last executing test programs: 38m12.548475465s ago: executing program 32 (id=556): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000300)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x4, 0x1, 0x0, 0x3, 0x4a, @broadcast}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "6248bc9c8095fdfb8d639d954a0649542709e9baf27860bd22292b501f2c28d45a71ec3fa8539e7223c278d70126314aca030d71da9dcb99d1d087f250685685db59cf6de9c2a0496da59a4fcf3d9ceb"}, 0xd8) socket$inet_tcp(0x2, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b0009008000", 0x2c}], 0x1) 31m55.457728128s ago: executing program 33 (id=2216): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x45) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x10, 0xffffffffffffffff, 0x1581b000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x2284, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3fc, 0xfc8) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',group_', @ANYRESDEC=0x0]) 19m57.670652145s ago: executing program 2 (id=5581): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getrusage(0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4818}, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x4000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7041f02d061cd41067000700210061610000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) r6 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0xb9) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendmmsg$inet(r7, &(0x7f0000004980), 0x0, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 19m55.98651417s ago: executing program 2 (id=5585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000900"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="1400000010000100000000000000000000e6ff09142300a43faf74cf9010f5a0afd93ae3f18900131c1f81d436cb350e7501df4e4febb7ac54e600918e57800ec49997a7ef19cefc1248b2e9e583c39d977a44fdb589f65f608db050c949b38b6739b3697fff44b2d151a6fb17a1c01ce7498def27943388f88fd26c2c03b728a2a177009af976db27061e"], 0x28}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x0) bind$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x1, @any, 0x5, 0x2}, 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r2, &(0x7f0000000300)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x8, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRES16=r3, @ANYRESDEC=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xff8b) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000003b40)=0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63ecf1187fb3e40a2dd855e6262d", 0x0, 0x100800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = gettid() r8 = syz_open_procfs(r7, &(0x7f0000000040)='timers\x00') exit(0x0) pread64(r8, &(0x7f00000014c0)=""/189, 0xbd, 0x0) r9 = signalfd4(r5, &(0x7f0000000080)={[0xfe, 0x2]}, 0x8, 0x800) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0xa8, 0x80000000, 0xfffffffa, 0x59455247, [0x4, 0x9], [0x5, 0x1000], 0x13a}}) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r10, 0x40045612, &(0x7f0000000240)=0x1) ioctl$TCXONC(r9, 0x540a, 0x3) 19m55.037695654s ago: executing program 2 (id=5593): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x14, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000001d80)=[{{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f0000000540)=""/199, 0xc7}], 0x2, &(0x7f0000000640)=""/124, 0x7c}, 0x3}, {{&(0x7f00000006c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f0000000740)=""/40, 0x28}, {&(0x7f0000000780)=""/77, 0x4d}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/171, 0xab}, {&(0x7f0000001900)=""/211, 0xd3}, {&(0x7f0000001a00)=""/191, 0xbf}], 0x8}, 0x3ff}, {{&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b80)=""/167, 0xa7}, {0xfffffffffffffffe}, {&(0x7f0000001c40)=""/255, 0xff}], 0x3}}], 0x3, 0x2, 0x0) unshare(0x2040400) r5 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) unshare(0x2000400) fsmount(r5, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000003, 0x0, {[0x2, 0x3ff]}}, 0x0, 0x8, &(0x7f0000000080)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 19m54.064703973s ago: executing program 2 (id=5596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f00000004c0)={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0x0, @local, 0x50c}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1042a60df36408dd6106062800000000"], 0x10}}], 0x2, 0x40040c4) read$FUSE(r1, &(0x7f0000001ec0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x2b, 0x2fa28a2e, 0x22103042, 0x7, 0x7ff, 0x34, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0xb9, @loopback}, 0x1c) listen(r5, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000400)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) shmctl$IPC_INFO(0x0, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ptrace$getsig(0x4202, r6, 0x1, &(0x7f0000000500)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$alg(0x26, 0x5, 0x0) 19m53.104566906s ago: executing program 2 (id=5602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) r3 = eventfd(0x7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r3, 0x7, 0x2, r2}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x7, 0x2, r2}) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r6, 0x0, 0x1000, 0x2f, &(0x7f0000000840)="f2f217272b685e063708a6e7ac308e88fcce03e08e4ce4669efb9e1699363f533376735e592af87e10cc1326d0d5eff9ec24db049a1b54ed174d872c32e9a6b2442e4ae80c541d6d109acdc74342be0598e184626442de64fc9bd3989ca5c4195b45b2e1ee0d7dd7c5cf95252d78fdf63b006c8cfacb468ce046810e4d5d50de944ba203468d033f14b695919053959aaa8125b5071f77795abe3ab35fb654825740abd36222356ebc4208cfd1176cc5bf7f07de322b236f00ba816afa1f898ed7d2ef8c9fa9fce86a2446c312d5bc276512e36c34cc27a77f8e7990e48945118791f736db3ab81e599ccc8bf7644c8c5958a08d1bab899544c2011e6290e7fafcfedf1a4e8cdf8127922d106ef127fe725b9d9f50a915845535a85d8b8e774b1f5c063dd20bba9dbaab4d8d5e322d235adf2a33d6af2158e2f1316cebbe8a8df17fd92c2a97044b5854749237730c818f143082afee606c6c1c7e1216a758dbfb35adc4ef82b9f40a79528af56a1f1f94b10ac513ad85e09a1298f29436a1d9a2a066081c332d807af6e182cd2e866b58a37755261950b4654d276e857a6bcaff26b5e9e67acf9ed940b4b2cc74943fd5e7b4a65e62800bbe05c0fb129638be8f8f6932b46d6430d147fafebabddf57c8fae79cc3279245c8bb35fe8dfda602d43c87b21dba8c47e18fe05733170c4e8fc9c68b490201cac9f020cd1fa4ed9efb1430ea49292fb4ecc96490daca9e05aa6a30d97875168a9edc318e344bc59f64b99f231bbaa939445491313fed0dfefee665c1a82727eebcb8524bf0507b5ce53e30a94e6d26d510cbf9380f0ddaf7f83c6d45342fd18a7ba136482e8b1afe74a63b5beb0df5987413032a42a42f54aaff153b11d4e957efa98febc134bd5295080f64f00c2c95adae3869c783308dfd7ea50123702144ce0222146b74e0ca99a28b83a94487604f32156ab1448004ac83891a2cc5dfcb3aacd85157918df08488c8a3b3db3946da532aee74108c74befc1b63fdfaf944775255475c0a9b73a36bfd2e2ac666a7fc5d4cc65222985083faf18fd19434e6061c43400e8799648f3b9d28ae7f71bd0dd2c0f1e58b6aac1d03f262156c982f6e6d345eb0635976d799f7d082755d81afe5a04364f1732bb24825d4f0426229c7bde576ba85ff9590f51c40fc6146818a89434ab03cdcd4b485cb4c54d8026b9711e95bc9f707d6f5d756bcd114b0f91ca8b1a539558a8d5912458c0500924acd1d708eb8baef4eb0b13ce747cb71a3023d36ee1eef581732c03ce61311650f87de1a24285210210dd6aad09928bc7a9842945a8878f66fdfca253a720ab0f37ccd442b11091f7c395a48799ce5b9e9448c37cebb76b022a18f4ddb5139bcd4587346bf2515e92f15250437972a7b743a59d42375e275f4161ac024487a7bccf423ccd241beed977739e3d80aa0330d26bbce10b4a3c66e4b44e1fb8b2f8b2fc2ceced2871d49f93b8635a7d0799d6a76696cee1b8fba2171bf36baf715ba263ce5e32d410af348673afa428e7c8a43b8a815188dc6d48f5e56816642fd2c1071ab5662ee9ddad7e9e46f1575848cef35fca2c42667fcb24126b1cf31e89f4ed64e37e6f1fff5ef46f9366046af39d69f5f4eb07cc6b9ee341572e50f6eb92e5b5589263e994b3d5663698a5339e775da80172a320249095d7b1cdfff6bb2371bcf8bc2e6a3766b161a26104868a2250780f887d0415dca7b4e95594d853da992d477f90279c9462bb1f33de87ecf698291dd0d4255a3e6adba2728a7b86e49765d6d409856ad0f97a29e6968cfdbcbfe098d7e16c1c29a1b0153109de96c6dbaff0c25a142934bf713e795d6c4756683edbc42e2149208f557ea32a1cabd14bccbb1c8f8b7025e8c6eed60815ebcb68489ab364fda5b774259c9ccd7c263915ffce8249f262a64cafb7f30e6b3bb39e2329c3bee584af8dadb4785810eb3fb5d695a52277fded34b38f634448f694e3376929cd8642aa7376ccd26a3a8d8009484d508367b5c4ae451556f4655ef44b79fa039631b6d00c321afbe6355a57f87c4dce02139d93ee1b437edf3b064cfe0cd74c4187030d07d5ba62b10dab37042770fb142c08f0d7bb836dc24bf2940e7c8c395e85b90fb066797074e4d8d57489db6055f5377b0bd588bc0506432078c0bb7f5b88fc68cd9bcdc117319c3589943359f87363dfcf4637aeff657d2b0f9f2cdc89c526535db44ef39cf9399cedac9ace257cb44a72df98f815d1c3ef86d91ef27ab6eab19784d9336dbfc2ab1da515becf43c72d2b02631d46c0ad08a4c2d0c9cc7669576a8acf70a6071e37e08b10424593752867e108218fe1f782964c95775e2e2a14f9281f3ee49ffb5a53317a3d4a6cbac91e132af5ca32eec91a8aa9c62cf0b0abaa166b8986d736561ef0e018ed63ef356e533372542ef45da7b298902481dec1a64928368d693fe3a1d18b465c30e6077c9b3bcedda4ab152d091288b78fcaec423ee9d464bdeed859570ef022e3399e65e6ff2ea4036c368d85fc7e807a85cd52cd9388a2b039b4ed617ce9d982ffadca700cd2479163ecad891ca05e0e500b84a89bcc7753301658570ebd041659990e6cf81d8b79efc1c60b7d7ef37fbb2f2615422373acb66b555dad2877d597e42bb17b7fb06b6c829bb68cf72adb7d68ed30336cfbdd9778b895953aede5bb28c898f41cecfd6d7666cc5f3e639eb3f47dd694324e2bc3335f51592502de4402ebe80e2744d06b5392fdf4df3af0143efeaabfe861f06bf4b8d91ce3c89fa6fd5b620979e4b29ad48938c4af0e72136cd322cb8b833f5eaa244d57cb08227f137535bc6c7f740e132b1afb48ccaeeb598e397da6096b24b45d7a59a5f07d4469316795de49c3b22a52435a9531d9c345c080e2e5540e6b54a2db440e822e1e73e8963c72c3a90d27b1c4adce70dc90078384e2bdeff2c878042e7420dc570f37b708166e1879f73e82e4806d32bd2619ff87dd6d02544f545b916bd3742aeac6f4bec15729b6cd3f2c00cd08b1644e658ff97292a14c90e616cf00756a8ebb3caf14ef32c27908a717d5622f00143908dd178c8106168a5b23019a74bb27d926d416ceaa04021b5a0c6e53d3ebfd8fdb97b51b6bd7178b8908a8acb422f22d4f3151c7f6b91ef900c799a2d95a21f701781ae2af7102fa7b5f998b1a4273aa7b4deb544b7d7ac1f4f6b9c4a5e93247684b9464a10c6ade6154955845b58778096ca92f37d8e8243f4f07308696a128fe7face11cb57019c12b426c4809110f3198f3f33704585c13073b6b789060efc4cd10ccb9dbf39cbef93d0afa0f56e40c92cf43b0628b07f57126b72ba097434166a0ec7b2bf742409591d4a3507c4b9c00fea671706e8accda480ffc5df9f83d8488377407536bba9098faa68ba11208e58ccbca2415294e6f237f6e73ba9a3fd54ad16696028f50fe1682664569ad4765d535180af5e8405690808df466470f4c263a3256ca6d60a7b986dba973d1bb8d1324cbc7339a274f859fd78f906b0a8f74cec3d44097a1a66cd490cf055acfaa7c37cf9cde895147aed7fea906781851e21d927740be11565feed7743d45234059cbb98177ce615f49748335d9b666b42c91912844dcdd185beb09264d9e74607916d5df4044a309ffe16aca1c7de264548f8676630270505f06639b0f8464fa798d4c3dea16c7c9f485d7a8eab0624610754d1b873f656fdacca7a8e4f084b8fc7f363ede21a483f027068d13b21c2ce3d40a8fdbb32da82e56921a6c7de0c3b10b0b2d147b2d7f3e676b831ba8a58dc83aabccfc9d3d7ce3544bb572e25147ebb8e9d08d4112358e83c5236b73accf4332476c4a5a33e1c263f4b8df3d4bbe1d7d63e923f9997174b2384fe7e961b50fa5d6186829b0e65ffb0a664acd1a1f7ea7913cdce7af87088bd4a5081e27d7370d4de62729ac62d2238316823d4c3f109c21a4829aba7fba23cac50408dce86bb592c10cf0c71a0c0d97855318f7b87c135aa021559476bb35353b1d4f169f432897d8c9cba44c950a33de6497cbcdb8a00d013867f93a1504efa5e277cff96f2a89a70c4b7b6d123a3b6f10e41d0b65585e254fc67e6ca0616348c1d37021aa0934a658af4ce6e03830178c554b10102ae862dbfeca690396e7030a213af1907ae6fec9c3745a8a3866c267284b74d1789d36d4f21e64241ef4e308c458f23466e4e112ddd6a41a31d4416ef774ab75c4b2a5f717348bf1beb1feb11cb1d3f59184b754de8a327c1b3de951f0ceee80d9d9fb41b698e465be6ec4f08aa264f0d54d93cc3de5b6097ec13e525f83fd0c4f0833ce77804ce35017f96d8179726952e2ec11f342640685dd4ea6cf95f01d278cd66b24405cb9d39d37e05da86c873ff79b37d2fbf14b4bf44a85dce982d712c576622b03531483a33a568ce9adeb4b275dbf49ce4918ec791ceb05c819c518ac01757d9ac4d19570052587a849ad067093022cdeca47a987a0e74633e9487fe874fafbb93cd85b025c957eb9af9fa6915b655c4f197f6731f6876f2bb47edcb8c115818d68d061e14172c96e5bea1e9424663a51e920dbb7e9d38d7d45716a95b302c751c6db20bef7f37b14688f80449e6924bf52e283d92e6c91e072def0be9932725dc899e79e5982077e87293ca6d6887f337c38b173e1b751c29e2deaa5dad4de637449de922cb1ff2ec73f43ab528e025942b0e818f726a94f96ffcd4c06e5ab74b7164ec5c5280874a595f34ff5002c1a9047c449d7f50a7d1714187cc482e759f47d1ff10c58bdb4108014f8ec900e8dd57697aa356792bc0a3a0cefb9e879c9787ce3b18d25c7fe23df67e9b8f24c9796c2792ac31e1d40146cf7b6a1f8969399ff8cd4a4fffde58711d058a2409f384e370c2966e4514c625facb7c9b36e86541e5f0d146e57688adf0883c50c80eeafa31bd0f2359fd4d3a43843d3fae4a6f24a942489cd43bf175ea610ee525fbe420f1b484b4d4e8b348367e3208d239db2f9c986e34f979380fdb5ff886ca6dce800f0aa0571dd7c400fc6637bc896d3578b3d947ca6004406f502cbc8a8bb828da61e10012436aa949be1f9a279b28e4b0172d6ca13d87d3528748490e56fede0d2542817b5f6f6f58f7fee81ab9900704eb6893a52a76f6dec61ac38f278ad63734e5e535bdcbac05f9848c754205b71359e8107c6e115255d1ce901bd3aedcffe4a22584ccbb80b4b6c3e54ed3299517a5fa10b20c689c7545492fe74e497dee5f3d76a71e970bc99d746bacd53f25cc1ea367fe3cdff27bd76fa771381b7af40977bf82a26712da38b0a09429745c0451310f689ddd971da24db4600d9befeabd2450bd0013cf797372b0bda1b8c869d0167ddca06ee2aeb24c3487ccc4d0d2a2bc01e526b4c025da6770509ea1fbd49e2422cced039566ea3fad9a61a8004334317680a2355b5618ab5ce800a726dae6506138c48af2a24d07062c7391560deea91435bf45b5c35e71db703333877c870bdba2f347e2022264676f0ef153921c298409c25359d48923c811765ece732057b00527aa3ea040aead6c9bd730c694e95a7b1067804e2a913cead21e2040eb40f5a60c1615e0e8b514e70f7d2d115b437a615aded9ddfc12925d5cee904fee7002018360a00c182b3e6c95b3968e47c2fae129fc82934ad20e2e0dcfa2482f21491b0184a50859d340c45da3e18396fe63f13c9f2467990c6c3ec9463ae7b807734f9b5884ed7efd97bab1259c392c6684c2f06694", &(0x7f00000000c0)=""/47, 0x81, 0x0, 0x2, 0xb1, &(0x7f0000000180)="e65b", &(0x7f0000000280)="ae16b7385f889b2c91ae477bca3a3ed9eb287e5be5d1cdaa857dcd4bbc93aa46b8269182e3e5c8178e6b05352178d329207f0fd9664fc0f3a55cdd0daff754902257f7a5dd01b397872762f879b848de685921f1dd446a066b64f4e40d02c2a90145ae53c99e382f55216af46fd1f3fdc0dbd64995808747f3008a9803e4ba089773a093e8b12c45836dbc54167b6e0cded1d0cd781781197aefe8a4d850bd9ff8c0a1b9e73325c535d3a5c0cc2f669991", 0x1, 0x0, 0x6}, 0x4c) ioctl$CDROMMULTISESSION(r6, 0x5310, &(0x7f0000000380)={@lba=0x1, 0x0, 0x3}) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) ioctl$NBD_SET_TIMEOUT(r6, 0xab09, 0x7) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000100)=0xa, 0x4) close(r5) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0xf, 0x9, 0x3, 0x41, 0x3, 0x58, 0x90, 0x5, 0xb, 0x7f}}) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000340)={0x7, 0x6, 0x40}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x1ff, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x2, 0x1, 0x0, 0x5, 0x0, 0x8], 0x0, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19m52.927146192s ago: executing program 2 (id=5603): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c00018008000140e0000002050014002200000000000000020000000500010006000000a9dff548f9851569ca359a1b3f73293b4cff13ebe8cac859bd1b4bf7d8eb5017afd6b42c9a92314825a136bd7ff25a9cabd009f2ffc4eea15eb571a53a5a8cac62e4b4dbca8f59e80fedffc2ed5ebe0bfd1c40aec193f49ad0837a13ee7daa27818ad6db967e1abc220c41bf47190b0e0aac8089d0a99d33f7bb"], 0x6c}}, 0x4000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 19m52.782205438s ago: executing program 34 (id=5603): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c00018008000140e0000002050014002200000000000000020000000500010006000000a9dff548f9851569ca359a1b3f73293b4cff13ebe8cac859bd1b4bf7d8eb5017afd6b42c9a92314825a136bd7ff25a9cabd009f2ffc4eea15eb571a53a5a8cac62e4b4dbca8f59e80fedffc2ed5ebe0bfd1c40aec193f49ad0837a13ee7daa27818ad6db967e1abc220c41bf47190b0e0aac8089d0a99d33f7bb"], 0x6c}}, 0x4000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 18m27.508145286s ago: executing program 0 (id=5950): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x2f02, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffe}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x6e6bc0}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc0}}, 0x4c050) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000080)={0x2, 0x0, [{0xd, 0x0, 0x1, 0xfffffffd, 0x6, 0x3, 0x100}, {0x80000019, 0x9d2, 0x1, 0xfec, 0x400, 0x6, 0x1}]}) setrlimit(0x2, &(0x7f0000000040)={0x81, 0x8}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) 18m26.937526896s ago: executing program 0 (id=5955): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000bb7f1a00c600feff0000a60a9500000020000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) 18m26.845752086s ago: executing program 0 (id=5956): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000300)="8c", 0x37db, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f0000000880)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x90) setresuid(0xee01, 0xee00, 0x0) fanotify_init(0x200, 0x0) close(0x3) 18m26.844046477s ago: executing program 0 (id=5957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f00000004c0)={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0x0, @local, 0x50c}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1042a60df36408dd6106062800000000"], 0x10}}], 0x2, 0x40040c4) read$FUSE(r1, &(0x7f0000001ec0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x2b, 0x2fa28a2e, 0x22103042, 0x7, 0x7ff, 0x34, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0xb9, @loopback}, 0x1c) listen(r5, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000400)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) shmctl$IPC_INFO(0x0, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ptrace$getsig(0x4202, r6, 0x1, &(0x7f0000000500)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$alg(0x26, 0x5, 0x0) 18m25.938932526s ago: executing program 0 (id=5960): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x40, 0x10000, 'syz1\x00', 0x4000041}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000001840)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x71}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mq_open(0x0, 0x1, 0x89, &(0x7f0000000180)={0x2, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000240)=""/52, 0x34}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB='\a']) ioctl$KVM_RUN(r9, 0xae80, 0x0) 18m25.716754506s ago: executing program 0 (id=5963): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7e) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x800) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x8000, 0x10}, 0xc) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d00)=@o_path={&(0x7f0000001cc0)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x402, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x13, 0x18, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x6, 0x1, 0x0, r6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5edd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x4, 0x9, 0x7ff, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001dc0)=[0xffffffffffffffff, r4, r5, 0x1, r6], &(0x7f0000001e00)=[{0x2, 0x1, 0xd}], 0x10, 0xff}, 0x94) openat$dlm_control(0xffffff9c, &(0x7f0000000480), 0x8141, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x5) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8926, 0x0) bind$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) openat$vcs(0xffffff9c, &(0x7f0000000540), 0x20000, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0x1) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x163}, &(0x7f00000000c0), &(0x7f0000000080)) 18m25.505962266s ago: executing program 35 (id=5963): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7e) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x800) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x8000, 0x10}, 0xc) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d00)=@o_path={&(0x7f0000001cc0)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x402, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x13, 0x18, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x6, 0x1, 0x0, r6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5edd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x4, 0x9, 0x7ff, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001dc0)=[0xffffffffffffffff, r4, r5, 0x1, r6], &(0x7f0000001e00)=[{0x2, 0x1, 0xd}], 0x10, 0xff}, 0x94) openat$dlm_control(0xffffff9c, &(0x7f0000000480), 0x8141, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x5) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8926, 0x0) bind$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) openat$vcs(0xffffff9c, &(0x7f0000000540), 0x20000, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0x1) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x163}, &(0x7f00000000c0), &(0x7f0000000080)) 12m13.241514737s ago: executing program 7 (id=7952): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfc00, 0x0, 0x8004}, 0x0) 12m13.16212179s ago: executing program 7 (id=7953): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0xfe, 0x7d, 0x3}) (fail_nth: 3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x11e, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000003c0)=0x1001) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r6, @ANYBLOB="eeeaffff616d250b50c83b2a6a3400", @ANYRES32=0x0], 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2048c2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r8 = dup(r7) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0cc5604, &(0x7f00000005c0)={0x1, @pix={0x0, 0x3, 0x30313953, 0x4, 0x7ff, 0x53ed, 0x3, 0x0, 0x0, 0x7, 0x0, 0x8}}) syz_io_uring_setup(0x691f, &(0x7f0000000300)={0x0, 0x37ad, 0x2000, 0xfffffffb, 0x122}, &(0x7f0000000240), &(0x7f00000001c0)) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x90) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) connect$llc(r9, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r9, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="00080080000000400000000008000000180b8a0042dbc5110000", @ANYRES32], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m13.046289139s ago: executing program 7 (id=7955): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ifreq(r2, 0x8931, &(0x7f00000008c0)={'gretap0\x00', @ifru_ivalue=0x80}) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 12m13.023268455s ago: executing program 7 (id=7957): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x2d, 0x84}, 0x300) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x200100) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000340)={r2, 0x8, {0x0, 0x0, 0x0, 0x8000000000000000, 0x4d, 0x0, 0x4, 0x1e, 0x15, "f09cf731baff26a5d1826bf51cb26fd67f32121baed988ea3623c52316d5a2cbb639cb1ac0099da64f6ee77346c18579262cb9feabcb05f6853e65321adbe793", "81a16cf1f9fa10bf623599f812f0b86f4b7e0b1af280d973d131adf30e237ebca23e3429437281e0d68ad6114893cd4bf47e7cbefcc84794d72b11d24ed03f0d", "6789a0315d3bd8060519b2ef0741c2b885da550b993fac7037f8a024f1ea36d7", [0x6c, 0x2]}}) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000d80)=""/4096) read(r0, &(0x7f0000000080)=""/38, 0x26) socket$nl_rdma(0x10, 0x3, 0x14) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socket$kcm(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) 12m11.479466456s ago: executing program 7 (id=7969): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfffffffffffffff7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}}}, 0x11) 12m11.318379708s ago: executing program 7 (id=7971): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000340)={0x0, "6c4e4706a46a487bcc693f03d74cc0f6"}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1}, {0x3}, @device_a, @device_b, @from_mac=@device_b, {0x8, 0xc}}, 0x0, 0x3, 0x6a, @void}, 0x1e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001780)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x5, 0x9, 0x58, @local, @local, 0x7, 0x7, 0x8, 0x167}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000001cc0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c80)={&(0x7f0000001a00)={0x25c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001940)={&(0x7f00000017c0)=@newqdisc={0x174, 0x24, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xb}, {0xfff2, 0xc}, {0xc, 0xfff2}}, [@TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0xcf, 0x8, 0x0, 0x1, 0x8, 0x4}}, {0xc, 0x2, [0x4, 0xa81c, 0x1, 0x3]}}, {{0x1c, 0x1, {0x3, 0x8, 0xa, 0x7, 0x2, 0x5, 0x9, 0x6}}, {0x10, 0x2, [0xf801, 0x3, 0x6, 0x10, 0x2, 0x2]}}, {{0x1c, 0x1, {0x28, 0x5, 0x9, 0x2, 0x2, 0x9, 0x2, 0x4}}, {0xc, 0x2, [0x2, 0x40, 0xa, 0xb4b]}}, {{0x1c, 0x1, {0x68, 0x3, 0x2, 0xffffffff, 0x0, 0x4, 0x738, 