0xb2, "20ab9809006ea4a7446c180000cd681ec267a0", 0x7, 0x200008}) ioctl$TIOCL_PASTESEL(r5, 0x541c, 0x0) syz_io_uring_setup(0x6ead, &(0x7f0000000100)={0x0, 0xea8, 0x20, 0x2, 0x267}, &(0x7f0000000400), &(0x7f00000003c0)) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000340)={0x0, 0x7, 0x9, 0x1}) 3m4.212293349s ago: executing program 7 (id=8071): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x10000) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0xd00, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf0}, 0x1, 0x0, 0x0, 0x24044084}, 0x2000c080) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3m4.115537321s ago: executing program 7 (id=8074): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x123) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000019c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@obj_role={'obj_role', 0x3d, '+!,'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) 3m4.109128904s ago: executing program 7 (id=8075): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x123) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000019c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@obj_role={'obj_role', 0x3d, '+!,'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) 3m3.808238818s ago: executing program 7 (id=8078): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, 0x0, 0x2}]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r7, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x8000004, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x1, 0x2}, 0x50) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3m3.691095042s ago: executing program 38 (id=8078): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, 0x0, 0x2}]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r7, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x8000004, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x1, 0x2}, 0x50) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3m3.449613163s ago: executing program 9 (id=8080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 3m3.266911045s ago: executing program 9 (id=8081): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7}, {}]}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x38}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f00000012c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x8, 0x4}, {0xfffb, 0x1}}]}}, 0x11) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f00000008c0)) 3m2.419348838s ago: executing program 9 (id=8086): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x123) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000019c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@obj_role={'obj_role', 0x3d, '+!,'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) 3m2.282226367s ago: executing program 9 (id=8088): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0xfffffffa, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x4e25, 0x8, @loopback}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40000000, 0x1}) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0xff00, 0x0, 0xfffffffffffffef5) 2m59.279838139s ago: executing program 9 (id=8095): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210021ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000140)=0x403, 0x0, 0x4) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r5 = signalfd4(r1, &(0x7f0000000000)={[0x5, 0x2]}, 0x8, 0x400) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x8a, 0x2}) keyctl$update(0x2, r4, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x19, 0x1, r1, 0x0, 0x0, 0x0, 0x1, 0x0, {0x6}}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_io_uring_complete(r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_uring_enter(r1, 0x6e2, 0x620, 0x1, 0x0, 0x0) 2m59.130817264s ago: executing program 39 (id=8095): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210021ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000140)=0x403, 0x0, 0x4) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r5 = signalfd4(r1, &(0x7f0000000000)={[0x5, 0x2]}, 0x8, 0x400) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x8a, 0x2}) keyctl$update(0x2, r4, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x19, 0x1, r1, 0x0, 0x0, 0x0, 0x1, 0x0, {0x6}}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_io_uring_complete(r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_uring_enter(r1, 0x6e2, 0x620, 0x1, 0x0, 0x0) 5.334250488s ago: executing program 8 (id=8782): syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/158, 0x9e, 0x21, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffee7, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000100)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0xfffffe01, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) unshare(0x400) r9 = socket$inet(0x2, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0x4000, r9}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001240)=[{0x0}, {&(0x7f00000012c0)=""/41, 0x29}], 0x2) 4.693830494s ago: executing program 4 (id=8788): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socket$inet(0x10, 0x5, 0xfffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000880), 0x0) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x29) r1 = open(0x0, 0x400, 0x43) chdir(0x0) r2 = fsopen(&(0x7f0000000280)='ext3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='sgurcj\xff\xfc6\xb6\xa8W:\x98\x9a,sn_\x1b\xc4\x00\x00\x00\x00\x00\x00\x00\xfc\xe9\x11O\x8a\xbe\xec\x7f9\x00\x00\x00\x00\x00\x00\xb6h\xc4\rdQ<\xbf\xb2v\x91\x05 hH\xf5rW\xbaG\xa540EP\xd2\xa2\xa2\xb0\xbe\xc7\'\xf2]\xf7b\x16\x1ad\x8d\xf8-\xed\xfe\x99\xae\xe7\x1dA\x15\x91zSY\x8fH$\xe9\xceQ_V\xaf&\x8a\r\xc5\xb0{\xb9\xa0\x86\xec \xd1/y\xe2Z\xf5\xc3\x04\x18m\xb6\x96\xdcBE\x8b\x958\xfb\xd8\xcf\xac\x1eU2\x12\xe4L\xb0,\xfe;\x80Q\xe5\xe7P\xeb\x18\xd8D\x05\\\xe9\x00\xf6\x99\x96\x14\x95\x14\xf6F\xa7\x17\xce\xf0\x97\x80S\xedx\xbe\x98)\xdbJ\xef\x82S\xe0\'a\x84\bM\xb2\t\xdc\x14)\xbd\x1a.\x84P\x13M\x19\xf3L\xa4\xdd\x04\x7f7\xb8^\rA\xf3\xb4\x80\xe8\x15-\xf9\x93\xe8A\xe9?\xd8\xa0\xc7\x9d\xa1&6o\xa8\xeb\xd0\x9c\x93\x1f\xe7}\xaa\xbb\xa0\xf7\xebft\x91\x94W\x00\"\xb1\xac\xfa;\x84,K\xb8\xc0\x05hx3\xfe\xec\xf2\xa4G\x82\xa3\xa9\xaa\x0f6\x15\x1e', 0x0, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000000)) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2020) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) 4.306614098s ago: executing program 8 (id=8789): open$dir(&(0x7f0000000000)='.\x00', 0x40000, 0x81) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000280)={0x846e, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x4000004) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) modify_ldt$write2(0x11, &(0x7f0000000600)={0x8, 0x100000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) accept4(r2, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x0) openat$ptmx(0xffffff9c, 0x0, 0x200, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0xc}) io_uring_enter(r4, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, 0xee00, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.709265134s ago: executing program 4 (id=8790): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r1 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xaaca4, &(0x7f0000000200)={[{@max={'max', 0x3d, 0xffffffffffffffff}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x80, 0x141) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c2508000000000002634a469c11c60b6600000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x20000004) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@getsadinfo={0x1bc, 0x23, 0x400, 0x70bd27, 0x25dfdbfe, 0x0, [@sa={0xe0, 0x6, {{@in=@loopback, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0xffd9, 0xa, 0xa0, 0xa0, 0x2f}, {@in6=@mcast1, 0x4d4, 0x124474d344c225c0}, @in=@remote, {0x2, 0x7fffffff, 0xfb, 0x1, 0x40db, 0x1, 0xb, 0xfffffffffffffffb}, {0x80000000, 0x7fff, 0x43ff, 0x200}, {0x1, 0x6, 0x5}, 0x70bd25, 0x34ff, 0x2, 0x3, 0x6, 0x74}}, @algo_auth_trunc={0x67, 0x14, {{'blake2s-224-generic\x00'}, 0xd8, 0x180, "5773126367d74451fe4912b88eacd88025d7090a132ae9ea53d6fd"}}, @extra_flags={0x8, 0x18, 0x8a}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@local, 0x0, 0xa}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd28, 0x200}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e23, @in=@private=0xa010102}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000034c0)={0x2020}, 0xcac) openat$comedi(0xffffff9c, &(0x7f0000001a80)='/dev/comedi3\x00', 0x181000, 0x0) 3.480826491s ago: executing program 8 (id=8791): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x0, 0x0, 0x0, 0x4, 0x87, &(0x7f0000000380)=""/135, 0x41100, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x10000004, 0x101}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000009}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='net/packet\x00') ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) (fail_nth: 9) 2.338864829s ago: executing program 0 (id=8793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 2.290040269s ago: executing program 4 (id=8794): syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/158, 0x9e, 0x21, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffee7, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f0000000100)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) write$uinput_user_dev(r8, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0xfffffe01, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) unshare(0x400) r10 = socket$inet(0x2, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0x4000, r10}, 0x0) readv(r8, &(0x7f0000001240)=[{0x0}, {&(0x7f00000012c0)=""/41, 0x29}], 0x2) 2.289685339s ago: executing program 0 (id=8795): r0 = fanotify_init(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x86) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0x1fe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) close_range(r0, 0xffffffffffffffff, 0x0) 2.224793769s ago: executing program 0 (id=8796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x19, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x9}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0) 2.224209762s ago: executing program 0 (id=8797): syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/158, 0x9e, 0x21, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffee7, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000100)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0xfffffe01, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) unshare(0x400) r9 = socket$inet(0x2, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0x4000, r9}, 0x0) readv(r7, &(0x7f0000001240)=[{0x0}, {&(0x7f00000012c0)=""/41, 0x29}], 0x2) 1.985411872s ago: executing program 1 (id=8798): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x123) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000019c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@obj_role={'obj_role', 0x3d, '+!,'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) 1.944722442s ago: executing program 1 (id=8799): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001d80)={'syztnl1\x00', &(0x7f0000001d00)={'syztnl1\x00', 0x0, 0x4, 0xe, 0x8, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, 0x720, 0x10, 0x9, 0x7}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="6418c1e32fa662a89a3c796f32630350edfcc73dbc9871ae4ce3b2859b3ba39fd23fcfb1d7b32fdad96605abbc72c58384d0ccbcd52f44633816f20767bdae8f56099b2605a58866127f021a2474259ebc78e4318c44f1", 0x57}, {&(0x7f0000000100)="5617f1cee9ef3e696785cc78bdd7405390adcca1c630d85948d3e20ef76e3026aa31d94b7b54f06fd58d54c11030ff2e1802f7fb0722625084e08885c3ad582164c18fc8bb18f870afbc6e55b35b8e32b4021416c8aed587c944ecfdb9033841cd667dcb31b3121ae4d9a0aefc39587cdec041a23ca98e7ddd293a40bf97d8965b29fa8588", 0x85}, {&(0x7f0000000400)="01be7d177bc7256b2c55353cf2a27bf2941a41c3e780680a86303edbf778abce3400624c8aae2ae58efea3a729312fb2697320d412f0abe0cd26209eb825f381c162c9df8e396ba940c4a978e244f19ae525423e5d71a37249c5377ec5f63c1370794b3e29f9b97123ca096ac5547d11dd46da6dfa3b12612c7ba6aba04fe1fd0356e12f49ac3812c4aaaf6a21022228a0f953d5bd6f502c61613510b6f7724b899f1497643049a77004b369426d9b89785d51afc1a785cb463cb8b9e1f856afd77e35f33df408fe9a4f1f98dfbb96a08364f52046d1e47c0fc44e1b44d230c27fbbcb27bf2727ae975d6a64a2196baf", 0xf0}, {&(0x7f0000000000)="41914546332862684b72aa7204a493434bce57e4a8327ed2216676efdbc9c1575c4c280b9852a1225c98e06c5886fd90f63833", 0x33}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f00000001c0)="a4b671485c7b5771c71e90191fcaf8d8037fe99ac48cdb876b795f9f72b81705adeb883354ebcb1660ef854b21f0cc5c9553e735d3830541bb6f75f4f8464c01ba25f2a10bfcaed77afbeb510f1afbef88826add1dab9d2cc6c165b70f698bcecef6440b95de62a34b6a0f7b0112e88e4aa84a8f16068ac6", 0x78}, {&(0x7f0000001500)="8d3b563605b324ef0c17c4f8dcea82db2675a8634564764275780e6d5618afdfed5d6392f0a90b8a921aea3be841aeb4973ee23d3a0c48cb20cc06bf8a90ebef900322ea9ee5a98fc5f7818828d47f1343aec7a3948e136d4bdb02b44f6c", 0x5e}, {&(0x7f0000000240)="82938f7f2b2ae5c705196ec54e410a571cfff2d6", 0x14}, {&(0x7f0000000300)="e9a55bd413c81c6f1c7961921a6b", 0xe}], 0x9}}, {{&(0x7f0000001600)={0xa, 0x4e24, 0xaa8c, @remote, 0x81}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000001640)="3ed77832efdbb3d7cbd811d00fa3bdde1f63199beb6ef42a50a5134e63e1c9590d001a40508f3883f44d7e7f381a511d93ba422d7eaa81c7a1f78cbff1f8c586055010e12bde1eb3869d16d981aa6bb8e210afd764806737afc9ace2268bc4f9e0d48f4361a2b2b961c84fbd33e0169d17abf4", 0x73}, {&(0x7f00000016c0)="508b736503fbca03250f3714974a285393b9a2998198fa913c7f47fcf02be55b485d04b84af58bd70e7f09fc2e15ba42749c0781cc020cf82b41603bf29b396785f0d10d100eda36a67388ffb275a066247feb7247199425fdf5893d1ddba2519f236ae3b133cca41c379381912ce1844329997781e5f22633771fa09787c018d6970c378f7390d14ef02e02b2e99b995021d7c4633f142356794926fd755ae4b50ea51d0f23849c13b5439b3d90280a6510cd3170152f8ca98826d73f02", 0xbe}, {&(0x7f0000001780)="7c9574f1139f163dcac2492c8b89fa01f38ec088a5dfbbf09e89843aaba5b7baa61efffcb54c39c17165cd98e32b4f4c7e979e4ff7031758208e34bbc516e5a8f475d13d43b6792d17573c9e96d24d6d28056e50550ae5fe1597b97e7467d3f1bf8063fe38a8641d0b4e3e40fcc0c4beeca96ec7c5f79dbf9dcab147be2bc1cc3a1a77e05a3e622e31f4852bffb2fe5f61da53e937838299ebd8fe4228eeaed47b979a513577f7b8ed9e94c8aff58c8c886418974972afe257", 0xb9}, {&(0x7f0000001840)="b1f9e743ceb9846712e81511d15dc92f5d7e42a1fe6c8c4bd2225775e27f4170fdc49e4e9f8e6d2a77c2a7b2d6a5730bc57b74537a5ce627673f838fe93260a9273684df79d8e9a18c8e911fc3", 0x4d}, {&(0x7f00000018c0)="8b2a5d18027602229b1b7887264fee44a5c2ba13734f92590e15692e2f75", 0x1e}], 0x5, &(0x7f0000001940)=[@rthdr_2292={{0x84, 0x29, 0x39, {0x32, 0xe, 0x1, 0x4, 0x0, [@empty, @private0, @local, @loopback, @loopback, @private2, @local]}}}, @tclass={{0x10, 0x29, 0x43, 0x3}}, @hopopts_2292={{0x12c, 0x29, 0x36, {0x87, 0x22, '\x00', [@ra={0x5, 0x2, 0x7}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x9, 0xee, "51bb97a07159f5a860dd7b2d026a35133a54ff46dde94b7cbe0289d2c6de4fb33aa992d1ff70496b7c8168761419324bc6b47700e98fc0ad0b3eea9040af0e2220812eec5372f008f36d844a4f8686730b1456710c506469c40432730b7c9a2508c8cbfde231b61064e91d3911d587be9cbf9c3b13c24fae161a97bd5e0e1af40b5bbb226bc48c8aab79ad78f15ace93b3c2083f648bd9dfa400f524390576b26c6969b52901d7df3e12dceb38b2d16d316ce378557278120f3b6734a48e5354a86bbf5c7c120f918fb83048ce94bf1d3f8254973d5fabbca30dcbfe113207ef8c9ad25a0afe25f4164247a3cfa8"}, @enc_lim={0x4, 0x1, 0x2}]}}}, @hopopts={{0x54, 0x29, 0x36, {0x0, 0x7, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x2, 0x9, [0x2, 0x9, 0x80000000, 0x0]}}, @hao={0xc9, 0x10, @mcast2}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x7}}], 0x224}}, {{&(0x7f0000001b80)={0xa, 0x4e24, 0x1, @private1, 0x5}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="8c8072c92a93ff087505c0df1ef99d9b301bc9c0a89fc22fe0c4d63a464af73850166724650dc7f4b31d", 0x2a}, {&(0x7f0000001c00)="a3fc255aa5be3864b5d3630afeb655ad3bd0db72453aa2a2fcd6f6578da3eeb2fefeb8758572ee4867fd586db7a8c493660893e8582145fe61b085d8990ae14ce8f79afe9b7e8cb26a5862299415e44288ec6037f38662b6c41bccf592d83755f1bc263946156e31083170214eae5e4548e95bebd61abc0f410033cd226813c121484fa4e8ae2ab6963529b74c772c6de3f83fcada99f195abd64766a693d2855900373933616f66c93df9b72620760ffbce4939", 0xb4}], 0x2, &(0x7f0000001dc0)=[@tclass={{0x10, 0x29, 0x43, 0x114f}}, @dstopts_2292={{0x1c, 0x29, 0x4, {0x32, 0x0, '\x00', [@ra={0x5, 0x2, 0xff}]}}}, @rthdr_2292={{0x44, 0x29, 0x39, {0x33, 0x6, 0x2, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @remote]}}}, @dstopts_2292={{0x2c, 0x29, 0x4, {0x3b, 0x2, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x1}]}}}, @rthdr={{0x44, 0x29, 0x39, {0x0, 0x6, 0x0, 0x8, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @remote]}}}, @pktinfo={{0x20, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r0}}}, @hopopts_2292={{0x2c, 0x29, 0x36, {0x4, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x9}}, @rthdr_2292={{0x54, 0x29, 0x39, {0x21, 0x8, 0x2, 0x6, 0x0, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x41}, @empty]}}}], 0x190}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001f80)="7f343c17e2ae03b8800bf3577d56c096fac5c526668b47656c5cf8cda24cd8734db090a595c3d24f0042e536a4fc709c7d54bc719fd29bca36eceab6e4d183842c039fb4607d3b447f38441f6f41278564fe32f9f7d043670f8a8c20e15eb372f494c15711fb46aeb832ec20e9d9572ccb78a1a20b8a2a9b96fcc7ce48a2b212492cd8088464d1c26180fe926953831679da557453699be9519a274adfd81b01edf031bc8049f0b019f50b2ac363efa09259792bcf23d3082ae47bd0b7ad98a41ea63dbb1b5cd5", 0xc7}, {&(0x7f0000002080)="ce1f10f01bd9bac08521baad6fadf46f51719babccfce290238e63d83cccc542052fbc74466744eb28a457df371d9ae9a47f4bc555edbdf6a8475021998f68f6ea130da65567e9c783e0ff90d9ba4eb634aaa4f4822d7af3059001ff7ddc1142a45e73351e5ecc4ee7cad8f63339193d3c9d5cc4727f974c9df6e4fac941dd1a3ba0c1d9f6acc21ef03775d25b768f9fa8", 0x91}, {&(0x7f0000002140)="4664aa37235c322f96290590a21f54cf2a964db7e89160ba687d8fa182e2e7aa31d7bc1d0be53304cf18469ff40bea627832367e6f8d179d56c8ee4d96a781308ef7ca8d20e64a79904b6220a0d61a92067198b981ba3a046e2493c5da23a2d136caa703493995c21a0ca01867484884acce45d5133a6877b08edf50dd790172c5fa08d46f30843f493572344f7237f05dec522dcc32dc71", 0x98}, {&(0x7f0000002200)="9878c631aa08a128fa34da8917a21e40fee9a8535c7cf39791b9e3d626317ad9af6ed14d99781e520ce7b2c3fa1befa997bdcb935d4f27f0d063576a1700a3164b6b406d85874d60385fb193c488eb6d773b5393043a7fccf3c6a4d36420bff822067ae267a176e1ff36d3e6798bdc8182f726f4612f412a6f5e8ae77a950386fd5d446b2c427847de5c7e54330a69bf74d726df5846af2c788faab8cecf05053156d9dc6de6a535d533d00a53e2d500336d06e8a8b6f3f5fd8717b68ee0a0d5ee408134ce04fa055a1092b581b226567fe6c4fdfafe014249a554c3c05eb00868", 0xe1}], 0x4, &(0x7f0000002340)=[@rthdrdstopts={{0x1c, 0x29, 0x37, {0x54, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}}}], 0x1c}}], 0x4, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.832115582s ago: executing program 1 (id=8800): getpid() fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) close_range(r0, 0xffffffffffffffff, 0x0) 454.102419ms ago: executing program 1 (id=8801): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x5, 0xff, 0x5, 0x402, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r0, 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x200, 0x400) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usbip_server_init(0x3) write$usbip_server(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/9052], 0x235c) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_pidfd_open(r2, 0x0) process_vm_readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/192, 0xc0}], 0x6, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/40, 0x28}, {&(0x7f0000004980)=""/162, 0xa2}], 0x2, 0x0) 453.749143ms ago: executing program 8 (id=8802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x15d}, 0x18) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12d23d34", 0x5, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"]) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r7, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) dup(r5) 446.565183ms ago: executing program 4 (id=8803): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x44}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0xfffffe7c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x14, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9}, @TCA_TBF_BURST={0x8, 0x6, 0x91bc}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40018}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa00}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r7) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="d730919b", @ANYRESHEX=r6]) 441.033534ms ago: executing program 8 (id=8804): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000005f80)) sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x20000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r4, 0x5420, 0x0) 423.395029ms ago: executing program 4 (id=8805): r0 = fanotify_init(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x86) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0x1fe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) close_range(r0, 0xffffffffffffffff, 0x0) 422.876409ms ago: executing program 4 (id=8806): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xd, &(0x7f0000000140)={0xb744, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs$pagemap(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x803, 0xf7c, 0x800000000000d615, 0x5, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) 415.865354ms ago: executing program 0 (id=8807): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x123) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000019c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@obj_role={'obj_role', 0x3d, '+!,'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) 405.318755ms ago: executing program 0 (id=8808): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xd, &(0x7f0000000140)={0xb744, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs$pagemap(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x803, 0xf7c, 0x800000000000d615, 0x5, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="257a0c001f0000001800000008000000000000000600000000950000000000000018000000010000000000000106000000184000000400"/80], &(0x7f00000005c0)='syzkaller\x00', 0x10, 0x1000, &(0x7f0000002080)=""/4096, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x4, 0x166f, 0xcff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800)=[r2, r2, r2, r1, r1, 0x1], &(0x7f0000000840)=[{0x5, 0x6, 0xc, 0x8}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3, 0x0, 0x1fffffffffffc}, 0xfffffffffffffd51) kexec_load(0x3, 0x3, &(0x7f0000000280)=[{&(0x7f0000000300)="6ece7c0afafabc0a21335081658eac8b2babd77252488ff8bfd30aa23224f0099d0b858f017bdde0158f6babbb4e7f3617e9f42ab64243a20f31ce2ad7c5858eadf807402a340dc78ac99050825b3101e633a8a4320af15a252ea0285d1db27caf167edc12a4a6ab7c6fe8df9a29ea04de7640fe9a55f9db5456dd87b8aa2abfe157f7d5e90096ad1fa38c6aa6e2dd6993db3a83a065fced312b99ae80275bebda712105496b3c5342f535574a9d8e92a0cf8b3f79d82f5328204d6fe290617331a32c90b00c05511b9e7bf2", 0xcc, 0xfffdffff, 0x7a02}, {&(0x7f00000006c0), 0x0, 0x5, 0x6}, {&(0x7f00000006c0)="f8a5ae4bb66b9c2489f4c50b67cfd6a55871163cf3bdc28faf2ecc1198a3e7bc310090509e8b0e48f4f3a1e97c274b3a92705bc7aeb3a9bf95a358feee8adab61266385b9559292eb3ddac6464f48745b7b707dc1586634467f28b6269a3e28fa3ea4854c9b3fd3dd1458158125d3bab8a9f131a5d2f3990925714aaa51e8b458a2ca7b4ec3efb97746f9a501eb3432d0af91b3c850df156210f1ae77ade44239dffaed834131d", 0xa7, 0x3, 0x1f}], 0x1) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') 397.513778ms ago: executing program 1 (id=8809): getpid() fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) close_range(r0, 0xffffffffffffffff, 0x0) 173.607864ms ago: executing program 1 (id=8810): getpid() fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 8 (id=8811): socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x4040040) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) (fail_nth: 9) kernel console output (not intermixed with test programs): T2645] team0: Port device team_slave_1 added [ 1675.837020][ T2645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.839196][ T2645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.865887][ T2645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.875907][ T2645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.878134][ T2645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.897144][ T2645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.006419][ T2645] hsr_slave_0: entered promiscuous mode [ 1676.017261][ T2645] hsr_slave_1: entered promiscuous mode [ 1676.022261][ T2645] debugfs: 'hsr0' already exists in 'hsr' [ 1676.024081][ T2645] Cannot create hsr debugfs directory [ 1676.031011][ T2629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.062121][T21364] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1676.066564][T21364] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1676.069725][T21364] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1676.072357][T21364] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1676.073774][ T2629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1676.076222][T21364] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1676.078835][T21364] Bluetooth: hci1: command tx timeout [ 1676.157894][T30266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.160180][T30266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.173705][ T2694] lo speed is unknown, defaulting to 1000 [ 1676.176245][ T2694] lo speed is unknown, defaulting to 1000 [ 1676.179775][ T2694] lo speed is unknown, defaulting to 1000 [ 1676.208320][T30273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.210669][T30273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.372456][T30239] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.375860][T30239] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1676.432641][ T2645] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1676.437025][ T2645] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1676.459102][ T2645] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1676.497655][ T2645] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1676.541965][ T5981] Bluetooth: hci0: command tx timeout [ 1676.553632][T30239] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.556835][T30239] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1676.611641][ T2694] chnl_net:caif_netlink_parms(): no params data found [ 1676.695338][T30239] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.699034][T30239] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1676.811907][T30239] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.815074][T30239] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1676.822681][ T2694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.824928][ T2694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.827232][ T2694] bridge_slave_0: entered allmulticast mode [ 1676.830113][ T2694] bridge_slave_0: entered promiscuous mode [ 1676.833296][ T2694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.835492][ T2694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.838128][ T2694] bridge_slave_1: entered allmulticast mode [ 1676.840712][ T2694] bridge_slave_1: entered promiscuous mode [ 1676.932404][ T2694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.937582][ T2694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.978095][ T2694] team0: Port device team_slave_0 added [ 1676.983626][ T2694] team0: Port device team_slave_1 added [ 1677.029065][ T2629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1677.118395][ T2694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.120742][ T2694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.129534][ T2694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.145523][ T2694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.147692][ T2694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.155737][ T2694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.354384][T30239] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1677.520931][T30239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1677.524819][T30239] bond_slave_0: left promiscuous mode [ 1677.527027][T30239] bond_slave_0: left allmulticast mode [ 1677.531094][T30239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1677.534456][T30239] bond_slave_1: left promiscuous mode [ 1677.536230][T30239] bond_slave_1: left allmulticast mode [ 1677.538729][T30239] bond0 (unregistering): Released all slaves [ 1677.545116][T30239] bond1 (unregistering): Released all slaves [ 1677.566856][ T2694] hsr_slave_0: entered promiscuous mode [ 1677.569190][ T2694] hsr_slave_1: entered promiscuous mode [ 1677.571981][ T2694] debugfs: 'hsr0' already exists in 'hsr' [ 1677.573822][ T2694] Cannot create hsr debugfs directory [ 1677.663647][T30239] tipc: Left network mode [ 1677.731345][ T2629] veth0_vlan: entered promiscuous mode [ 1677.749688][ T2645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.774750][ T2629] veth1_vlan: entered promiscuous mode [ 1677.816455][ T2645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.826906][T16840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.829228][T16840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1677.834169][T16840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.837287][T16840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1677.846801][ T2629] veth0_macvtap: entered promiscuous mode [ 1677.882596][ T2629] veth1_macvtap: entered promiscuous mode [ 1677.903549][ T2694] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1677.908223][ T2694] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1677.916210][ T2694] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1677.921278][ T2694] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1677.943166][ T2629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1677.954550][T30239] hsr_slave_0: left promiscuous mode [ 1677.957404][T30239] hsr_slave_1: left promiscuous mode [ 1677.960197][T30239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1677.963517][T30239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1677.966348][T30239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1677.968635][T30239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1677.998437][T30239] veth1_macvtap: left promiscuous mode [ 1678.001072][T30239] veth0_macvtap: left promiscuous mode [ 1678.004857][T30239] veth1_vlan: left promiscuous mode [ 1678.007191][T30239] veth0_vlan: left promiscuous mode [ 1678.057146][ T5981] Bluetooth: hci4: command tx timeout [ 1678.057155][ T2696] Bluetooth: hci1: command tx timeout [ 1678.523382][ T5981] Bluetooth: hci0: command tx timeout [ 1679.497931][ T2629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1679.508562][T16840] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.518122][T16840] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.522211][T16840] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.530457][T16840] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.610769][T30236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.613249][T30236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.620008][ T2694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.635593][T30236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.638596][T30236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.643087][ T2645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.653386][ T2694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.660295][T30281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.662681][T30281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1679.668834][T30281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.671293][T30281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1679.795970][ T2645] veth0_vlan: entered promiscuous mode [ 1679.804927][ T2645] veth1_vlan: entered promiscuous mode [ 1679.830832][ T2645] veth0_macvtap: entered promiscuous mode [ 1679.837579][ T2645] veth1_macvtap: entered promiscuous mode [ 1679.849043][ T2645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1679.853264][ T2694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.860162][ T2645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1679.865811][T16840] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.869054][T16840] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.872349][T16840] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.875077][T16840] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.917191][T16840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.919611][T16840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.934470][T30281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.936952][T30281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.973718][ T2773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8058'. [ 1679.979511][ T2773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8058'. [ 1680.004554][ T2694] veth0_vlan: entered promiscuous mode [ 1680.009862][ T2694] veth1_vlan: entered promiscuous mode [ 1680.025136][ T2694] veth0_macvtap: entered promiscuous mode [ 1680.029549][ T2694] veth1_macvtap: entered promiscuous mode [ 1680.040955][ T2694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1680.047824][ T2694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1680.048391][ T5981] Bluetooth: hci1: command tx timeout [ 1680.051696][T29524] Bluetooth: hci4: command tx timeout [ 1680.055802][T30281] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.066955][T30281] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.069942][T30281] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.074056][T30281] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.120039][T16839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.122533][T16839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.140154][T16839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.143196][T16839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.432304][ T2784] 9pnet_virtio: no channels available for device syz [ 1680.504416][ T2696] Bluetooth: hci0: command tx timeout [ 1680.795021][ T2789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8069'. [ 1681.029625][ T2802] overlayfs: failed to resolve './file1': -2 [ 1681.339649][ T40] audit: type=1326 audit(1759057274.994:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2808 comm="syz.0.8077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7fc00000 [ 1681.374326][T16840] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.491599][T16840] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.599091][T16840] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.690970][T29524] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1681.699144][T29524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1681.702667][T29524] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1681.706943][T29524] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1681.711764][T29524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1681.737780][T16840] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.787340][ T2816] lo speed is unknown, defaulting to 1000 [ 1681.789828][ T2816] lo speed is unknown, defaulting to 1000 [ 1681.790073][ T2819] tipc: Enabling of bearer rejected, failed to enable media [ 1681.796346][ T2816] lo speed is unknown, defaulting to 1000 [ 1681.962536][T16840] bridge_slave_1: left allmulticast mode [ 1681.962552][T16840] bridge_slave_1: left promiscuous mode [ 1681.962658][T16840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.988540][T16840] bridge_slave_0: left allmulticast mode [ 1681.988580][T16840] bridge_slave_0: left promiscuous mode [ 1681.988695][T16840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.993297][ T40] audit: type=1326 audit(1759057275.687:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2808 comm="syz.0.8077" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f41598 code=0x7fc00000 [ 1682.029800][ T2696] Bluetooth: hci4: command tx timeout [ 1682.386272][T16840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1682.390659][T16840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1682.392506][T16840] bond0 (unregistering): Released all slaves [ 1682.405104][ T2816] chnl_net:caif_netlink_parms(): no params data found [ 1682.475820][ T2816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.476267][ T2816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.476463][ T2816] bridge_slave_0: entered allmulticast mode [ 1682.477939][ T2816] bridge_slave_0: entered promiscuous mode [ 1682.489527][ T2816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.489598][ T2816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.495256][ T2816] bridge_slave_1: entered allmulticast mode [ 1682.496173][ T2816] bridge_slave_1: entered promiscuous mode [ 1682.555524][ T2816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1682.557928][ T2816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1682.620779][ T2816] team0: Port device team_slave_0 added [ 1682.622623][ T2816] team0: Port device team_slave_1 added [ 1682.663798][ T2816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1682.663811][ T2816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1682.663825][ T2816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1682.664925][ T2816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1682.664934][ T2816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1682.664949][ T2816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1682.775994][ T2850] overlayfs: failed to resolve './file1': -2 [ 1682.795121][ T2816] hsr_slave_0: entered promiscuous mode [ 1682.798057][ T2816] hsr_slave_1: entered promiscuous mode [ 1682.807566][ T2816] debugfs: 'hsr0' already exists in 'hsr' [ 1682.810399][ T2816] Cannot create hsr debugfs directory [ 1682.987182][T16840] hsr_slave_0: left promiscuous mode [ 1682.989770][T16840] hsr_slave_1: left promiscuous mode [ 1682.992084][T16840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1682.994406][T16840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1682.998815][T16840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1683.005901][T16840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.084766][T16840] veth1_macvtap: left promiscuous mode [ 1683.088176][T16840] veth0_macvtap: left promiscuous mode [ 1683.090649][T16840] veth1_vlan: left promiscuous mode [ 1683.092920][T16840] veth0_vlan: left promiscuous mode [ 1683.101857][ T2854] 9pnet_virtio: no channels available for device syz [ 1683.700480][ T2696] Bluetooth: hci1: command tx timeout [ 1684.658267][T16840] team0 (unregistering): Port device team_slave_1 removed [ 1684.768766][T16840] team0 (unregistering): Port device team_slave_0 removed [ 1685.677137][ T2696] Bluetooth: hci1: command tx timeout [ 1685.716509][ T2857] tipc: Enabling of bearer rejected, failed to enable media [ 1685.720587][ T2869] 8021q: VLANs not supported on lo [ 1685.822873][ T2875] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8092'. [ 1686.199806][T29524] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1686.202588][T29524] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1686.204092][T29524] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1686.207387][T29524] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1686.211705][T29524] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1686.247726][ T2887] lo speed is unknown, defaulting to 1000 [ 1686.251016][ T2887] lo speed is unknown, defaulting to 1000 [ 1686.251715][ T2887] lo speed is unknown, defaulting to 1000 [ 1686.319504][ T2816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1686.322804][ T2816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1686.328432][ T2816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1686.340161][ T2816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1686.444066][T16840] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.572575][T16840] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.672440][ T2816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.704068][ T2816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.739069][T16840] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.755743][T31798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.758466][T31798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.887699][T31798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.889781][T31798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.998476][ T2887] chnl_net:caif_netlink_parms(): no params data found [ 1687.104079][T16840] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.118796][ T2887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.121041][ T2887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.123297][ T2887] bridge_slave_0: entered allmulticast mode [ 1687.127291][ T2887] bridge_slave_0: entered promiscuous mode [ 1687.131413][ T2887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.133586][ T2887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.136204][ T2887] bridge_slave_1: entered allmulticast mode [ 1687.138763][ T2887] bridge_slave_1: entered promiscuous mode [ 1687.188815][ T2887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1687.205700][ T2887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.216384][ T2907] netlink: 3 bytes leftover after parsing attributes in process `syz.8.8097'. [ 1687.246161][ T2887] team0: Port device team_slave_0 added [ 1687.261380][ T2907] batadv1: entered allmulticast mode [ 1687.323398][ T2887] team0: Port device team_slave_1 added [ 1687.398729][ T2887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1687.404310][ T2887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1687.414815][ T2887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1687.423541][ T2887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1687.425729][ T2887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1687.434217][ T2887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1687.490462][T16840] bridge_slave_1: left allmulticast mode [ 1687.493498][T16840] bridge_slave_1: left promiscuous mode [ 1687.497448][T16840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.509575][T16840] bridge_slave_0: left allmulticast mode [ 1687.511382][T16840] bridge_slave_0: left promiscuous mode [ 1687.513252][T16840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.660457][ T2696] Bluetooth: hci1: command tx timeout [ 1687.903474][ T2916] binder: Unknown parameter 'f [ 1687.903474][ T2916] ' [ 1687.944186][T16840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1687.953851][T16840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1687.959604][T16840] bond0 (unregistering): Released all slaves [ 1688.063178][ T2887] hsr_slave_0: entered promiscuous mode [ 1688.080850][ T2887] hsr_slave_1: entered promiscuous mode [ 1688.083983][ T2887] debugfs: 'hsr0' already exists in 'hsr' [ 1688.086363][ T2887] Cannot create hsr debugfs directory [ 1688.193519][ T2696] Bluetooth: hci3: command tx timeout [ 1688.210516][ T9] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 1688.355074][ T9] usb 13-1: config 0 has no interfaces? [ 1688.357003][ T9] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1688.360596][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.368861][ T2816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1688.370816][ T9] usb 13-1: config 0 descriptor?? [ 1688.504424][ T2816] veth0_vlan: entered promiscuous mode [ 1688.517823][ T2816] veth1_vlan: entered promiscuous mode [ 1688.545111][ T2816] veth0_macvtap: entered promiscuous mode [ 1688.551733][ T2816] veth1_macvtap: entered promiscuous mode [ 1688.568118][ T6043] usb 13-1: USB disconnect, device number 2 [ 1688.580147][T16840] hsr_slave_0: left promiscuous mode [ 1688.583806][T16840] hsr_slave_1: left promiscuous mode [ 1688.586579][T16840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1688.589562][T16840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1688.595700][T16840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1688.598757][T16840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.655304][T16840] veth1_macvtap: left promiscuous mode [ 1688.657701][T16840] veth0_macvtap: left promiscuous mode [ 1688.660578][T16840] veth1_vlan: left promiscuous mode [ 1688.662991][T16840] veth0_vlan: left promiscuous mode [ 1689.116750][ T2933] overlayfs: failed to resolve './file1': -2 [ 1689.353911][ T34] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 1689.506263][ T34] usb 13-1: Using ep0 maxpacket: 16 [ 1689.510422][ T34] usb 13-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 1689.514594][ T34] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1689.520458][ T34] usb 13-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1689.524173][ T34] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.527468][ T34] usb 13-1: Product: syz [ 1689.529329][ T34] usb 13-1: Manufacturer: syz [ 1689.531269][ T34] usb 13-1: SerialNumber: syz [ 1689.535286][ T34] usb 13-1: config 0 descriptor?? [ 1689.639445][ T2696] Bluetooth: hci1: command tx timeout [ 1689.826579][T16840] team0 (unregistering): Port device team_slave_1 removed [ 1689.951175][T16840] team0 (unregistering): Port device team_slave_0 removed [ 1690.182266][ T2696] Bluetooth: hci3: command tx timeout [ 1690.780821][ T34] usb 13-1: USB disconnect, device number 3 [ 1690.786268][ T2816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1690.796839][ T2816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1690.808185][T16839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.817137][T16839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.826944][T16839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.830271][T16839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.884542][T30281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.887580][T30281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.912927][T30281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.915395][T30281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.180576][ T2887] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1691.186891][ T2887] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1691.193122][ T2887] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1691.200402][ T2887] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1691.276511][ T2887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1691.285861][T16840] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.302792][ T2887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1691.309813][T16839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.312071][T16839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1691.318771][T31798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.321022][T31798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1691.353653][T16840] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.402797][T16840] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.465608][T16840] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.491139][ T2887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1691.643858][T29524] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1691.652569][T29524] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1691.657622][T29524] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1691.666195][T29524] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1691.672161][T29524] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1691.680636][T16840] bridge_slave_1: left allmulticast mode [ 1691.682381][T16840] bridge_slave_1: left promiscuous mode [ 1691.684382][T16840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.695404][T16840] bridge_slave_0: left allmulticast mode [ 1691.698136][T16840] bridge_slave_0: left promiscuous mode [ 1691.700592][T16840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.718871][T16840] bond_slave_0: left promiscuous mode [ 1691.721220][T16840] bond_slave_1: left promiscuous mode [ 1691.737246][ T2972] 9pnet_virtio: no channels available for device syz [ 1692.163935][ T2696] Bluetooth: hci3: command tx timeout [ 1692.282626][T16840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1692.287102][T16840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1692.293798][T16840] bond0 (unregistering): Released all slaves [ 1692.328649][ T2970] lo speed is unknown, defaulting to 1000 [ 1692.333295][ T2970] lo speed is unknown, defaulting to 1000 [ 1692.340681][ T2970] lo speed is unknown, defaulting to 1000 [ 1692.347318][ T2887] veth0_vlan: entered promiscuous mode [ 1692.370473][ T2887] veth1_vlan: entered promiscuous mode [ 1692.438081][ T2887] veth0_macvtap: entered promiscuous mode [ 1692.507751][ T2887] veth1_macvtap: entered promiscuous mode [ 1692.533871][ T2887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1692.551167][ T2887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1692.575433][T30244] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.579235][T30244] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.757148][T30244] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.767972][T30244] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.858188][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1693.221582][ T2978] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1693.221818][T30244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.226873][T30244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.299523][T16840] hsr_slave_0: left promiscuous mode [ 1693.303743][T16840] hsr_slave_1: left promiscuous mode [ 1693.305840][T16840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1693.310787][T16840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1693.320517][T16840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1693.324068][T16840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.400085][T16840] veth1_macvtap: left promiscuous mode [ 1693.402555][T16840] veth0_macvtap: left promiscuous mode [ 1693.404994][T16840] veth1_vlan: left promiscuous mode [ 1693.407228][T16840] veth0_vlan: left promiscuous mode [ 1693.500478][T16840] pim6reg (unregistering): left allmulticast mode [ 1693.607684][ T2696] Bluetooth: hci2: command tx timeout [ 1693.640330][T31683] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1694.145502][ T2696] Bluetooth: hci3: command tx timeout [ 1694.601224][T16840] team0 (unregistering): Port device team_slave_1 removed [ 1694.697745][T31683] usb 6-1: Using ep0 maxpacket: 32 [ 1694.721435][T31683] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1694.724465][T31683] usb 6-1: config 0 has no interface number 0 [ 1694.728880][T31683] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1694.732339][T31683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.735352][T31683] usb 6-1: Product: syz [ 1694.737064][T31683] usb 6-1: Manufacturer: syz [ 1694.738895][T31683] usb 6-1: SerialNumber: syz [ 1694.740988][T16840] team0 (unregistering): Port device team_slave_0 removed [ 1694.742876][T31683] usb 6-1: config 0 descriptor?? [ 1694.747572][T31683] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1694.750889][T31683] usb 6-1: selecting invalid altsetting 1 [ 1694.753090][T31683] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1694.757328][T31683] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1694.761377][T31683] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1694.765111][T31683] usb 6-1: media controller created [ 1695.410152][T31683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1695.467339][T31683] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1695.470180][T31683] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1695.473258][T31683] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1695.497044][T31683] usb 6-1: USB disconnect, device number 11 [ 1695.593260][ T2696] Bluetooth: hci2: command tx timeout [ 1695.615640][T31798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1695.618820][T31798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1695.633509][ T2970] chnl_net:caif_netlink_parms(): no params data found [ 1695.726124][ T34] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 1695.787437][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.792888][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.800054][ T2970] bridge_slave_0: entered allmulticast mode [ 1695.806248][ T2970] bridge_slave_0: entered promiscuous mode [ 1695.809914][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.813011][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.815338][ T2970] bridge_slave_1: entered allmulticast mode [ 1695.818529][ T2970] bridge_slave_1: entered promiscuous mode [ 1695.860096][ T2970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.873268][ T2970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.900860][ T34] usb 13-1: config 0 has no interfaces? [ 1695.903788][ T34] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1695.908893][ T34] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.915205][ T34] usb 13-1: config 0 descriptor?? [ 1695.915775][ T2970] team0: Port device team_slave_0 added [ 1695.922077][ T2970] team0: Port device team_slave_1 added [ 1695.952857][ T2970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.956445][ T2970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.964715][ T2970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1695.969352][ T2970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.971482][ T2970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.980259][ T2970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.031471][ T2970] hsr_slave_0: entered promiscuous mode [ 1696.033837][ T2970] hsr_slave_1: entered promiscuous mode [ 1696.036179][ T2970] debugfs: 'hsr0' already exists in 'hsr' [ 1696.038105][ T2970] Cannot create hsr debugfs directory [ 1696.115155][T31683] usb 13-1: USB disconnect, device number 4 [ 1696.510160][ T2970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1696.516208][ T2970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1696.524182][ T2970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1696.530877][ T2970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1696.557736][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.560183][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1696.562428][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.564776][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1696.601111][T30266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.609261][T30266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.574073][ T2696] Bluetooth: hci2: command tx timeout [ 1697.581010][ T2970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1697.596742][ T2970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1697.609764][T16839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.612133][T16839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1697.620723][T16839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.623633][T16839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1697.661709][ T2970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1697.959218][ T2970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1698.034394][ T2970] veth0_vlan: entered promiscuous mode [ 1698.040332][ T2970] veth1_vlan: entered