0x3}}, {0xa, 0x2, [0xa8, 0x4, 0x6]}}, {{0x1c, 0x1, {0x9, 0x2, 0xe, 0xfffffffc, 0x0, 0x2e, 0x44d, 0x8}}, {0x14, 0x2, [0x5, 0x4, 0xc, 0x3, 0x4f, 0xe, 0x8, 0x7ff]}}, {{0x1c, 0x1, {0xd8, 0xc0, 0x3, 0x99a, 0x0, 0x8, 0x80c, 0x3}}, {0xa, 0x2, [0x9, 0x8, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff5}, @qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x7}}, @TCA_RATE={0x6, 0x5, {0x6, 0xba}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1d0d}]}, 0x174}, 0x1, 0x0, 0x0, 0x48010}, 0x4028094) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001340)={r1, 0x4, 0x1, [0x8, 0x3, 0x497, 0x5, 0x8], [0x8, 0x10, 0x6, 0x3, 0x0, 0x1, 0xab, 0x5b, 0x1, 0x2, 0x2, 0x7, 0x5, 0x45, 0x6, 0x6, 0x4, 0xa0, 0xfd, 0x22b2, 0x7, 0x0, 0x101, 0xd9b5, 0x5, 0x800, 0x5, 0xffffffffffff11bb, 0x2, 0x44, 0xfc31, 0x6, 0x2, 0x1, 0x6, 0x7, 0x0, 0x7, 0x4, 0x4, 0x5, 0x4, 0x8000000000000000, 0xfe, 0x8000, 0xd, 0x3, 0x2, 0x5, 0x7, 0xd, 0x8, 0xc00000000, 0xc5, 0x8, 0x3, 0x80000000, 0x200, 0xe314, 0xdd, 0x5, 0x0, 0x7fffffffffffffff, 0x9, 0x4, 0x5, 0x8, 0x1, 0x0, 0x6, 0xfffffffffffffffd, 0x4, 0x3, 0xfffffffffffffe01, 0x4, 0x4, 0x0, 0x100000000, 0x9, 0x76890000000000, 0x401, 0x0, 0x7, 0x0, 0x153f, 0x4, 0x3, 0x0, 0x9, 0x9, 0x8, 0x7f, 0x4, 0x0, 0x64f, 0x3, 0x7, 0x3, 0x8001, 0x2, 0x800, 0x6, 0x0, 0x4, 0x2, 0xfffffffffffffe01, 0xe, 0x7, 0x9000000000000000, 0x1, 0x200, 0x6, 0x224, 0xf, 0xc2c1, 0x8000000000000000, 0x3, 0x5, 0x7, 0x7, 0xd]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) r7 = socket$packet(0x11, 0x2, 0x300) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x2c, r8, 0x1, 0x4070bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000002080)={0x158, r8, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf46}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}]}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xbad4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3ff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1695}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140)) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000080), 0x1004023, &(0x7f0000001fc0)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0), 0x1048b, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r11, 0x5411, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1100000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) 12m11.164716839s ago: executing program 36 (id=7971): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000340)={0x0, "6c4e4706a46a487bcc693f03d74cc0f6"}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1}, {0x3}, @device_a, @device_b, @from_mac=@device_b, {0x8, 0xc}}, 0x0, 0x3, 0x6a, @void}, 0x1e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001780)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x5, 0x9, 0x58, @local, @local, 0x7, 0x7, 0x8, 0x167}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000001cc0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c80)={&(0x7f0000001a00)={0x25c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001940)={&(0x7f00000017c0)=@newqdisc={0x174, 0x24, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xb}, {0xfff2, 0xc}, {0xc, 0xfff2}}, [@TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0xcf, 0x8, 0x0, 0x1, 0x8, 0x4}}, {0xc, 0x2, [0x4, 0xa81c, 0x1, 0x3]}}, {{0x1c, 0x1, {0x3, 0x8, 0xa, 0x7, 0x2, 0x5, 0x9, 0x6}}, {0x10, 0x2, [0xf801, 0x3, 0x6, 0x10, 0x2, 0x2]}}, {{0x1c, 0x1, {0x28, 0x5, 0x9, 0x2, 0x2, 0x9, 0x2, 0x4}}, {0xc, 0x2, [0x2, 0x40, 0xa, 0xb4b]}}, {{0x1c, 0x1, {0x68, 0x3, 0x2, 0xffffffff, 0x0, 0x4, 0x738, 0x3}}, {0xa, 0x2, [0xa8, 0x4, 0x6]}}, {{0x1c, 0x1, {0x9, 0x2, 0xe, 0xfffffffc, 0x0, 0x2e, 0x44d, 0x8}}, {0x14, 0x2, [0x5, 0x4, 0xc, 0x3, 0x4f, 0xe, 0x8, 0x7ff]}}, {{0x1c, 0x1, {0xd8, 0xc0, 0x3, 0x99a, 0x0, 0x8, 0x80c, 0x3}}, {0xa, 0x2, [0x9, 0x8, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff5}, @qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x7}}, @TCA_RATE={0x6, 0x5, {0x6, 0xba}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1d0d}]}, 0x174}, 0x1, 0x0, 0x0, 0x48010}, 0x4028094) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001340)={r1, 0x4, 0x1, [0x8, 0x3, 0x497, 0x5, 0x8], [0x8, 0x10, 0x6, 0x3, 0x0, 0x1, 0xab, 0x5b, 0x1, 0x2, 0x2, 0x7, 0x5, 0x45, 0x6, 0x6, 0x4, 0xa0, 0xfd, 0x22b2, 0x7, 0x0, 0x101, 0xd9b5, 0x5, 0x800, 0x5, 0xffffffffffff11bb, 0x2, 0x44, 0xfc31, 0x6, 0x2, 0x1, 0x6, 0x7, 0x0, 0x7, 0x4, 0x4, 0x5, 0x4, 0x8000000000000000, 0xfe, 0x8000, 0xd, 0x3, 0x2, 0x5, 0x7, 0xd, 0x8, 0xc00000000, 0xc5, 0x8, 0x3, 0x80000000, 0x200, 0xe314, 0xdd, 0x5, 0x0, 0x7fffffffffffffff, 0x9, 0x4, 0x5, 0x8, 0x1, 0x0, 0x6, 0xfffffffffffffffd, 0x4, 0x3, 0xfffffffffffffe01, 0x4, 0x4, 0x0, 0x100000000, 0x9, 0x76890000000000, 0x401, 0x0, 0x7, 0x0, 0x153f, 0x4, 0x3, 0x0, 0x9, 0x9, 0x8, 0x7f, 0x4, 0x0, 0x64f, 0x3, 0x7, 0x3, 0x8001, 0x2, 0x800, 0x6, 0x0, 0x4, 0x2, 0xfffffffffffffe01, 0xe, 0x7, 0x9000000000000000, 0x1, 0x200, 0x6, 0x224, 0xf, 0xc2c1, 0x8000000000000000, 0x3, 0x5, 0x7, 0x7, 0xd]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) r7 = socket$packet(0x11, 0x2, 0x300) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x2c, r8, 0x1, 0x4070bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000002080)={0x158, r8, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf46}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}]}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xbad4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3ff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1695}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140)) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000080), 0x1004023, &(0x7f0000001fc0)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0), 0x1048b, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r11, 0x5411, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1100000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) 7m13.298080788s ago: executing program 5 (id=9887): openat$vimc1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000001c0)={0x7, 0x1, 0x2, 0x1e7, 0x1, [0x87, 0x9, 0x0, 0xa6]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r2, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001080)=[0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) ioperm(0x3, 0x5, 0x7) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x201, &(0x7f0000000440)={0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$alg(0x26, 0x5, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x200000000000000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 7m12.727890693s ago: executing program 5 (id=9889): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {0x0, 0x800, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x4000) readv(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004c00)=ANY=[@ANYBLOB="040100001a0007000000020000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a0002007000000014000e"], 0x104}}, 0x0) 7m12.411549156s ago: executing program 5 (id=9893): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x200000, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x7f, 0x221, 0x203, 0xa5, 0x45ae, 0x4, 0xfffffffd, 0xa2f}, 0x20) sendto$inet(r1, &(0x7f0000000100)="ab", 0xfffd, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 7m11.496745009s ago: executing program 5 (id=9895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xb2) getdents(r1, 0x0, 0x0) prctl$PR_GET_NAME(0x25, &(0x7f0000000000)=""/25) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 7m9.969816697s ago: executing program 5 (id=9909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4008000) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 7m9.687646156s ago: executing program 5 (id=9910): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) rt_sigsuspend(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f00000005c0)='cramfs\x00', 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000180)=[0x2, 0x4], 0x0, 0x2, 0x1}}, 0x40) close_range(r4, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r9 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x3, 0x40000) ioctl$HIDIOCGRAWPHYS(r9, 0x80404805, &(0x7f0000000340)) syz_emit_ethernet(0x82, 0x0, 0x0) 7m9.633306181s ago: executing program 37 (id=9910): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) rt_sigsuspend(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f00000005c0)='cramfs\x00', 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000180)=[0x2, 0x4], 0x0, 0x2, 0x1}}, 0x40) close_range(r4, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r9 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x3, 0x40000) ioctl$HIDIOCGRAWPHYS(r9, 0x80404805, &(0x7f0000000340)) syz_emit_ethernet(0x82, 0x0, 0x0) 6m13.459016255s ago: executing program 6 (id=10243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r7, 0x1, 0x3b, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x1, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) 6m11.635995505s ago: executing program 6 (id=10250): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x4075}, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="22000a3ec100"}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYRES16=r1, @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf25090000000500080007000000080001000100000005001276002f0000"], 0x2c}}, 0x64000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x1de) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') 6m11.261960915s ago: executing program 6 (id=10251): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x1, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0x70}, 0x1, 0x7}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x3, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000080)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) open$dir(&(0x7f0000000040)='./file0\x00', 0x2c2000, 0x1a) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000003c0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0xfce3b8bddf23507f, 0x8, 0xc7e, 0x7, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @local, @multicast1, {[@ssrr={0x89, 0x1b, 0xfa, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010102, @remote, @empty, @rand_addr=0x64010100]}, @rr={0x7, 0xf, 0xae, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast]}, @generic={0x82, 0x11, "82b20e14344571ffcb46e4442251a1"}, @timestamp_addr={0x44, 0x44, 0x66, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x800}, {@rand_addr=0x64010102, 0x81}, {@remote, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffc00000}, {@private=0xa010100, 0x5dd}, {@remote}, {@private=0xa010100, 0x1e}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x3}]}, @end, @timestamp_addr={0x44, 0x2c, 0xa9, 0x1, 0x9, [{@remote, 0x7fff}, {@private=0xa010102, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@private=0xa010102, 0x7}, {@remote, 0x7}]}, @generic={0x89, 0x9, "49f4eac3059ffb"}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x10, 0x1}, {0x1, 0xd}, {0x9, 0x3}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x11) 6m10.775245037s ago: executing program 6 (id=10253): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = syz_io_uring_setup(0x31c7, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x2}, &(0x7f00000003c0), &(0x7f00000005c0)) syz_io_uring_setup(0x3c66, &(0x7f0000000240)={0x0, 0x7b46, 0x27, 0x0, 0x0, 0x0, r2}, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x2c, r5, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000900)) read(r9, &(0x7f00000002c0)=""/237, 0xed) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000040)=0x1) preadv2(r9, &(0x7f0000000f80)=[{&(0x7f0000000dc0)=""/147, 0x93}], 0x1, 0x2, 0x4, 0x14) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r10, @ANYBLOB="080003"], 0x44}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6m10.351111148s ago: executing program 6 (id=10257): fsopen(0x0, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[0x0], &(0x7f00000002c0), &(0x7f00000000c0)=[r1], &(0x7f00000002c0), 0x0, 0x300}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$evdev(0x0, 0x672, 0x200) 6m10.316786823s ago: executing program 6 (id=10258): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000056f000/0x2000)=nil, 0x2000, &(0x7f0000000300)='@**$.\x00') connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c8070000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="6402028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040004000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400fd0c000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f646500"/36, @ANYRES32=0x0, @ANYBLOB="0800070000000000080001", @ANYRES32=0x0, @ANYBLOB="7c0002803c00010024000100656e61626c6564000000", @ANYBLOB, @ANYBLOB], 0x7c8}, 0x1, 0x0, 0x0, 0x4004001}, 0x815) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 5m54.94389517s ago: executing program 38 (id=10258): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000056f000/0x2000)=nil, 0x2000, &(0x7f0000000300)='@**$.\x00') connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c8070000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="6402028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040004000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400fd0c000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f646500"/36, @ANYRES32=0x0, @ANYBLOB="0800070000000000080001", @ANYRES32=0x0, @ANYBLOB="7c0002803c00010024000100656e61626c6564000000", @ANYBLOB, @ANYBLOB], 0x7c8}, 0x1, 0x0, 0x0, 0x4004001}, 0x815) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1m31.883919429s ago: executing program 3 (id=11149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x40, &(0x7f0000000400)=""/64, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x1, 0x5, 0xb, 0x5}, {0x3, 0x3, 0x2b, 0x1}, {0x2, 0x1, 0x9, 0xa}], 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0, r7, 0x0, 0x7}, 0x18) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)={0x430, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x3e4, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x34c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x10}, @WGPEER_A_ALLOWEDIPS={0x31c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x430}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 1m30.636194214s ago: executing program 3 (id=11152): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(r1, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0xfffffffd}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x8d2, &(0x7f0000000a00)={0x0, 0x4f41, 0x2000, 0xfffffeff, 0x10b3}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x30, 0x0, r2, &(0x7f00000001c0)={0xb2800, 0x104, 0x10}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x12345}) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 1m30.412635732s ago: executing program 3 (id=11155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000001ff0)={0x1d, r7}, 0x10) r8 = inotify_init1(0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x4db8, 0x2c, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x8650c61cfe1b4c6f, 0xa}, {0xfff2, 0xd}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0xf}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x98}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x9}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xf}, @TCA_CHAIN={0x8, 0xb, 0x8fb4}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'virt_wifi0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}, @filter_kind_options=@f_u32={{0x8}, {0x4ec, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x81, 0xfffffff7}}, @TCA_U32_MARK={0x10, 0xa, {0x1c00000, 0x9}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x31}, @TCA_U32_INDEV={0x14, 0x8, 'pim6reg1\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0x7, 0xa}}, @TCA_U32_SEL={0x4a4, 0x5, {0x9, 0x40, 0xf, 0x2, 0x6, 0x1, 0x0, 0x6, [{0x0, 0x8001, 0x670, 0x800}, {0x24000, 0xc, 0x39e7ab5e, 0x8001}, {0x5, 0x6, 0xf6, 0x401}, {0x9, 0x7, 0xfffffffa, 0x5}, {0x2, 0x8, 0x8, 0x7}, {0x7, 0xc36, 0x9, 0x1}, {0x6, 0x6, 0x5, 0xd609}, {0x9, 0xfffffffe, 0x82, 0x13}, {0x7, 0x4, 0x7, 0x8da4}, {0x5, 0x4, 0x7b5, 0x3}, {0x66, 0x2, 0x3, 0x3}, {0x3, 0x0, 0x3, 0xe}, {0x3, 0x3, 0x4405, 0xffff}, {0x3, 0x2c12, 0x3, 0x1}, {0x6, 0x0, 0x6, 0x7fffffff}, {0x7, 0x9f8, 0x8, 0x1000}, {0x16, 0xfffffffa, 0x588}, {0x2, 0x400d, 0x800, 0x25a}, {0x401, 0x3, 0x9, 0x80000000}, {0xfffffffd, 0x8, 0x2, 0x7}, {0xe, 0x9, 0xccd, 0x1}, {0x800, 0x4, 0x80, 0xe}, {0xcb9, 0xdf3, 0x6, 0xa725}, {0x2, 0xb, 0x9, 0x5}, {0xfffffc9c, 0x80, 0x0, 0x8bb}, {0x7, 0x7f, 0x9, 0x1}, {0x4, 0x0, 0x4, 0xffffffd6}, {0xfffffffb, 0x9, 0x2, 0x5}, {0x8, 0xffff, 0x200, 0x5}, {0x9, 0x8001, 0x9, 0xc85}, {0x1, 0x5d, 0x8, 0x95}, {0x80000001, 0x8, 0x6, 0xff}, {0x4000, 0x81, 0xab, 0xd}, {0x7, 0x5, 0x8, 0x4182}, {0x9, 0x4, 0x9, 0xfffffffc}, {0xb, 0xfffffffb, 0xff, 0xff}, {0x8, 0x6422, 0x9, 0x4}, {0x3, 0x10000, 0x0, 0x9}, {0x0, 0x2db, 0x165e, 0x5}, {0x9, 0x3, 0x0, 0x7}, {0x9, 0x7f, 0x3d8a, 0x9}, {0x8, 0xd4, 0x3, 0x8}, {0x40, 0x6, 0x9, 0x92f}, {0x7fffffff, 0x6, 0x8, 0x2}, {0x1, 0x6, 0x7, 0x1}, {0x5, 0x0, 0x7, 0xff}, {0x7ff, 0x5, 0xfff, 0xc}, {0x8, 0x6, 0x4, 0x1}, {0x3, 0x401, 0x10001, 0x80}, {0x2, 0x6, 0x6e3, 0x628}, {0x30, 0x1, 0xa4, 0x1}, {0x2, 0x9, 0x83d, 0x3}, {0xcf, 0x0, 0x49, 0x7}, {0xffff8a9f, 0x7, 0xff, 0x5}, {0x80000000, 0x8, 0x7, 0x9}, {0x2eb9, 0x80000001, 0xaf}, {0x6, 0xfffffff8, 0x8, 0x5}, {0x7f, 0x8, 0x200, 0x7}, {0x80, 0xad, 0x1, 0x6}, {0x5, 0x9, 0x2, 0x2}, {0xffffff7f, 0x7f, 0x7c400000, 0xc395}, {0x8, 0x8, 0x2, 0x7}, {0x6, 0x40, 0x10000, 0x1}, {0x3, 0x9, 0x9, 0x9}, {0x8001, 0x8, 0xfffffffe, 0x2}, {0x1, 0x2, 0x80000000, 0x4}, {0x7, 0x2, 0x7, 0x800}, {0x9, 0x200, 0x9, 0x4}, {0x45, 0x0, 0x7, 0x9}, {0x0, 0xff27, 0x6, 0x9}, {0x9, 0x0, 0x3, 0x2a2}, {0x9, 0x96e, 0x6d, 0xa}, {0x400000, 0x3ff, 0x3, 0x2}]}}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38a8, 0x2, [@TCA_CGROUP_POLICE={0xc34, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x1000, 0xff, 0xffff, 0x80000001, 0x335, 0x9, 0x40, 0x400, 0x9, 0x3, 0x3, 0x1, 0x2, 0x2, 0x8, 0x2, 0xffffffff, 0x10, 0x5, 0x7, 0x89, 0x8, 0x4, 0xdfbc, 0x0, 0x8, 0x25, 0x7, 0x80000000, 0x9, 0x101, 0x227, 0x5, 0x7, 0x4, 0x5, 0xcfd, 0x8000, 0x7ff, 0x3ff, 0x1, 0xe78, 0xa269, 0xfffffffc, 0xa, 0x3, 0x3, 0x1, 0x6, 0x6, 0xfffffffa, 0x8, 0x2, 0xfffffff4, 0x1, 0x5, 0x8f87, 0x7ff, 0xa8, 0x7ecd, 0x0, 0x2800, 0x84, 0x101, 0x8, 0x5, 0x5, 0x0, 0x876, 0x4, 0x3, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7fffffff, 0x6, 0x0, 0xf2e, 0xffff, 0x1, 0xd, 0x40000000, 0x7fff, 0xa, 0x1, 0xe0a8, 0x6, 0x6, 0x800, 0x197, 0x2, 0xcb0, 0x9, 0xc6a, 0xffffffff, 0x6, 0x8, 0x8, 0x132, 0x1, 0x800, 0x4, 0x0, 0x931b, 0x3ff, 0x100, 0x8, 0x9af5, 0x6, 0x4d0f, 0x6, 0xd, 0xdeb, 0x4, 0x200, 0x49, 0x5, 0xf3a3, 0x7fffffff, 0x1a47ba1, 0x5, 0xfff, 0x6, 0x6, 0x7, 0xfffffffc, 0x8, 0x9, 0x7, 0x9, 0x7ff, 0xfffffe01, 0x6, 0x6, 0x2, 0x2, 0x10000, 0x0, 0x9, 0x4, 0x1d2c, 0x6, 0x8, 0x6, 0x5, 0x3, 0x5, 0x73, 0x8, 0x400, 0x9, 0x4, 0x7ff, 0x4, 0x1, 0x4ea, 0x10000, 0x3a88c839, 0x1, 0x7, 0x800, 0x9, 0x8, 0x4, 0x6, 0x8, 0x3, 0xffffffff, 0x0, 0x8, 0x2, 0x5, 0x48c898c7, 0x10, 0x6, 0x5, 0x627f, 0xfffffbff, 0x4, 0xebe2, 0x4, 0x7, 0x6, 0xfffeffff, 0x3, 0xa, 0x9, 0x24, 0x8e0, 0x4, 0x40, 0x0, 0x3e7, 0x6, 0x6, 0x6, 0x3ff, 0xfb5, 0x2, 0x0, 0x1, 0x5, 0x9, 0xc7, 0x9, 0x1, 0x7, 0x100, 0xeadf, 0x200, 0x6, 0x8, 0x8, 0x5, 0x2, 0x8, 0x0, 0x200, 0x4, 0x8, 0x1, 0xb4b, 0x80000001, 0xb47, 0x10000, 0x8a, 0x43, 0x1, 0x80000001, 0xff, 0x8, 0x3, 0x9c84, 0x2, 0x3, 0x4, 0x3, 0xe11d, 0x1, 0x4, 0x5, 0x6, 0x6, 0x7, 0x8, 0x9, 0x56, 0xfffffffe, 0xb, 0x0, 0xa, 0xa4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5f1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xfffffffd, 0x9, 0x2, 0x0, 0x8, 0xc, 0x7, 0x6, 0x3, 0xc32c, 0x99, 0x0, 0xfffffe53, 0x3, 0x3, 0x9015, 0x5d5ac756, 0x8, 0x1, 0x927, 0x26c, 0x8, 0xffffff81, 0x6, 0xfbf, 0x2, 0x7fffffff, 0xa387, 0x4, 0x9, 0x4, 0xa8, 0x7fff, 0xb781, 0x40000, 0x5, 0x200, 0x9, 0x9, 0x0, 0x3, 0x3, 0x0, 0x5, 0x40, 0x9, 0x7ff, 0x4, 0x5, 0x7, 0x1fe13455, 0x3, 0x100, 0x81, 0x0, 0x7, 0x7fffffff, 0xffffffff, 0x0, 0x80000001, 0x5, 0xfffffff7, 0x0, 0x3, 0xffff, 0x828, 0x4, 0x1, 0xb, 0x7, 0x9, 0xf3, 0x1, 0x244, 0x1, 0x615, 0x3ff, 0x8, 0x8000, 0x4, 0x9, 0x8, 0x4, 0x10001, 0x3b169f7f, 0xfd3, 0x80, 0x2, 0x3, 0x93b, 0x6, 0x10000, 0x3ff, 0xfffffffc, 0x40, 0x800, 0x7fffffff, 0x2, 0x2, 0xf7, 0x2, 0x10001, 0xb, 0xb5, 0xfffffff7, 0xfffffffc, 0x4, 0x3, 0x3, 0x7, 0x3, 0x2, 0x7, 0x10000, 0x9, 0x2, 0x8, 0x7, 0xee8, 0x3840, 0x3, 0xf, 0x4, 0x4, 0x8, 0xe, 0x7c0, 0x7, 0x9, 0x7, 0x9, 0x0, 0x2b9380, 0x3, 0x8, 0x1, 0x1, 0x800, 0x9, 0x5, 0x100, 0xa0b, 0x40, 0x5, 0x8, 0x10, 0xd3fbadf0, 0x5, 0x5, 0x3, 0x4, 0x2, 0x1, 0x8, 0x2, 0x27, 0x43, 0x6, 0xfffffffb, 0xecf, 0x7dc, 0x1, 0x8, 0x7, 0x3, 0x1587caa1, 0x4, 0x387, 0x3, 0x7, 0x8, 0x2e2, 0x6, 0x3ff, 0x3, 0xc, 0x3, 0x7, 0xc3, 0x2, 0x400, 0x9, 0x5, 0x0, 0x5, 0x401, 0x0, 0x9344, 0x6, 0x3, 0x9, 0x3, 0x9, 0x7fff, 0x7, 0xe, 0x4, 0x8001, 0x6, 0x3ff, 0x1, 0xfffffffb, 0x6, 0xd13b, 0x1, 0xa1, 0x3, 0x2f6, 0x3, 0x2, 0x7, 0x3b4, 0x81, 0x6, 0x0, 0x2, 0x8, 0xaa, 0x1ff, 0x74, 0x97, 0x200, 0x4, 0x800, 0x9, 0x2, 0x5ab, 0x8, 0x6, 0x8, 0x20, 0x400, 0x200, 0xa9, 0xe5a5, 0x1, 0x2, 0x90, 0x0, 0xfffffffe, 0x20002, 0x5, 0x2, 0xba3, 0x7, 0x3, 0x7, 0x8000, 0x5, 0x3, 0x5, 0x80, 0x200, 0x3, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0x4, 0x0, 0x4, 0x0, 0xffff96d0, 0xc7, 0xffff, 0x6, 0x3, 0x7f, 0x7, 0x675, 0xffff8000, 0x4, 0x3, 0x7fff, 0x9, 0x2, 0x10, 0x6, 0xfc3, 0xfffffffa, 0x5, 0x2, 0x2, 0x0, 0x2, 0x9, 0x401, 0xe923, 0x0, 0x8, 0x1, 0x7, 0x3, 0x7fffffff, 0x4, 0xffff, 0x401, 0x7ff, 0x7, 0x5, 0x7, 0x2, 0x3, 0x6, 0xfff, 0x1, 0x1b0, 0x9, 0x5, 0xbd98, 0xc0000000, 0x8, 0x4, 0x7, 0x3, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x8c, 0x80000000, 0x0, 0x2, 0xfad, 0x100, 0x4, 0x101, 0x7fffffff, 0xdecf, 0x0, 0x6, 0x5, 0xeedd, 0x5, 0x5, 0x1, 0x3, 0x400, 0x0, 0xd521, 0xffff, 0x0, 0x8, 0x0, 0x200, 0xf, 0xffffffc0, 0x0, 0x967, 0x7, 0xfffffffd, 0x2, 0x6, 0x2680000, 0x4, 0x800, 0xe, 0x0, 0x1, 0xfff, 0xf9, 0xfffffffc, 0x4, 0x81, 0x3, 0x85c8, 0xae, 0x7, 0x101, 0x7, 0x1, 0x81e, 0x5, 0x9, 0x3, 0xffffffc0, 0xd, 0x3, 0x2, 0x0, 0x1, 0x3, 0xf, 0x800, 0x99, 0x8c7, 0x4d, 0x1, 0x2, 0x6, 0x3, 0x5, 0x0, 0x8, 0x1, 0x1, 0x17440000, 0x6, 0xfffff800, 0x3, 0x6, 0xb7c, 0xffffffff, 0x8, 0xc00000, 0x0, 0x6, 0x100, 0x9, 0x9, 0x7, 0x4, 0x8, 0xffff, 0x5, 0x7fff, 0x0, 0x63, 0x10000, 0x4682, 0x0, 0x9, 0x2, 0x5, 0x0, 0x9, 0xd1, 0x9, 0x200, 0x4, 0x1, 0x3, 0x0, 0x8, 0x2, 0x9, 0x81, 0xfffffc01, 0x3, 0x7, 0x80000001, 0x0, 0x80000000, 0x8, 0x10, 0x1fe, 0xfffffffe, 0x5, 0x5, 0x1, 0x3, 0x86f, 0x5, 0x7, 0x2, 0x6, 0x3ff, 0x0, 0x0, 0x3, 0x1, 0x11, 0x10001, 0x1, 0x4, 0x3, 0x1, 0x8000, 0x10000, 0x1, 0x80000000, 0xfffffff1, 0xc875, 0x78a, 0x5, 0x7, 0x19eb, 0x9, 0x0, 0x3, 0x7, 0x1, 0x8, 0xfb, 0x2, 0x7, 0xa1, 0xffc0000, 0x6, 0x0, 0x2, 0x2, 0x5, 0x2, 0x7, 0x4, 0x5d531ba6, 0x80000001, 0x800, 0xff, 0x8, 0x800, 0x1, 0x5, 0x2, 0x10001, 0xd3c0, 0x4, 0x5, 0xc, 0xbe7, 0x17b]}]}, @TCA_CGROUP_EMATCHES={0x2b0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0xd, 0x2, 0x4}, {0x4}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x200}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}]}}]}, @TCA_EMATCH_TREE_LIST={0x25c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1ce9, 0x7, 0x5}, {{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x90, 0x3, 0x0, 0x0, {{0x100, 0x0, 0x101}, "7840446d7c0dadc276dff1e3525acc566cb92c131ed3ddd63098750c3bf0c82bd3d344409ae03ce35ac0735259a07e254073ecddee2f0298756905a1b3339bad981ae22563089928adfbdb9adab87b635412f5ab1f40049eb5a739f42433674604b79685b7295ea374d24849769d6276779fbe04fca300cd03a430b01ae92ba76344"}}, @TCF_EM_IPT={0xdc, 0x2, 0x0, 0x0, {{0x7fff, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0xcd, 0x5, "684dfff7c1d87fb974da07b20aba816c13546eb0f4a9d33b893c96b161105690ea405699fffe1e95b3a050ff9a21a3b6605a92a18f17a0be956e02d81a2e57b84f0270d8d26181397419e9d84ee8a61e4e3d60324b179bc61f37da69bd785df7c594ba23d67820eb8dfef5aac7358a9cf810e2f06d6ad359b676f92e31fda7b0821e89ac288c9e47a135f8d56b7c5c552bab691a3e7474e2d212c2b262ffb9574d536cacf69041933660ed468e2bec1602cc0930a9bcb9562fe873e6cd90dbb9ed2a215cad51a6fbd5"}]}}, @TCF_EM_IPT={0xd8, 0xe, 0x0, 0x0, {{0x0, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_DATA={0xcc, 0x5, "e70a3519edc4f37728657f234175d48196140f2ab242c09460b2cdb947aca5a94cb2aae2499dc215d5977f6896339862056bf6c7bc4210996b005a4597344692e3e32aa112e4f19764ba3cb213735d03d10ccaca22d2b701ee74d6490724051c511106c4ea90b2aecad5a2f1242295edef0cb1735b7d743657a8ac59c3b098ab59a2873fefe8c97aadcad80b031e13338420a71efb4010ec25fee8c43a0da88bde00caf7e1741d72b555c1a3075d25571b4dcb63c5e005e24863a99c8a93294a17d5f97654638de7"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa8b1}}]}, @TCA_CGROUP_EMATCHES={0x20c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_LIST={0x1e8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7fff, 0x3, 0x8000}, {0x464, 0x0, 0x564c, 0x5}}}, @TCF_EM_IPT={0xf8, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_DATA={0xe3, 0x5, "cea1e0e895c715d526ddbad7a1e21a37aaa1234eb9528887f915d9128b5a7becf6ac16857c1718d59ab2fda14e62c913647d16fee04aab175d4d6d83d435963839a0ff3f5a65ee20720b013ca8e72471a6b81de4c74c8090895451ad66214d03a3110fccd5c1b7c59a7568de5ecc3437a3b1ae87233185c3dbe8a22ff06a4eb06233cdc084ac2ec8e159d76edce849f29e9d591838d45e347af119857cb374bdda271d50f3f1ea26edad795161ac0807c9af330949dd50ddfb418285f1ae9eb0c0a4d85b9b9e02615c519f556e0415b23ff347724f5e49d34a5c7aa8641e4c"}]}}, @TCF_EM_NBYTE={0x18, 0x6, 0x0, 0x0, {{0x3, 0x2, 0xfffa}, {0x5, 0x8, 0x0, "3a9c45659102d693"}}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x7, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x7, 0x2}, {0x401, 0x2, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="a414a1a034e668040e", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x7}, {{}, {0x3, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x5}, {0xff5a, 0x5, 0x1, "518656a3b2"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x7, 0x2, 0xdea6}, {0x1000, 0x6, 0x2, "ed5c90b7c729"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfff8, 0x7, 0x16}, {{0x3, 0x1, 0x1, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}]}, @TCA_CGROUP_ACT={0x3e4, 0x1, [@m_vlan={0x170, 0xa, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x8, 0x8, 0xe, 0x8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x11a}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xb374, 0x923, 0x8, 0x0, 0xb1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xea, 0x6, "dd3371372b6ce95eb258bd826fc9b7ab2d65bd2e9b93d069d65164c16e831823a5f201632f2b2ac1da6ed749f3707595909d91c399f52123cdd99ab02c3012556c30eccca647051212284d89b3598ae7d27b91ccbff4750de456174abf372e6b4ffea4ddadd24acaa40502af902896b0b6885ff5d02d3578eec36c53416db2c6b565f80b0decf79d1b49793c435e10a424b6f8ef565846ef2a781855451b5305f15d3e3c4ba40b1c73524a77357524fdb44143eb5942e777a88684f4affe5d6368fb9a22a054595eb698dff5b5cfb19918f9727a136dd4b70c6289b57098d49103d171f18bf0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x14c, 0xf, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x719, 0xffffffffffffffff, 0x8, 0x7}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x1, 0x1, 0x0, 0x4}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x9, 0x0, 0xfffffff4, 0xfff}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xf, 0x0, 0x3, 0xb5}, 0x71}}]}, {0xb0, 0x6, "dc65bb56a6b9df9cc9b075e8a10b776097218ba973543aaa07e2c5fbb80321590a99f6c9043310ca4f1b71b7fe304bd3f2fb45d1b65a268d15880a7bcf7c386fa5bf2f16ab5d9a2703f70340af0a0aaad45ba2651210dc3380a3949cabd0decf156e1c309817ec32d56c378cb0526ad8cf1cc2ce83696f2e88fcd7c2eaf05c25466a40c08c3020b71f5eb6dd6cb0077641bf347c9ed57cabb176a498f55db41b90b6ac7cd3d419abdb5ce470"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x124, 0x7, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1e2, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26af, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x0, 0x1, 0x5, 0xfff}}]}, {0xc6, 0x6, "9004806ac20b1d42700d45bf0efab937313a3e036a25d47e5ecf38486cf078ee2cf454417cfbae15c747aeecdc4785013134e4d7880513c646bef5a02548154a963e67d2af51a7c43785b5a2c3393820c7a0f5493cfd5e31dc52cdca76fcc8f548222f27cef8a178bc0f4a15730a5e0269eb62d7f4ca4708511be45511eaf51877903fb4ee39a5c6bd91ca51fd9d5bdd02c1cbbbba228fbd77cf9fe7eddec658a4663bca36391c0104f4da84c163001e5f43dbc45d887c88196878582d729cc30bdd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0xd4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfc}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x4}, {0x632, 0xa, 0x5e, 0x7}}}, @TCF_EM_IPT={0x7c, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x52, 0x5, "a8d21cc4c6756c03f00c6978271124cced4b62df32d9a375d45f745c26503edea5fd880da7d39a5d766d4b7d6cfd1ccb85af1def07591274e27f604eba6dcbe4dada83b5ac1748d528b8902b180e"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x3}, {0x1, 0x3, 0x7}}}]}]}, @TCA_CGROUP_ACT={0x22e4, 0x1, [@m_bpf={0x88, 0x5, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x6d8b, 0x3, 0x4, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x11d4e0, 0x5, 0xffffffffffffffff, 0xd, 0x80000001}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0xe4, 0xf, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_TYPE={0x6, 0x5, 0x5b7d}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x400}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xc000000, 0x5, 0xffffffffffffffff, 0x1, 0x1}}}]}, {0x64, 0x6, "ec35f44685c0e222fe54fca6cd18fe4516763671ea1270213037c612b5390dee46e083b8451e46532cdf0e5c1b3d929e02717696067aab50840da6803ca98e941c561d7653b0ed97c98e8aaa0075349137cf2cb8594034016cf46d932cf75b0d"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x2174, 0x1f, 0x0, 0x0, {{0xb}, {0x2118, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x40, 0xbeff, 0x3, 0xb2f, 0x2, 0xf4c, 0x6, 0x9ad2, 0x0, 0xd, 0x2, 0x8, 0x2, 0x5, 0x1ff, 0x1, 0x3, 0x8, 0x80000000, 0x10, 0xca, 0x0, 0x3, 0x1, 0x9, 0x7fffffff, 0xfffffffa, 0x1, 0x5, 0x2, 0x1, 0x9, 0x6, 0x5, 0x7, 0xfffffe00, 0x1, 0x8c, 0x4c4, 0x5163cc9c, 0x8, 0x2, 0x1, 0x4f, 0x6, 0x6, 0x6, 0x5d, 0x8e6, 0x2, 0x5, 0xf36, 0x8, 0x1, 0x2, 0x1, 0x6, 0xa0000, 0xffffffff, 0xb66, 0x7, 0xfffffffb, 0x0, 0xde68, 0xb76, 0xffffffff, 0x3, 0x101, 0x8, 0xc154, 0x8, 0x5, 0xd, 0x7322, 0x1000, 0x5, 0x5, 0x6, 0x48, 0x7, 0x7f6e, 0x4, 0x5, 0x80, 0xab, 0x1, 0xffffffff, 0x400, 0x7, 0x6, 0x5, 0xfff, 0x4, 0x5, 0x2b, 0x7, 0x38e, 0x95c3, 0x2, 0x2, 0x1ff, 0x4, 0x6, 0x5, 0x5, 0x2, 0xd, 0x7, 0x7, 0x0, 0xfffffffb, 0xfa, 0x9, 0x2, 0x6, 0x3, 0x1, 0x4, 0x2, 0xd, 0x4, 0x1, 0xe, 0x4, 0x1, 0x6, 0x800, 0x7fff, 0x401, 0x8, 0x4, 0x1, 0x6, 0x1, 0x4, 0xd, 0x6, 0x2, 0x8, 0xa, 0x3, 0x0, 0x8, 0x4, 0x7, 0x2, 0x3, 0x5, 0x8, 0xf935, 0xfffffffb, 0x6, 0x1, 0x1, 0x9, 0x4, 0x4, 0x8, 0x0, 0xff, 0x4, 0x4, 0x7, 0xe, 0x6, 0xc, 0x1, 0xa, 0xfffffffd, 0x39bb, 0x966a, 0x1, 0x8, 0x2, 0x10, 0x9, 0x9, 0x8, 0x2, 0x1, 0x0, 0x8, 0x2, 0x7, 0x7, 0x7f, 0x1, 0x6, 0xe50, 0x8000, 0x4, 0x7, 0x3, 0x3, 0x1, 0x2, 0xffffffff, 0x6, 0x1, 0x2, 0x5, 0x8001, 0x5, 0x1, 0x3a, 0x200, 0x9, 0xfffffffc, 0x7, 0x8, 0x9, 0xd401, 0x1, 0x4cf, 0x1, 0x0, 0x2, 0xeaa7, 0x2325, 0x0, 0xa, 0x6, 0xffff, 0x4, 0x9, 0x3, 0x1, 0xfff, 0x9, 0x101, 0x9, 0x2, 0x2, 0x1ff, 0x0, 0x5, 0x4, 0x6, 0x6e, 0x5, 0xffffff57, 0xe39, 0x1, 0x10001, 0x4, 0x0, 0x6, 0x1, 0x6, 0xfffffff8, 0x2, 0x5e, 0x5, 0xfffffe01]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffe01}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7ff, 0x10000, 0x3, 0x9, 0x5, 0xaff, 0x7, 0x9, 0x9, 0x8001, 0x2, 0x7, 0xce, 0x7, 0xffffffff, 0xffffffff, 0x80000000, 0x8000000, 0x1200000, 0x8, 0x7b2, 0x4, 0x6, 0x8, 0xb, 0x6, 0x80, 0xd, 0x3, 0x10001, 0x0, 0x8, 0x6, 0x5, 0x81, 0x6, 0x6, 0x9, 0x3c9, 0xca5, 0xffffffff, 0xfffffc00, 0x8001, 0x2, 0x6, 0x0, 0x0, 0x8, 0x6, 0x0, 0x5a1df1a2, 0x5, 0x4e8e, 0x0, 0x2, 0x5, 0xab, 0x1, 0x40000000, 0xfc, 0x6, 0x80000001, 0x2, 0xffffffff, 0x81, 0x6, 0x0, 0x1, 0x80000001, 0x4, 0x80, 0x7f, 0x40, 0x4, 0x0, 0x4, 0x5, 0xe32, 0x8, 0xc, 0x8, 0x4827, 0x1, 0x21, 0xfffffffd, 0x9, 0x10001, 0x1ff, 0xdb, 0x8, 0x7, 0xffff, 0xb05d, 0x642, 0x5, 0x9, 0xfffffff8, 0x5, 0x3, 0x3, 0x5, 0x1, 0x1ff, 0x4, 0x8000, 0x9, 0x5, 0x7, 0xe694, 0x1, 0xc372, 0x27b0, 0x3, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x5, 0x9, 0x401, 0x3, 0x800, 0x800, 0x1, 0x7, 0x3, 0xd, 0x6, 0x9, 0x3, 0xffff, 0x92, 0x5, 0x8c, 0x0, 0x3, 0x3, 0x8000, 0x9, 0x0, 0x7f, 0xb, 0x4, 0x7, 0xc, 0x8444, 0x7, 0x4, 0x7, 0x5, 0x8d2, 0x6, 0x8, 0x8, 0x9, 0x7, 0xfffffffc, 0x7, 0x8, 0x2, 0x3, 0xfffffffe, 0x541bcc20, 0x1, 0x2, 0xf595, 0xb, 0x5, 0x8, 0x0, 0x0, 0xfffffc01, 0x2, 0x4, 0x9, 0xffff, 0x5, 0x6, 0x10, 0x5, 0x4, 0x7, 0x5, 0x0, 0x0, 0x7f, 0x1000, 0x6c98, 0x7f, 0xfffffc01, 0x7fff, 0xb668c806, 0x9, 0x101, 0x3, 0x3, 0x130, 0x400, 0x0, 0xa, 0xe, 0x1, 0x1, 0x0, 0x10001, 0x7, 0x72, 0x7, 0x0, 0x6, 0xc2, 0x5c, 0x7ff, 0x2, 0x8, 0x7, 0x1, 0xe13c, 0x3, 0x2, 0x4, 0x1, 0x10, 0x87, 0x5fe, 0x1, 0xb6f5, 0x9, 0x3, 0x4, 0x80000000, 0xa, 0x10000, 0x1ff, 0x1000, 0x4, 0x9, 0x200, 0x4bdb, 0x4, 0x4, 0x6, 0x79, 0x400, 0x8, 0xcb, 0xa]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x7, 0x7, 0xfffff801, 0x0, {0x9, 0x0, 0xfffc, 0x2, 0x3, 0x6}, {0x3, 0x0, 0xc86d, 0xfff4, 0x4, 0x6}, 0x7, 0xe, 0x7f}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffb, 0x2, 0x6, 0x0, 0x1000, 0x4d1, 0x4, 0x4, 0x14a, 0xe, 0xf249, 0x1356, 0xe, 0x4, 0x7, 0x2, 0x4, 0x4, 0x3, 0x401, 0x6, 0xd, 0xa5b4, 0xb6, 0xbc5, 0x5, 0xffff, 0x50000000, 0x1, 0x7, 0x3, 0x6, 0x1, 0xd009, 0x6, 0x9, 0x2, 0x8, 0x3ff, 0x7, 0x1ff, 0x5, 0x8, 0x1ff, 0x8, 0x10000, 0xfffffff6, 0x1, 0x4, 0x886, 0x4, 0xd497, 0x0, 0xfffffe00, 0x8, 0x9, 0x93, 0x5a24, 0x8000, 0x9f8d, 0x9, 0x401, 0x6, 0x0, 0x0, 0x194, 0x1, 0xffff, 0x6, 0x5, 0x2800, 0x0, 0x3ff, 0x5, 0x16, 0x7fffffff, 0x6000000, 0xfffffff9, 0x2, 0x8, 0xffff, 0x1000, 0x4, 0x58, 0x1, 0xfe, 0x431, 0x8000, 0xabd, 0x719, 0x0, 0x2, 0x9, 0x2, 0x5, 0xe7a4, 0x9, 0x3, 0xe, 0x5, 0x9, 0x6, 0x8bc, 0x3342, 0x7, 0xfffffffb, 0x7, 0x0, 0x7e66, 0x9, 0xa00, 0x6, 0x6, 0x8, 0x10001, 0x3a, 0x9, 0x6, 0xd2ea, 0x5, 0xff, 0x7f, 0x7ff, 0x7, 0x0, 0x101, 0xe, 0x4, 0x7ff, 0x3, 0xf, 0x7, 0xb1, 0x40, 0x1000, 0x80, 0x4, 0x9, 0xf7, 0x5, 0x3, 0x0, 0x1ff, 0x9, 0x40, 0x10, 0xe, 0x9, 0xca, 0x2, 0x1, 0x5, 0x1, 0x4, 0xe39, 0xe, 0x7e2, 0x4b8, 0x6, 0x7, 0x0, 0x80, 0x10001, 0x5, 0x7, 0xdefe, 0x3, 0x9, 0x7fff, 0x5, 0x103, 0x9, 0x2, 0x8, 0x4f773d2c, 0x70, 0x0, 0x7, 0xffff, 0x2, 0x10001, 0x8, 0x4, 0x8, 0xffff, 0x0, 0xe, 0x10001, 0x5, 0x200, 0x8, 0x70000, 0x8, 0x4697, 0x782ace79, 0x93, 0x7, 0x4000000, 0x80000001, 0x8, 0x3ff, 0x101, 0x8, 0x8, 0x3, 0x26, 0x6, 0x7, 0x1, 0x81, 0x3, 0x85f, 0x5, 0xfff, 0xe000, 0x4, 0xc8c4, 0x9, 0x7f, 0x3, 0x55, 0xfffffffe, 0x1, 0x3, 0x10000, 0x1000, 0xfffffffe, 0x1000, 0xfffffd99, 0x7, 0x5, 0x47, 0x3, 0x5, 0xfffffbff, 0x9693, 0x2, 0x4, 0x2, 0x1d5d, 0x9, 0x3, 0x3, 0x4, 0x5, 0x4, 0x6, 0x5, 0x5, 0xfff, 0xffffffff, 0x9, 0x0, 0x4, 0x200, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x2, 0xd, 0x9, 0x5, 0x1ac, 0x58b3, 0x81, 0x6, 0xb, 0x1ff, 0x8001, 0x10000, 0x4, 0x5, 0x346d, 0x8, 0x8, 0x1, 0xc6a, 0x380e2171, 0x4, 0xff, 0x15b, 0x1, 0x6, 0xf688, 0x76d3, 0x1, 0x7c6, 0x6, 0xf, 0x7, 0x6, 0x100, 0x2, 0x9, 0x10000, 0x3, 0x3b, 0x9, 0xfffffffb, 0x9, 0x1, 0xfffffbff, 0x5, 0x9, 0x8, 0x2, 0x18a, 0xffffffde, 0x6, 0x8, 0x8dd4, 0x6, 0x5, 0x7, 0x0, 0x2, 0x7, 0x4, 0x4, 0x2, 0x0, 0x6, 0x1, 0x60, 0x0, 0xfff, 0x9000000, 0x24e, 0x1e5, 0xffffffff, 0x3, 0x4, 0x7, 0xfffffffd, 0x9, 0x9, 0x8, 0x82d4, 0x40, 0x10000, 0x5, 0x10001, 0x4, 0x1, 0x1ff, 0x22, 0xa51, 0xfffffe01, 0x8eef, 0x1c1a, 0x6, 0x7, 0xffff0000, 0xfffffffa, 0x3, 0xc, 0x1, 0x2, 0x3, 0x3, 0xd320, 0x4, 0x5, 0x3, 0x8, 0x80, 0x2, 0x8, 0x6, 0x4, 0xa, 0x9, 0xd5, 0x8, 0x909, 0x5, 0x200, 0x331, 0x5, 0x546, 0x5, 0x9, 0x7fff, 0x562, 0xdd, 0x7, 0x3, 0xb, 0x2, 0x9, 0xfffffffc, 0x9, 0x3, 0x10000, 0xfffffffd, 0x1, 0xfffff377, 0x5, 0xe, 0xc66, 0x1, 0x8, 0x6, 0x9, 0xfffffff9, 0x9, 0x10001, 0x9, 0x7, 0x6, 0x3, 0x68b6, 0x0, 0x200, 0x2, 0x1, 0x7, 0x80, 0xfffffff9, 0x2, 0x7, 0x7, 0x0, 0x8, 0x1, 0x2, 0x4, 0x7, 0x1000, 0xc, 0x6, 0x0, 0x6f4, 0xf8c, 0xfa2, 0x3, 0x91, 0x2, 0x5, 0x53, 0x4b, 0x0, 0x7, 0x1, 0xe38, 0x240ea5f6, 0x1, 0x17, 0x0, 0x5696, 0x7fffffff, 0x0, 0x8b, 0x9, 0x0, 0xa, 0x9, 0x9, 0x7ff, 0xda2, 0x6, 0xec, 0x3, 0x9, 0x9, 0x9, 0x0, 0x4, 0x8e, 0x5, 0x4, 0x33, 0x3, 0x316, 0x3ff, 0x4, 0x1ff, 0x7fffffff, 0x8, 0xd9a, 0x7fff, 0x5, 0xb1, 0x100, 0x0, 0x10001, 0x3, 0x9, 0x9, 0x7ff, 0x53, 0x5, 0xc9f, 0x5, 0x9, 0x9e, 0x3, 0xf, 0x5, 0x6, 0x7, 0xef6, 0x1, 0x6, 0x9, 0xf, 0xfffffffa, 0x2, 0x3, 0x5216, 0xfffffffe, 0x7, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x914}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xadf, 0x4, 0x0, 0x5, 0x7, 0x22, 0x4, 0x3, 0x40, 0x0, 0x10001, 0x1, 0xa42, 0x2525, 0x5, 0x5, 0x9, 0x0, 0xffff8001, 0x2, 0xdf7, 0x2, 0xffbf, 0x3d, 0x2, 0xfffffff7, 0x8, 0x80, 0xfffffff9, 0xcb, 0x3ff, 0x8, 0x8, 0x5, 0x1, 0x7, 0x5, 0x8ff7, 0xd, 0x5, 0x8, 0xfffffff8, 0xfb2, 0x7, 0x2, 0x8001, 0x9, 0x4, 0x0, 0x6, 0x4, 0xe, 0x5, 0x3ff, 0x2, 0x6, 0x5, 0x1, 0xfffffffc, 0x9, 0x0, 0x7fffffff, 0x100, 0xe, 0x7, 0x4, 0x6, 0xfffffffa, 0x3c0, 0xf, 0x3ff, 0x800, 0xfffffff9, 0xc, 0x8, 0x0, 0x6, 0x7fffffff, 0xff, 0x3, 0x2, 0x7, 0x3, 0x3, 0x5, 0x1000, 0xa, 0x80000000, 0xff, 0x6, 0x5, 0x9, 0x6, 0x5, 0xc5, 0x8, 0x5, 0x7fff, 0x8, 0x3, 0x9, 0x4, 0x8, 0x7, 0x400, 0x3e4, 0x0, 0x2, 0x94, 0x40, 0x2, 0x1, 0x2, 0x80000000, 0xb, 0xffffd279, 0x108b, 0x200, 0x101, 0x0, 0x81, 0xc, 0x100, 0x8, 0x0, 0x7, 0x3, 0xfffffff8, 0xdd8, 0x1000, 0x3, 0xdd, 0xfffffffc, 0x0, 0xe, 0x6, 0x9, 0x9, 0x1, 0x1, 0x1, 0x2, 0xd942, 0x7, 0x7fff, 0x9, 0x40, 0xffff, 0x8001, 0x1ff, 0x8, 0x2, 0x5, 0x1, 0x6, 0xbe12, 0x1000, 0x9, 0x2, 0xf, 0x4, 0x9, 0xc, 0x4, 0x1, 0xf4eab04, 0x2, 0x7, 0x9, 0x7, 0x5, 0x0, 0xe915, 0x9, 0x2, 0x8, 0x3, 0x9, 0x3ff, 0x3, 0x1, 0x2, 0x7, 0x3, 0x4, 0x9, 0x400, 0x2, 0x5, 0xfffff801, 0x5, 0x8001, 0x5, 0x2, 0x4, 0x8, 0x4649, 0x8, 0x400, 0xfffffff0, 0xfffffffb, 0xff, 0x6, 0x8, 0x0, 0xc3, 0x2, 0xffffffff, 0x81, 0x7, 0xfffffffd, 0x8, 0x8, 0x2, 0xa, 0x5, 0x0, 0xffff, 0x1567, 0xffff0001, 0xa982, 0x7, 0x0, 0x200, 0x2, 0xfffff657, 0x1, 0x5, 0x3, 0x91c6, 0x8, 0xb, 0x6, 0x5, 0xe8, 0x10001, 0x3, 0x6, 0xf9, 0x1, 0x1ce18000, 0x1, 0xd, 0x9f, 0x7, 0x6, 0x5, 0x8c, 0xfffffff9, 0x8b, 0x200, 0xffffffff, 0x1, 0x1ff, 0xfb, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x26, 0x2b2e, 0x1, 0x3, 0x4, 0x2, 0x5, 0x4, 0x1d890, 0xbb, 0x1, 0x7, 0x5, 0x1, 0x88d4, 0x2, 0x2, 0x9, 0x5, 0x400, 0xffffffff, 0x2000000, 0x7, 0x9, 0x4, 0x9, 0xfffffff8, 0x8, 0x200, 0x5, 0x6, 0x1, 0x6, 0x81, 0xffff, 0x7, 0x2, 0x6, 0x8, 0x180, 0x9, 0xb, 0xb, 0x4, 0x0, 0x2, 0xaeab, 0x1000, 0x8, 0x0, 0x7, 0x9b, 0x8, 0x3, 0x5, 0x7f, 0x200, 0x0, 0x8, 0x7, 0xfffffff9, 0x8, 0x2, 0x23b7, 0x6, 0x4, 0xe9, 0x6, 0x9, 0x4, 0x7, 0x3, 0x4, 0x3, 0x780, 0x2, 0x7ad, 0x5, 0x40, 0x5, 0x0, 0x7fffffff, 0xc, 0x5, 0xffffffff, 0x10, 0xfef0, 0xfffffff8, 0x80000000, 0x1, 0x6, 0x10, 0x63b, 0x3, 0x10000000, 0x0, 0x62, 0xf, 0x8, 0x2, 0x9, 0x5, 0x81, 0x4, 0xffffffff, 0x49, 0xa33, 0x7, 0x6, 0x7ff, 0x6, 0x98, 0x3, 0x3, 0x5, 0x0, 0x5, 0xfffffff7, 0x10001, 0x8, 0x4, 0xfff, 0x6, 0x10000, 0x5, 0x2, 0x8, 0xd160, 0x0, 0xd6, 0x8, 0x4, 0xb2, 0x7, 0x6, 0x5, 0x5, 0x5e4, 0x11e700, 0x5, 0xfffffffb, 0x8, 0xf, 0x10, 0x5aee, 0xe, 0xee, 0x10000000, 0x3, 0x51e, 0x8, 0x1, 0x4, 0xa, 0x5ca3, 0xc6, 0x7f, 0xfffffffe, 0x6, 0x6dc3, 0x8efe, 0x8001, 0x0, 0x4307, 0x0, 0x100, 0x8000, 0x8, 0x3, 0x7, 0xffff092e, 0x8, 0x9, 0x0, 0x0, 0x1000, 0x6b8, 0x10000, 0xabaf, 0xa9d, 0x9, 0x5, 0x0, 0xffffffff, 0x1, 0x81, 0x1, 0x7, 0x0, 0x0, 0x5, 0x5, 0x1, 0x0, 0x289c, 0x4d9d, 0x3, 0xfffffffa, 0x8, 0x46, 0x0, 0x8, 0x2, 0x4ba, 0x421cf17f, 0x3, 0x8, 0x101, 0x1ff, 0x40, 0x4, 0x1, 0x7ef4a360, 0x10000, 0xb, 0x80000001, 0x4, 0x4, 0x3, 0x3, 0xc, 0x5f, 0x6, 0x4, 0x3e5f4637, 0xc37, 0x7, 0x9, 0xf4, 0x4, 0x3, 0x4, 0x5, 0x5, 0xffffffff, 0x1, 0xa, 0xc8c2, 0x7, 0x6, 0x0, 0x708, 0x200, 0x0, 0x6, 0xff, 0x0, 0xa, 0x9, 0x81, 0x3, 0x2, 0x40, 0x3, 0x7fffffff]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x1, 0x38a1, 0x2, 0xa53c0000, {0xff, 0x1, 0x6, 0xff80, 0x8, 0x2}, {0xf6, 0x0, 0x8001, 0x7, 0x0, 0x3}, 0xa7, 0x1, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x8, 0x3, 0x4, 0x3, 0xb, 0x0, 0xa, 0x7, 0x62b0, 0x0, 0x3, 0x2, 0xd73, 0xf, 0x0, 0x1, 0x7, 0x7f, 0x7ff, 0x7ff, 0xb, 0x32bb, 0x8, 0x0, 0x3ff, 0x8000, 0x20000000, 0x2, 0xa00, 0x100, 0x3, 0x1, 0x8, 0x7, 0xf88, 0xec9, 0x6, 0x99aa, 0xfffffff9, 0x2, 0x7d, 0x1, 0x7fffffff, 0x1, 0xf, 0x1, 0x9, 0xfffffffe, 0x8, 0x7, 0x0, 0x9, 0x2, 0xe3c, 0x4, 0x0, 0xe8b, 0x7, 0x9, 0x4, 0x9, 0x3, 0x6, 0xd0c8, 0x400, 0x9cd, 0x1, 0x6, 0x5, 0x7, 0xaa0c00, 0xc, 0x2, 0x2, 0x4, 0x3, 0x3ff, 0x80000000, 0x5, 0x8, 0x8, 0x6, 0xfff, 0x9, 0x4, 0x5a66, 0x3, 0x8, 0x1000, 0x1, 0x5, 0x6, 0x2, 0x7ff, 0x8001, 0x9, 0x8000, 0x80000000, 0x7ff, 0xa, 0x3ff, 0xe, 0xe6, 0x6, 0x6, 0x40, 0xb1, 0xbf, 0x2, 0x1, 0xdb8, 0xffffffff, 0x2, 0x3, 0x3, 0x1000, 0x7, 0x8, 0x2000, 0x92, 0xfff, 0x8001, 0x401, 0x800, 0x1, 0x4, 0x9, 0xa, 0x8, 0xb, 0x81, 0x8, 0x9, 0x3, 0x9, 0xac, 0x101, 0xfffff801, 0x4, 0x1, 0x40, 0xb682, 0x1, 0x5, 0x4, 0xa0, 0x101, 0xa, 0x7fffffff, 0x7, 0x7f, 0x1000, 0xe00, 0x80000000, 0x5, 0x5, 0x1, 0x4, 0xad8, 0x9, 0x8, 0x7fffffff, 0x7f, 0x9, 0x10000000, 0x2, 0x74, 0x8, 0xe56, 0x6, 0x6, 0x5, 0x4, 0xfffffffc, 0x4, 0x100, 0x4, 0x7ff, 0x0, 0x3, 0x5, 0x8, 0x515f5495, 0x8, 0x1, 0x3, 0x1, 0x40, 0x1, 0x0, 0x2a3, 0x1, 0x2, 0x4, 0x1ff, 0x9, 0xf0a5, 0x236, 0x2, 0x800, 0x1000, 0x7f, 0xfffff800, 0x10000, 0xad, 0x3, 0x6, 0xb1, 0x6, 0x19, 0x1, 0x9, 0x3, 0x7, 0x8, 0x1ff, 0x7fffffff, 0x7, 0x4, 0x4, 0x1, 0x3, 0x2, 0x3ff, 0x5, 0x6, 0xffffad2b, 0x59fc, 0x8, 0x1ff, 0x7, 0x8, 0x4, 0x6, 0xf, 0x744, 0xa, 0xffffffff, 0xfffffffb, 0xf7, 0x3, 0x3, 0x7, 0x40, 0x9, 0xa60, 0x5, 0x7f, 0x7, 0xc0b, 0x4, 0x12b7, 0x8, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2d, 0x5, 0xe461, 0xffff, 0x2, 0x9, 0x80000000, 0x7, 0x7ff, 0xf, 0x7fff, 0x5, 0x81, 0x2, 0x9, 0x8, 0x80, 0x3ff, 0x9, 0x50b, 0xa416, 0x8, 0xffff, 0x2, 0xffffffb9, 0x4, 0x6, 0x0, 0x696e, 0x224, 0x1, 0x1, 0xfe, 0x80, 0x0, 0x9, 0x6, 0x7, 0xfe7, 0x4, 0x197b, 0x0, 0x197, 0x8, 0x1000, 0x5, 0x2, 0x1ff, 0x2, 0xc, 0x7fff, 0x2, 0x4, 0x4, 0xa8, 0xffffffff, 0x9, 0x6, 0x7, 0x8, 0xfffffffd, 0x7144ba1b, 0x88, 0x6, 0x2, 0x4, 0x6, 0x3, 0x2, 0x800, 0x2, 0x3, 0x8000, 0x5, 0x9, 0x2, 0xa, 0xd, 0x4, 0x8, 0x0, 0x2, 0x9, 0x35, 0x7ff, 0x885, 0xffff1c52, 0x1, 0x4, 0x2, 0x8, 0x1ff, 0x7f, 0xb0, 0xb, 0xffff, 0xfffffffd, 0x5, 0xd0, 0x8, 0x4, 0x8, 0x4, 0x9, 0x200, 0x18000000, 0x6, 0x5, 0xfffff375, 0x4, 0xfff, 0xbf, 0xf, 0x2d05, 0x8, 0x0, 0x9, 0xf1, 0xbb, 0x6, 0x8, 0xe4b4, 0x5, 0x9, 0x1291, 0x8, 0xfffffffa, 0x4, 0xfffffffa, 0x10001, 0x1, 0xe000, 0x3, 0x3, 0xf7c0, 0x3, 0x3, 0xffffff81, 0x8d, 0x1000, 0x4, 0x8, 0x10000, 0x2, 0x10000, 0x7, 0x32, 0x629, 0x0, 0x9, 0x8, 0xedb, 0x7fff, 0x7, 0x2, 0xfffffc01, 0x1000, 0x3, 0x7, 0x101, 0x7, 0x2, 0x0, 0x10000, 0x83ba, 0x58d, 0x40000000, 0x2c6, 0x8, 0x3, 0x46, 0x8, 0x400, 0x2, 0xf, 0xd2, 0x4, 0x4, 0xd2, 0x2, 0x101, 0x3, 0xf4, 0x3, 0x6, 0x3ff, 0x10000, 0x8, 0x991, 0x5, 0x1, 0x1000, 0x10000, 0x9, 0x0, 0xe, 0x6, 0x0, 0xffff, 0x1ff, 0x1, 0x1ff, 0x5, 0x9, 0x5, 0x6, 0x0, 0x8001, 0x7fffffff, 0x101, 0x1ff, 0x5, 0xd26, 0xa26, 0x2, 0x3, 0x1b64, 0xffffc68c, 0x9, 0x5d, 0x3, 0x3, 0xcce8, 0x8, 0x22c, 0x1, 0x5, 0xeb1, 0x40, 0x81, 0x3, 0x800, 0x6, 0xc, 0x4, 0x1, 0x1, 0x400, 0x6, 0xb50, 0x6, 0xfffffffb, 0x7, 0x0, 0xffff0001, 0xfffffff9, 0xb, 0x2, 0x0, 0xc, 0xf3c, 0x10000, 0x40, 0x2, 0x6, 0x56]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x2, 0xea, 0xc1f2, 0xce6, {0x8, 0x3, 0x5, 0x4, 0x1, 0x10000}, {0x4, 0x2, 0x2, 0x2, 0x5, 0xf5}, 0x84d, 0x3, 0x7f}}]]}, {0x34, 0x6, "e33ba1bbf2d2e39340768437564b48254405b55a8f9884823168ec7c9ef67d3459b32652ed4b80fb6257afe3ceea7172"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x14, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_CGROUP_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_basic={{0xa}, {0xf3c, 0x2, [@TCA_BASIC_POLICE={0x18, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2417}]}, @TCA_BASIC_POLICE={0x458, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xffffff8f, 0xffff8001, 0x7c, 0x9, 0x8, 0x19, 0x0, 0x9, 0x3, 0x10000, 0x4, 0x1, 0x100, 0x401, 0x1, 0x4, 0x3, 0x6, 0x1, 0xb179, 0x4b, 0x4000000, 0x63, 0x6, 0x8089, 0xa09, 0x5, 0x2, 0xb7cb, 0x1, 0x9, 0x7, 0x401, 0x9, 0x7f, 0xa, 0x8, 0x1, 0x5, 0x9, 0xd, 0x5, 0x1, 0x2, 0x0, 0x4, 0x3, 0x8, 0x9, 0x6, 0x2, 0xf3d0, 0x6, 0x2, 0xe3, 0x7ff, 0x0, 0x3, 0x1, 0x6a, 0x5, 0x9, 0x0, 0x4, 0x0, 0xffffffff, 0x4, 0x7, 0x9, 0x8, 0x1, 0x0, 0x2, 0xe, 0x0, 0x39f, 0xd4, 0x5, 0x9, 0xfffffffe, 0x6, 0x9, 0x9, 0x9, 0xf7, 0x3, 0x9ffc, 0x6, 0x8, 0xc, 0x0, 0x6d, 0x6c, 0x80, 0x443, 0x80000001, 0x3a7, 0xffffffff, 0x4, 0x1, 0x8001, 0xfffff096, 0x7, 0x7, 0x101, 0x8001, 0x3, 0x73, 0x3ff, 0x8, 0x7, 0x7ff, 0x2c166cbc, 0xfffffffa, 0x9, 0x4, 0x5, 0x18fa, 0x2, 0x3, 0xd8, 0xfffffff7, 0x3ff, 0x5, 0xe, 0x5, 0x0, 0x100, 0x7, 0x4, 0x1000, 0x17b27226, 0xa8, 0xd2d, 0xc, 0xb, 0xfffffe0c, 0x3, 0x3, 0x40, 0x0, 0x7, 0xfe, 0xa85f, 0x733203a0, 0x0, 0x3, 0x3, 0x80000001, 0x9, 0x3, 0x8, 0x3ff, 0x2, 0xe, 0x6, 0x78f0, 0x1ff, 0xf, 0x0, 0x2, 0x1, 0x1, 0x7, 0x5, 0x5d6b, 0x7, 0x3, 0x71ae, 0x4, 0xff, 0xe194, 0x100, 0x100, 0xfa, 0x80000000, 0x6, 0x9, 0x3, 0x5, 0x7, 0x3, 0x401, 0x0, 0x9, 0x10, 0x400, 0x68, 0x3, 0x5, 0x10000, 0x5, 0x50, 0x3, 0xe2c, 0xc54, 0x6, 0x81, 0x3, 0x7, 0x20000000, 0x7f, 0x6, 0x800, 0x3, 0x761f, 0x401, 0x3, 0xffffffff, 0x3, 0x3, 0xe1, 0x4, 0x4, 0x1, 0x39f57bf4, 0x75, 0x8001, 0xff, 0xb0, 0x6, 0x6, 0x5d70, 0x6, 0xfffffff9, 0x4f, 0x9, 0x7, 0x9916, 0x8000, 0x200, 0x1, 0x2, 0xd, 0x2e0, 0x7, 0x4, 0x2, 0x7fffffff, 0xbddc, 0x2851, 0xe8, 0xfffffff3, 0xdca, 0x8, 0x3, 0x3, 0x4, 0x9, 0x8, 0x80, 0x4, 0xc, 0xac3, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffffffffff, 0x40, 0x5, 0x5, {0x5, 0x0, 0xff, 0x6, 0x3ff, 0x10001}, {0x9, 0x0, 0xff, 0x8, 0xfe50, 0x3}, 0x0, 0x7fffffff, 0xffffc9a6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe757}}]}, @TCA_BASIC_EMATCHES={0x7c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xff, 0x2, 0x9}, {0x6, 0x2, 0x0, "d5c1"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0xac}, {0x10000, 0x400, 0x0, 0x6eaa}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xce, 0x2, 0x10}, {0x7, 0x8, 0x2, "9d584cc49138f0e7"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x200, 0x2, 0x9}, {0x1ff, 0x3, 0x2, "14f5c7"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_BASIC_POLICE={0x820, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xf1b0, 0x1000, 0x29, 0x7, 0x1, 0xe3, 0x2, 0x2a1, 0x8, 0xfffffffe, 0x7f, 0x2e05, 0x7, 0x5, 0x8, 0x2, 0x30000, 0x0, 0x5, 0xd, 0x0, 0x8, 0xfead, 0x200, 0x1bb9, 0x8, 0x2b5, 0x9, 0xfffffff4, 0x7ff, 0x8, 0xea, 0x2, 0x4, 0x3, 0x5c, 0xab0, 0xfffffffd, 0x6, 0x2, 0x2, 0x0, 0x7db, 0x6e05, 0x4, 0x2, 0x7fff, 0x4, 0x8, 0x1355, 0x0, 0xf, 0x5, 0x6, 0x3, 0x3, 0x1, 0x0, 0x8001, 0x8, 0xfffffffb, 0x1000, 0xf, 0x1, 0x3, 0x6, 0x2, 0xa2, 0x7, 0x2, 0x2, 0x4, 0x0, 0x7, 0x44, 0x1, 0xff, 0xffff7175, 0x2, 0x80, 0x2, 0xffff, 0x1, 0x0, 0x0, 0x7, 0x5, 0x5, 0xf, 0x5, 0x9, 0xb5f, 0xa0, 0x0, 0x7, 0x4, 0xfffffff8, 0x7fff, 0xffffffff, 0x5, 0x1, 0x3e5, 0xc0ef, 0x40, 0xf, 0x9, 0x3, 0x6, 0x80000000, 0x0, 0x6, 0xc, 0x9, 0x1000, 0x101, 0x80, 0x3ff, 0x1, 0xfffffff9, 0x7, 0x401, 0x9, 0x200, 0x8, 0xa1, 0x5, 0x4, 0x6, 0x4ba4, 0x40, 0x2, 0x6, 0x3, 0x6, 0x7f, 0x2, 0xd, 0x19, 0x6, 0x7, 0x5, 0x5, 0x3, 0x6, 0xa, 0x6, 0x1, 0x3, 0x7f, 0x7, 0xbb3, 0x9, 0xa7, 0x4567e56f, 0x2, 0x1000, 0x6, 0x5, 0x1, 0x9, 0x8b, 0x8, 0x4d9e, 0x0, 0x5, 0x9, 0x10, 0x7f, 0x10001, 0x8, 0x10000, 0xe56, 0x8000, 0x3, 0x7, 0x7, 0xc0, 0xfffffffb, 0x3, 0x44, 0x10001, 0x0, 0x9, 0x4, 0x6, 0x4, 0xfffffff9, 0x7fffffff, 0x81, 0x1, 0x2, 0xffff, 0x90, 0x6, 0xffffff3d, 0xfffffff9, 0x20, 0x8000, 0x5, 0x400, 0x1, 0x4, 0x80, 0x6, 0x1ff, 0x0, 0x8, 0x1000, 0x43, 0x0, 0x8, 0x10, 0x1, 0x1ff, 0x2, 0x10000, 0x7, 0x0, 0x4, 0x7, 0x3, 0x7, 0xe, 0x10, 0x9, 0x7985, 0x6, 0x4, 0x101, 0x2e, 0x200, 0x9, 0x92, 0x9, 0x0, 0x2, 0x5, 0x0, 0x5, 0x8, 0x5, 0x1, 0x8, 0x6, 0x56, 0x2, 0x0, 0x0, 0x5, 0xffffff1a, 0x200, 0x1ff, 0xffffffd9, 0x3, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x193ebc25, 0x400, 0x7, 0x7fffffff, 0x8, 0xb3, 0x7, 0x4, 0x3, 0x1, 0xd3a4, 0x2, 0x80000001, 0x10001, 0x3, 0x6e4, 0x4, 0x7, 0x10, 0x9, 0x7, 0xf, 0x6, 0x51ad, 0xa, 0x6, 0x8, 0x1, 0x7fffffff, 0xffff0001, 0x10, 0x8, 0x10, 0x200, 0x9, 0x400, 0x8, 0xc, 0x9, 0x5, 0x1, 0x9, 0x10000, 0x200, 0x2e, 0x1, 0x4, 0x9, 0x2, 0x5, 0xb9cd, 0x7, 0x6, 0x3b5, 0x5, 0xecf, 0x4, 0x546, 0x10001, 0x5, 0xf760, 0x2, 0x7d800000, 0x1, 0x800, 0x0, 0x1ff, 0x1, 0x800, 0x2f37, 0x1, 0x0, 0x5, 0x46, 0x3ff, 0x0, 0xfa3, 0x401, 0xfffff800, 0x6b, 0x2, 0x9, 0x7000, 0x7e1a, 0x76b, 0x7fffffff, 0x3, 0x5, 0x406, 0xffff, 0x9, 0x8, 0x0, 0x0, 0xfffffffa, 0xfffffffa, 0x8, 0xffffffff, 0x800000, 0xd06, 0x1, 0x4, 0x3, 0x1, 0x1, 0x3, 0x11a, 0x1, 0xfffffffa, 0x5, 0x6, 0x5, 0x0, 0x9327, 0x8, 0x2, 0x0, 0x84, 0x2, 0x66, 0x7158, 0x6, 0xf, 0x7f, 0x2, 0x1, 0xffffffff, 0x2, 0x8, 0xd5f, 0x7, 0x1, 0x1, 0xf0, 0x4, 0x3, 0x5, 0x6, 0x5, 0xe8a, 0x101, 0x8d, 0x7f, 0xc2, 