promiscuous mode [ 1698.059401][ T2970] veth0_macvtap: entered promiscuous mode [ 1698.065445][ T2970] veth1_macvtap: entered promiscuous mode [ 1698.076287][ T2970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1698.085718][ T2970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1698.101742][T30266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.104540][T30266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.107248][T30266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.119748][T30266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.373631][T16839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.382963][T16839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.395407][T30273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.398662][T30273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.637215][ T2696] Bluetooth: hci2: command tx timeout [ 1700.308342][T31683] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1700.471993][T31683] usb 6-1: config 0 has no interfaces? [ 1700.474499][T31683] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1700.478142][T31683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.485205][T31683] usb 6-1: config 0 descriptor?? [ 1700.682444][T31683] usb 6-1: USB disconnect, device number 12 [ 1701.402601][ T3088] lo speed is unknown, defaulting to 1000 [ 1701.411844][ T3088] lo speed is unknown, defaulting to 1000 [ 1701.420877][ T3088] lo speed is unknown, defaulting to 1000 [ 1702.011108][ T3087] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1703.901629][ T3123] lo speed is unknown, defaulting to 1000 [ 1703.904160][ T3123] lo speed is unknown, defaulting to 1000 [ 1703.917556][ T3123] lo speed is unknown, defaulting to 1000 [ 1703.943319][ T3117] netlink: 'syz.1.8132': attribute type 1 has an invalid length. [ 1703.952315][ T3117] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8132'. [ 1704.089703][T30811] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1704.280853][T30811] usb 9-1: config 0 has no interfaces? [ 1704.283151][T30811] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1704.286767][T30811] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.312112][T30811] usb 9-1: config 0 descriptor?? [ 1704.401867][ T3107] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1704.631695][T15369] usb 9-1: USB disconnect, device number 11 [ 1704.844699][ T3131] overlayfs: missing 'lowerdir' [ 1705.631124][ T3146] lo speed is unknown, defaulting to 1000 [ 1705.636191][ T3146] lo speed is unknown, defaulting to 1000 [ 1705.641408][ T3146] lo speed is unknown, defaulting to 1000 [ 1706.077111][ T3145] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1708.510000][ T3166] 9pnet_virtio: no channels available for device syz [ 1709.034254][T12005] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1709.187833][T12005] usb 6-1: config 0 has no interfaces? [ 1709.190495][T12005] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1709.194055][T12005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.201012][T12005] usb 6-1: config 0 descriptor?? [ 1709.327924][ T3175] overlay: Unknown parameter 'obj_role' [ 1709.446407][T23178] usb 6-1: USB disconnect, device number 13 [ 1710.412353][ T3198] input: syz1 as /devices/virtual/input/input180 [ 1710.580581][ T3198] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1710.632855][ T3208] lo speed is unknown, defaulting to 1000 [ 1710.637091][ T3208] lo speed is unknown, defaulting to 1000 [ 1710.640841][ T3208] lo speed is unknown, defaulting to 1000 [ 1710.680148][ T3211] overlayfs: failed to resolve './file1': -2 [ 1710.885881][ T3217] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8155'. [ 1711.005799][ T3186] lo speed is unknown, defaulting to 1000 [ 1711.010659][ T3186] lo speed is unknown, defaulting to 1000 [ 1711.015351][ T3186] lo speed is unknown, defaulting to 1000 [ 1711.111041][ T3199] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1711.198728][ T3191] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1714.756846][ T3266] 9pnet_virtio: no channels available for device syz [ 1718.085956][ T3312] overlayfs: missing 'lowerdir' [ 1718.531674][ T3319] 9pnet_virtio: no channels available for device syz [ 1720.154340][ T3336] input: syz1 as /devices/virtual/input/input181 [ 1720.223353][ T3341] overlayfs: failed to resolve './file1': -2 [ 1720.254519][ T3339] netlink: 'syz.0.8188': attribute type 1 has an invalid length. [ 1720.257966][ T3339] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8188'. [ 1720.788496][ T3356] 9pnet_virtio: no channels available for device syz [ 1721.701850][ T3366] Bluetooth: MGMT ver 1.23 [ 1721.708177][ T3366] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1721.710950][ T3366] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1721.714578][ T3366] vhci_hcd vhci_hcd.0: Device attached [ 1721.727769][ T3367] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 14 [ 1721.730778][ T3366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8196'. [ 1721.730795][T30266] vhci_hcd: stop threads [ 1721.730803][T30266] vhci_hcd: release socket [ 1721.738764][T30266] vhci_hcd: disconnect device [ 1723.961338][ T3389] 9pnet_virtio: no channels available for device syz [ 1725.366856][ T3392] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8205'. [ 1725.405614][ T3396] netlink: 'syz.0.8207': attribute type 30 has an invalid length. [ 1725.408399][ T3396] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 1725.411403][ T3396] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 1725.422240][ T3396] netlink: 'syz.0.8207': attribute type 10 has an invalid length. [ 1725.444041][ T3396] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1725.667922][ T3396] block nbd0: NBD_DISCONNECT [ 1725.672609][ T3396] block nbd0: Disconnected due to user request. [ 1725.673091][ T3402] overlay: Unknown parameter 'obj_role' [ 1725.675485][ T3396] block nbd0: shutting down sockets [ 1725.757281][ T3405] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1725.759709][ T3405] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1725.765083][ T3405] vhci_hcd vhci_hcd.0: Device attached [ 1725.779423][ T3407] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 1 [ 1725.784117][T30244] vhci_hcd: stop threads [ 1725.785495][ T3405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1725.786155][T30244] vhci_hcd: release socket [ 1725.799792][ T3411] input: syz1 as /devices/virtual/input/input182 [ 1725.811410][T30244] vhci_hcd: disconnect device [ 1725.907301][ T3418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8213'. [ 1727.874910][ T3432] 9pnet_virtio: no channels available for device syz [ 1729.948329][ T3443] overlay: Unknown parameter 'obj_role' [ 1730.178187][ T3451] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8221'. [ 1730.419335][ T2939] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 1730.573807][ T2939] usb 13-1: config 0 has no interfaces? [ 1730.579925][ T2939] usb 13-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1730.587672][ T2939] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.594348][ T2939] usb 13-1: Product: syz [ 1730.597866][ T2939] usb 13-1: Manufacturer: syz [ 1730.601493][ T2939] usb 13-1: SerialNumber: syz [ 1730.608894][ T2939] usb 13-1: config 0 descriptor?? [ 1731.957736][ T3462] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1731.959861][ T3462] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1731.962494][ T3462] vhci_hcd vhci_hcd.0: Device attached [ 1731.966018][ T3463] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 14 [ 1731.968772][T30244] vhci_hcd: stop threads [ 1731.970101][ T3462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8224'. [ 1731.973210][T30244] vhci_hcd: release socket [ 1731.974627][T30244] vhci_hcd: disconnect device [ 1732.367409][ T3473] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8226'. [ 1732.414686][ T3473] input: syz1 as /devices/virtual/input/input183 [ 1732.907479][T15369] usb 13-1: USB disconnect, device number 5 [ 1733.259886][ T3490] netlink: 'syz.1.8231': attribute type 30 has an invalid length. [ 1733.264174][ T3490] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 1733.268323][ T3490] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 1733.275570][ T3490] netlink: 'syz.1.8231': attribute type 10 has an invalid length. [ 1733.298364][ T3490] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1733.505282][ T3490] block nbd1: NBD_DISCONNECT [ 1733.509243][ T3490] block nbd1: Disconnected due to user request. [ 1733.600570][ T3490] block nbd1: shutting down sockets [ 1733.869531][ T3504] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1733.872296][ T3504] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1733.877663][ T3504] vhci_hcd vhci_hcd.0: Device attached [ 1733.881319][ T3505] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 1 [ 1733.882821][ T3504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8236'. [ 1733.884701][T16840] vhci_hcd: stop threads [ 1733.892006][T16840] vhci_hcd: release socket [ 1733.894186][T16840] vhci_hcd: disconnect device [ 1734.640944][ T3526] overlayfs: failed to resolve './file1': -2 [ 1734.981547][ T2939] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1735.133768][ T2939] usb 6-1: config 0 has no interfaces? [ 1735.142264][ T2939] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1735.151721][ T2939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.157372][ T2939] usb 6-1: Product: syz [ 1735.159168][ T2939] usb 6-1: Manufacturer: syz [ 1735.161141][ T2939] usb 6-1: SerialNumber: syz [ 1735.173859][ T2939] usb 6-1: config 0 descriptor?? [ 1735.565358][ T3535] netlink: 'syz.8.8243': attribute type 30 has an invalid length. [ 1735.573462][ T3535] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 1735.581512][ T3535] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 1735.589333][ T3535] netlink: 'syz.8.8243': attribute type 10 has an invalid length. [ 1735.604388][ T3535] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1735.717474][ T3535] block nbd8: NBD_DISCONNECT [ 1735.721561][ T3535] block nbd8: Disconnected due to user request. [ 1735.725629][ T3535] block nbd8: shutting down sockets [ 1736.856243][ T3562] overlayfs: failed to resolve './file1': -2 [ 1737.312238][ T6043] usb 6-1: USB disconnect, device number 14 [ 1737.651233][ T3582] overlayfs: failed to resolve './file1': -2 [ 1737.989403][ T3590] input: syz1 as /devices/virtual/input/input184 [ 1738.155226][ T3593] netlink: 'syz.4.8259': attribute type 1 has an invalid length. [ 1738.162062][ T3593] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8259'. [ 1738.415879][ T3599] overlayfs: failed to resolve './file1': -2 [ 1738.740242][ T2696] Bluetooth: hci1: hcon ffff888075d80000 sent 1 < count 97 [ 1738.743829][ T2696] Bluetooth: hci1: hcon ffff888075d80000 sent 0 < count 4 [ 1738.747360][ T2696] Bluetooth: hci1: hcon ffff888075d80000 sent 0 < count 32769 [ 1738.768510][ T2696] Bluetooth: hci1: hcon ffff88806c3f8000 sent 1 < count 7 [ 1738.771347][ T2696] Bluetooth: hci1: hcon ffff888075d80000 sent 0 < count 170 [ 1738.774084][ T2696] Bluetooth: hci1: hcon ffff88806c3f8000 sent 0 < count 1024 [ 1739.288615][ T3611] random: crng reseeded on system resumption [ 1740.400764][ T3626] input: syz1 as /devices/virtual/input/input186 [ 1740.999043][ T3642] 9pnet_virtio: no channels available for device syz [ 1742.576692][ T3651] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1742.579873][ T3651] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1742.584467][ T3651] vhci_hcd vhci_hcd.0: Device attached [ 1742.587826][ T3652] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 14 [ 1742.593166][ T3651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8277'. [ 1742.603656][T30273] vhci_hcd: stop threads [ 1742.605566][T30273] vhci_hcd: release socket [ 1742.607469][T30273] vhci_hcd: disconnect device [ 1742.693807][ T3658] tipc: Started in network mode [ 1742.695392][ T3658] tipc: Node identity 6afb949ae167, cluster identity 4711 [ 1742.699346][ T3658] tipc: Enabled bearer , priority 0 [ 1742.706140][ T3657] tipc: Disabling bearer [ 1743.240635][ T6043] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1743.403817][ T6043] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1743.410819][ T6043] usb 9-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 1743.419917][ T6043] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1743.427336][ T6043] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1743.448783][ T6043] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1743.452287][ T6043] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1743.454894][ T6043] usb 9-1: Product: syz [ 1743.456318][ T6043] usb 9-1: Manufacturer: syz [ 1743.466835][ T2351] raw-gadget.0 gadget.2: failed to queue disconnect event [ 1743.486378][ T6043] cdc_wdm 9-1:1.0: skipping garbage [ 1743.490165][ T6043] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1743.578457][T30273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.724787][T30273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.829207][T30273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.909985][T30273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.118454][T30273] bridge_slave_1: left allmulticast mode [ 1744.120695][T30273] bridge_slave_1: left promiscuous mode [ 1744.122652][T30273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.127377][T30273] bridge_slave_0: left promiscuous mode [ 1744.129301][T30273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.428578][ T3688] overlayfs: failed to resolve './file1': -2 [ 1744.629079][T30273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1744.638551][T30273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1744.644478][T30273] bond0 (unregistering): Released all slaves [ 1744.778889][T30273] bond1 (unregistering): Released all slaves [ 1744.969918][T30273] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1744.974677][T30273] bond2 (unregistering): Released all slaves [ 1745.071926][T30273] tipc: Left network mode [ 1745.202407][ T3697] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1745.204660][ T3697] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1745.216793][ T3697] vhci_hcd vhci_hcd.0: Device attached [ 1745.220647][ T3697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8291'. [ 1745.224388][ T3698] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 14 [ 1745.233257][T16840] vhci_hcd: stop threads [ 1745.235145][T16840] vhci_hcd: release socket [ 1745.237101][T16840] vhci_hcd: disconnect device [ 1745.430059][ T3706] tipc: Started in network mode [ 1745.436244][ T3706] tipc: Node identity a62e0356950e, cluster identity 4711 [ 1745.439152][ T3706] tipc: Enabled bearer , priority 0 [ 1745.449999][ T3705] tipc: Disabling bearer [ 1745.488208][T30273] hsr_slave_0: left promiscuous mode [ 1745.491047][T30273] hsr_slave_1: left promiscuous mode [ 1745.493254][T30273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.495983][T30273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.517199][T30273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.530313][T30273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.713142][T30273] veth1_macvtap: left promiscuous mode [ 1745.720046][T30273] veth0_macvtap: left promiscuous mode [ 1745.727096][T30273] veth1_vlan: left promiscuous mode [ 1745.735974][T30273] veth0_vlan: left promiscuous mode [ 1746.586759][ T6043] usb 9-1: USB disconnect, device number 12 [ 1746.613697][ T3716] input: syz1 as /devices/virtual/input/input188 [ 1747.494981][ T3730] netlink: 'syz.0.8299': attribute type 1 has an invalid length. [ 1747.499896][ T3730] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8299'. [ 1748.830958][T30252] smc: removing ib device sz1 [ 1749.966963][T30273] IPVS: stop unused estimator thread 0... [ 1751.372435][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1751.534988][ T3775] 9pnet_virtio: no channels available for device syz [ 1752.623103][T31683] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 1753.872545][ T3779] overlayfs: failed to resolve './file1': -2 [ 1754.246101][ T3792] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8312'. [ 1754.296396][ T3792] input: syz1 as /devices/virtual/input/input189 [ 1755.112968][ T3809] 9pnet_virtio: no channels available for device syz [ 1755.721698][ T3816] overlayfs: failed to resolve './file1': -2 [ 1757.256999][ T3826] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1757.259092][ T3826] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1757.273127][ T3826] vhci_hcd vhci_hcd.0: Device attached [ 1757.568121][T30811] usb 40-1: SetAddress Request (6) to port 0 [ 1757.577161][T30811] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1758.213401][ T3827] vhci_hcd: connection reset by peer [ 1758.217639][T16839] vhci_hcd: stop threads [ 1758.219587][T16839] vhci_hcd: release socket [ 1758.221393][T16839] vhci_hcd: disconnect device [ 1758.750932][ T3849] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1758.753279][ T3849] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1758.756499][ T3849] vhci_hcd vhci_hcd.0: Device attached [ 1758.760436][ T3850] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 14 [ 1758.768513][T16839] vhci_hcd: stop threads [ 1758.770422][T16839] vhci_hcd: release socket [ 1758.772177][T16839] vhci_hcd: disconnect device [ 1758.778358][ T3849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8328'. [ 1759.224087][ T3859] overlayfs: failed to resolve './file1': -2 [ 1759.578474][ T3867] 9pnet_virtio: no channels available for device syz [ 1761.971444][ T2696] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1761.975905][ T2696] CPU: 1 UID: 0 PID: 2696 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 1761.975934][ T2696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1761.975947][ T2696] Workqueue: hci2 hci_rx_work [ 1761.975981][ T2696] Call Trace: [ 1761.975989][ T2696] [ 1761.975998][ T2696] dump_stack_lvl+0x16c/0x1f0 [ 1761.976030][ T2696] sysfs_warn_dup+0x7f/0xa0 [ 1761.976057][ T2696] sysfs_create_dir_ns+0x24b/0x2b0 [ 1761.976081][ T2696] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1761.976106][ T2696] ? find_held_lock+0x2b/0x80 [ 1761.976132][ T2696] ? do_raw_spin_unlock+0x172/0x230 [ 1761.976162][ T2696] kobject_add_internal+0x2c4/0x9b0 [ 1761.976189][ T2696] kobject_add+0x16e/0x240 [ 