0x8, 0x8, 0x1, 0x5, 0x1, 0x7, 0x2, 0x3ff, 0xdd89e939, 0xfffffff9, 0x2, 0x2, 0xe3d, 0x9, 0x1, 0x7cb6, 0x9, 0x4, 0xa0c, 0x2, 0x0, 0x21f5, 0x7, 0x3, 0x1, 0x81, 0x3, 0x7, 0x4, 0x6, 0x3ff, 0x3, 0x4, 0x9, 0xe, 0x5, 0x401, 0x0, 0x4, 0x0, 0x1, 0x3, 0xfffffff7, 0xffff, 0x9, 0xfd99, 0x6, 0x8, 0x0, 0xe, 0x3, 0x4, 0x80000001, 0x8, 0x0, 0x1, 0x1, 0x2, 0x9, 0x8, 0x8, 0x0, 0x97d9, 0x9, 0x4693, 0x0, 0xbe28, 0x6, 0xc9, 0xffffff97, 0x8, 0x2, 0x7, 0xfece, 0x0, 0x1, 0xfff, 0x1, 0x458a262b, 0x80, 0x5b9c, 0xd, 0xfffffffd, 0x77eb, 0x7, 0x10, 0xffffa90b, 0x5, 0x100, 0x5, 0x5e8, 0x80000001, 0xda0, 0x6, 0x0, 0x2, 0x7f, 0x0, 0x3, 0x0, 0x19a6aeb9, 0x3, 0xfffffffb, 0x1, 0x7, 0xb, 0x7ff, 0x9, 0x0, 0x9fb]}]}, @TCA_BASIC_EMATCHES={0x218, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x579}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x136}}, @TCA_EMATCH_TREE_LIST={0x204, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x18, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x76}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x80db, 0x8, 0x6}, {0x1, 0x4, 0x7}}}, @TCF_EM_CONTAINER={0xe0, 0x1, 0x0, 0x0, {{0xff01, 0x0, 0x7}, "d93617249e0b91ce3e6ffb2b25a8b89ec11c80d69c64a1360fa94d867cbd69a894d2b3c24917c7ef804f8580f310103119ab07e310a79db0e47a571fac9726989b0f87e14be4d4f83bdd4149dfc62fa98d44fd9369fd9cadac84c4d64bbb579087df0a674ba42a7e9424b8efbc72b80af9bb863b21848477740866b9ac6957218a74f31426b3f2c2bd3a65d4a53ac590b9576934c8528f2e2ff660990a7d4dbfcbcd88e9db7c0c3779e52b275abb5441d7825a9f270d4910f78dc9aa1c472a4220cd5fe694e117aa295a3040535463df6e1f"}}, @TCF_EM_IPT={0x58, 0x3, 0x0, 0x0, {{0x9a, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x34, 0x5, "9956b1fc4b290f16b9319f64ee05e41297de5fbd1523bcd80b7b8eab22d69e2ef592d412b43b024506b5f3e1c9d06bef"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_META={0x88, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x74}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='\rY)', @TCF_META_TYPE_VAR="0e", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff2, 0x81}, {0x100, 0xd8}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x3, 0x1}, {0x0, 0xb, 0x1}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="eb", @TCF_META_TYPE_VAR="61c61ffe7d21f3"]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="2bdf4b8e"]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5b, 0x1, 0x1ff}, {0x1, 0xffffffff, 0x4, 0x1, 0x4, 0x2, 0x1}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x4db8}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) 1m29.149233496s ago: executing program 3 (id=11160): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB='E\x00\b'], 0xa) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(r2, 0x0, 0x0) syz_io_uring_setup(0x12f, &(0x7f0000000340)={0x0, 0x2fac, 0x800, 0x8000000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=@get={0x120, 0x13, 0x200, 0x70bd29, 0x25dfdbff, {{'drbg_nopr_ctr_aes192\x00'}, '\x00', '\x00', 0x2000, 0x2000}, [{0x8, 0x1, 0x81}, {0x8, 0x1, 0x7f}, {0x8, 0x1, 0x73}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x80000000}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x1}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x2, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x2}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc2c45513, &(0x7f0000000880)={{0x1, 0x5, 0x8, 0x3, 'syz0\x00', 0x7}, 0x1, [0x85d, 0x1eb3a7b1, 0x7, 0x40, 0x7bfd731d, 0xc7, 0x1, 0x8001, 0xa, 0x0, 0x9, 0x2, 0x9, 0x5, 0x4, 0x5, 0x6, 0x100, 0xe8, 0x6, 0xe, 0x1, 0x1, 0x9, 0x8, 0xffffffbc, 0x5, 0x6, 0xffff5213, 0x9, 0x1, 0x80000000, 0x1ff, 0xffff, 0x8, 0x100, 0x5, 0x0, 0x80000001, 0x40, 0x4, 0x10, 0x0, 0x5, 0x4, 0x4, 0x5, 0x8, 0x5, 0x9, 0x2, 0x1, 0xfffffffb, 0x400, 0x6, 0x2c2, 0x4, 0x10000, 0x10000, 0x6, 0x4, 0x1fc0000, 0x4, 0x3, 0x8, 0xbb, 0x8001, 0xa, 0x1, 0x7ff, 0xa9, 0x592e, 0x3, 0x403, 0x7e, 0x4, 0x4, 0x1, 0x7f, 0xffffff81, 0xbe4, 0xfffffffe, 0x7, 0x4, 0x5c, 0x3, 0x5, 0x6, 0x4, 0x400, 0x0, 0x401, 0x2, 0x5, 0x6, 0x10001, 0x0, 0x4, 0x6, 0x2, 0xaac3, 0x2, 0x81, 0x2, 0x8000, 0xc, 0x0, 0x1be, 0x5, 0x4, 0x80, 0x9636, 0x5, 0xd, 0x433b4d1, 0x2, 0x1, 0x1, 0x7, 0x621, 0x3, 0x10001, 0x2, 0xd, 0x7, 0x100, 0x1ff]}) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r5, &(0x7f0000000000)='2\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) 1m28.531845766s ago: executing program 3 (id=11163): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x15f897, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) socket(0x2b, 0x1, 0x100) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 1m28.496958432s ago: executing program 3 (id=11165): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000300)=@ethernet={0x306, @random="67b807132287"}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xd, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000005c0)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x7101}) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x1000, 0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) sendto$phonet(r4, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x8, 0x6}, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x59eda05}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {0x0, 0x6}, {0xfff2, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x6}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r11 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d55000905020200020a0000090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x344, &(0x7f00000008c0)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x260, &(0x7f00000005c0)=ANY=[]) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x6, 0x200000) ioctl$MON_IOCX_GET(r13, 0x400c9206, &(0x7f0000000400)={&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000004c0)=""/187, 0xbb}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xe002, 0x83, "00000000000000000000ffff00"}) r14 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r14, 0x5412, &(0x7f00000000c0)=0x7) 1m13.242666328s ago: executing program 39 (id=11165): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000300)=@ethernet={0x306, @random="67b807132287"}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xd, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000005c0)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x7101}) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x1000, 0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) sendto$phonet(r4, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x8, 0x6}, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x59eda05}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {0x0, 0x6}, {0xfff2, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x6}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r11 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d55000905020200020a0000090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x344, &(0x7f00000008c0)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x260, &(0x7f00000005c0)=ANY=[]) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x6, 0x200000) ioctl$MON_IOCX_GET(r13, 0x400c9206, &(0x7f0000000400)={&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000004c0)=""/187, 0xbb}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xe002, 0x83, "00000000000000000000ffff00"}) r14 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r14, 0x5412, &(0x7f00000000c0)=0x7) 9.84858432s ago: executing program 4 (id=11521): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000056f000/0x2000)=nil, 0x2000, &(0x7f0000000300)='@**$.\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x5, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x48801, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000bb7f1a00c600feff0000a60a9500000020000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) dup(r6) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c8070000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="6402028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040004000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400fd0c000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="bc000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400b800000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004008a010b05090000000500000709000000070081070400000008000100", @ANYRES32=0x0, @ANYBLOB="800002803c00010024000100757365725f6c696e6b757000000000000000000000ee613759666418f17e3b8896220000000000000000000000050003000600000004000400080006006d3afcc04917f059f5b77d40de5726a09f16c2e6c9738cee28157664d10e832112ce5b6e8e779359c4d675fb669be3e96b027ae075f80606bea377bc833af1f8098fa3baa475fef74d145f0fa4acd2a5993d0266b53e2b2d5052ddd9825a2ca48decd7143aeb373173dda76b3cc465f8e0b7af5e134c3b467726e40b871a2de246fe2d04ecc6405861bf5257e0cdfb696d2a9fe92d1e", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400080000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004007f0080060700000008000100", @ANYRES32=0x0, @ANYBLOB="9802028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff7f00004000", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c00040009000003008000000c0010050000000006000e1003000000080006e4f493000007007f0eff0000000700050004000000010103570600000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x7c8}, 0x1, 0x0, 0x0, 0x4004001}, 0x815) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 8.450150276s ago: executing program 4 (id=11529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="1c005e8008000700d20000000800"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setrlimit(0x3, &(0x7f0000000040)={0x2, 0x6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) timer_getoverrun(r6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) fcntl$setlease(r8, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 5.360150449s ago: executing program 4 (id=11537): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000056f000/0x2000)=nil, 0x2000, &(0x7f0000000300)='@**$.\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x5, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x48801, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000bb7f1a00c600feff0000a60a9500000020000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) dup(r6) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c8070000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="6402028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040004000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400fd0c000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="bc000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400b800000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004008a010b05090000000500000709000000070081070400000008000100", @ANYRES32=0x0, @ANYBLOB="800002803c00010024000100757365725f6c696e6b757000000000000000000000ee613759666418f17e3b8896220000000000000000000000050003000600000004000400080006006d3afcc04917f059f5b77d40de5726a09f16c2e6c9738cee28157664d10e832112ce5b6e8e779359c4d675fb669be3e96b027ae075f80606bea377bc833af1f8098fa3baa475fef74d145f0fa4acd2a5993d0266b53e2b2d5052ddd9825a2ca48decd7143aeb373173dda76b3cc465f8e0b7af5e134c3b467726e40b871a2de246fe2d04ecc6405861bf5257e0cdfb696d2a9fe92d1e", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400080000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004007f0080060700000008000100", @ANYRES32=0x0, @ANYBLOB="9802028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff7f000040000100240001006c625f706f72745f737461747300"/87, @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c00040009000003008000000c0010050000000006000e1003000000080006e4f493000007007f0eff0000000700050004000000010103570600000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x7c8}, 0x1, 0x0, 0x0, 0x4004001}, 0x815) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 4.693659813s ago: executing program 9 (id=11541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x40, &(0x7f0000000400)=""/64, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x1, 0x5, 0xb, 0x5}, {0x3, 0x3, 0x2b, 0x1}, {0x2, 0x1, 0x9, 0xa}], 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='hugepage_update\x00', r7, 0x0, 0x7}, 0x18) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)={0x50, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 4.172740998s ago: executing program 4 (id=11542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000200000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x7, 0xc0a3}, 0x8) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) dup(0xffffffffffffffff) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x3}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) 3.882734904s ago: executing program 8 (id=11543): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x38414761, 0x4, 0x2, 0x7, 0x0, 0x2, 0x1, 0x4, 0x1, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000400)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, 0x0, 0x0) 3.667872784s ago: executing program 9 (id=11546): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r0, 0x409, 0x9c66edc32267ac72) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) setrlimit(0x8, &(0x7f0000000080)={0x1, 0x401}) r2 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) socket(0x2, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() 2.786427085s ago: executing program 9 (id=11547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 2.470368729s ago: executing program 9 (id=11549): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r5, 0x0, 0x0, 0xffffffffffffffff, 0x1400}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r5, 0x0, 0x0, 0xffffffffffffffff, 0x1400}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc480000000c0a010100000000000000000a0040060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000500064043000000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc480000000c0a010100000000000000000a0040060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000500064043000000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r8, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r8, 0x0, 0xff40) pread64(r8, 0x0, 0x0, 0x8) (async) pread64(r8, 0x0, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0xc, 0x3, 0xb, 0x3}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0xc, 0x3, 0xb, 0x3}]}) write$ppp(r8, &(0x7f0000000200)="bc72", 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r9, 0x0, 0x5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r9, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.432893803s ago: executing program 8 (id=11550): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x03\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001d00010026bd7000fcdbdf251c000000", @ANYRES32, @ANYBLOB="2000420a0a0002000180c200ba030000080001"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x80) 2.329642391s ago: executing program 9 (id=11552): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000056f000/0x2000)=nil, 0x2000, &(0x7f0000000300)='@**$.\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x5, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x48801, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000bb7f1a00c600feff0000a60a9500000020000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c8070000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="6402028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040004000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400fd0c000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="bc000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400b800000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004008a010b05090000000500000709000000070081070400000008000100", @ANYRES32=0x0, @ANYBLOB="800002803c00010024000100757365725f6c696e6b757000000000000000000000ee613759666418f17e3b8896220000000000000000000000050003000600000004000400080006006d3afcc04917f059f5b77d40de5726a09f16c2e6c9738cee28157664d10e832112ce5b6e8e779359c4d675fb669be3e96b027ae075f80606bea377bc833af1f8098fa3baa475fef74d145f0fa4acd2a5993d0266b53e2b2d5052ddd9825a2ca48decd7143aeb373173dda76b3cc465f8e0b7af5e134c3b467726e40b871a2de246fe2d04ecc6405861bf5257e0cdfb696d2a9fe92d1e", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400080000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004007f0080060700000008000100", @ANYRES32=0x0, @ANYBLOB="9802028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff7f000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080006", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c00040009000003008000000c0010050000000006000e1003000000080006e4f493000007007f0eff0000000700050004000000010103570600000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e6700000000000005000300030000000800", @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x7c8}, 0x1, 0x0, 0x0, 0x4004001}, 0x815) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 2.328128227s ago: executing program 1 (id=11553): syz_emit_ethernet(0x85, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa810018000004bc00d3789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c07988d2cf26591b8f51aa3c11336cd0b5bcf1"], &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080c9}, 0x8890) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000003c0)=""/79) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) socket$rds(0x15, 0x5, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) 2.264453935s ago: executing program 1 (id=11554): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x202, &(0x7f0000000340)={&(0x7f0000000240)=""/72, 0x48}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xffffffff, 0x2140) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) (fail_nth: 11) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') readv(r8, &(0x7f0000001440)=[{0x0}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) 2.040908602s ago: executing program 1 (id=11555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="1c005e8008000700d20000000800"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setrlimit(0x3, &(0x7f0000000040)={0x2, 0x6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) timer_getoverrun(r6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) fcntl$setlease(r8, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 1.812378324s ago: executing program 8 (id=11556): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="1c005e8008000700d20000000800060001000080080005ac1d000000"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setrlimit(0x3, &(0x7f0000000040)={0x2, 0x6}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) timer_getoverrun(r5) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 1.599342983s ago: executing program 4 (id=11557): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f00000009c0)={0x17df000000000000, r4, r3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x10, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9243, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x5c}}, 0x0) bind$alg(r7, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r9 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) dup3(r1, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) 1.45151214s ago: executing program 9 (id=11558): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x14, &(0x7f0000000440)={0x40, 0x11, 0x2, {0x2, 0x64}}, 0x0, &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x80}}}}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x2000) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2000000}) 879.322405ms ago: executing program 8 (id=11559): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002800000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000740)="4ca6c665b04d1974586ebf832a54", 0x0, 0x2, 0x0, 0x0, 0x700, 0x0, 0x0, 0x4}, 0x4c) 796.20809ms ago: executing program 1 (id=11560): socket$inet(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f00000001c0)}, {0x0}], 0x3}], 0x1, 0x40800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r4, r3, 0x0, 0x0, 0x0}, 0x30) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 782.447802ms ago: executing program 8 (id=11561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newtclass={0x64, 0x28, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0x9}, {0x8, 0xc}, {0x1, 0xfff2}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x9d}}, @TCA_RATE={0x6, 0x5, {0x5, 0xfd}}, @TCA_RATE={0x6, 0x5, {0x10, 0x3}}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x40}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x10001}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x24040084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @generic={0x4, 0x6, "25d263", 0x0, 0x32, 0x100, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local}}}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="18000700000000000000002000000000000000007cc068cdce4de990d2e5588f35d978d4da950846ed1b6868486cd8bc2dd6022d6e29c69c55bb7dd993a7e330082c4595a9da3a46ef959eff723c17ac2fba14aaf9983409136406156020928465ca2b4430336a6825a185a9e0fbe4771d28957bbb15b8088b6e28fe244d6aa7c35b8d4c755f44fbeca264d7b3c23afa3de9658b034e9cd5dad3fa0a18583c3f361cf2522e673c2629338ee6093c07e76e290fbf2078e04b404bcb7932dfa270e8e50bf6748d2e261ab7ea0c1818fd88d4400d795501910e12bbb0045af60156c209889ff10d5abf22ddd04bf1d3a070ae4e8b006370bddc38ad0bc01da495c397185c38a185f6d073032857efca9add56cfc0a01f103b66bd038cafb967808c53791313f19cffd33b4ffa78227f2aee83b9139f79317e7b6c004e874114f6f1737509d3e2ab97f2c8347ffafbe003465c0b9f61ef0cf1081edfacabb42e39cc4cce635241bfd3e1", @ANYBLOB="b049f7f99f669eadfd50f6816b663c5dee5f38711f9d51455cecd78d93a87a165d1a9861b496e75a61d6b0b61a15bf222855733ae937ee24ece148d0af509eee607ce81fda0994f69751193279526cf2a415d35e2ff024f243f544a5c7cdac148809435e91c553f256632288ff8b7aa4c27b70785a88712a321abdfce4c4f9338ac6243ddb8a6da4e265d1c963f229323b01d561dbf9c90f17d5ee5394acfe630fc30a9a0921bfaeab13bda20de2fac913b0c1a1be3e1223bd7a6488", @ANYRES32=r1], 0x18}, 0x1, 0xf00}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x1000, 0x2010000, 0x1}, 0x1c) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8948, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a31000000001800078005000300200000000c00018008000140ffffffff0500050002ff00000500010006"], 0x64}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) socket$inet6(0xa, 0x80001, 0x0) (async) syz_open_dev$media(&(0x7f0000000040), 0x7, 0x2000) (async) r8 = syz_io_uring_setup(0x1902, &(0x7f0000000640)={0x0, 0xec26, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000140)={0x6, 'veth1_to_batadv\x00', {0xc874}}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r12, 0x4068aea3, &(0x7f0000000240)) 409.512051ms ago: executing program 4 (id=11562): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) mkdir(&(0x7f0000000280)='./file0/../file0/file0\x00', 0xfffffffffffffee4) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r2, 0x0, 0x0, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000100)={0x401, 0x10000, {}, {0xffffffffffffffff}, 0xe76, 0x1}) mount$cgroup(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0), 0x48058, &(0x7f0000000140)={[{@clone_children}, {@name={'name', 0x3d, '-]'}}, {@clone_children}, {@noprefix}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@measure}, {@euid_gt={'euid>', r6}}, {@hash}]}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x10000, {0x3, 0x0, 0x2000000001, 0x0, 0x10, 0x0, {0x0, 0x11dc, 0xfffffffffffffffc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0x10815, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xdffd}}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r9 = socket$inet6_udplite(0xa, 0x2, 0x88) read$char_usb(r9, &(0x7f0000000040)=""/188, 0xbc) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r10, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)) 240.201966ms ago: executing program 8 (id=11563): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYRES16=r1, @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf25090000000500080007000000080001000100000005001276002f0000"], 0x2c}}, 0x64000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x1de) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') write$P9_RREADLINK(r7, &(0x7f0000000180)={0xffffffffffffff9e, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="020d00001600be00000000000000000005000600200000000a00000000000000fc0100000000000000000000000000000000000002004e24ac14141e7efa96963eb51cc60800120002000200010000000000000006003200000000000000000000000000fe880000000000000000000000000001fc0100000000000000000000000000000400040000000000000000000000005e0458afd044d03ee8dcfbae9000000000006088076db1000000000000000000000000ea075422a9e7c509c3b27a31d806cf7f436cdbac5189a58557992cd165732c08d1bf23cf2a50076bd2514981e4463618db640896ac295f5b97f5fc8b15961436396b8cbbc98d5eea6278aa27ff9a974a81fa5a04ae6fbe95a5d29270d3f263b6f488db361c219c8594f081d7a85d6cc50b92912643eccc5237b9ba07eb86c61e14ae9ab2acf23d6360ec62c34dbc2fa77b9fa7b22180be88ee37ddd290204a6768e3b00de0516af82fc490b93b07e0201a0b80ec5c8df13f00000000000000"], 0xb0}}, 0x0) 96.863192ms ago: executing program 1 (id=11564): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2, 0x0, 0x15d}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2, 0x0, 0x15d}, 0x18) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 0s ago: executing program 1 (id=11565): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x80}}}}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x2000) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x14, &(0x7f0000000300)={0x20, 0x22, 0xcd, {0xcd, 0x30, "c656273bb5c08fa1091d15c0987046a78d31c7f71720d5e2477fa4eb04cd82775502d8fe619bdb3b5f0f06b7c5c69a6c61befe1ec49b4d23e5cf399774804024da7b936a67553e22fb1d5aba613fdb59d071a5c699b5ac45b8fa3e3c7ba9317b2f769cba3217f39fbe85b0447558f638e36035702865b78786dd51a02ef1f856a531d0d3ab406f024b0bae854410c67dd56e3b8880902fd091a38adc020c878289df3ce1cbc4f0faa50590b2121f87da57a4197722a7d47bf913f7bdb44a0a6048ccf267117fe7e99303d5"}}, &(0x7f0000000200)={0x0, 0x3, 0x59, @string={0x59, 0x3, "b008e2d308171ef246fab2809eca447f59708a45a7f67ae608c51be2a5aba10c6f653b9a8ac46deec74b10908a52b58c06b44ef3a13e9090290b77aaf17ee0e730f9f572d2080e613e28ba5640351f5842f87f603f6049"}}, &(0x7f0000000080)={0x0, 0x22, 0x3, {[@local, @global=@item_012={0x1, 0x1, 0x2, "cf"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xff, 0x1, {0x22, 0xc2f}}}}, &(0x7f0000000740)={0x18, &(0x7f0000000480)={0x0, 0x39, 0xc3, "5bf47ee43f08fb17979cf63c11f6e4a433f2e40bad80ba5a098924d5772786c3e02b45569f309687a8ad3c96fce739c4fd2675f8fcea1edc2351e9433ad36ddf83e30c2d87d10b068c501677f2019b60b4ac1639f813d6702a2edac375bfd923021871502e3d7d5c076ae7356f4dc0383150f6321eeb4e317979afd6453684265e199dc51730a9720a616df5207cc1dceb9f446a0abef6474d9493de57f5fa0edd929be73dba283de6bdb7d4befed7240dfdc5100ff71c9531cc4dc67ac2dfa92d235f"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000006c0)={0x20, 0x1, 0x11, "d03a485c4e3727d8810e8f89068630ae6f"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xfd}}) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) kernel console output (not intermixed with test programs): 9331][ T1328] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2361.784369][ T1328] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2361.788226][ T1328] usb 14-1: config 0 descriptor?? [ 2361.936638][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11005'. [ 2361.997462][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2362.001187][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2362.241072][T13226] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 2362.243182][T13226] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2362.247314][T13226] vhci_hcd vhci_hcd.0: Device attached [ 2362.516534][ T839] usb 56-1: SetAddress Request (10) to port 0 [ 2362.518516][ T839] usb 56-1: new SuperSpeed USB device number 10 using vhci_hcd [ 2362.772549][T13233] tmpfs: Bad value for 'mpol' [ 2362.846971][T29860] usb 54-1: device descriptor read/8, error -110 [ 2363.309137][ T9142] usb 8-1: USB disconnect, device number 24 [ 2363.341904][T13237] blk_print_req_error: 118 callbacks suppressed [ 2363.341916][T13237] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2363.346408][T13237] buffer_io_error: 118 callbacks suppressed [ 2363.346422][T13237] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2363.350958][T13237] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2363.353672][T13237] Buffer I/O error on dev nbd3, logical block 1, async page read [ 2363.356116][T13237] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2363.359042][T13237] Buffer I/O error on dev nbd3, logical block 2, async page read [ 2363.361454][T13237] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2363.364122][T13237] Buffer I/O error on dev nbd3, logical block 3, async page read [ 2363.366573][T13237] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2363.369621][T13237] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2363.372000][T13237] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2363.374622][T13237] Buffer I/O error on dev nbd3, logical block 1, async page read [ 2363.377113][T13237] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2363.379781][T13237] Buffer I/O error on dev nbd3, logical block 2, async page read [ 2363.382403][T13237] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2363.385835][T13237] Buffer I/O error on dev nbd3, logical block 3, async page read [ 2363.388994][T13237] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2363.392481][T13237] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2363.395566][T13237] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2363.399475][T13237] Buffer I/O error on dev nbd3, logical block 1, async page read [ 2363.404897][T13237] ldm_validate_partition_table(): Disk read failed. [ 2363.409162][T13237] Dev nbd3: unable to read RDB block 0 [ 2363.413543][T13237] nbd3: unable to read partition table [ 2363.457577][T29860] usb usb54-port1: attempt power cycle [ 2363.685629][T13241] vxfs: unable to read disk superblock at 1 [ 2363.688269][T13241] vxfs: unable to read disk superblock at 8 [ 2363.690339][T13241] vxfs: can't find superblock. [ 2363.825912][T13245] bridge39: entered promiscuous mode [ 2364.087771][T29860] usb usb54-port1: unable to enumerate USB device [ 2364.406013][T13227] vhci_hcd: connection reset by peer [ 2364.409189][T16209] vhci_hcd: stop threads [ 2364.412048][T16209] vhci_hcd: release socket [ 2364.414328][ T1328] usbhid 14-1:0.0: can't add hid device: -71 [ 2364.419666][T16209] vhci_hcd: disconnect device [ 2364.425323][ T1328] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 2364.430960][ T1328] usb 14-1: USB disconnect, device number 14 [ 2364.502821][T29878] hid-generic 0007:FFFFFFF8:0FFF.004C: unknown main item tag 0x0 [ 2364.514603][T29878] hid-generic 0007:FFFFFFF8:0FFF.004C: unknown main item tag 0x0 [ 2364.515233][T13260] FAULT_INJECTION: forcing a failure. [ 2364.515233][T13260] name failslab, interval 1, probability 0, space 0, times 0 [ 2364.517635][T29878] hid-generic 0007:FFFFFFF8:0FFF.004C: unknown main item tag 0x0 [ 2364.522099][T13260] CPU: 1 UID: 0 PID: 13260 Comm: syz.8.11016 Not tainted syzkaller #0 PREEMPT(full) [ 2364.522114][T13260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2364.522122][T13260] Call Trace: [ 2364.522126][T13260] [ 2364.522130][T13260] dump_stack_lvl+0x16c/0x1f0 [ 2364.522147][T13260] should_fail_ex+0x512/0x640 [ 2364.522166][T13260] should_failslab+0xc2/0x120 [ 2364.522181][T13260] __kmalloc_cache_noprof+0x72/0x780 [ 2364.522199][T13260] ? sctp_add_bind_addr+0xae/0x3f0 [ 2364.522213][T13260] ? sctp_add_bind_addr+0xae/0x3f0 [ 2364.522222][T13260] sctp_add_bind_addr+0xae/0x3f0 [ 2364.522235][T13260] sctp_copy_local_addr_list+0x349/0x550 [ 2364.522250][T13260] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2364.522264][T13260] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 2364.522278][T13260] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2364.522297][T13260] sctp_bind_addr_copy+0xe0/0x530 [ 2364.522317][T13260] sctp_connect_new_asoc+0x1c9/0x770 [ 2364.522343][T13260] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2364.522372][T13260] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2364.522398][T13260] sctp_sendmsg+0x1557/0x1e00 [ 2364.522430][T13260] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2364.522447][T13260] ? __pfx___might_resched+0x10/0x10 [ 2364.522462][T13260] ? aa_sk_perm+0x2f4/0xb10 [ 2364.522474][T13260] ? __pfx_aa_sk_perm+0x10/0x10 [ 2364.522483][T13260] ? find_held_lock+0x2b/0x80 [ 2364.522498][T13260] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2364.522514][T13260] inet_sendmsg+0x11c/0x140 [ 2364.522532][T13260] ____sys_sendmsg+0x973/0xc70 [ 2364.522548][T13260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2364.522560][T13260] ? get_compat_msghdr+0x11a/0x170 [ 2364.522583][T13260] ___sys_sendmsg+0x134/0x1d0 [ 2364.522595][T13260] ? __pfx____sys_sendmsg+0x10/0x10 [ 2364.522611][T13260] ? find_held_lock+0x2b/0x80 [ 2364.522630][T13260] __sys_sendmsg+0x16d/0x220 [ 2364.522641][T13260] ? __pfx___sys_sendmsg+0x10/0x10 [ 2364.522657][T13260] ? rcu_is_watching+0x12/0xc0 [ 2364.522674][T13260] __do_fast_syscall_32+0x7c/0x300 [ 2364.522688][T13260] do_fast_syscall_32+0x32/0x80 [ 2364.522701][T13260] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2364.522715][T13260] RIP: 0023:0xf70ed579 [ 2364.522728][T13260] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2364.522740][T13260] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2364.522750][T13260] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002dc0 [ 2364.522757][T13260] RDX: 00000000200088c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2364.522763][T13260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2364.522769][T13260] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2364.522775][T13260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2364.522789][T13260] [ 2364.632391][T29878] hid-generic 0007:FFFFFFF8:0FFF.004C: unknown main item tag 0x0 [ 2364.637853][T29878] hid-generic 0007:FFFFFFF8:0FFF.004C: unknown main item tag 0x0 [ 2364.646557][T29878] hid-generic 0007:FFFFFFF8:0FFF.004C: unknown main item tag 0x0 [ 2364.654309][T29878] hid-generic 0007:FFFFFFF8:0FFF.004C: unknown main item tag 0x0 [ 2364.658623][T29878] hid-generic 0007:FFFFFFF8:0FFF.004C: unknown main item tag 0x0 [ 2364.669139][T29878] hid-generic 0007:FFFFFFF8:0FFF.004C: unknown main item tag 0x0 [ 2364.682680][T29878] hid-generic 0007:FFFFFFF8:0FFF.004C: unknown main item tag 0x0 [ 2364.688696][T29878] hid-generic 0007:FFFFFFF8:0FFF.004C: hidraw0: HID v0.07 Device [syz1] on syz0 [ 2364.702027][T13266] vxfs: unable to read disk superblock at 1 [ 2364.704767][T13266] vxfs: unable to read disk superblock at 8 [ 2364.707299][T13266] vxfs: can't find superblock. [ 2364.772918][T13271] syzkaller0: entered promiscuous mode [ 2364.774659][T13271] syzkaller0: entered allmulticast mode [ 2364.892601][T13276] bridge18: entered promiscuous mode [ 2365.939053][T13289] create_pit_timer: 6 callbacks suppressed [ 2365.939068][T13289] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2365.990760][T13292] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 2366.058347][T29878] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2366.219714][T29878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2366.223806][T29878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2366.227137][T29878] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2366.612181][T13305] ldm_validate_partition_table(): Disk read failed. [ 2366.615122][T13305] Dev nbd3: unable to read RDB block 0 [ 2366.617842][T13305] nbd3: unable to read partition table [ 2366.992880][T29878] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2367.001626][T29878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2367.008164][T29878] usb 6-1: config 0 descriptor?? [ 2367.169016][T13317] vxfs: unable to read disk superblock at 1 [ 2367.177298][T13317] vxfs: unable to read disk superblock at 8 [ 2367.179493][T13317] vxfs: can't find superblock. [ 2367.224322][T13287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2367.228117][T13287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2367.713572][ T839] usb 56-1: device descriptor read/8, error -110 [ 2367.992398][T13325] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2367.994869][T13325] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2368.004945][T13325] vhci_hcd vhci_hcd.0: Device attached [ 2368.107528][ T839] usb usb56-port1: attempt power cycle [ 2368.309565][T29860] usb 40-1: SetAddress Request (87) to port 0 [ 2368.312143][T29860] usb 40-1: new SuperSpeed USB device number 87 using vhci_hcd [ 2368.710437][ T839] usb usb56-port1: unable to enumerate USB device [ 2368.837555][T13353] syzkaller0: entered promiscuous mode [ 2368.839406][T13353] syzkaller0: entered allmulticast mode [ 2369.269711][T13361] bridge24: entered promiscuous mode [ 2369.317013][T13362] blk_print_req_error: 118 callbacks suppressed [ 2369.317031][T13362] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2369.324370][T13362] buffer_io_error: 118 callbacks suppressed [ 2369.324388][T13362] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2369.330389][T13362] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2369.334238][T13362] Buffer I/O error on dev nbd3, logical block 1, async page read [ 2369.337607][T13362] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2369.341823][T13362] Buffer I/O error on dev nbd3, logical block 2, async page read [ 2369.345444][T13362] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2369.349147][T13362] Buffer I/O error on dev nbd3, logical block 3, async page read [ 2369.352556][T13362] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2369.356332][T13362] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2369.359589][T13362] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2369.363851][T13362] Buffer I/O error on dev nbd3, logical block 1, async page read [ 2369.367129][T13362] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2369.370928][T13362] Buffer I/O error on dev nbd3, logical block 2, async page read [ 2369.374241][T13362] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2369.378051][T13362] Buffer I/O error on dev nbd3, logical block 3, async page read [ 2369.381960][T13362] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2369.385666][T13362] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2369.388974][T13362] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2369.392930][T13362] Buffer I/O error on dev nbd3, logical block 1, async page read [ 2369.398304][T13362] ldm_validate_partition_table(): Disk read failed. [ 2369.408622][T13362] Dev nbd3: unable to read RDB block 0 [ 2369.412932][T13362] nbd3: unable to read partition table [ 2370.115130][T13326] vhci_hcd: connection reset by peer [ 2370.117675][T16209] vhci_hcd: stop threads [ 2370.118421][T29878] usbhid 6-1:0.0: can't add hid device: -71 [ 2370.119028][T16209] vhci_hcd: release socket [ 2370.119056][T16209] vhci_hcd: disconnect device [ 2370.126787][T29878] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2370.140558][T29878] usb 6-1: USB disconnect, device number 7 [ 2370.543444][T13388] bridge0: port 2(bridge_slave_1) entered disabled state [ 2370.545805][T13388] bridge0: port 1(bridge_slave_0) entered disabled state [ 2370.574313][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11054'. [ 2370.606618][T13388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2370.614929][T13388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2370.776489][T13392] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 2370.779967][T29007] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2370.783659][T29007] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2370.787084][T29007] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2370.791771][T29007] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2370.795247][T29007] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2370.798844][T29007] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2370.802099][T29007] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2370.805554][T29007] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2371.005169][T13400] gfs2: Unknown parameter 'norecovery™Û;fçÓáöšOŠŸ¹`¦A›u 4Þþ墅JÛŒŠ$«fhÑYo’‹Ýn1ylJ8(áK1' [ 2371.414161][ T839] IPVS: starting estimator thread 0... [ 2371.531482][T13402] IPVS: using max 43 ests per chain, 103200 per kthread [ 2372.239518][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11060'. [ 2372.242513][T13417] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11060'. [ 2372.266990][T16209] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2372.270514][T16209] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2372.274047][T16209] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2372.277417][T16209] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2373.364880][T13435] bridge0: port 4(erspan0) entered blocking state [ 2373.413087][T13435] bridge0: port 4(erspan0) entered disabled state [ 2373.417946][T13435] erspan0: entered allmulticast mode [ 2373.422337][T13435] erspan0: entered promiscuous mode [ 2373.425128][T13435] bridge0: port 4(erspan0) entered blocking state [ 2373.427970][T13435] bridge0: port 4(erspan0) entered forwarding state [ 2373.452525][T29860] usb 40-1: device descriptor read/8, error -110 [ 2374.003558][T29860] usb usb40-port1: attempt power cycle [ 2374.533343][T13465] bridge25: entered promiscuous mode [ 2374.598892][T13467] blk_print_req_error: 54 callbacks suppressed [ 2374.598910][T13467] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2374.606054][T13467] buffer_io_error: 54 callbacks suppressed [ 2374.606069][T13467] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2374.612025][T13467] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2374.616368][T13467] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2374.619901][T13467] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2374.624031][T13467] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2374.627578][T13467] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2374.631471][T13467] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2374.635127][T13467] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2374.639120][T13467] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2374.642736][T13467] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2374.646750][T13467] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2374.650330][T13467] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2374.654464][T13467] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2374.658103][T13467] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2374.662054][T13467] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2374.665888][T13467] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2374.669794][T13467] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2374.673401][T13467] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2374.719090][T13467] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2374.796180][T13467] ldm_validate_partition_table(): Disk read failed. [ 2374.799137][T13467] Dev nbd1: unable to read RDB block 0 [ 2374.802508][T13467] nbd1: unable to read partition table [ 2374.807363][T29860] usb usb40-port1: unable to enumerate USB device [ 2374.935274][T13475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11074'. [ 2375.396096][T13487] pim6reg1: entered promiscuous mode [ 2375.398405][T13487] pim6reg1: entered allmulticast mode [ 2375.569454][T13491] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2375.602307][T13501] FAULT_INJECTION: forcing a failure. [ 2375.602307][T13501] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.602707][T13500] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11082'. [ 2375.607843][T13501] CPU: 2 UID: 0 PID: 13501 Comm: syz.3.11083 Not tainted syzkaller #0 PREEMPT(full) [ 2375.607859][T13501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2375.607866][T13501] Call Trace: [ 2375.607870][T13501] [ 2375.607874][T13501] dump_stack_lvl+0x16c/0x1f0 [ 2375.607890][T13501] should_fail_ex+0x512/0x640 [ 2375.607906][T13501] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 2375.607920][T13501] should_failslab+0xc2/0x120 [ 2375.607935][T13501] kmem_cache_alloc_node_noprof+0x78/0x770 [ 2375.607946][T13501] ? __alloc_skb+0x2b2/0x380 [ 2375.607965][T13501] ? __alloc_skb+0x2b2/0x380 [ 2375.607979][T13501] __alloc_skb+0x2b2/0x380 [ 2375.607994][T13501] ? __pfx___alloc_skb+0x10/0x10 [ 2375.608009][T13501] ? __pfx_inet_rtm_delroute+0x10/0x10 [ 2375.608029][T13501] netlink_ack+0x15d/0xb80 [ 2375.608044][T13501] netlink_rcv_skb+0x332/0x420 [ 2375.608055][T13501] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2375.608067][T13501] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2375.608083][T13501] ? netlink_deliver_tap+0x1ae/0xd30 [ 2375.608096][T13501] netlink_unicast+0x5aa/0x870 [ 2375.608108][T13501] ? __pfx_netlink_unicast+0x10/0x10 [ 2375.608124][T13501] netlink_sendmsg+0x8c8/0xdd0 [ 2375.608137][T13501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2375.608149][T13501] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2375.608167][T13501] ____sys_sendmsg+0xa98/0xc70 [ 2375.608181][T13501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2375.608194][T13501] ? get_compat_msghdr+0x11a/0x170 [ 2375.608216][T13501] ___sys_sendmsg+0x134/0x1d0 [ 2375.608226][T13501] ? __pfx____sys_sendmsg+0x10/0x10 [ 2375.608243][T13501] ? find_held_lock+0x2b/0x80 [ 2375.608262][T13501] __sys_sendmsg+0x16d/0x220 [ 2375.608272][T13501] ? __pfx___sys_sendmsg+0x10/0x10 [ 2375.608287][T13501] ? rcu_is_watching+0x12/0xc0 [ 2375.608304][T13501] __do_fast_syscall_32+0x7c/0x300 [ 2375.608324][T13501] do_fast_syscall_32+0x32/0x80 [ 2375.608345][T13501] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2375.608365][T13501] RIP: 0023:0xf6ffd579 [ 2375.608381][T13501] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2375.608398][T13501] RSP: 002b:00000000f53ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2375.608413][T13501] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 2375.608421][T13501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2375.608427][T13501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2375.608433][T13501] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2375.608439][T13501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2375.608452][T13501] [ 2375.627834][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11081'. [ 2375.836639][T13518] bridge17: entered promiscuous mode [ 2375.855543][T13523] netlink: 40 bytes leftover after parsing attributes in process `syz.9.11089'. [ 2375.859119][T13523] netlink: 80 bytes leftover after parsing attributes in process `syz.9.11089'. [ 2375.862529][T13523] netlink: 40 bytes leftover after parsing attributes in process `syz.9.11089'. [ 2375.866550][T13523] netlink: 80 bytes leftover after parsing attributes in process `syz.9.11089'. [ 2375.873009][T13525] netlink: 40 bytes leftover after parsing attributes in process `syz.9.11089'. [ 2375.877643][T13525] netlink: 80 bytes leftover after parsing attributes in process `syz.9.11089'. [ 2375.880529][T13525] netlink: 40 bytes leftover after parsing attributes in process `syz.9.11089'. [ 2375.883513][T13525] netlink: 80 bytes leftover after parsing attributes in process `syz.9.11089'. [ 2376.159011][T13533] bridge19: entered promiscuous mode [ 2376.739769][ T10] IPVS: starting estimator thread 0... [ 2376.837845][T13542] IPVS: using max 43 ests per chain, 103200 per kthread [ 2376.968785][T13551] netdevsim netdevsim1: Direct firmware load for . [ 2376.968785][T13551] failed with error -2 [ 2376.975199][T13551] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2376.975199][T13551] [ 2377.230399][T13559] vxfs: unable to read disk superblock at 1 [ 2377.232835][T13559] vxfs: unable to read disk superblock at 8 [ 2377.235342][T13559] vxfs: can't find superblock. [ 2377.862205][T13578] syzkaller0: entered promiscuous mode [ 2377.863949][T13578] syzkaller0: entered allmulticast mode [ 2377.881700][T13578] FAULT_INJECTION: forcing a failure. [ 2377.881700][T13578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2377.890912][T13578] CPU: 0 UID: 0 PID: 13578 Comm: syz.1.11103 Not tainted syzkaller #0 PREEMPT(full) [ 2377.890929][T13578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2377.890936][T13578] Call Trace: [ 2377.890941][T13578] [ 2377.890945][T13578] dump_stack_lvl+0x16c/0x1f0 [ 