1761.976210][ T2696] ? __pfx_kobject_add+0x10/0x10 [ 1761.976240][ T2696] ? do_raw_spin_unlock+0x172/0x230 [ 1761.976272][ T2696] ? kobject_put+0xab/0x5a0 [ 1761.976301][ T2696] device_add+0x288/0x1aa0 [ 1761.976326][ T2696] ? __pfx_dev_set_name+0x10/0x10 [ 1761.976351][ T2696] ? __pfx_device_add+0x10/0x10 [ 1761.976374][ T2696] ? mgmt_send_event_skb+0x2fb/0x460 [ 1761.976409][ T2696] hci_conn_add_sysfs+0x17e/0x230 [ 1761.976437][ T2696] le_conn_complete_evt+0x1260/0x2150 [ 1761.976472][ T2696] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1761.976496][ T2696] ? hci_event_packet+0x459/0x11c0 [ 1761.976528][ T2696] hci_le_conn_complete_evt+0x23c/0x370 [ 1761.976559][ T2696] hci_le_meta_evt+0x357/0x5e0 [ 1761.976586][ T2696] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1761.976616][ T2696] hci_event_packet+0x682/0x11c0 [ 1761.976641][ T2696] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1761.976670][ T2696] ? __pfx_hci_event_packet+0x10/0x10 [ 1761.976696][ T2696] ? kcov_remote_start+0x3c9/0x6d0 [ 1761.976726][ T2696] ? lockdep_hardirqs_on+0x7c/0x110 [ 1761.976761][ T2696] hci_rx_work+0x2c5/0x16b0 [ 1761.976790][ T2696] ? rcu_is_watching+0x12/0xc0 [ 1761.976814][ T2696] process_one_work+0x9cc/0x1b70 [ 1761.976845][ T2696] ? __pfx_process_one_work+0x10/0x10 [ 1761.976872][ T2696] ? assign_work+0x1a0/0x250 [ 1761.976904][ T2696] worker_thread+0x6c8/0xf10 [ 1761.976932][ T2696] ? __kthread_parkme+0x19e/0x250 [ 1761.976958][ T2696] ? __pfx_worker_thread+0x10/0x10 [ 1761.976976][ T2696] kthread+0x3c2/0x780 [ 1761.977005][ T2696] ? __pfx_kthread+0x10/0x10 [ 1761.977034][ T2696] ? rcu_is_watching+0x12/0xc0 [ 1761.977055][ T2696] ? __pfx_kthread+0x10/0x10 [ 1761.977082][ T2696] ret_from_fork+0x56d/0x730 [ 1761.977112][ T2696] ? __pfx_kthread+0x10/0x10 [ 1761.977159][ T2696] ret_from_fork_asm+0x1a/0x30 [ 1761.977199][ T2696] [ 1762.310136][ T2696] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1762.315390][ T2696] Bluetooth: hci2: failed to register connection device [ 1762.680570][T30811] usb 40-1: device descriptor read/8, error -110 [ 1763.677322][ T3897] netlink: 'syz.0.8347': attribute type 1 has an invalid length. [ 1763.679753][ T3897] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8347'. [ 1763.683899][ T3900] input: syz1 as /devices/virtual/input/input190 [ 1763.768607][T30811] usb usb40-port1: attempt power cycle [ 1763.843081][ T3906] overlayfs: failed to resolve './file1': -2 [ 1764.819831][T30811] usb usb40-port1: unable to enumerate USB device [ 1765.023671][ T3928] input: syz1 as /devices/virtual/input/input191 [ 1767.070322][ T3935] overlayfs: failed to resolve './file1': -2 [ 1767.156174][ T3938] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8351'. [ 1767.200583][ T3938] input: syz1 as /devices/virtual/input/input192 [ 1768.130665][ T2696] Bluetooth: hci2: command 0x0406 tx timeout [ 1768.561602][ T3955] input: syz1 as /devices/virtual/input/input193 [ 1768.863235][ T3963] 9pnet_virtio: no channels available for device syz [ 1770.855995][ T3975] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8362'. [ 1770.886416][ T3975] input: syz1 as /devices/virtual/input/input194 [ 1772.467902][ T3998] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8367'. [ 1772.503610][ T3998] input: syz1 as /devices/virtual/input/input195 [ 1772.681007][ T4004] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8368'. [ 1776.837569][ T4052] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8381'. [ 1776.859910][ T4052] input: syz1 as /devices/virtual/input/input196 [ 1777.658900][ T4062] overlayfs: failed to resolve './file1': -2 [ 1777.873939][ T4070] overlayfs: failed to resolve './file1': -2 [ 1777.951904][ T2741] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1778.109878][ T2741] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1778.115344][ T2741] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1778.119610][ T2741] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1778.128963][ T2741] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1778.133953][ T2741] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1778.147473][ T2741] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1778.151319][ T2741] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1778.156238][ T2741] usb 6-1: Product: syz [ 1778.158013][ T2741] usb 6-1: Manufacturer: syz [ 1778.169815][ T2741] cdc_wdm 6-1:1.0: skipping garbage [ 1778.173234][ T2741] cdc_wdm 6-1:1.0: skipping garbage [ 1778.176828][ T2741] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1778.179222][ T2741] cdc_wdm 6-1:1.0: Unknown control protocol [ 1778.390263][ T2741] usb 6-1: USB disconnect, device number 15 [ 1779.671585][ T4083] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1779.674258][ T4083] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1779.677429][ T4083] vhci_hcd vhci_hcd.0: Device attached [ 1779.683128][ T4084] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 1 [ 1779.690502][ T4083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8391'. [ 1779.694875][T31808] vhci_hcd: stop threads [ 1779.696678][T31808] vhci_hcd: release socket [ 1779.698496][T31808] vhci_hcd: disconnect device [ 1779.714366][ T4089] overlayfs: failed to resolve './file1': -2 [ 1779.821827][ T4093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8392'. [ 1779.880633][ T4099] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8396'. [ 1781.501642][ T4127] overlayfs: failed to resolve './file1': -2 [ 1781.547515][ T4129] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1781.549948][ T4129] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1781.562369][ T4129] vhci_hcd vhci_hcd.0: Device attached [ 1781.565353][ T4130] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 7 [ 1781.568218][T30236] vhci_hcd: stop threads [ 1781.569867][ T4129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8404'. [ 1781.570748][T30236] vhci_hcd: release socket [ 1781.586597][T30236] vhci_hcd: disconnect device [ 1781.662618][ T4134] 9pnet_virtio: no channels available for device syz [ 1782.218411][ T4137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8406'. [ 1782.848411][ T4144] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8409'. [ 1783.006935][ T4144] input: syz1 as /devices/virtual/input/input197 [ 1784.674898][ T4163] overlayfs: failed to resolve './file1': -2 [ 1786.382704][ T4192] overlayfs: failed to resolve './file1': -2 [ 1786.481130][ T4197] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1786.484157][ T4197] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1786.487810][ T4197] vhci_hcd vhci_hcd.0: Device attached [ 1786.492896][ T4198] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 1 [ 1786.498239][ T4197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8425'. [ 1786.499734][T16839] vhci_hcd: stop threads [ 1786.503679][T16839] vhci_hcd: release socket [ 1786.507902][T16839] vhci_hcd: disconnect device [ 1786.769384][ T4210] netlink: 'syz.0.8429': attribute type 2 has an invalid length. [ 1786.772907][ T4210] netlink: 'syz.0.8429': attribute type 8 has an invalid length. [ 1786.776447][ T4210] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.8429'. [ 1786.983747][ T4213] input: syz1 as /devices/virtual/input/input198 [ 1787.139605][ T4223] overlayfs: failed to resolve './file1': -2 [ 1787.679275][ T4241] netlink: 'syz.8.8440': attribute type 1 has an invalid length. [ 1787.700305][ T4241] bond1: entered promiscuous mode [ 1787.703245][ T4241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1787.728429][ T4241] bond1: (slave bridge1): making interface the new active one [ 1787.731503][ T4241] bridge1: entered promiscuous mode [ 1787.734747][ T4241] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1787.780942][ T4247] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1787.783760][ T4247] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1787.789668][ T4247] vhci_hcd vhci_hcd.0: Device attached [ 1787.794132][ T4248] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 0 [ 1787.797569][T16839] vhci_hcd: stop threads [ 1787.799355][T16839] vhci_hcd: release socket [ 1787.810751][T16839] vhci_hcd: disconnect device [ 1788.265218][ T4259] overlayfs: failed to resolve './file1': -2 [ 1790.564735][ T4287] input: syz1 as /devices/virtual/input/input199 [ 1790.599258][ T4289] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8454'. [ 1790.603018][ T4289] FAULT_INJECTION: forcing a failure. [ 1790.603018][ T4289] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.607589][ T4289] CPU: 2 UID: 0 PID: 4289 Comm: syz.4.8454 Not tainted syzkaller #0 PREEMPT(full) [ 1790.607613][ T4289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1790.607624][ T4289] Call Trace: [ 1790.607630][ T4289] [ 1790.607638][ T4289] dump_stack_lvl+0x16c/0x1f0 [ 1790.607671][ T4289] should_fail_ex+0x512/0x640 [ 1790.607704][ T4289] should_failslab+0xc2/0x120 [ 1790.607728][ T4289] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1790.607751][ T4289] ? skb_clone+0x190/0x3f0 [ 1790.607783][ T4289] skb_clone+0x190/0x3f0 [ 1790.607811][ T4289] netlink_deliver_tap+0xabd/0xd30 [ 1790.607843][ T4289] netlink_unicast+0x71f/0x870 [ 1790.607876][ T4289] ? __pfx_netlink_unicast+0x10/0x10 [ 1790.607903][ T4289] ? __pfx_rtnl_dellink+0x10/0x10 [ 1790.607940][ T4289] netlink_ack+0x696/0xb80 [ 1790.607974][ T4289] netlink_rcv_skb+0x332/0x420 [ 1790.608008][ T4289] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1790.608029][ T4289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1790.608066][ T4289] ? netlink_deliver_tap+0x1ae/0xd30 [ 1790.608098][ T4289] netlink_unicast+0x5aa/0x870 [ 1790.608131][ T4289] ? __pfx_netlink_unicast+0x10/0x10 [ 1790.608159][ T4289] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1790.608194][ T4289] netlink_sendmsg+0x8d1/0xdd0 [ 1790.608228][ T4289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1790.608260][ T4289] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1790.608285][ T4289] ____sys_sendmsg+0xa95/0xc70 [ 1790.608304][ T4289] ? btrfs_get_old_root+0x3c0/0x1310 [ 1790.608328][ T4289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1790.608348][ T4289] ? get_compat_msghdr+0x11a/0x170 [ 1790.608386][ T4289] ___sys_sendmsg+0x134/0x1d0 [ 1790.608415][ T4289] ? __pfx____sys_sendmsg+0x10/0x10 [ 1790.608456][ T4289] ? find_held_lock+0x2b/0x80 [ 1790.608494][ T4289] __sys_sendmsg+0x16d/0x220 [ 1790.608522][ T4289] ? __pfx___sys_sendmsg+0x10/0x10 [ 1790.608561][ T4289] ? rcu_is_watching+0x12/0xc0 [ 1790.608585][ T4289] __do_fast_syscall_32+0x7c/0x300 [ 1790.608607][ T4289] do_fast_syscall_32+0x32/0x80 [ 1790.608625][ T4289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1790.608647][ T4289] RIP: 0023:0xf7fb6579 [ 1790.608662][ T4289] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1790.608680][ T4289] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1790.608698][ T4289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1790.608710][ T4289] RDX: 000000000400c0c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1790.608721][ T4289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1790.608732][ T4289] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1790.608742][ T4289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1790.608767][ T4289] [ 1790.720198][ T4291] FAULT_INJECTION: forcing a failure. [ 1790.720198][ T4291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1790.724276][ T4291] CPU: 1 UID: 0 PID: 4291 Comm: syz.0.8455 Not tainted syzkaller #0 PREEMPT(full) [ 1790.724292][ T4291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1790.724299][ T4291] Call Trace: [ 1790.724303][ T4291] [ 1790.724308][ T4291] dump_stack_lvl+0x16c/0x1f0 [ 1790.724330][ T4291] should_fail_ex+0x512/0x640 [ 1790.724351][ T4291] _copy_to_user+0x32/0xd0 [ 1790.724365][ T4291] simple_read_from_buffer+0xcb/0x170 [ 1790.724378][ T4291] proc_fail_nth_read+0x197/0x240 [ 1790.724392][ T4291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1790.724405][ T4291] ? rw_verify_area+0xcf/0x6c0 [ 1790.724416][ T4291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1790.724429][ T4291] vfs_read+0x1e1/0xcf0 [ 1790.724444][ T4291] ? __pfx_vfs_read+0x10/0x10 [ 1790.724456][ T4291] ? find_held_lock+0x2b/0x80 [ 1790.724472][ T4291] ? __fget_files+0x20e/0x3c0 [ 1790.724489][ T4291] ksys_read+0x12a/0x250 [ 1790.724501][ T4291] ? __pfx_ksys_read+0x10/0x10 [ 1790.724515][ T4291] ? rcu_is_watching+0x12/0xc0 [ 1790.724530][ T4291] __do_fast_syscall_32+0x7c/0x300 [ 1790.724542][ T4291] do_fast_syscall_32+0x32/0x80 [ 1790.724553][ T4291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1790.724568][ T4291] RIP: 0023:0xf7fe8579 [ 1790.724577][ T4291] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1790.724588][ T4291] RSP: 002b:00000000f54d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1790.724599][ T4291] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54d6620 [ 1790.724607][ T4291] RDX: 000000000000000f RSI: 00000000f7475ff4 RDI: 0000000000000000 [ 1790.724613][ T4291] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1790.724620][ T4291] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1790.724626][ T4291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1790.724640][ T4291] [ 1791.372274][ T4306] Bluetooth: MGMT ver 1.23 [ 1791.384232][ T4306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8460'. [ 1791.876740][ T4314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8462'. [ 1791.970602][ T40] audit: type=1326 audit(1759073650.142:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.1.8464" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701e579 code=0x0 [ 1793.065737][ T4340] overlayfs: failed to resolve './file1': -2 [ 1793.155945][ T4345] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8472'. [ 1793.404264][ T4350] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8481'. [ 1793.443213][ T4350] input: syz1 as /devices/virtual/input/input200 [ 1793.655833][ T4356] FAULT_INJECTION: forcing a failure. [ 1793.655833][ T4356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1793.664117][ T4356] CPU: 0 UID: 0 PID: 4356 Comm: syz.4.8474 Not tainted syzkaller #0 PREEMPT(full) [ 1793.664139][ T4356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1793.664150][ T4356] Call Trace: [ 1793.664156][ T4356] [ 1793.664164][ T4356] dump_stack_lvl+0x16c/0x1f0 [ 1793.664194][ T4356] should_fail_ex+0x512/0x640 [ 1793.664228][ T4356] _copy_from_user+0x2e/0xd0 [ 1793.664248][ T4356] vga_arb_write+0xf5/0x1370 [ 1793.664267][ T4356] ? __pfx_vga_arb_write+0x10/0x10 [ 1793.664296][ T4356] ? bpf_lsm_file_permission+0x9/0x10 [ 1793.664320][ T4356] ? security_file_permission+0x71/0x210 [ 1793.664344][ T4356] ? rw_verify_area+0xcf/0x6c0 [ 1793.664363][ T4356] ? __pfx_vga_arb_write+0x10/0x10 [ 1793.664378][ T4356] vfs_write+0x2a0/0x11d0 [ 1793.664402][ T4356] ? __pfx_vfs_write+0x10/0x10 [ 1793.664420][ T4356] ? find_held_lock+0x2b/0x80 [ 1793.664438][ T4356] ? __fget_files+0x204/0x3c0 [ 1793.664460][ T4356] ? __fget_files+0x20e/0x3c0 [ 1793.664476][ T4356] ? handle_mm_fault+0x240/0xd10 [ 1793.664500][ T4356] ksys_write+0x12a/0x250 [ 1793.664519][ T4356] ? __pfx_ksys_write+0x10/0x10 [ 1793.664540][ T4356] ? rcu_is_watching+0x12/0xc0 [ 1793.664560][ T4356] __do_fast_syscall_32+0x7c/0x300 [ 1793.664579][ T4356] do_fast_syscall_32+0x32/0x80 [ 1793.664595][ T4356] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1793.664616][ T4356] RIP: 0023:0xf7fb6579 [ 1793.664629][ T4356] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1793.664646][ T4356] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1793.664664][ T4356] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 1793.664674][ T4356] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 1793.664684][ T4356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1793.664694][ T4356] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1793.664704][ T4356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1793.664726][ T4356] [ 1796.016199][ T4371] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8480'. [ 1796.338214][ T4386] overlayfs: cannot append lower layer [ 1799.031852][ T6060] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1799.155871][ T6060] usb 9-1: device descriptor read/64, error -71 [ 1799.403021][ T6060] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1799.794300][ T4444] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8502'. [ 1800.070226][ T6060] usb 9-1: device descriptor read/64, error -71 [ 1800.124594][ T4453] No control pipe specified [ 1800.184741][ T6060] usb usb9-port1: attempt power cycle [ 1800.527838][ T6060] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1800.556932][ T6060] usb 9-1: device descriptor read/8, error -71 [ 1800.784660][ T6060] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1800.804273][ T6060] usb 9-1: device descriptor read/8, error -71 [ 1800.913128][ T6060] usb usb9-port1: unable to enumerate USB device [ 1802.007643][ T4470] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8510'. [ 1802.118268][ T2696] Bluetooth: hci1: command 0x0406 tx timeout [ 1802.237844][ T4474] 9pnet_virtio: no channels available for device syz [ 1803.050882][ T4481] netlink: 196 bytes leftover after parsing attributes in process `syz.4.8513'. [ 1803.054635][ T4481] netlink: 196 bytes leftover after parsing attributes in process `syz.4.8513'. [ 1803.105840][ T4484] input: syz1 as /devices/virtual/input/input205 [ 1804.241822][ T4499] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8518'. [ 1805.240239][ T4513] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1805.242992][ T4513] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1805.255873][ T4513] vhci_hcd vhci_hcd.0: Device attached [ 1805.266396][ T4514] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 14 [ 1805.278622][T31798] vhci_hcd: stop threads [ 1805.280056][T31798] vhci_hcd: release socket [ 1805.291506][T31798] vhci_hcd: disconnect device [ 1805.821405][ T4520] input: syz1 as /devices/virtual/input/input207 [ 1806.494441][ T4529] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8527'. [ 1806.500892][ T4529] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8527'. [ 1807.004572][ T2696] Bluetooth: hci3: command 0x0406 tx timeout [ 1807.160483][ T4546] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1807.163325][ T4546] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1807.167643][ T4546] vhci_hcd vhci_hcd.0: Device attached [ 1807.170206][ T4547] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 14 [ 1807.174415][T16843] vhci_hcd: stop threads [ 1807.175861][T16843] vhci_hcd: release socket [ 1807.177344][T16843] vhci_hcd: disconnect device [ 1807.596460][T31683] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1807.737932][ T4560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8537'. [ 1807.747489][T31683] usb 6-1: Using ep0 maxpacket: 32 [ 1807.751318][ T4560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8537'. [ 1808.239004][T31683] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1808.241482][T31683] usb 6-1: can't read configurations, error -61 [ 1808.308860][ T4567] input: syz1 as /devices/virtual/input/input208 [ 1809.708197][ T4572] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8541'. [ 1809.711724][T31683] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1809.843043][ T4580] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8542'. [ 1809.853362][T31683] usb 6-1: Using ep0 maxpacket: 32 [ 1809.857148][T31683] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1809.859621][T31683] usb 6-1: can't read configurations, error -61 [ 1809.862964][T31683] usb usb6-port1: attempt power cycle [ 1809.905278][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1810.201446][T31683] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1810.513587][T31683] usb 6-1: device descriptor read/8, error -71 [ 1810.620092][ T4592] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1810.622833][ T4592] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1810.653005][ T4592] vhci_hcd vhci_hcd.0: Device attached [ 1810.663567][ T4593] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 1 [ 1810.675770][T16843] vhci_hcd: stop threads [ 1810.677227][T16843] vhci_hcd: release socket [ 1810.679172][T16843] vhci_hcd: disconnect device [ 1811.885889][ T2696] Bluetooth: hci2: command 0x0406 tx timeout [ 1812.438449][ T4620] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8553'. [ 1812.884407][ T4624] overlayfs: failed to resolve './file1': -2 [ 1813.281952][ T6060] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1813.416794][ T4636] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1813.419586][ T4636] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1813.422799][ T4636] vhci_hcd vhci_hcd.0: Device attached [ 1813.454203][ T6060] usb 9-1: Using ep0 maxpacket: 16 [ 1813.471481][ T6060] usb 9-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 1813.476113][ T6060] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1813.495732][ T6060] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1813.499465][ T6060] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.503159][ T6060] usb 9-1: Product: syz [ 1813.505195][ T6060] usb 9-1: Manufacturer: syz [ 1813.507230][ T6060] usb 9-1: SerialNumber: syz [ 1813.525881][ T6060] usb 9-1: config 0 descriptor?? [ 1813.591851][ T4637] vhci_hcd: connection closed [ 1813.592205][T16843] vhci_hcd: stop threads [ 1813.596014][T16843] vhci_hcd: release socket [ 1813.598399][T16843] vhci_hcd: disconnect device [ 1813.653727][ T500] usb 53-1: new high-speed USB device number 2 using vhci_hcd [ 1813.656208][ T500] usb 53-1: enqueue for inactive port 0 [ 1813.720492][ T500] vhci_hcd: vhci_device speed not set [ 1814.373097][ T4648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8560'. [ 1814.381560][ T4648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8560'. [ 1814.415116][ T6060] usb 9-1: USB disconnect, device number 17 [ 1815.604257][ T4668] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1815.606911][ T4668] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1815.611639][ T4668] vhci_hcd vhci_hcd.0: Device attached [ 1815.641156][ T4665] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8565'. [ 1815.659255][ T4665] input: syz1 as /devices/virtual/input/input212 [ 1815.791868][ T4669] vhci_hcd: connection closed [ 1815.794007][T16839] vhci_hcd: stop threads [ 1815.798258][T16839] vhci_hcd: release socket [ 1815.800131][T16839] vhci_hcd: disconnect device [ 1816.476756][ T4681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8570'. [ 1816.479604][ T4681] FAULT_INJECTION: forcing a failure. [ 1816.479604][ T4681] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.493411][ T4681] CPU: 0 UID: 0 PID: 4681 Comm: syz.4.8570 Not tainted syzkaller #0 PREEMPT(full) [ 1816.493435][ T4681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1816.493447][ T4681] Call Trace: [ 1816.493453][ T4681] [ 1816.493460][ T4681] dump_stack_lvl+0x16c/0x1f0 [ 1816.493491][ T4681] should_fail_ex+0x512/0x640 [ 1816.493517][ T4681] ? __kmalloc_noprof+0xbf/0x510 [ 1816.493541][ T4681] ? nf_tables_newrule+0xc03/0x28e0 [ 1816.493564][ T4681] should_failslab+0xc2/0x120 [ 1816.493588][ T4681] __kmalloc_noprof+0xd2/0x510 [ 1816.493606][ T4681] ? nf_tables_newrule+0x8b6/0x28e0 [ 1816.493635][ T4681] nf_tables_newrule+0xc03/0x28e0 [ 1816.493669][ T4681] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1816.493701][ T4681] ? __nla_parse+0x40/0x60 [ 1816.493723][ T4681] nfnetlink_rcv_batch+0x18ea/0x2330 [ 1816.493757][ T4681] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1816.493783][ T4681] ? __local_bh_enable_ip+0xa4/0x120 [ 1816.493803][ T4681] ? __dev_queue_xmit+0xaf1/0x4490 [ 1816.493825][ T4681] ? __dev_queue_xmit+0xb12/0x4490 [ 1816.493857][ T4681] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1816.493902][ T4681] ? __nla_parse+0x40/0x60 [ 1816.493925][ T4681] nfnetlink_rcv+0x3c1/0x430 [ 1816.493946][ T4681] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1816.493980][ T4681] netlink_unicast+0x5aa/0x870 [ 1816.494011][ T4681] ? __pfx_netlink_unicast+0x10/0x10 [ 1816.494037][ T4681] ? __pfx___might_resched+0x10/0x10 [ 1816.494064][ T4681] netlink_sendmsg+0x8d1/0xdd0 [ 1816.494094][ T4681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1816.494123][ T4681] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1816.494146][ T4681] ____sys_sendmsg+0xa95/0xc70 [ 1816.494170][ T4681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1816.494188][ T4681] ? get_compat_msghdr+0x11a/0x170 [ 1816.494223][ T4681] ___sys_sendmsg+0x134/0x1d0 [ 1816.494250][ T4681] ? __pfx____sys_sendmsg+0x10/0x10 [ 1816.494288][ T4681] ? find_held_lock+0x2b/0x80 [ 1816.494324][ T4681] __sys_sendmsg+0x16d/0x220 [ 1816.494349][ T4681] ? __pfx___sys_sendmsg+0x10/0x10 [ 1816.494386][ T4681] ? rcu_is_watching+0x12/0xc0 [ 1816.494409][ T4681] __do_fast_syscall_32+0x7c/0x300 [ 1816.494428][ T4681] do_fast_syscall_32+0x32/0x80 [ 1816.494445][ T4681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1816.494467][ T4681] RIP: 0023:0xf7fb6579 [ 1816.494481][ T4681] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1816.494499][ T4681] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1816.494517][ T4681] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 1816.494528][ T4681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1816.494539][ T4681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1816.494549][ T4681] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1816.494560][ T4681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1816.494586][ T4681] [ 1818.437983][T21434] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1818.597110][T21434] usb 6-1: Using ep0 maxpacket: 8 [ 1818.650810][T21434] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1818.653325][T21434] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1818.656333][T21434] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.674429][T21434] usb 6-1: config 0 descriptor?? [ 1819.088031][T21434] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0 [ 1819.090281][T21434] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0 [ 1819.092536][T21434] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0 [ 1819.109668][T21434] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0 [ 1819.112400][T21434] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0 [ 1819.115373][T21434] mcp2221 0003:04D8:00DD.003F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1819.282223][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8574'. [ 1819.397244][ T4696] netlink: 'syz.1.8574': attribute type 3 has an invalid length. [ 1819.417221][ T4713] overlayfs: failed to resolve './file1': -2 [ 1819.477019][ T4716] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1819.479684][ T4716] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1819.491110][ T4716] vhci_hcd vhci_hcd.0: Device attached [ 1819.521885][ T2741] usb 6-1: USB disconnect, device number 20 [ 1819.988098][T21434] usb 53-1: new high-speed USB device number 3 using vhci_hcd [ 1820.029260][ T4717] vhci_hcd: connection reset by peer [ 1820.033227][T31798] vhci_hcd: stop threads [ 1820.041126][T31798] vhci_hcd: release socket [ 1820.046008][T31798] vhci_hcd: disconnect device [ 1821.551301][ T40] audit: type=1326 audit(1759077803.202:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.8.8583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 1821.579167][ T40] audit: type=1326 audit(1759077803.202:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.8.8583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 1821.598307][ T40] audit: type=1326 audit(1759077803.202:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.8.8583" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 1821.608020][ T40] audit: type=1326 audit(1759077803.202:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.8.8583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 1821.635105][ T40] audit: type=1326 audit(1759077803.202:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.8.8583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 1821.670612][ T40] audit: type=1326 audit(1759077803.202:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.8.8583" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 1821.689430][ T40] audit: type=1326 audit(1759077803.202:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.8.8583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 1821.712797][ T40] audit: type=1326 audit(1759077803.202:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.8.8583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 1821.730575][ T40] audit: type=1326 audit(1759077803.202:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.8.8583" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 1821.785878][ T40] audit: type=1326 audit(1759077803.202:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.8.8583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 1824.744562][ T4779] FAULT_INJECTION: forcing a failure. [ 1824.744562][ T4779] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.751914][ T4779] CPU: 2 UID: 0 PID: 4779 Comm: syz.0.8595 Not tainted syzkaller #0 PREEMPT(full) [ 1824.751936][ T4779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1824.751943][ T4779] Call Trace: [ 1824.751947][ T4779] [ 1824.751952][ T4779] dump_stack_lvl+0x16c/0x1f0 [ 1824.751974][ T4779] should_fail_ex+0x512/0x640 [ 1824.751995][ T4779] should_failslab+0xc2/0x120 [ 1824.752011][ T4779] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1824.752026][ T4779] ? __alloc_skb+0x2b2/0x380 [ 1824.752045][ T4779] __alloc_skb+0x2b2/0x380 [ 1824.752061][ T4779] ? __pfx___alloc_skb+0x10/0x10 [ 1824.752077][ T4779] ? __pfx_br_afspec+0x10/0x10 [ 1824.752096][ T4779] br_info_notify+0x10f/0x2e0 [ 1824.752113][ T4779] br_setlink+0x33e/0x630 [ 1824.752128][ T4779] ? __pfx_br_setlink+0x10/0x10 [ 1824.752142][ T4779] ? __pfx___schedule+0x10/0x10 [ 1824.752157][ T4779] ? irqentry_exit_to_user_mode+0x1f1/0x290 [ 1824.752190][ T4779] ? __lock_acquire+0x62e/0x1ce0 [ 1824.752210][ T4779] ? __pfx_br_setlink+0x10/0x10 [ 1824.752225][ T4779] rtnl_bridge_setlink+0x56d/0x740 [ 1824.752243][ T4779] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 1824.752262][ T4779] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 1824.752279][ T4779] rtnetlink_rcv_msg+0x3c6/0xe90 [ 1824.752291][ T4779] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1824.752301][ T4779] ? __lock_acquire+0xb97/0x1ce0 [ 1824.752322][ T4779] netlink_rcv_skb+0x155/0x420 [ 1824.752340][ T4779] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1824.752352][ T4779] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1824.752368][ T4779] ? rcu_is_watching+0x12/0xc0 [ 1824.752389][ T4779] netlink_unicast+0x5aa/0x870 [ 1824.752409][ T4779] ? __pfx_netlink_unicast+0x10/0x10 [ 1824.752427][ T4779] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1824.752448][ T4779] netlink_sendmsg+0x8d1/0xdd0 [ 1824.752468][ T4779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1824.752487][ T4779] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1824.752503][ T4779] ____sys_sendmsg+0xa95/0xc70 [ 1824.752516][ T4779] ? lockdep_hardirqs_on+0x7c/0x110 [ 1824.752532][ T4779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1824.752551][ T4779] ___sys_sendmsg+0x134/0x1d0 [ 1824.752569][ T4779] ? __pfx____sys_sendmsg+0x10/0x10 [ 1824.752593][ T4779] ? find_held_lock+0x2b/0x80 [ 1824.752614][ T4779] __sys_sendmsg+0x16d/0x220 [ 1824.752630][ T4779] ? __pfx___sys_sendmsg+0x10/0x10 [ 1824.752654][ T4779] ? rcu_is_watching+0x12/0xc0 [ 1824.752667][ T4779] __do_fast_syscall_32+0x7c/0x300 [ 1824.752679][ T4779] do_fast_syscall_32+0x32/0x80 [ 1824.752689][ T4779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1824.752703][ T4779] RIP: 0023:0xf7fe8579 [ 1824.752712][ T4779] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1824.752723][ T4779] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1824.752734][ T4779] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1824.752741][ T4779] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1824.752748][ T4779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1824.752754][ T4779] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1824.752760][ T4779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1824.752777][ T4779] [ 1824.922783][T21434] vhci_hcd: vhci_device speed not set [ 1826.592369][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 1826.592382][ T40] audit: type=1800 audit(1759078953.486:3129): pid=4791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8605" name="file0" dev="9p" ino=71827909 res=0 errno=0 [ 1826.989385][ T4801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8599'. [ 1827.020258][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8600'. [ 1827.093102][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8603'. [ 1827.234813][ T4813] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8604'. [ 1827.253126][ T4813] input: syz1 as /devices/virtual/input/input213 [ 1830.888520][ T4861] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8619'. [ 1830.930830][ T4861] input: syz1 as /devices/virtual/input/input215 [ 1831.038804][ T4868] loop2: detected capacity change from 0 to 7 [ 1831.057330][ T4868] Dev loop2: unable to read RDB block 7 [ 1831.068162][ T4868] loop2: unable to read partition table [ 1831.078584][ T4868] loop2: partition table beyond EOD, truncated [ 1831.100488][ T4870] FAULT_INJECTION: forcing a failure. [ 1831.100488][ T4870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1831.102542][ T4868] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1831.106481][ T4870] CPU: 1 UID: 0 PID: 4870 Comm: syz.4.8623 Not tainted syzkaller #0 PREEMPT(full) [ 1831.106500][ T4870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1831.106510][ T4870] Call Trace: [ 1831.106515][ T4870] [ 1831.106521][ T4870] dump_stack_lvl+0x16c/0x1f0 [ 1831.106550][ T4870] should_fail_ex+0x512/0x640 [ 1831.106576][ T4870] _copy_to_user+0x32/0xd0 [ 1831.106594][ T4870] simple_read_from_buffer+0xcb/0x170 [ 1831.106612][ T4870] proc_fail_nth_read+0x197/0x240 [ 1831.106629][ T4870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1831.106646][ T4870] ? rw_verify_area+0xcf/0x6c0 [ 1831.106662][ T4870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1831.106678][ T4870] vfs_read+0x1e1/0xcf0 [ 1831.106698][ T4870] ? __pfx_vfs_read+0x10/0x10 [ 1831.106714][ T4870] ? find_held_lock+0x2b/0x80 [ 1831.106735][ T4870] ? __fget_files+0x20e/0x3c0 [ 1831.106758][ T4870] ksys_read+0x12a/0x250 [ 1831.106780][ T4870] ? __pfx_ksys_read+0x10/0x10 [ 1831.106798][ T4870] ? rcu_is_watching+0x12/0xc0 [ 1831.106817][ T4870] __do_fast_syscall_32+0x7c/0x300 [ 1831.106832][ T4870] do_fast_syscall_32+0x32/0x80 [ 1831.106846][ T4870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1831.106865][ T4870] RIP: 0023:0xf7fb6579 [ 1831.106876][ T4870] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1831.106891][ T4870] RSP: 002b:00000000f54a6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1831.106906][ T4870] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a6620 [ 1831.106916][ T4870] RDX: 000000000000000f RSI: 00000000f7445ff4 RDI: 0000000000000000 [ 1831.106925][ T4870] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1831.106933][ T4870] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1831.106942][ T4870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1831.106962][ T4870] [ 1832.743380][ T4895] nbd: couldn't find a device at index -1605786504 [ 1832.798906][ T40] audit: type=1326 audit(1759080104.994:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.0.8631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 1832.807836][ T40] audit: type=1326 audit(1759080104.994:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.0.8631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 1832.817035][ T40] audit: type=1326 audit(1759080105.005:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.0.8631" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 1832.826925][ T40] audit: type=1326 audit(1759080105.005:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.0.8631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 1832.835956][ T40] audit: type=1326 audit(1759080105.005:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.0.8631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 1832.855606][ T40] audit: type=1326 audit(1759080105.005:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.0.8631" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 1832.866833][ T40] audit: type=1326 audit(1759080105.005:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.0.8631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 1832.876194][ T40] audit: type=1326 audit(1759080105.005:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.0.8631" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 1832.884360][ T40] audit: type=1326 audit(1759080105.005:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.0.8631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 1832.894709][ T40] audit: type=1326 audit(1759080105.026:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.0.8631" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 1833.041833][ T4904] overlayfs: failed to resolve './file1': -2 [ 1833.538134][ T4912] overlayfs: failed to resolve './file1': -2 [ 1833.715731][ T4916] FAULT_INJECTION: forcing a failure. [ 1833.715731][ T4916] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.720234][ T4916] CPU: 2 UID: 0 PID: 4916 Comm: syz.1.8640 Not tainted syzkaller #0 PREEMPT(full) [ 1833.720251][ T4916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1833.720259][ T4916] Call Trace: [ 1833.720263][ T4916] [ 1833.720269][ T4916] dump_stack_lvl+0x16c/0x1f0 [ 1833.720291][ T4916] should_fail_ex+0x512/0x640 [ 1833.720310][ T4916] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1833.720327][ T4916] should_failslab+0xc2/0x120 [ 1833.720344][ T4916] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1833.720359][ T4916] ? alloc_inode+0x64/0x240 [ 1833.720378][ T4916] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1833.720392][ T4916] alloc_inode+0x64/0x240 [ 1833.720409][ T4916] new_inode+0x22/0x1c0 [ 1833.720427][ T4916] debugfs_create_dir+0xdd/0x5f0 [ 1833.720443][ T4916] ieee80211_debugfs_recreate_netdev+0x22b/0x17e0 [ 1833.720463][ T4916] ? lockdep_init_map_type+0x5c/0x280 [ 1833.720480][ T4916] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 1833.720497][ T4916] ? __raw_spin_lock_init+0x3a/0x110 [ 1833.720517][ T4916] ? ieee80211_link_setup+0x5e/0x90 [ 1833.720534][ T4916] ? ieee80211_setup_sdata+0x5b5/0xcf0 [ 1833.720551][ T4916] ieee80211_if_change_type+0x5f6/0x800 [ 1833.720569][ T4916] ieee80211_change_iface+0xa5/0x500 [ 1833.720596][ T4916] cfg80211_change_iface+0x57f/0xdc0 [ 1833.720616][ T4916] cfg80211_wext_siwmode+0x22c/0x2b0 [ 1833.720632][ T4916] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 1833.720648][ T4916] ? rcu_is_watching+0x12/0xc0 [ 1833.720661][ T4916] ? trace_contention_end+0xdd/0x130 [ 1833.720679][ T4916] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 1833.720693][ T4916] ioctl_standard_call+0xb2/0x1d0 [ 1833.720712][ T4916] compat_standard_call+0xf2/0x350 [ 1833.720729][ T4916] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 1833.720745][ T4916] ? __pfx_compat_standard_call+0x10/0x10 [ 1833.720761][ T4916] ? full_name_hash+0xbc/0x110 [ 1833.720779][ T4916] ? netdev_name_node_lookup+0x127/0x180 [ 1833.720797][ T4916] ? __pfx_compat_standard_call+0x10/0x10 [ 1833.720813][ T4916] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 1833.720827][ T4916] wireless_process_ioctl.constprop.0+0x28e/0x3d0 [ 1833.720848][ T4916] compat_wext_handle_ioctl+0x284/0x310 [ 1833.720867][ T4916] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 1833.720884][ T4916] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1833.720905][ T4916] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1833.720926][ T4916] compat_sock_ioctl+0x320/0x730 [ 1833.720943][ T4916] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1833.720957][ T4916] ? hook_file_ioctl_common+0x145/0x410 [ 1833.720977][ T4916] ? __fget_files+0x20e/0x3c0 [ 1833.720994][ T4916] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1833.721007][ T4916] __ia32_compat_sys_ioctl+0x242/0x370 [ 1833.721029][ T4916] __do_fast_syscall_32+0x7c/0x300 [ 1833.721042][ T4916] do_fast_syscall_32+0x32/0x80 [ 1833.721053][ T4916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1833.721068][ T4916] RIP: 0023:0xf701e579 [ 1833.721078][ T4916] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1833.721089][ T4916] RSP: 002b:00000000f540e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1833.721101][ T4916] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000008b06 [ 1833.721108][ T4916] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 1833.721115][ T4916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1833.721122][ T4916] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1833.721129][ T4916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1833.721144][ T4916] [ 1833.721149][ T4916] debugfs: out of free dentries, can not create directory 'stations' [ 1835.340424][ T4953] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8649'. [ 1835.374118][ T4955] overlayfs: failed to resolve './file1': -2 [ 1835.401804][ T4953] input: syz1 as /devices/virtual/input/input216 [ 1835.797695][ T4961] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8652'. [ 1835.824931][ T4961] input: syz1 as /devices/virtual/input/input217 [ 1836.962510][ T4980] overlayfs: failed to resolve './file1': -2 [ 1837.094129][ T4984] overlayfs: failed to resolve './file1': -2 [ 1838.440884][ T5003] 9pnet_virtio: no channels available for device syz [ 1839.439451][ T5006] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8666'. [ 1839.446678][ T5006] input: syz1 as /devices/virtual/input/input218 [ 1842.128214][ T5045] 9pnet_virtio: no channels available for device syz [ 1842.423388][ T5049] raw_sendmsg: syz.8.8679 forgot to set AF_INET. Fix it! [ 1842.935022][ T5055] 9pnet_virtio: no channels available for device syz [ 1845.503673][ T5082] overlayfs: failed to resolve './file1': -2 [ 1845.900966][ T5094] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8691'. [ 1845.901573][ T5095] 9pnet_virtio: no channels available for device syz [ 1845.929580][ T5094] input: syz1 as /devices/virtual/input/input219 [ 1847.348311][ T5113] overlayfs: failed to resolve './file1': -2 [ 1847.516300][ T6060] hid-generic 00A0:7FFF:0003.0040: unknown main item tag 0x7 [ 1847.520278][ T6060] hid-generic 00A0:7FFF:0003.0040: item fetching failed at offset 14/15 [ 1847.526081][ T6060] hid-generic 00A0:7FFF:0003.0040: probe with driver hid-generic failed with error -22 [ 1849.198782][ T5145] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8709'. [ 1849.201804][ T5145] netlink: zone id is out of range [ 1849.203843][ T5145] netlink: zone id is out of range [ 1849.205833][ T5145] netlink: get zone limit has 8 unknown bytes [ 1849.416446][ T5159] overlayfs: failed to resolve './file1': -2 [ 1850.707888][ T5187] netlink: 'syz.4.8722': attribute type 309 has an invalid length. [ 1850.851044][ T5193] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8724'. [ 1850.855572][ T5196] 9pnet_virtio: no channels available for device syz [ 1850.874277][ T5193] input: syz1 as /devices/virtual/input/input220 [ 1851.675998][ T5206] overlayfs: failed to resolve './file1': -2 [ 1852.086941][ T5219] FAULT_INJECTION: forcing a failure. [ 1852.086941][ T5219] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.095658][ T5219] CPU: 0 UID: 0 PID: 5219 Comm: syz.1.8733 Not tainted syzkaller #0 PREEMPT(full) [ 1852.095684][ T5219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1852.095693][ T5219] Call Trace: [ 1852.095698][ T5219] [ 1852.095703][ T5219] dump_stack_lvl+0x16c/0x1f0 [ 1852.095725][ T5219] should_fail_ex+0x512/0x640 [ 1852.095746][ T5219] should_failslab+0xc2/0x120 [ 1852.095761][ T5219] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1852.095775][ T5219] ? dst_alloc+0x99/0x1a0 [ 1852.095793][ T5219] dst_alloc+0x99/0x1a0 [ 1852.095809][ T5219] rt_dst_alloc+0x35/0x3a0 [ 1852.095821][ T5219] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 1852.095840][ T5219] ip_route_output_key_hash+0x137/0x2e0 [ 1852.095854][ T5219] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1852.095873][ T5219] ? find_held_lock+0x2b/0x80 [ 1852.095886][ T5219] ip_route_output_flow+0x27/0x150 [ 1852.095902][ T5219] ping_v4_sendmsg+0xa70/0x1a40 [ 1852.095925][ T5219] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 1852.095942][ T5219] ? __lock_acquire+0xb97/0x1ce0 [ 1852.095972][ T5219] ? reacquire_held_locks+0xcd/0x1f0 [ 1852.095992][ T5219] ? release_sock+0x21/0x220 [ 1852.096018][ T5219] ? find_held_lock+0x2b/0x80 [ 1852.096032][ T5219] ? inet_autobind+0x145/0x1a0 [ 1852.096043][ T5219] ? __local_bh_enable_ip+0xa4/0x120 [ 1852.096057][ T5219] ? inet_autobind+0x14a/0x1a0 [ 1852.096068][ T5219] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 1852.096082][ T5219] inet_sendmsg+0x119/0x140 [ 1852.096096][ T5219] ____sys_sendmsg+0x973/0xc70 [ 1852.096111][ T5219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1852.096122][ T5219] ? get_compat_msghdr+0x11a/0x170 [ 1852.096141][ T5219] ? __pfx__kstrtoull+0x10/0x10 [ 1852.096159][ T5219] ___sys_sendmsg+0x134/0x1d0 [ 1852.096177][ T5219] ? __pfx____sys_sendmsg+0x10/0x10 [ 1852.096212][ T5219] __sys_sendmmsg+0x2f9/0x420 [ 1852.096231][ T5219] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1852.096253][ T5219] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1852.096278][ T5219] ? fput+0x9b/0xd0 [ 1852.096294][ T5219] ? ksys_write+0x1ac/0x250 [ 1852.096307][ T5219] ? __pfx_ksys_write+0x10/0x10 [ 1852.096322][ T5219] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1852.096339][ T5219] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1852.096358][ T5219] __do_fast_syscall_32+0x7c/0x300 [ 1852.096370][ T5219] do_fast_syscall_32+0x32/0x80 [ 1852.096380][ T5219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1852.096394][ T5219] RIP: 0023:0xf701e579 [ 1852.096403][ T5219] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1852.096415][ T5219] RSP: 002b:00000000f540e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1852.096426][ T5219] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001040 [ 1852.096433][ T5219] RDX: 0000000000000001 RSI: 0000000000044810 RDI: 0000000000000000 [ 1852.096439][ T5219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1852.096446][ T5219] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1852.096452][ T5219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1852.096479][ T5219] [ 1852.619951][ T5233] overlayfs: failed to resolve './file1': -2 [ 1853.841944][ T5255] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8744'. [ 1853.846691][ T5255] FAULT_INJECTION: forcing a failure. [ 1853.846691][ T5255] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.853068][ T5255] CPU: 1 UID: 0 PID: 5255 Comm: syz.1.8744 Not tainted syzkaller #0 PREEMPT(full) [ 1853.853091][ T5255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1853.853104][ T5255] Call Trace: [ 1853.853110][ T5255] [ 1853.853119][ T5255] dump_stack_lvl+0x16c/0x1f0 [ 1853.853151][ T5255] should_fail_ex+0x512/0x640 [ 1853.853179][ T5255] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1853.853206][ T5255] should_failslab+0xc2/0x120 [ 1853.853231][ T5255] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1853.853255][ T5255] ? __alloc_skb+0x2b2/0x380 [ 1853.853286][ T5255] __alloc_skb+0x2b2/0x380 [ 1853.853311][ T5255] ? __pfx___alloc_skb+0x10/0x10 [ 1853.853339][ T5255] ? find_held_lock+0x2b/0x80 [ 1853.853364][ T5255] ovs_ct_limit_cmd_reply_start+0x55/0x1f0 [ 1853.853391][ T5255] ovs_ct_limit_cmd_get+0x17f/0xf60 [ 1853.853411][ T5255] ? __pfx___nla_validate_parse+0x10/0x10 [ 1853.853442][ T5255] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 1853.853463][ T5255] ? __nla_parse+0x40/0x60 [ 1853.853486][ T5255] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1853.853507][ T5255] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1853.853534][ T5255] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1853.853557][ T5255] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1853.853578][ T5255] ? genl_get_cmd+0x194/0x580 [ 1853.853614][ T5255] ? __radix_tree_lookup+0x21f/0x2c0 [ 1853.853645][ T5255] genl_rcv_msg+0x55c/0x800 [ 1853.853668][ T5255] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1853.853693][ T5255] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 1853.853725][ T5255] netlink_rcv_skb+0x155/0x420 [ 1853.853753][ T5255] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1853.853775][ T5255] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1853.853813][ T5255] ? netlink_deliver_tap+0x1ae/0xd30 [ 1853.853845][ T5255] genl_rcv+0x28/0x40 [ 1853.853862][ T5255] netlink_unicast+0x5aa/0x870 [ 1853.853894][ T5255] ? __pfx_netlink_unicast+0x10/0x10 [ 1853.853920][ T5255] ? __asan_memset+0x23/0x50 [ 1853.853940][ T5255] ? __build_skb_around+0x278/0x3b0 [ 1853.853963][ T5255] ? is_vmalloc_addr+0x86/0xa0 [ 1853.853990][ T5255] netlink_sendmsg+0x8d1/0xdd0 [ 1853.854023][ T5255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1853.854056][ T5255] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1853.854082][ T5255] ____sys_sendmsg+0xa95/0xc70 [ 1853.854107][ T5255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1853.854125][ T5255] ? get_compat_msghdr+0x11a/0x170 [ 1853.854161][ T5255] ___sys_sendmsg+0x134/0x1d0 [ 1853.854189][ T5255] ? __pfx____sys_sendmsg+0x10/0x10 [ 1853.854228][ T5255] ? find_held_lock+0x2b/0x80 [ 1853.854263][ T5255] __sys_sendmsg+0x16d/0x220 [ 1853.854292][ T5255] ? __pfx___sys_sendmsg+0x10/0x10 [ 1853.854343][ T5255] ? rcu_is_watching+0x12/0xc0 [ 1853.854368][ T5255] __do_fast_syscall_32+0x7c/0x300 [ 1853.854389][ T5255] do_fast_syscall_32+0x32/0x80 [ 1853.854406][ T5255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1853.854431][ T5255] RIP: 0023:0xf701e579 [ 1853.854446][ T5255] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1853.854463][ T5255] RSP: 002b:00000000f540e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1853.854483][ T5255] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1853.854513][ T5255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1853.854525][ T5255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1853.854534][ T5255] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1853.854544][ T5255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1853.854571][ T5255] [ 1854.051080][ T5263] overlayfs: failed to resolve './file1': -2 [ 1854.208991][ T5265] batman_adv: batadv0: Adding interface: dummy0 [ 1854.211880][ T5265] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1854.221695][ T5265] batman_adv: batadv0: Interface activated: dummy0 [ 1854.238083][ T5265] batadv0: mtu less than device minimum [ 1854.240471][ T5265] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1854.245724][ T5265] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1854.249449][ T5265] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1854.253365][ T5265] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1854.257064][ T5265] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1854.260689][ T5265] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1854.265315][ T5265] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1854.269626][ T5265] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1854.273407][ T5265] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1856.068934][ T5292] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8754'. [ 1856.103562][ T5292] input: syz1 as /devices/virtual/input/input221 [ 1857.056904][ T5321] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1857.059567][ T5321] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1857.062889][ T5321] vhci_hcd vhci_hcd.0: Device attached [ 1857.120272][ T5326] FAULT_INJECTION: forcing a failure. [ 1857.120272][ T5326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1857.130625][ T5326] CPU: 3 UID: 0 PID: 5326 Comm: syz.0.8763 Not tainted syzkaller #0 PREEMPT(full) [ 1857.130655][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1857.130667][ T5326] Call Trace: [ 1857.130673][ T5326] [ 1857.130680][ T5326] dump_stack_lvl+0x16c/0x1f0 [ 1857.130717][ T5326] should_fail_ex+0x512/0x640 [ 1857.130748][ T5326] _copy_from_user+0x2e/0xd0 [ 1857.130769][ T5326] memdup_user+0x6b/0xe0 [ 1857.130796][ T5326] strndup_user+0x78/0xe0 [ 1857.130821][ T5326] __ia32_sys_mount+0x137/0x310 [ 1857.130847][ T5326] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1857.130873][ T5326] ? rcu_is_watching+0x12/0xc0 [ 1857.130896][ T5326] __do_fast_syscall_32+0x7c/0x300 [ 1857.130940][ T5326] do_fast_syscall_32+0x32/0x80 [ 1857.130959][ T5326] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1857.130981][ T5326] RIP: 0023:0xf7fe8579 [ 1857.130994][ T5326] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1857.131012][ T5326] RSP: 002b:00000000f54b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 1857.131030][ T5326] RAX: ffffffffffffffda RBX: 0000000080000380 RCX: 0000000080000040 [ 1857.131042][ T5326] RDX: 0000000080000100 RSI: 0000000000000008 RDI: 0000000000000000 [ 1857.131054][ T5326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1857.131064][ T5326] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1857.131075][ T5326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1857.131099][ T5326] [ 1857.191905][ C3] vkms_vblank_simulate: vblank timer overrun [ 1857.319274][T23178] usb 37-1: new high-speed USB device number 17 using vhci_hcd [ 1857.837259][ T5322] vhci_hcd: connection reset by peer [ 1857.844598][T30236] vhci_hcd: stop threads [ 1857.850876][T30236] vhci_hcd: release socket [ 1857.858888][T30236] vhci_hcd: disconnect device [ 1859.233396][ T5375] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8777'. [ 1859.236436][ T5375] net_ratelimit: 10 callbacks suppressed [ 1859.236446][ T5375] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1859.240854][ T5375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1859.347652][ T5378] 9pnet_virtio: no channels available for device syz [ 1859.491505][ T5381] 9pnet_virtio: no channels available for device syz [ 1859.643745][T16839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1859.653155][T16839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1859.661820][T16839] bond0 (unregistering): Released all slaves [ 1859.789393][T16839] bond1 (unregistering): Released all slaves [ 1859.942074][ T5389] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8782'. [ 1860.054413][ T5393] FAULT_INJECTION: forcing a failure. [ 1860.054413][ T5393] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.063577][ T5393] CPU: 0 UID: 0 PID: 5393 Comm: syz.4.8783 Not tainted syzkaller #0 PREEMPT(full) [ 1860.063615][ T5393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1860.063626][ T5393] Call Trace: [ 1860.063632][ T5393] [ 1860.063639][ T5393] dump_stack_lvl+0x16c/0x1f0 [ 1860.063670][ T5393] should_fail_ex+0x512/0x640 [ 1860.063703][ T5393] ? blk_rq_map_user_iov+0x2b2/0x13b0 [ 1860.063723][ T5393] should_failslab+0xc2/0x120 [ 1860.063748][ T5393] __kmalloc_noprof+0xd2/0x510 [ 1860.063775][ T5393] blk_rq_map_user_iov+0x2b2/0x13b0 [ 1860.063806][ T5393] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 1860.063830][ T5393] ? __pfx___might_resched+0x10/0x10 [ 1860.063850][ T5393] ? rcu_is_watching+0x12/0xc0 [ 1860.063869][ T5393] ? trace_contention_end+0xdd/0x130 [ 1860.063891][ T5393] ? find_held_lock+0x2b/0x80 [ 1860.063910][ T5393] ? sg_common_write.constprop.0+0xbf9/0x1c90 [ 1860.063934][ T5393] ? import_ubuf+0x1b6/0x220 [ 1860.063955][ T5393] blk_rq_map_user_io+0x1ff/0x230 [ 1860.063979][ T5393] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 1860.063999][ T5393] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1860.064037][ T5393] sg_common_write.constprop.0+0xd43/0x1c90 [ 1860.064071][ T5393] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 1860.064105][ T5393] sg_write+0x813/0xe10 [ 1860.064130][ T5393] ? __pfx_sg_write+0x10/0x10 [ 1860.064158][ T5393] ? __pfx_aa_file_perm+0x10/0x10 [ 1860.064205][ T5393] ? bpf_lsm_file_permission+0x9/0x10 [ 1860.064231][ T5393] ? security_file_permission+0x71/0x210 [ 1860.064257][ T5393] ? rw_verify_area+0xcf/0x6c0 [ 1860.064286][ T5393] ? __pfx_sg_write+0x10/0x10 [ 1860.064308][ T5393] vfs_write+0x2a0/0x11d0 [ 1860.064336][ T5393] ? __pfx_vfs_write+0x10/0x10 [ 1860.064355][ T5393] ? find_held_lock+0x2b/0x80 [ 1860.064375][ T5393] ? __fget_files+0x204/0x3c0 [ 1860.064400][ T5393] ? __fget_files+0x20e/0x3c0 [ 1860.064418][ T5393] ? handle_mm_fault+0x240/0xd10 [ 1860.064445][ T5393] ksys_write+0x12a/0x250 [ 1860.064465][ T5393] ? __pfx_ksys_write+0x10/0x10 [ 1860.064488][ T5393] ? rcu_is_watching+0x12/0xc0 [ 1860.064509][ T5393] __do_fast_syscall_32+0x7c/0x300 [ 1860.064530][ T5393] do_fast_syscall_32+0x32/0x80 [ 1860.064547][ T5393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1860.064569][ T5393] RIP: 0023:0xf7fb6579 [ 1860.064583][ T5393] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1860.064601][ T5393] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1860.064620][ T5393] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 1860.064632][ T5393] RDX: 0000000000000125 RSI: 0000000000000000 RDI: 0000000000000000 [ 1860.064643][ T5393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1860.064655][ T5393] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1860.064666][ T5393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1860.064688][ T5393] [ 1860.364876][T16839] hsr_slave_0: left promiscuous mode [ 1860.368849][T16839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1860.372317][T16839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1860.376280][T16839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1860.379811][T16839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1860.439438][T16839] veth1_macvtap: left promiscuous mode [ 1860.441932][T16839] veth0_macvtap: left promiscuous mode [ 1860.444784][T16839] veth1_vlan: left promiscuous mode [ 1860.447090][T16839] veth0_vlan: left promiscuous mode [ 1860.949968][T12005] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1861.101079][T12005] usb 6-1: Using ep0 maxpacket: 16 [ 1861.653863][ T2939] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 1861.812894][ T2939] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1861.816401][ T2939] usb 9-1: config 0 has no interface number 0 [ 1861.818935][ T2939] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1861.823664][ T2939] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1861.828293][ T2939] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1861.832009][ T2939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.848108][ T2939] usb 9-1: config 0 descriptor?? [ 1861.851923][ T5415] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1861.866471][ T2939] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1862.049139][ T2939] usb 9-1: USB disconnect, device number 18 [ 1862.158078][T23178] vhci_hcd: vhci_device speed not set [ 1862.266578][ T5415] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1862.271421][ T5415] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1862.301190][ T5415] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1862.304434][ T5415] overlayfs: failed to look up (tracing) for ino (-66) [ 1862.313052][ T5415] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8790'. [ 1863.048427][ T5439] input: syz1 as /devices/virtual/input/input223 [ 1863.065344][ T5438] input: syz1 as /devices/virtual/input/input224 [ 1863.152894][T12005] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1863.157119][T12005] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1863.160561][T12005] usb 6-1: can't read configurations, error -71 [ 1863.204182][ T5443] overlayfs: failed to resolve './file1': -2 [ 1863.701548][ T5433] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8794'. [ 1863.706342][ T5450] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1863.709176][ T5450] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1863.713406][T31683] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1863.714083][ T5450] vhci_hcd vhci_hcd.0: Device attached [ 1863.721404][ T5451] vhci_hcd: cannot find a urb of seqnum 127 max seqnum 1 [ 1863.733878][T30236] vhci_hcd: stop threads [ 1863.735436][T30236] vhci_hcd: release socket [ 1863.736979][T30236] vhci_hcd: disconnect device [ 1864.243351][ T5468] overlayfs: failed to resolve './file1': -2 [ 1864.400941][ T5473] 9pnet_virtio: no channels available for device syz [ 1865.201886][ T5482] FAULT_INJECTION: forcing a failure. [ 1865.201886][ T5482] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.209123][ T5482] CPU: 3 UID: 0 PID: 5482 Comm: syz.8.8811 Not tainted syzkaller #0 PREEMPT(full) [ 1865.209140][ T5482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1865.209147][ T5482] Call Trace: [ 1865.209151][ T5482] [ 1865.209156][ T5482] dump_stack_lvl+0x16c/0x1f0 [ 1865.209178][ T5482] should_fail_ex+0x512/0x640 [ 1865.209198][ T5482] should_failslab+0xc2/0x120 [ 1865.209214][ T5482] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1865.209230][ T5482] ? do_raw_spin_lock+0x12c/0x2b0 [ 1865.209247][ T5482] ? find_held_lock+0x2b/0x80 [ 1865.209258][ T5482] ? async_schedule_node_domain+0x54/0x120 [ 1865.209274][ T5482] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1865.209291][ T5482] async_schedule_node_domain+0x54/0x120 [ 1865.209306][ T5482] dev_cache_fw_image+0x38e/0x490 [ 1865.209322][ T5482] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1865.209339][ T5482] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1865.209355][ T5482] dpm_for_each_dev+0x5d/0xb0 [ 1865.209370][ T5482] fw_pm_notify+0x81/0x150 [ 1865.209383][ T5482] notifier_call_chain+0xb9/0x410 [ 1865.209397][ T5482] ? __pfx_fw_pm_notify+0x10/0x10 [ 1865.209413][ T5482] blocking_notifier_call_chain_robust+0xc8/0x160 [ 1865.209430][ T5482] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 1865.209447][ T5482] ? do_raw_spin_unlock+0x172/0x230 [ 1865.209466][ T5482] pm_notifier_call_chain_robust+0x27/0x60 [ 1865.209484][ T5482] snapshot_open+0x189/0x2b0 [ 1865.209497][ T5482] ? __pfx_snapshot_open+0x10/0x10 [ 1865.209511][ T5482] misc_open+0x35d/0x420 [ 1865.209526][ T5482] ? __pfx_misc_open+0x10/0x10 [ 1865.209539][ T5482] chrdev_open+0x234/0x6a0 [ 1865.209554][ T5482] ? __pfx_apparmor_file_open+0x10/0x10 [ 1865.209567][ T5482] ? __pfx_chrdev_open+0x10/0x10 [ 1865.209583][ T5482] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1865.209608][ T5482] do_dentry_open+0x982/0x1530 [ 1865.209633][ T5482] ? __pfx_chrdev_open+0x10/0x10 [ 1865.209662][ T5482] vfs_open+0x82/0x3f0 [ 1865.209694][ T5482] path_openat+0x1de4/0x2cb0 [ 1865.209715][ T5482] ? __pfx_path_openat+0x10/0x10 [ 1865.209729][ T5482] ? __lock_acquire+0xb97/0x1ce0 [ 1865.209746][ T5482] do_filp_open+0x20b/0x470 [ 1865.209760][ T5482] ? __pfx_do_filp_open+0x10/0x10 [ 1865.209798][ T5482] ? _raw_spin_unlock+0x28/0x50 [ 1865.209813][ T5482] ? alloc_fd+0x471/0x7d0 [ 1865.209831][ T5482] do_sys_openat2+0x11b/0x1d0 [ 1865.209848][ T5482] ? __pfx_do_sys_openat2+0x10/0x10 [ 1865.209867][ T5482] ? __fget_files+0x20e/0x3c0 [ 1865.209878][ T5482] ? handle_mm_fault+0x240/0xd10 [ 1865.209893][ T5482] __ia32_compat_sys_openat+0x16d/0x210 [ 1865.209904][ T5482] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1865.209915][ T5482] ? ksys_write+0x1ac/0x250 [ 1865.209930][ T5482] ? rcu_is_watching+0x12/0xc0 [ 1865.209944][ T5482] __do_fast_syscall_32+0x7c/0x300 [ 1865.209956][ T5482] do_fast_syscall_32+0x32/0x80 [ 1865.209967][ T5482] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1865.209982][ T5482] RIP: 0023:0xf7f11579 [ 1865.209991][ T5482] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1865.210002][ T5482] RSP: 002b:00000000f540655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1865.210013][ T5482] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000680 [ 1865.210020][ T5482] RDX: 0000000000040000 RSI: 0000000000000019 RDI: 0000000000000000 [ 1865.210027][ T5482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1865.210033][ T5482] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1865.210040][ T5482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1865.210055][ T5482] [ 1865.333468][ C3] vkms_vblank_simulate: vblank timer overrun [ 1865.364943][ T5482] [ 1865.366020][ T5482] ============================================ [ 1865.368648][ T5482] WARNING: possible recursive locking detected [ 1865.370569][ T5482] syzkaller #0 Not tainted [ 1865.372045][ T5482] -------------------------------------------- [ 1865.375833][ T5482] syz.8.8811/5482 is trying to acquire lock: [ 1865.377768][ T5482] ffffffff8f51dc28 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x4e/0x640 [ 1865.380475][ T5482] [ 1865.380475][ T5482] but task is already holding lock: [ 1865.382822][ T5482] ffffffff8f51dc28 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 1865.385432][ T5482] [ 1865.385432][ T5482] other info that might help us debug this: [ 1865.388016][ T5482] Possible unsafe locking scenario: [ 1865.388016][ T5482] [ 1865.390366][ T5482] CPU0 [ 1865.391465][ T5482] ---- [ 1865.392535][ T5482] lock(fw_lock); [ 1865.393742][ T5482] lock(fw_lock); [ 1865.394976][ T5482] [ 1865.394976][ T5482] *** DEADLOCK *** [ 1865.394976][ T5482] [ 1865.397532][ T5482] May be due to missing lock nesting notation [ 1865.397532][ T5482] [ 1865.400173][ T5482] 5 locks held by syz.8.8811/5482: [ 1865.401821][ T5482] #0: ffffffff8f3080a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1865.404450][ T5482] #1: ffffffff8e484c88 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 1865.407884][ T5482] #2: ffffffff8e4c50f0 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 1865.411623][ T5482] #3: ffffffff8f51dc28 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 1865.414388][ T5482] #4: ffffffff8f518628 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 1865.417310][ T5482] [ 1865.417310][ T5482] stack backtrace: [ 1865.419180][ T5482] CPU: 3 UID: 0 PID: 5482 Comm: syz.8.8811 Not tainted syzkaller #0 PREEMPT(full) [ 1865.419195][ T5482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1865.419202][ T5482] Call Trace: [ 1865.419207][ T5482] [ 1865.419212][ T5482] dump_stack_lvl+0x116/0x1f0 [ 1865.419232][ T5482] print_deadlock_bug+0x1e9/0x240 [ 1865.419247][ T5482] __lock_acquire+0x1133/0x1ce0 [ 1865.419263][ T5482] ? kasan_save_track+0x14/0x30 [ 1865.419277][ T5482] lock_acquire+0x179/0x350 [ 1865.419291][ T5482] ? assign_fw+0x4e/0x640 [ 1865.419306][ T5482] ? __pfx___might_resched+0x10/0x10 [ 1865.419318][ T5482] ? path_openat+0x1de4/0x2cb0 [ 1865.419330][ T5482] ? do_filp_open+0x20b/0x470 [ 1865.419342][ T5482] ? do_sys_openat2+0x11b/0x1d0 [ 1865.419360][ T5482] ? assign_fw+0x4e/0x640 [ 1865.419373][ T5482] __mutex_lock+0x193/0x1060 [ 1865.419383][ T5482] ? assign_fw+0x4e/0x640 [ 1865.419398][ T5482] ? __pfx___mutex_lock+0x10/0x10 [ 1865.419410][ T5482] ? kasan_quarantine_put+0x10a/0x240 [ 1865.419422][ T5482] ? lockdep_hardirqs_on+0x7c/0x110 [ 1865.419440][ T5482] ? assign_fw+0x4e/0x640 [ 1865.419453][ T5482] assign_fw+0x4e/0x640 [ 1865.419466][ T5482] ? _request_firmware+0x957/0x1470 [ 1865.419487][ T5482] _request_firmware+0x988/0x1470 [ 1865.419504][ T5482] ? __pfx__request_firmware+0x10/0x10 [ 1865.419519][ T5482] ? dump_stack_lvl+0x197/0x1f0 [ 1865.419535][ T5482] ? dump_stack_lvl+0x1a3/0x1f0 [ 1865.419552][ T5482] __async_dev_cache_fw_image+0xb1/0x340 [ 1865.419568][ T5482] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1865.419584][ T5482] ? mark_held_locks+0x49/0x80 [ 1865.419598][ T5482] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1865.419614][ T5482] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1865.419630][ T5482] async_schedule_node_domain+0xd4/0x120 [ 1865.419644][ T5482] dev_cache_fw_image+0x38e/0x490 [ 1865.419659][ T5482] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1865.419681][ T5482] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1865.419704][ T5482] dpm_for_each_dev+0x5d/0xb0 [ 1865.419726][ T5482] fw_pm_notify+0x81/0x150 [ 1865.419748][ T5482] notifier_call_chain+0xb9/0x410 [ 1865.419766][ T5482] ? __pfx_fw_pm_notify+0x10/0x10 [ 1865.419781][ T5482] blocking_notifier_call_chain_robust+0xc8/0x160 [ 1865.419796][ T5482] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 1865.419812][ T5482] ? do_raw_spin_unlock+0x172/0x230 [ 1865.419830][ T5482] pm_notifier_call_chain_robust+0x27/0x60 [ 1865.419846][ T5482] snapshot_open+0x189/0x2b0 [ 1865.419859][ T5482] ? __pfx_snapshot_open+0x10/0x10 [ 1865.419873][ T5482] misc_open+0x35d/0x420 [ 1865.419887][ T5482] ? __pfx_misc_open+0x10/0x10 [ 1865.419900][ T5482] chrdev_open+0x234/0x6a0 [ 1865.419914][ T5482] ? __pfx_apparmor_file_open+0x10/0x10 [ 1865.419926][ T5482] ? __pfx_chrdev_open+0x10/0x10 [ 1865.419941][ T5482] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1865.419955][ T5482] do_dentry_open+0x982/0x1530 [ 1865.419969][ T5482] ? __pfx_chrdev_open+0x10/0x10 [ 1865.419984][ T5482] vfs_open+0x82/0x3f0 [ 1865.420000][ T5482] path_openat+0x1de4/0x2cb0 [ 1865.420015][ T5482] ? __pfx_path_openat+0x10/0x10 [ 1865.420028][ T5482] ? __lock_acquire+0xb97/0x1ce0 [ 1865.420043][ T5482] do_filp_open+0x20b/0x470 [ 1865.420056][ T5482] ? __pfx_do_filp_open+0x10/0x10 [ 1865.420073][ T5482] ? _raw_spin_unlock+0x28/0x50 [ 1865.420088][ T5482] ? alloc_fd+0x471/0x7d0 [ 1865.420101][ T5482] do_sys_openat2+0x11b/0x1d0 [ 1865.420118][ T5482] ? __pfx_do_sys_openat2+0x10/0x10 [ 1865.420135][ T5482] ? __fget_files+0x20e/0x3c0 [ 1865.420146][ T5482] ? handle_mm_fault+0x240/0xd10 [ 1865.420158][ T5482] __ia32_compat_sys_openat+0x16d/0x210 [ 1865.420169][ T5482] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1865.420179][ T5482] ? ksys_write+0x1ac/0x250 [ 1865.420192][ T5482] ? rcu_is_watching+0x12/0xc0 [ 1865.420205][ T5482] __do_fast_syscall_32+0x7c/0x300 [ 1865.420216][ T5482] do_fast_syscall_32+0x32/0x80 [ 1865.420226][ T5482] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1865.420242][ T5482] RIP: 0023:0xf7f11579 [ 1865.420250][ T5482] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1865.420262][ T5482] RSP: 002b:00000000f540655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1865.420273][ T5482] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000680 [ 1865.420280][ T5482] RDX: 0000000000040000 RSI: 0000000000000019 RDI: 0000000000000000 [ 1865.420286][ T5482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1865.420293][ T5482] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1865.420299][ T5482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1865.420309][ T5482] [ 1865.561598][ C3] vkms_vblank_simulate: vblank timer overrun [ 1868.417396][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 08:13:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81af2d73 RDX=ffffffff8e2977c0 RSI=ffffffff81af2d7d RDI=0000000000000007 RBP=0000000000000000 RSP=ffffffff8e207de8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90abad90 R15=0000000000000000 RIP=ffffffff81001530 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056c0599c CR3=0000000013c16000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000003fbc5e4 RBX=0000000000000001 RCX=ffffffff8b91db29 RDX=ffffed1005666656 RSI=ffffffff8c163700 RDI=ffffffff8190cb71 RBP=ffffed1003bdf488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801defa440 R14=ffffffff90abad90 R15=0000000000000000 RIP=ffffffff8b91c66f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080030000 CR3=0000000064584000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000001952a3c RBX=0000000000000002 RCX=ffffffff8b91db29 RDX=ffffed1005686656 RSI=ffffffff8c163700 RDI=ffffffff8190cb71 RBP=ffffed1003bdf910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=ffffffff9b048e40 R12=0000000000000002 R13=ffff88801defc880 R14=ffffffff90abad90 R15=0000000000000000 RIP=ffffffff8b91c66f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000034f01ff8 CR3=0000000013c16000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561ed25 RDI=ffffffff9b103780 RBP=ffffffff9b103740 RSP=ffffc90004a3ece8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9b103740 R15=ffffffff8561ecc0 RIP=ffffffff8561ed4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000034bf4ff8 CR3=00000000714aa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e76ac4d4e369169 31dd7c8498b10418 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0accc135b7303d9e 3ba195ee07c18ad9 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0036f2889df3c585 82092fe9872e687e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a1b5e251377db813 50e6c7753e9f829f ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000073c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000046a 008001000000046a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000046a67fc521e 000000000000046a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000065a2eca4 022149265f85ba34 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 68000a0e0794067e 0080010001a951a8 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5672dc4032228adc 53abb84112649bfe ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 21a70ec446f37ab8 53a977ec91e54b14 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000