2377.890963][T13578] should_fail_ex+0x512/0x640 [ 2377.890982][T13578] _copy_from_user+0x2e/0xd0 [ 2377.891001][T13578] move_addr_to_kernel+0x65/0x170 [ 2377.891023][T13578] __sys_sendto+0x1be/0x520 [ 2377.891049][T13578] ? __pfx___sys_sendto+0x10/0x10 [ 2377.891080][T13578] ? ksys_write+0x1ac/0x250 [ 2377.891093][T13578] ? __pfx_ksys_write+0x10/0x10 [ 2377.891110][T13578] __ia32_sys_sendto+0xdd/0x1b0 [ 2377.891131][T13578] ? lockdep_hardirqs_on+0x7c/0x110 [ 2377.891147][T13578] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2377.891168][T13578] __do_fast_syscall_32+0x7c/0x300 [ 2377.891190][T13578] do_fast_syscall_32+0x32/0x80 [ 2377.891207][T13578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2377.891222][T13578] RIP: 0023:0xf700d579 [ 2377.891231][T13578] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2377.891242][T13578] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 2377.891253][T13578] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 2377.891260][T13578] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 00000000800001c0 [ 2377.891266][T13578] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 2377.891273][T13578] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2377.891279][T13578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2377.891293][T13578] [ 2378.155865][T13585] bridge26: entered promiscuous mode [ 2378.759542][T13595] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2378.989302][T13599] vxfs: unable to read disk superblock at 1 [ 2378.991467][T13599] vxfs: unable to read disk superblock at 8 [ 2378.993869][T13599] vxfs: can't find superblock. [ 2379.942744][T13616] nbd: illegal input index 2958377 [ 2380.107138][T13623] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2380.149542][T13626] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2380.165079][T13626] kvm: pic: level sensitive irq not supported [ 2380.166328][T13626] kvm: pic: non byte read [ 2380.172074][T13626] kvm: pic: level sensitive irq not supported [ 2380.172355][T13626] kvm: pic: non byte read [ 2380.177658][T13626] kvm: pic: level sensitive irq not supported [ 2380.178027][T13626] kvm: pic: non byte read [ 2380.183306][T13626] kvm: pic: level sensitive irq not supported [ 2380.183813][T13626] kvm: pic: non byte read [ 2380.189703][T13626] kvm: pic: level sensitive irq not supported [ 2380.190009][T13626] kvm: pic: non byte read [ 2380.194470][T13626] kvm: pic: level sensitive irq not supported [ 2380.194734][T13626] kvm: pic: non byte read [ 2380.200281][T13626] kvm: pic: level sensitive irq not supported [ 2380.200571][T13626] kvm: pic: non byte read [ 2380.205773][T13626] kvm: pic: level sensitive irq not supported [ 2380.206095][T13626] kvm: pic: non byte read [ 2382.442589][T13675] __nla_validate_parse: 2 callbacks suppressed [ 2382.442600][T13675] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11126'. [ 2382.722181][T13684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11127'. [ 2382.738173][T13684] bridge_slave_1: left allmulticast mode [ 2382.740685][T13684] bridge_slave_1: left promiscuous mode [ 2382.749577][T13684] bridge0: port 2(bridge_slave_1) entered disabled state [ 2382.790269][T13684] bridge_slave_0: left allmulticast mode [ 2382.792926][T13684] bridge_slave_0: left promiscuous mode [ 2382.804687][T13684] bridge0: port 1(bridge_slave_0) entered disabled state [ 2382.841576][T13688] nvme_fabrics: missing parameter 'transport=%s' [ 2382.845000][T13688] nvme_fabrics: missing parameter 'nqn=%s' [ 2384.521327][T13704] x_tables: duplicate underflow at hook 1 [ 2384.530122][T13704] efs: cannot read volume header [ 2385.359163][T13727] IPVS: length: 104 != 8 [ 2385.756114][T13735] bridge0: entered promiscuous mode [ 2385.757020][T13734] befs: (loop19): No write support. Marking filesystem read-only [ 2385.762797][T13734] befs: (loop19): unable to read superblock [ 2387.020571][ T839] kernel write not supported for file bpf-map (pid: 839 comm: kworker/1:2) [ 2387.149670][T13754] bridge0: port 4(erspan0) entered blocking state [ 2387.152410][T13754] bridge0: port 4(erspan0) entered disabled state [ 2387.155276][T13754] erspan0: entered allmulticast mode [ 2387.163138][T13754] erspan0: entered promiscuous mode [ 2389.187980][T13792] bridge40: entered promiscuous mode [ 2390.109770][T13802] nvme_fabrics: missing parameter 'transport=%s' [ 2390.112090][T13802] nvme_fabrics: missing parameter 'nqn=%s' [ 2390.744798][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11167'. [ 2391.189296][T13837] bridge41: entered promiscuous mode [ 2391.415730][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11172'. [ 2391.502847][T13847] erofs (device nbd9): cannot find valid erofs superblock [ 2391.860816][T13851] FAULT_INJECTION: forcing a failure. [ 2391.860816][T13851] name failslab, interval 1, probability 0, space 0, times 0 [ 2391.867671][T13851] CPU: 0 UID: 0 PID: 13851 Comm: syz.9.11174 Not tainted syzkaller #0 PREEMPT(full) [ 2391.867688][T13851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2391.867695][T13851] Call Trace: [ 2391.867699][T13851] [ 2391.867704][T13851] dump_stack_lvl+0x16c/0x1f0 [ 2391.867771][T13851] should_fail_ex+0x512/0x640 [ 2391.867789][T13851] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2391.867809][T13851] should_failslab+0xc2/0x120 [ 2391.867824][T13851] __kmalloc_cache_noprof+0x72/0x780 [ 2391.867842][T13851] ? sctp_association_new+0xbb/0x2a00 [ 2391.867861][T13851] ? sctp_association_new+0xbb/0x2a00 [ 2391.867876][T13851] sctp_association_new+0xbb/0x2a00 [ 2391.867892][T13851] ? sctp_v4_scope+0x171/0x1a0 [ 2391.867905][T13851] sctp_connect_new_asoc+0x1a8/0x770 [ 2391.867922][T13851] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2391.867941][T13851] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2391.867962][T13851] sctp_sendmsg+0x1557/0x1e00 [ 2391.867982][T13851] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2391.867997][T13851] ? __pfx___might_resched+0x10/0x10 [ 2391.868012][T13851] ? aa_sk_perm+0x2f4/0xb10 [ 2391.868026][T13851] ? __pfx_aa_sk_perm+0x10/0x10 [ 2391.868035][T13851] ? __might_fault+0xe3/0x190 [ 2391.868050][T13851] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2391.868067][T13851] inet_sendmsg+0x11c/0x140 [ 2391.868084][T13851] __sys_sendto+0x43c/0x520 [ 2391.868102][T13851] ? __pfx___sys_sendto+0x10/0x10 [ 2391.868130][T13851] ? ksys_write+0x1ac/0x250 [ 2391.868143][T13851] ? __pfx_ksys_write+0x10/0x10 [ 2391.868156][T13851] __ia32_sys_sendto+0xdd/0x1b0 [ 2391.868173][T13851] ? lockdep_hardirqs_on+0x7c/0x110 [ 2391.868186][T13851] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2391.868199][T13851] __do_fast_syscall_32+0x7c/0x300 [ 2391.868214][T13851] do_fast_syscall_32+0x32/0x80 [ 2391.868227][T13851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2391.868242][T13851] RIP: 0023:0xf7f17579 [ 2391.868251][T13851] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2391.868262][T13851] RSP: 002b:00000000f540655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 2391.868273][T13851] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 2391.868280][T13851] RDX: 0000000000000001 RSI: 0000000000040080 RDI: 0000000080004ff0 [ 2391.868287][T13851] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 2391.868293][T13851] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2391.868299][T13851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2391.868314][T13851] [ 2392.281767][T13877] 8021q: VLANs not supported on lo [ 2393.652117][T13894] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2393.654865][T13894] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2393.658724][T13894] vhci_hcd vhci_hcd.0: Device attached [ 2393.932506][ T839] usb 40-1: SetAddress Request (91) to port 0 [ 2393.934704][ T839] usb 40-1: new SuperSpeed USB device number 91 using vhci_hcd [ 2394.096008][T13903] bridge20: entered promiscuous mode [ 2394.549162][T13895] vhci_hcd: connection reset by peer [ 2394.551908][T16209] vhci_hcd: stop threads [ 2394.554008][T16209] vhci_hcd: release socket [ 2394.555957][T16209] vhci_hcd: disconnect device [ 2394.646368][T13909] FAULT_INJECTION: forcing a failure. [ 2394.646368][T13909] name failslab, interval 1, probability 0, space 0, times 0 [ 2394.651289][T13909] CPU: 3 UID: 0 PID: 13909 Comm: syz.8.11187 Not tainted syzkaller #0 PREEMPT(full) [ 2394.651312][T13909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2394.651323][T13909] Call Trace: [ 2394.651329][T13909] [ 2394.651337][T13909] dump_stack_lvl+0x16c/0x1f0 [ 2394.651360][T13909] should_fail_ex+0x512/0x640 [ 2394.651384][T13909] ? fs_reclaim_acquire+0xae/0x150 [ 2394.651414][T13909] should_failslab+0xc2/0x120 [ 2394.651437][T13909] __kmalloc_noprof+0xdd/0x880 [ 2394.651463][T13909] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2394.651487][T13909] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2394.651505][T13909] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2394.651549][T13909] ? tomoyo_profile+0x47/0x60 [ 2394.651572][T13909] tomoyo_path_number_perm+0x245/0x580 [ 2394.651597][T13909] ? tomoyo_path_number_perm+0x237/0x580 [ 2394.651624][T13909] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2394.651675][T13909] ? find_held_lock+0x2b/0x80 [ 2394.651691][T13909] ? hook_file_ioctl_common+0x145/0x410 [ 2394.651713][T13909] ? __fget_files+0x20e/0x3c0 [ 2394.651734][T13909] security_file_ioctl_compat+0x9b/0x240 [ 2394.651753][T13909] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2394.651780][T13909] __do_fast_syscall_32+0x7c/0x300 [ 2394.651802][T13909] do_fast_syscall_32+0x32/0x80 [ 2394.651821][T13909] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2394.651842][T13909] RIP: 0023:0xf70ed579 [ 2394.651854][T13909] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2394.651870][T13909] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2394.651885][T13909] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005412 [ 2394.651895][T13909] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 2394.651905][T13909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2394.651914][T13909] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2394.651924][T13909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2394.651947][T13909] [ 2394.651954][T13909] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2394.757925][ T40] audit: type=1326 audit(2000000847.429:54663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13910 comm="syz.8.11188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2394.765542][ T40] audit: type=1326 audit(2000000847.429:54664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13910 comm="syz.8.11188" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 2394.773016][ T40] audit: type=1326 audit(2000000847.429:54665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13910 comm="syz.8.11188" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 2394.780176][ T40] audit: type=1326 audit(2000000847.429:54666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13910 comm="syz.8.11188" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2394.787381][ T40] audit: type=1326 audit(2000000847.429:54667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13910 comm="syz.8.11188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2394.795202][ T40] audit: type=1326 audit(2000000847.429:54668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13910 comm="syz.8.11188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2394.802414][ T40] audit: type=1326 audit(2000000847.429:54669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13910 comm="syz.8.11188" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 2394.809911][ T40] audit: type=1326 audit(2000000847.429:54670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13910 comm="syz.8.11188" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 2394.816862][ T40] audit: type=1326 audit(2000000847.429:54671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13910 comm="syz.8.11188" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2394.823688][ T40] audit: type=1326 audit(2000000847.439:54672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13910 comm="syz.8.11188" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 2394.946938][T13918] tipc: Bearer : already 2 bearers with priority 10 [ 2394.949288][T13918] tipc: Bearer : trying with adjusted priority [ 2394.951559][T13918] tipc: Enabling of bearer rejected, failed to enable media [ 2395.076074][T13922] vxfs: unable to read disk superblock at 1 [ 2395.078115][T13922] vxfs: unable to read disk superblock at 8 [ 2395.079980][T13922] vxfs: can't find superblock. [ 2396.120412][T13930] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 2396.122758][T13930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2396.125990][T13930] vhci_hcd vhci_hcd.0: Device attached [ 2396.148402][T13930] fuse: Unknown parameter '' [ 2396.413687][ T9133] usb 56-1: SetAddress Request (14) to port 0 [ 2396.416044][ T9133] usb 56-1: new SuperSpeed USB device number 14 using vhci_hcd [ 2396.825055][T13931] vhci_hcd: connection reset by peer [ 2396.827576][T29007] vhci_hcd: stop threads [ 2396.829375][T29007] vhci_hcd: release socket [ 2396.831613][T29007] vhci_hcd: disconnect device [ 2397.478235][T13939] xt_hashlimit: overflow, try lower: 60585/0 [ 2398.747867][T13952] bridge42: entered promiscuous mode [ 2399.073680][ T839] usb 40-1: device descriptor read/8, error -110 [ 2399.809267][T13972] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 2399.811348][T13972] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2399.817393][T13972] vhci_hcd vhci_hcd.0: Device attached [ 2400.006364][ T839] usb usb40-port1: attempt power cycle [ 2400.013759][T13972] QAT: Invalid ioctl -2146933204 [ 2400.021398][T13972] QAT: Invalid ioctl -1072667454 [ 2400.024860][T13972] QAT: Invalid ioctl -1065327078 [ 2400.068155][ T40] kauditd_printk_skb: 90 callbacks suppressed [ 2400.068210][ T40] audit: type=1800 audit(2000000852.736:54763): pid=13972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.11202" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 2400.298492][T13973] vhci_hcd: connection closed [ 2400.311037][T29007] vhci_hcd: stop threads [ 2400.315015][T29007] vhci_hcd: release socket [ 2400.317212][T29007] vhci_hcd: disconnect device [ 2400.389189][T13977] hub 8-0:1.0: USB hub found [ 2400.391417][T13977] hub 8-0:1.0: 1 port detected [ 2400.577197][ T839] usb usb40-port1: unable to enumerate USB device [ 2401.506434][ T9133] usb 56-1: device descriptor read/8, error -110 [ 2401.665373][T13994] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11209'. [ 2401.906772][ T9133] usb usb56-port1: attempt power cycle [ 2402.441047][T14007] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2402.443077][T14007] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2402.445904][T14007] vhci_hcd vhci_hcd.0: Device attached [ 2402.477358][ T9133] usb usb56-port1: unable to enumerate USB device [ 2402.653855][T14012] raw_sendmsg: syz.8.11214 forgot to set AF_INET. Fix it! [ 2402.717140][ T839] usb 40-1: SetAddress Request (95) to port 0 [ 2402.730910][ T839] usb 40-1: new SuperSpeed USB device number 95 using vhci_hcd [ 2402.889057][T14016] vxfs: unable to read disk superblock at 1 [ 2402.891141][T14016] vxfs: unable to read disk superblock at 8 [ 2402.893040][T14016] vxfs: can't find superblock. [ 2403.068305][T14009] vhci_hcd: connection reset by peer [ 2403.071133][T29016] vhci_hcd: stop threads [ 2403.072884][T29016] vhci_hcd: release socket [ 2403.075900][T29016] vhci_hcd: disconnect device [ 2403.526511][T14019] vxfs: unable to read disk superblock at 1 [ 2403.529460][T14019] vxfs: unable to read disk superblock at 8 [ 2403.531882][T14019] vxfs: can't find superblock. [ 2404.497577][T14039] blk_print_req_error: 54 callbacks suppressed [ 2404.497619][T14039] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2404.502583][T14039] buffer_io_error: 54 callbacks suppressed [ 2404.502592][T14039] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2404.507324][T14039] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2404.510313][T14039] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2404.513074][T14039] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2404.516044][T14039] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2404.518896][T14039] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2404.521859][T14039] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2404.524562][T14039] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2404.527540][T14039] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2404.530167][T14039] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2404.533122][T14039] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2404.535748][T14039] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2404.538795][T14039] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2404.541382][T14039] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2404.544306][T14039] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2404.546886][T14039] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2404.549916][T14039] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2404.552538][T14039] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2404.555457][T14039] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2404.563565][T14039] ldm_validate_partition_table(): Disk read failed. [ 2404.568747][T14039] Dev nbd1: unable to read RDB block 0 [ 2404.686048][T14039] nbd1: unable to read partition table [ 2405.640474][T14044] bridge27: entered promiscuous mode [ 2406.161100][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.204495][ T4969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2406.210939][ T4969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2406.217171][ T4969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2406.220395][ T4969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2406.223037][ T4969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2406.228541][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2406.231045][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2406.233480][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2406.236466][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2406.239622][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2406.490403][T29016] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.504655][T14058] veth1_macvtap: left promiscuous mode [ 2406.513060][T14056] random: crng reseeded on system resumption [ 2406.589236][T29016] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.669586][T14068] program syz.9.11227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2406.731972][T29016] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.782191][T14051] chnl_net:caif_netlink_parms(): no params data found [ 2406.861422][T29016] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.966046][T14051] bridge0: port 1(bridge_slave_0) entered blocking state [ 2406.971149][T14051] bridge0: port 1(bridge_slave_0) entered disabled state [ 2406.974515][T14051] bridge_slave_0: entered allmulticast mode [ 2406.979162][T14051] bridge_slave_0: entered promiscuous mode [ 2406.989151][T14051] bridge0: port 2(bridge_slave_1) entered blocking state [ 2406.991828][T14051] bridge0: port 2(bridge_slave_1) entered disabled state [ 2406.994832][T14051] bridge_slave_1: entered allmulticast mode [ 2406.999239][T14051] bridge_slave_1: entered promiscuous mode [ 2407.050141][T14051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2407.063139][T14051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2407.135424][T14051] team0: Port device team_slave_0 added [ 2407.151785][T14051] team0: Port device team_slave_1 added [ 2407.325121][T14091] sctp: [Deprecated]: syz.1.11232 (pid 14091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2407.325121][T14091] Use struct sctp_sack_info instead [ 2407.829666][ T839] usb 40-1: device descriptor read/8, error -110 [ 2408.230104][ T839] usb usb40-port1: attempt power cycle [ 2408.309410][ T5946] Bluetooth: hci3: command tx timeout [ 2408.791566][ T839] usb usb40-port1: unable to enumerate USB device [ 2408.864932][T29016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2408.869307][T29016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2408.873231][T29016] bond0 (unregistering): Released all slaves [ 2408.879476][T29016] bond1 (unregistering): Released all slaves [ 2408.901088][T14051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2408.903341][T14051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2408.911462][T14051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2408.934915][T14051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2408.937212][T14051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2408.946936][T14051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2409.078983][T14051] hsr_slave_0: entered promiscuous mode [ 2409.082533][T14051] hsr_slave_1: entered promiscuous mode [ 2409.084811][T14051] debugfs: 'hsr0' already exists in 'hsr' [ 2409.086702][T14051] Cannot create hsr debugfs directory [ 2409.445837][T29016] hsr_slave_0: left promiscuous mode [ 2409.451099][T29016] hsr_slave_1: left promiscuous mode [ 2409.453759][T29016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2409.456055][T29016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2409.459718][T29016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2409.462217][T29016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2409.509202][T29016] veth1_macvtap: left promiscuous mode [ 2409.511422][T29016] veth0_macvtap: left promiscuous mode [ 2409.513266][T29016] veth1_vlan: left promiscuous mode [ 2409.515446][T29016] veth0_vlan: left promiscuous mode [ 2410.400437][ T5946] Bluetooth: hci3: command tx timeout [ 2410.588765][T29016] team0 (unregistering): Port device team_slave_1 removed [ 2410.694074][T29016] team0 (unregistering): Port device team_slave_0 removed [ 2411.559500][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11240'. [ 2411.563394][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11240'. [ 2411.603250][T14118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2411.606237][T14118] IPv6: NLM_F_CREATE should be set when creating new route [ 2411.723935][T14123] blk_print_req_error: 54 callbacks suppressed [ 2411.723947][T14123] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2411.729257][T14123] buffer_io_error: 54 callbacks suppressed [ 2411.729270][T14123] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2411.734796][T14123] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2411.737701][T14123] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2411.740414][T14123] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2411.744693][T14123] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2411.747439][T14123] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2411.750322][T14123] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2411.754254][T14123] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2411.757217][T14123] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2411.759916][T14123] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2411.763016][T14123] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2411.765746][T14123] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2411.768761][T14123] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2411.771683][T14123] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2411.774154][T14125] bridge28: entered promiscuous mode [ 2411.779922][T14123] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2411.783752][T14123] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2411.786636][T14123] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2411.789137][T14123] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2411.792055][T14123] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2411.795780][T14123] ldm_validate_partition_table(): Disk read failed. [ 2411.799018][T14123] Dev nbd1: unable to read RDB block 0 [ 2411.801920][T14123] nbd1: unable to read partition table [ 2412.064696][T29016] IPVS: stop unused estimator thread 0... [ 2412.101631][T14051] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2412.106790][T14051] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2412.111862][T14051] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2412.116587][T14051] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2412.190584][T14051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2412.200142][T14051] 8021q: adding VLAN 0 to HW filter on device team0 [ 2412.239048][T28998] bridge0: port 1(bridge_slave_0) entered blocking state [ 2412.241839][T28998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2412.246130][T28998] bridge0: port 2(bridge_slave_1) entered blocking state [ 2412.248810][T28998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2412.269974][T14051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2412.273930][T14051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2412.429959][T14051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2412.521405][ T5946] Bluetooth: hci3: command tx timeout [ 2412.741163][T14051] veth0_vlan: entered promiscuous mode [ 2412.746756][T14051] veth1_vlan: entered promiscuous mode [ 2412.765854][T14051] veth0_macvtap: entered promiscuous mode [ 2412.769764][T14051] veth1_macvtap: entered promiscuous mode [ 2412.785033][T14051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2412.793759][T14051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2412.803223][ T3602] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2412.813025][ T3602] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2412.819987][ T3602] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2412.927936][ T3602] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2412.970241][T29016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2412.973705][T29016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2412.986491][ T3602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2412.989002][ T3602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2413.018621][T14150] ldm_validate_partition_table(): Disk read failed. [ 2413.043753][T14150] Dev nbd1: unable to read RDB block 0 [ 2413.075069][T14150] nbd1: unable to read partition table [ 2413.096406][T14155] vxfs: unable to read disk superblock at 1 [ 2413.098260][T14155] vxfs: unable to read disk superblock at 8 [ 2413.100317][T14155] vxfs: can't find superblock. [ 2413.808870][ T40] audit: type=1800 audit(2000000866.469:54764): pid=14176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11254" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2413.949768][ T40] audit: type=1326 audit(2000000866.609:54765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.8.11256" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ed579 code=0x0 [ 2414.052479][T14190] binder: 14179:14190 ioctl c0306201 80000280 returned -11 [ 2414.055213][T14190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11255'. [ 2414.190103][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11253'. [ 2414.194354][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11253'. [ 2414.562414][ T5946] Bluetooth: hci3: command tx timeout [ 2415.071381][T14201] vxfs: unable to read disk superblock at 1 [ 2415.074936][T14201] vxfs: unable to read disk superblock at 8 [ 2415.077568][T14201] vxfs: can't find superblock. [ 2415.091550][T14204] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11260'. [ 2415.971678][T14224] vxfs: unable to read disk superblock at 1 [ 2415.974432][T14224] vxfs: unable to read disk superblock at 8 [ 2415.976460][T14224] vxfs: can't find superblock. [ 2416.630709][T14231] bridge1: entered promiscuous mode [ 2417.108447][T14246] bridge29: entered promiscuous mode [ 2419.391127][T14258] FAULT_INJECTION: forcing a failure. [ 2419.391127][T14258] name failslab, interval 1, probability 0, space 0, times 0 [ 2419.396517][T14258] CPU: 3 UID: 0 PID: 14258 Comm: syz.4.11275 Not tainted syzkaller #0 PREEMPT(full) [ 2419.396541][T14258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2419.396552][T14258] Call Trace: [ 2419.396558][T14258] [ 2419.396566][T14258] dump_stack_lvl+0x16c/0x1f0 [ 2419.396588][T14258] should_fail_ex+0x512/0x640 [ 2419.396612][T14258] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2419.396641][T14258] should_failslab+0xc2/0x120 [ 2419.396664][T14258] __kmalloc_cache_noprof+0x72/0x780 [ 2419.396689][T14258] ? register_netdevice+0x4eb/0x2270 [ 2419.396712][T14258] ? register_netdevice+0x4eb/0x2270 [ 2419.396728][T14258] register_netdevice+0x4eb/0x2270 [ 2419.396751][T14258] ? __pfx_register_netdevice+0x10/0x10 [ 2419.396776][T14258] macvlan_common_newlink+0x10e7/0x1a20 [ 2419.396799][T14258] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 2419.396816][T14258] ? lockdep_rtnl_is_held+0x26/0x40 [ 2419.396837][T14258] ? netdev_is_rx_handler_busy+0x83/0x160 [ 2419.396856][T14258] macvtap_newlink+0x17a/0x240 [ 2419.396871][T14258] ? __pfx_macvtap_newlink+0x10/0x10 [ 2419.396889][T14258] rtnl_newlink+0xc45/0x2000 [ 2419.396914][T14258] ? __pfx_rtnl_newlink+0x10/0x10 [ 2419.396943][T14258] ? kfree_skbmem+0x1a4/0x1f0 [ 2419.396971][T14258] ? rcu_is_watching+0x12/0xc0 [ 2419.396999][T14258] ? find_held_lock+0x2b/0x80 [ 2419.397014][T14258] ? __pfx_rtnl_newlink+0x10/0x10 [ 2419.397031][T14258] ? __pfx_rtnl_newlink+0x10/0x10 [ 2419.397046][T14258] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 2419.397064][T14258] ? __pfx_rtnl_newlink+0x10/0x10 [ 2419.397081][T14258] rtnetlink_rcv_msg+0x95e/0xe90 [ 2419.397101][T14258] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2419.397125][T14258] ? ref_tracker_free+0x37c/0x830 [ 2419.397155][T14258] netlink_rcv_skb+0x158/0x420 [ 2419.397174][T14258] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2419.397192][T14258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2419.397219][T14258] ? netlink_deliver_tap+0x1ae/0xd30 [ 2419.397240][T14258] netlink_unicast+0x5aa/0x870 [ 2419.397262][T14258] ? __pfx_netlink_unicast+0x10/0x10 [ 2419.397290][T14258] netlink_sendmsg+0x8c8/0xdd0 [ 2419.397312][T14258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2419.397332][T14258] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2419.397361][T14258] ____sys_sendmsg+0xa98/0xc70 [ 2419.397385][T14258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2419.397406][T14258] ? get_compat_msghdr+0x11a/0x170 [ 2419.397451][T14258] ___sys_sendmsg+0x134/0x1d0 [ 2419.397470][T14258] ? __pfx____sys_sendmsg+0x10/0x10 [ 2419.397499][T14258] ? find_held_lock+0x2b/0x80 [ 2419.397533][T14258] __sys_sendmsg+0x16d/0x220 [ 2419.397550][T14258] ? __pfx___sys_sendmsg+0x10/0x10 [ 2419.397578][T14258] ? rcu_is_watching+0x12/0xc0 [ 2419.397600][T14258] __do_fast_syscall_32+0x7c/0x300 [ 2419.397623][T14258] do_fast_syscall_32+0x32/0x80 [ 2419.397643][T14258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2419.397663][T14258] RIP: 0023:0xf70cd579 [ 2419.397676][T14258] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2419.397692][T14258] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2419.397708][T14258] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 2419.397718][T14258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2419.397728][T14258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2419.397737][T14258] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2419.397747][T14258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2419.397770][T14258] [ 2420.355180][T14275] 9pnet_virtio: no channels available for device syz [ 2420.582223][T14282] vxfs: unable to read disk superblock at 1 [ 2420.585022][T14282] vxfs: unable to read disk superblock at 8 [ 2420.587049][T14282] vxfs: can't find superblock. [ 2420.667812][T14286] input: syz1 as /devices/virtual/input/input173 [ 2421.169036][T14289] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11280'. [ 2421.494830][T14291] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11284'. [ 2421.501647][T14291] tipc: Enabling of bearer rejected, failed to enable media [ 2421.537690][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11284'. [ 2421.540789][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11284'. [ 2422.022165][T14300] vxfs: unable to read disk superblock at 1 [ 2422.066838][T14300] vxfs: unable to read disk superblock at 8 [ 2422.069714][T14300] vxfs: can't find superblock. [ 2422.376609][T14304] vxfs: unable to read disk superblock at 1 [ 2422.383345][T14304] vxfs: unable to read disk superblock at 8 [ 2422.385330][T14304] vxfs: can't find superblock. [ 2422.630804][T14308] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2422.637142][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11289'. [ 2422.640929][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11289'. [ 2422.644676][T14308] netlink: 'syz.1.11289': attribute type 11 has an invalid length. [ 2423.140579][T14326] bridge2: entered promiscuous mode [ 2423.566722][T14341] FAULT_INJECTION: forcing a failure. [ 2423.566722][T14341] name failslab, interval 1, probability 0, space 0, times 0 [ 2423.570741][T14341] CPU: 2 UID: 0 PID: 14341 Comm: syz.9.11298 Not tainted syzkaller #0 PREEMPT(full) [ 2423.570756][T14341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2423.570763][T14341] Call Trace: [ 2423.570767][T14341] [ 2423.570772][T14341] dump_stack_lvl+0x16c/0x1f0 [ 2423.570788][T14341] should_fail_ex+0x512/0x640 [ 2423.570804][T14341] ? __kmalloc_noprof+0xca/0x880 [ 2423.570823][T14341] should_failslab+0xc2/0x120 [ 2423.570838][T14341] __kmalloc_noprof+0xdd/0x880 [ 2423.570854][T14341] ? lsm_blob_alloc+0x68/0x90 [ 2423.570870][T14341] ? lsm_blob_alloc+0x68/0x90 [ 2423.570882][T14341] lsm_blob_alloc+0x68/0x90 [ 2423.570894][T14341] security_sb_alloc+0x28/0x230 [ 2423.570910][T14341] alloc_super+0x1eb/0xb60 [ 2423.570920][T14341] ? sget_fc+0xd3/0xc20 [ 2423.570932][T14341] sget_fc+0x116/0xc20 [ 2423.570942][T14341] ? apparmor_capable+0x114/0x1d0 [ 2423.570958][T14341] ? __pfx_set_anon_super_fc+0x10/0x10 [ 2423.570975][T14341] ? __pfx_ovl_fill_super+0x10/0x10 [ 2423.570991][T14341] get_tree_nodev+0x28/0x190 [ 2423.571003][T14341] vfs_get_tree+0x8e/0x340 [ 2423.571018][T14341] path_mount+0x7b9/0x23a0 [ 2423.571033][T14341] ? __pfx_path_mount+0x10/0x10 [ 2423.571046][T14341] ? kmem_cache_free+0x2d4/0x6c0 [ 2423.571056][T14341] ? putname+0x154/0x1a0 [ 2423.571071][T14341] ? putname+0x154/0x1a0 [ 2423.571086][T14341] ? __ia32_sys_mount+0x291/0x310 [ 2423.571098][T14341] __ia32_sys_mount+0x291/0x310 [ 2423.571110][T14341] ? __pfx___ia32_sys_mount+0x10/0x10 [ 2423.571124][T14341] ? rcu_is_watching+0x12/0xc0 [ 2423.571137][T14341] __do_fast_syscall_32+0x7c/0x300 [ 2423.571151][T14341] do_fast_syscall_32+0x32/0x80 [ 2423.571164][T14341] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2423.571182][T14341] RIP: 0023:0xf7f17579 [ 2423.571191][T14341] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2423.571201][T14341] RSP: 002b:00000000f540655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 2423.571211][T14341] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 2423.571218][T14341] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000080000140 [ 2423.571224][T14341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2423.571230][T14341] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2423.571236][T14341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2423.571278][T14341] [ 2423.794874][T14343] netlink: 'syz.9.11300': attribute type 21 has an invalid length. [ 2423.798395][T14343] netlink: 132 bytes leftover after parsing attributes in process `syz.9.11300'. [ 2423.803393][T14343] 9pnet_fd: Insufficient options for proto=fd [ 2423.986949][T14356] netlink: 'syz.8.11304': attribute type 1 has an invalid length. [ 2424.160994][T29878] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 2424.264518][T14371] vxfs: unable to read disk superblock at 1 [ 2424.267927][T14371] vxfs: unable to read disk superblock at 8 [ 2424.270232][T14371] vxfs: can't find superblock. [ 2424.607337][T29878] usb 14-1: Using ep0 maxpacket: 8 [ 2424.614112][T29878] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2424.618695][T29878] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2424.622383][T29878] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2424.627850][T29878] usb 14-1: config 0 descriptor?? [ 2424.837098][T29878] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2425.040148][T29878] usb 14-1: USB disconnect, device number 15 [ 2425.235549][T14386] bridge43: entered promiscuous mode [ 2426.126300][T14400] XFS (nullb0): Invalid superblock magic number [ 2426.189047][T14400] XFS (nullb0): Invalid superblock magic number [ 2426.583068][T14431] ubi: mtd0 is already attached to ubi31 [ 2426.712334][T14434] x_tables: duplicate underflow at hook 2 [ 2426.716964][T14434] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11325'. [ 2426.723243][T14434] netlink: 'syz.8.11325': attribute type 5 has an invalid length. [ 2426.725620][T14434] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11325'. [ 2427.523498][T14440] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.626945][T14440] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.672052][T14444] blk_print_req_error: 118 callbacks suppressed [ 2427.672069][T14444] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2427.678471][T14444] buffer_io_error: 118 callbacks suppressed [ 2427.678486][T14444] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2427.684584][T14444] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2427.688160][T14444] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2427.692688][T14444] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2427.695545][T14444] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2427.698812][T14444] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2427.702157][T14444] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2427.706762][T14444] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2427.710493][T14444] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2427.713483][T14444] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2427.716800][T14444] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2427.720733][T14444] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2427.723910][T14444] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2427.728101][T14444] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2427.731949][T14444] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2427.738180][T14444] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2427.741894][T14444] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2427.746278][T14444] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2427.749511][T14444] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2427.759408][T14444] ldm_validate_partition_table(): Disk read failed. [ 2427.765538][T14444] Dev nbd1: unable to read RDB block 0 [ 2427.770286][T14444] nbd1: unable to read partition table [ 2427.825388][T14440] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.899154][T14440] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.924868][T14453] bridge21: entered promiscuous mode [ 2427.995698][T29009] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2428.003567][ T3602] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2428.011514][ T3602] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2428.027782][ T3602] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.771400][T14476] vxfs: unable to read disk superblock at 1 [ 2429.773505][T14476] vxfs: unable to read disk superblock at 8 [ 2429.775378][T14476] vxfs: can't find superblock. [ 2430.505036][T14493] vxfs: unable to read disk superblock at 1 [ 2430.509140][T14493] vxfs: unable to read disk superblock at 8 [ 2430.511727][T14493] vxfs: can't find superblock. [ 2431.535865][T14505] bridge44: entered promiscuous mode [ 2431.720262][T14517] usb usb5: usbfs: process 14517 (syz.9.11345) did not claim interface 0 before use [ 2431.960704][T14523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2432.229617][ T40] audit: type=1326 audit(2000000884.531:54766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.8.11346" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2432.250719][ T40] audit: type=1326 audit(2000000884.531:54767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.8.11346" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2432.257632][ T40] audit: type=1326 audit(2000000884.531:54768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.8.11346" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2432.278345][ T40] audit: type=1326 audit(2000000884.531:54769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.8.11346" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2432.285522][ T40] audit: type=1326 audit(2000000884.531:54770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.8.11346" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2432.292416][ T40] audit: type=1326 audit(2000000884.531:54771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.8.11346" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2432.299130][ T40] audit: type=1326 audit(2000000884.531:54772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.8.11346" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2432.305970][ T40] audit: type=1326 audit(2000000884.531:54773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.8.11346" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2433.455647][T14550] vxfs: unable to read disk superblock at 1 [ 2433.458247][T14550] vxfs: unable to read disk superblock at 8 [ 2433.460890][T14550] vxfs: can't find superblock. [ 2433.860210][T14558] bridge30: entered promiscuous mode [ 2434.185146][T14568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11360'. [ 2434.189988][T29878] IPVS: starting estimator thread 0... [ 2434.282283][T14569] IPVS: using max 25 ests per chain, 60000 per kthread [ 2435.398150][T14599] FAULT_INJECTION: forcing a failure. [ 2435.398150][T14599] name failslab, interval 1, probability 0, space 0, times 0 [ 2435.402369][T14599] CPU: 3 UID: 0 PID: 14599 Comm: syz.9.11368 Not tainted syzkaller #0 PREEMPT(full) [ 2435.402385][T14599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2435.402391][T14599] Call Trace: [ 2435.402396][T14599] [ 2435.402400][T14599] dump_stack_lvl+0x16c/0x1f0 [ 2435.402416][T14599] should_fail_ex+0x512/0x640 [ 2435.402436][T14599] should_failslab+0xc2/0x120 [ 2435.402451][T14599] __kmalloc_noprof+0xdd/0x880 [ 2435.402468][T14599] ? ___neigh_create+0x14e6/0x28c0 [ 2435.402485][T14599] ? ___neigh_create+0x14e6/0x28c0 [ 2435.402497][T14599] ___neigh_create+0x14e6/0x28c0 [ 2435.402517][T14599] ? __pfx____neigh_create+0x10/0x10 [ 2435.402536][T14599] ip_finish_output2+0x1bb9/0x21a0 [ 2435.402554][T14599] ? __pfx_ip_finish_output2+0x10/0x10 [ 2435.402566][T14599] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 2435.402577][T14599] ? __pfx_ip_finish_output+0x10/0x10 [ 2435.402592][T14599] __ip_finish_output.part.0+0x1b4/0x350 [ 2435.402606][T14599] ip_output+0x35f/0xa90 [ 2435.402619][T14599] ip_send_skb+0x437/0x590 [ 2435.402633][T14599] udp_send_skb+0x71d/0x15b0 [ 2435.402650][T14599] udp_sendmsg+0x1813/0x2870 [ 2435.402663][T14599] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2435.402677][T14599] ? __pfx_udp_sendmsg+0x10/0x10 [ 2435.402707][T14599] ? __pfx_udp_sendmsg+0x10/0x10 [ 2435.402720][T14599] inet_sendmsg+0x105/0x140 [ 2435.402736][T14599] ____sys_sendmsg+0x973/0xc70 [ 2435.402751][T14599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2435.402764][T14599] ? get_compat_msghdr+0x11a/0x170 [ 2435.402782][T14599] ? __pfx__kstrtoull+0x10/0x10 [ 2435.402798][T14599] ___sys_sendmsg+0x134/0x1d0 [ 2435.402808][T14599] ? __pfx____sys_sendmsg+0x10/0x10 [ 2435.402817][T14599] ? __lock_acquire+0x622/0x1c90 [ 2435.402849][T14599] __sys_sendmmsg+0x2f9/0x420 [ 2435.402861][T14599] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2435.402876][T14599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2435.402894][T14599] ? fput+0x9b/0xd0 [ 2435.402908][T14599] ? ksys_write+0x1ac/0x250 [ 2435.402919][T14599] ? __pfx_ksys_write+0x10/0x10 [ 2435.402933][T14599] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 2435.402943][T14599] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2435.402957][T14599] __do_fast_syscall_32+0x7c/0x300 [ 2435.402971][T14599] do_fast_syscall_32+0x32/0x80 [ 2435.402984][T14599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2435.402997][T14599] RIP: 0023:0xf7f17579 [ 2435.403006][T14599] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2435.403016][T14599] RSP: 002b:00000000f53e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 2435.403026][T14599] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080007fc0 [ 2435.403033][T14599] RDX: 000000000800001d RSI: 0000000000000000 RDI: 0000000000000000 [ 2435.403039][T14599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2435.403045][T14599] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2435.403051][T14599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2435.403065][T14599] [ 2435.866928][T14604] blk_print_req_error: 54 callbacks suppressed [ 2435.866994][T14604] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2435.873488][T14604] buffer_io_error: 54 callbacks suppressed [ 2435.873693][T14604] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2435.878553][T14604] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2435.881577][T14604] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2435.884859][T14604] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2435.888892][T14604] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2435.892449][T14604] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2435.895555][T14604] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2435.898453][T14604] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2435.902715][T14604] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2435.907727][T14604] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2435.911551][T14604] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2435.921736][T14604] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2435.926989][T14604] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2435.930738][T14604] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2435.934480][T14604] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2435.938028][T14604] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2435.940938][T14604] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2435.945049][T14604] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2435.948138][T14604] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2435.955398][T14604] ldm_validate_partition_table(): Disk read failed. [ 2435.965181][T14604] Dev nbd1: unable to read RDB block 0 [ 2436.074572][T14624] bridge22: entered promiscuous mode [ 2436.109466][T14604] nbd1: unable to read partition table [ 2437.123039][T15424] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2437.323093][T15424] usb 6-1: Using ep0 maxpacket: 16 [ 2437.326635][T15424] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2437.328874][T15424] usb 6-1: can't read configurations, error -61 [ 2437.453195][T15424] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2437.573301][T29878] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 2437.604244][T15424] usb 6-1: Using ep0 maxpacket: 16 [ 2437.608501][T15424] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2437.611472][T15424] usb 6-1: can't read configurations, error -61 [ 2437.613786][T15424] usb usb6-port1: attempt power cycle [ 2437.703413][T29878] usb 14-1: device descriptor read/64, error -71 [ 2437.943510][T29878] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 2437.953462][T15424] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2437.983934][T15424] usb 6-1: Using ep0 maxpacket: 16 [ 2437.987274][T15424] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2437.989609][T15424] usb 6-1: can't read configurations, error -61 [ 2438.083605][T29878] usb 14-1: device descriptor read/64, error -71 [ 2438.123608][T15424] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2438.145431][T15424] usb 6-1: Using ep0 maxpacket: 16 [ 2438.154465][T15424] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2438.157126][T15424] usb 6-1: can't read configurations, error -61 [ 2438.159809][T15424] usb usb6-port1: unable to enumerate USB device [ 2438.193673][T29878] usb usb14-port1: attempt power cycle [ 2438.279725][T14669] vxfs: unable to read disk superblock at 1 [ 2438.282391][T14669] vxfs: unable to read disk superblock at 8 [ 2438.285087][T14669] vxfs: can't find superblock. [ 2438.533760][T29878] usb 14-1: new high-speed USB device number 18 using dummy_hcd [ 2438.554765][T29878] usb 14-1: device descriptor read/8, error -71 [ 2438.794499][T29878] usb 14-1: new high-speed USB device number 19 using dummy_hcd [ 2438.814768][T29878] usb 14-1: device descriptor read/8, error -71 [ 2438.924239][T29878] usb usb14-port1: unable to enumerate USB device [ 2439.386511][T14677] macvlan2: entered allmulticast mode [ 2439.388623][T14677] veth1_vlan: entered allmulticast mode [ 2439.395289][T14677] veth1_vlan: left allmulticast mode [ 2440.020290][T14682] bridge45: entered promiscuous mode [ 2440.580474][T14695] 9pnet_virtio: no channels available for device syz [ 2440.712510][T14699] vxfs: unable to read disk superblock at 1 [ 2440.716719][T14699] vxfs: unable to read disk superblock at 8 [ 2440.719163][T14699] vxfs: can't find superblock. [ 2441.157466][T14703] FAULT_INJECTION: forcing a failure. [ 2441.157466][T14703] name failslab, interval 1, probability 0, space 0, times 0 [ 2441.161587][T14703] CPU: 2 UID: 0 PID: 14703 Comm: syz.1.11396 Not tainted syzkaller #0 PREEMPT(full) [ 2441.161608][T14703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2441.161618][T14703] Call Trace: [ 2441.161624][T14703] [ 2441.161629][T14703] dump_stack_lvl+0x16c/0x1f0 [ 2441.161653][T14703] should_fail_ex+0x512/0x640 [ 2441.161678][T14703] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 2441.161698][T14703] should_failslab+0xc2/0x120 [ 2441.161720][T14703] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 2441.161737][T14703] ? __d_alloc+0x32/0xae0 [ 2441.161757][T14703] ? __d_alloc+0x32/0xae0 [ 2441.161767][T14703] __d_alloc+0x32/0xae0 [ 2441.161781][T14703] d_alloc_parallel+0x111/0x1510 [ 2441.161797][T14703] ? find_held_lock+0x2b/0x80 [ 2441.161809][T14703] ? look_up_lock_class+0x59/0x150 [ 2441.161821][T14703] ? register_lock_class+0x41/0x4c0 [ 2441.161837][T14703] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2441.161854][T14703] ? lockdep_init_map_type+0x5c/0x280 [ 2441.161869][T14703] ? lockdep_init_map_type+0x5c/0x280 [ 2441.161886][T14703] __lookup_slow+0x193/0x460 [ 2441.161902][T14703] ? __pfx___lookup_slow+0x10/0x10 [ 2441.161926][T14703] ? lookup_fast+0x156/0x610 [ 2441.161937][T14703] walk_component+0x353/0x5b0 [ 2441.161948][T14703] path_lookupat+0x142/0x6d0 [ 2441.161960][T14703] filename_lookup+0x224/0x5f0 [ 2441.161972][T14703] ? __pfx_filename_lookup+0x10/0x10 [ 2441.161993][T14703] ? getname_kernel+0x52/0x370 [ 2441.162008][T14703] ? __asan_memcpy+0x3c/0x60 [ 2441.162020][T14703] kern_path+0x35/0x50 [ 2441.162030][T14703] unix_find_other+0x3d5/0xb50 [ 2441.162047][T14703] ? __pfx_unix_find_other+0x10/0x10 [ 2441.162070][T14703] unix_dgram_sendmsg+0x972/0x17f0 [ 2441.162088][T14703] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 2441.162103][T14703] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2441.162120][T14703] ? __import_iovec+0x1dd/0x650 [ 2441.162130][T14703] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2441.162148][T14703] ____sys_sendmsg+0xa98/0xc70 [ 2441.162163][T14703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2441.162188][T14703] ? get_compat_msghdr+0x11a/0x170 [ 2441.162210][T14703] ? __pfx__kstrtoull+0x10/0x10 [ 2441.162225][T14703] ___sys_sendmsg+0x134/0x1d0 [ 2441.162236][T14703] ? __pfx____sys_sendmsg+0x10/0x10 [ 2441.162245][T14703] ? __lock_acquire+0x622/0x1c90 [ 2441.162272][T14703] ? __pfx___might_resched+0x10/0x10 [ 2441.162287][T14703] __sys_sendmmsg+0x2f9/0x420 [ 2441.162299][T14703] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2441.162318][T14703] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2441.162337][T14703] ? fput+0x9b/0xd0 [ 2441.162351][T14703] ? ksys_write+0x1ac/0x250 [ 2441.162362][T14703] ? __pfx_ksys_write+0x10/0x10 [ 2441.162376][T14703] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 2441.162387][T14703] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2441.162400][T14703] __do_fast_syscall_32+0x7c/0x300 [ 2441.162414][T14703] do_fast_syscall_32+0x32/0x80 [ 2441.162426][T14703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2441.162440][T14703] RIP: 0023:0xf700d579 [ 2441.162449][T14703] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2441.162459][T14703] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 2441.162470][T14703] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000ec0 [ 2441.162477][T14703] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 2441.162483][T14703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2441.162489][T14703] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2441.162495][T14703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2441.162509][T14703] [ 2441.374484][T14705] overlayfs: failed to resolve './file1': -2 [ 2442.171004][T14701] syzkaller0: entered promiscuous mode [ 2442.186087][T14701] syzkaller0: entered allmulticast mode [ 2443.208799][T14740] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 2443.211335][T14740] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2443.214955][T14740] vhci_hcd vhci_hcd.0: Device attached [ 2443.238110][T14742] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 2443.517336][ T9573] usb 56-1: SetAddress Request (18) to port 0 [ 2443.533389][ T9573] usb 56-1: new SuperSpeed USB device number 18 using vhci_hcd [ 2443.864960][T14743] vhci_hcd: connection reset by peer [ 2443.867697][T29002] vhci_hcd: stop threads [ 2443.869093][T29002] vhci_hcd: release socket [ 2443.870564][T29002] vhci_hcd: disconnect device [ 2444.764902][T14753] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11410'. [ 2445.295823][T14774] bridge46: entered promiscuous mode [ 2446.183922][T14790] FAULT_INJECTION: forcing a failure. [ 2446.183922][T14790] name failslab, interval 1, probability 0, space 0, times 0 [ 2446.188867][T14790] CPU: 2 UID: 0 PID: 14790 Comm: syz.1.11422 Not tainted syzkaller #0 PREEMPT(full) [ 2446.188883][T14790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2446.188890][T14790] Call Trace: [ 2446.188894][T14790] [ 2446.188898][T14790] dump_stack_lvl+0x16c/0x1f0 [ 2446.188915][T14790] should_fail_ex+0x512/0x640 [ 2446.188933][T14790] should_failslab+0xc2/0x120 [ 2446.188947][T14790] __kmalloc_noprof+0xdd/0x880 [ 2446.188965][T14790] ? sk_prot_alloc+0x1a8/0x2a0 [ 2446.188984][T14790] ? sk_prot_alloc+0x1a8/0x2a0 [ 2446.188996][T14790] sk_prot_alloc+0x1a8/0x2a0 [ 2446.189009][T14790] sk_alloc+0x36/0xc20 [ 2446.189026][T14790] bt_sock_alloc+0x3b/0x3a0 [ 2446.189037][T14790] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 2446.189052][T14790] l2cap_sock_create+0x123/0x1f0 [ 2446.189065][T14790] bt_sock_create+0x185/0x350 [ 2446.189076][T14790] __sock_create+0x338/0x8d0 [ 2446.189092][T14790] rfcomm_l2sock_create+0x2f/0x130 [ 2446.189108][T14790] rfcomm_dlc_open+0x5fb/0xaa0 [ 2446.189119][T14790] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 2446.189129][T14790] ? find_held_lock+0x2b/0x80 [ 2446.189141][T14790] ? rfcomm_sock_connect+0x3df/0x670 [ 2446.189153][T14790] ? rcu_is_watching+0x12/0xc0 [ 2446.189164][T14790] ? __local_bh_enable_ip+0xa4/0x120 [ 2446.189179][T14790] rfcomm_sock_connect+0x423/0x670 [ 2446.189192][T14790] ? __pfx_rfcomm_sock_connect+0x10/0x10 [ 2446.189203][T14790] __sys_connect_file+0x141/0x1a0 [ 2446.189220][T14790] __sys_connect+0x13b/0x160 [ 2446.189235][T14790] ? __pfx___sys_connect+0x10/0x10 [ 2446.189249][T14790] ? handle_mm_fault+0x1e0/0xd10 [ 2446.189270][T14790] ? __pfx_ksys_write+0x10/0x10 [ 2446.189285][T14790] __ia32_sys_connect+0x71/0xb0 [ 2446.189300][T14790] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2446.189313][T14790] __do_fast_syscall_32+0x7c/0x300 [ 2446.189327][T14790] do_fast_syscall_32+0x32/0x80 [ 2446.189340][T14790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2446.189353][T14790] RIP: 0023:0xf700d579 [ 2446.189362][T14790] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2446.189372][T14790] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 2446.189382][T14790] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 2446.189389][T14790] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 2446.189395][T14790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2446.189401][T14790] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2446.189407][T14790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2446.189420][T14790] [ 2446.337240][T29878] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 2446.487278][T29878] usb 14-1: Using ep0 maxpacket: 32 [ 2446.490397][T29878] usb 14-1: config 0 has an invalid interface number: 12 but max is 0 [ 2446.492981][T29878] usb 14-1: config 0 has no interface number 0 [ 2446.494911][T29878] usb 14-1: config 0 interface 12 has no altsetting 0 [ 2446.513781][T29878] usb 14-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2446.516644][T29878] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2446.527310][T29878] usb 14-1: Product: syz [ 2446.528692][T29878] usb 14-1: Manufacturer: syz [ 2446.530203][T29878] usb 14-1: SerialNumber: syz [ 2446.537883][T29878] usb 14-1: config 0 descriptor?? [ 2446.719498][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11424'. [ 2446.809666][T14798] bridge0: port 4(erspan0) entered blocking state [ 2446.811905][T14798] bridge0: port 4(erspan0) entered forwarding state [ 2446.825717][T14798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2446.833060][T14798] 8021q: adding VLAN 0 to HW filter on device team0 [ 2446.874802][T14798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2446.970403][T29878] f81534 14-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2446.976080][T29878] f81534 14-1:0.12: f81534_find_config_idx: read failed: -71 [ 2446.978643][T29878] f81534 14-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2446.981584][T29878] f81534 14-1:0.12: probe with driver f81534 failed with error -71 [ 2446.986117][T29878] usb 14-1: USB disconnect, device number 20 [ 2447.351755][T14804] vxfs: unable to read disk superblock at 1 [ 2447.354298][T14804] vxfs: unable to read disk superblock at 8 [ 2447.356645][T14804] vxfs: can't find superblock. [ 2448.055926][T14811] vxfs: unable to read disk superblock at 1 [ 2448.059466][T14811] vxfs: unable to read disk superblock at 8 [ 2448.061503][T14811] vxfs: can't find superblock. [ 2448.520208][T14817] vxfs: unable to read disk superblock at 1 [ 2448.522799][T14817] vxfs: unable to read disk superblock at 8 [ 2448.524775][T14817] vxfs: can't find superblock. [ 2448.556370][ T40] audit: type=1800 audit(2000000901.193:54774): pid=14819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.11430" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2448.658389][ T9573] usb 56-1: device descriptor read/8, error -110 [ 2449.112045][ T9573] usb usb56-port1: attempt power cycle [ 2449.288880][T14824] fuse: Unknown parameter 'ÿ0x0000000000000004' [ 2449.538839][ T841] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2449.573592][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11433'. [ 2449.607976][T14833] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 2449.610057][T14833] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2449.617914][T14833] vhci_hcd vhci_hcd.0: Device attached [ 2449.683988][T14830] wireguard0: entered promiscuous mode [ 2449.686336][T14830] wireguard0: entered allmulticast mode [ 2449.696849][ T841] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2449.705271][ T841] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2449.712570][ T841] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2449.716281][ T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2449.730206][T14824] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2449.734234][ T841] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2449.852180][ T839] usb 53-1: new high-speed USB device number 2 using vhci_hcd [ 2449.919803][ T9573] usb usb56-port1: unable to enumerate USB device [ 2449.960900][ T841] usb 9-1: USB disconnect, device number 18 [ 2450.134977][T14826] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2450.149303][T14826] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2450.152037][T14826] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2450.190128][T14834] vhci_hcd: connection reset by peer [ 2450.192294][T29007] vhci_hcd: stop threads [ 2450.193811][T29007] vhci_hcd: release socket [ 2450.195753][T29007] vhci_hcd: disconnect device [ 2451.047158][T14862] vxfs: unable to read disk superblock at 1 [ 2451.049418][T14862] vxfs: unable to read disk superblock at 8 [ 2451.051350][T14862] vxfs: can't find superblock. [ 2451.568525][T14869] FAULT_INJECTION: forcing a failure. [ 2451.568525][T14869] name failslab, interval 1, probability 0, space 0, times 0 [ 2451.572702][T14869] CPU: 2 UID: 0 PID: 14869 Comm: syz.4.11443 Not tainted syzkaller #0 PREEMPT(full) [ 2451.572718][T14869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2451.572725][T14869] Call Trace: [ 2451.572729][T14869] [ 2451.572733][T14869] dump_stack_lvl+0x16c/0x1f0 [ 2451.572748][T14869] should_fail_ex+0x512/0x640 [ 2451.572765][T14869] ? fs_reclaim_acquire+0xae/0x150 [ 2451.572780][T14869] should_failslab+0xc2/0x120 [ 2451.572795][T14869] __kmalloc_noprof+0xdd/0x880 [ 2451.572812][T14869] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2451.572827][T14869] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2451.572839][T14869] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2451.572852][T14869] ? tomoyo_profile+0x47/0x60 [ 2451.572868][T14869] tomoyo_path_number_perm+0x245/0x580 [ 2451.572884][T14869] ? tomoyo_path_number_perm+0x237/0x580 [ 2451.572902][T14869] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2451.572933][T14869] ? find_held_lock+0x2b/0x80 [ 2451.572944][T14869] ? hook_file_ioctl_common+0x145/0x410 [ 2451.572963][T14869] ? __fget_files+0x20e/0x3c0 [ 2451.572977][T14869] security_file_ioctl_compat+0x9b/0x240 [ 2451.572988][T14869] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2451.573006][T14869] __do_fast_syscall_32+0x7c/0x300 [ 2451.573021][T14869] do_fast_syscall_32+0x32/0x80 [ 2451.573033][T14869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2451.573047][T14869] RIP: 0023:0xf70cd579 [ 2451.573056][T14869] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2451.573066][T14869] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2451.573076][T14869] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 2451.573083][T14869] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 2451.573089][T14869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2451.573095][T14869] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2451.573101][T14869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2451.573114][T14869] [ 2451.573118][T14869] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2451.691465][ T4969] Bluetooth: hci3: command 0x0c1a tx timeout [ 2451.696825][T14873] FAULT_INJECTION: forcing a failure. [ 2451.696825][T14873] name failslab, interval 1, probability 0, space 0, times 0 [ 2451.703242][T14873] CPU: 0 UID: 0 PID: 14873 Comm: syz.4.11446 Not tainted syzkaller #0 PREEMPT(full) [ 2451.703264][T14873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2451.703274][T14873] Call Trace: [ 2451.703280][T14873] [ 2451.703287][T14873] dump_stack_lvl+0x16c/0x1f0 [ 2451.703312][T14873] should_fail_ex+0x512/0x640 [ 2451.703339][T14873] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 2451.703360][T14873] should_failslab+0xc2/0x120 [ 2451.703384][T14873] kmem_cache_alloc_node_noprof+0x78/0x770 [ 2451.703400][T14873] ? __alloc_skb+0x2b2/0x380 [ 2451.703429][T14873] ? __alloc_skb+0x2b2/0x380 [ 2451.703450][T14873] __alloc_skb+0x2b2/0x380 [ 2451.703474][T14873] ? __pfx___alloc_skb+0x10/0x10 [ 2451.703500][T14873] ? genl_rcv_msg+0x460/0x800 [ 2451.703519][T14873] ? genl_rcv_msg+0x4bb/0x800 [ 2451.703544][T14873] netlink_ack+0x15d/0xb80 [ 2451.703568][T14873] netlink_rcv_skb+0x332/0x420 [ 2451.703584][T14873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2451.703604][T14873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2451.703631][T14873] ? netlink_deliver_tap+0x1ae/0xd30 [ 2451.703655][T14873] genl_rcv+0x28/0x40 [ 2451.703672][T14873] netlink_unicast+0x5aa/0x870 [ 2451.703692][T14873] ? __pfx_netlink_unicast+0x10/0x10 [ 2451.703718][T14873] netlink_sendmsg+0x8c8/0xdd0 [ 2451.703737][T14873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2451.703756][T14873] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2451.703784][T14873] ____sys_sendmsg+0xa98/0xc70 [ 2451.703810][T14873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2451.703827][T14873] ? get_compat_msghdr+0x11a/0x170 [ 2451.703864][T14873] ___sys_sendmsg+0x134/0x1d0 [ 2451.703882][T14873] ? __pfx____sys_sendmsg+0x10/0x10 [ 2451.703908][T14873] ? find_held_lock+0x2b/0x80 [ 2451.703942][T14873] __sys_sendmsg+0x16d/0x220 [ 2451.703961][T14873] ? __pfx___sys_sendmsg+0x10/0x10 [ 2451.703987][T14873] ? rcu_is_watching+0x12/0xc0 [ 2451.704009][T14873] __do_fast_syscall_32+0x7c/0x300 [ 2451.704030][T14873] do_fast_syscall_32+0x32/0x80 [ 2451.704050][T14873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2451.704072][T14873] RIP: 0023:0xf70cd579 [ 2451.704086][T14873] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2451.704103][T14873] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2451.704121][T14873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 2451.704131][T14873] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2451.704139][T14873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2451.704154][T14873] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2451.704164][T14873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2451.704187][T14873] [ 2451.892962][T14879] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11447'. [ 2452.142144][T14890] bridge31: entered promiscuous mode [ 2452.203366][T14888] vxfs: unable to read disk superblock at 1 [ 2452.208211][T14888] vxfs: unable to read disk superblock at 8 [ 2452.211009][T14888] vxfs: can't find superblock. [ 2452.252883][T15424] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2452.952086][T15424] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 2452.955349][T15424] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2452.964059][T15424] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2452.967294][T15424] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2452.969773][T15424] usb 9-1: Product: syz [ 2452.971888][T15424] usb 9-1: Manufacturer: Ћ [ 2452.973352][T15424] usb 9-1: SerialNumber: syz [ 2453.770679][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 2454.971580][ T839] vhci_hcd: vhci_device speed not set [ 2454.982708][T15424] cdc_ncm 9-1:1.0: bind() failure [ 2454.988098][T15424] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 2454.990208][T15424] cdc_ncm 9-1:1.1: bind() failure [ 2455.015967][T15424] usb 9-1: USB disconnect, device number 19 [ 2455.075992][T14911] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 2455.078121][T14911] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2455.081294][T14911] vhci_hcd vhci_hcd.0: Device attached [ 2455.330209][T14903] vxfs: unable to read disk superblock at 1 [ 2455.371497][T14903] vxfs: unable to read disk superblock at 8 [ 2455.373661][T14903] vxfs: can't find superblock. [ 2455.400963][T14912] vhci_hcd: connection closed [ 2455.402329][T29002] vhci_hcd: stop threads [ 2455.405205][T29002] vhci_hcd: release socket [ 2455.406648][T29002] vhci_hcd: disconnect device [ 2455.424251][T14920] FAULT_INJECTION: forcing a failure. [ 2455.424251][T14920] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.428084][T14919] bridge32: entered promiscuous mode [ 2455.428394][T14920] CPU: 2 UID: 0 PID: 14920 Comm: syz.4.11456 Not tainted syzkaller #0 PREEMPT(full) [ 2455.428409][T14920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2455.428416][T14920] Call Trace: [ 2455.428420][T14920] [ 2455.428424][T14920] dump_stack_lvl+0x16c/0x1f0 [ 2455.428440][T14920] should_fail_ex+0x512/0x640 [ 2455.428456][T14920] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 2455.428471][T14920] should_failslab+0xc2/0x120 [ 2455.428486][T14920] __kvmalloc_node_noprof+0x141/0x9c0 [ 2455.428500][T14920] ? bpf_stack_liveness_init+0x29/0xd0 [ 2455.428514][T14920] ? __pfx_compute_postorder+0x10/0x10 [ 2455.428531][T14920] ? bpf_stack_liveness_init+0x29/0xd0 [ 2455.428544][T14920] bpf_stack_liveness_init+0x29/0xd0 [ 2455.428559][T14920] bpf_check+0x69de/0xbdd0 [ 2455.428574][T14920] ? __lock_acquire+0x622/0x1c90 [ 2455.428590][T14920] ? css_rstat_updated+0x1c2/0x510 [ 2455.428602][T14920] ? __pfx_css_rstat_updated+0x10/0x10 [ 2455.428618][T14920] ? __lock_acquire+0xb8a/0x1c90 [ 2455.428633][T14920] ? __pfx_bpf_check+0x10/0x10 [ 2455.428651][T14920] ? find_held_lock+0x2b/0x80 [ 2455.428663][T14920] ? rcu_is_watching+0x12/0xc0 [ 2455.428674][T14920] ? ktime_get_with_offset+0x26e/0x3b0 [ 2455.428688][T14920] ? __asan_memset+0x23/0x50 [ 2455.428698][T14920] ? lsm_blob_alloc+0x2b/0x90 [ 2455.428711][T14920] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 2455.428728][T14920] bpf_prog_load+0x112e/0x2850 [ 2455.428740][T14920] ? __pfx_bpf_prog_load+0x10/0x10 [ 2455.428750][T14920] ? __lock_acquire+0xb8a/0x1c90 [ 2455.428778][T14920] __sys_bpf+0x3e72/0x4980 [ 2455.428790][T14920] ? __pfx___sys_bpf+0x10/0x10 [ 2455.428800][T14920] ? find_held_lock+0x2b/0x80 [ 2455.428813][T14920] ? find_held_lock+0x2b/0x80 [ 2455.428826][T14920] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 2455.428847][T14920] ? fput+0x9b/0xd0 [ 2455.428869][T14920] ? ksys_write+0x1ac/0x250 [ 2455.428881][T14920] ? __pfx_ksys_write+0x10/0x10 [ 2455.428894][T14920] __ia32_sys_bpf+0x76/0xe0 [ 2455.428905][T14920] __do_fast_syscall_32+0x7c/0x300 [ 2455.428920][T14920] do_fast_syscall_32+0x32/0x80 [ 2455.428932][T14920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2455.428946][T14920] RIP: 0023:0xf70cd579 [ 2455.428955][T14920] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2455.428965][T14920] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2455.428975][T14920] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 2455.428982][T14920] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 2455.428988][T14920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2455.428994][T14920] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2455.429000][T14920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2455.429013][T14920] [ 2455.533771][ T6025] usb 40-1: enqueue for inactive port 0 [ 2455.851601][ T4969] Bluetooth: hci3: command 0x0c1a tx timeout [ 2456.033087][ T6025] usb usb40-port1: attempt power cycle [ 2456.086589][T14936] 9pnet_fd: Insufficient options for proto=fd [ 2456.511685][ T5946] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 2456.518463][T14950] bridge33: entered promiscuous mode [ 2456.602594][ T6025] usb usb40-port1: unable to enumerate USB device [ 2456.685015][T14954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11466'. [ 2456.769293][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11466'. [ 2457.266333][T14961] binder_alloc: 14960: binder_alloc_buf, no vma [ 2457.361581][T14965] Invalid logical block size (58623) [ 2458.643541][T14994] netlink: 72 bytes leftover after parsing attributes in process `syz.9.11479'. [ 2458.645309][T14997] netlink: 172 bytes leftover after parsing attributes in process `syz.4.11480'. [ 2458.650270][T14997] netlink: 172 bytes leftover after parsing attributes in process `syz.4.11480'. [ 2458.697347][T14995] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2458.798108][T14995] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2458.872525][T14995] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2458.874060][T15007] overlayfs: failed to resolve './file0/file0': -2 [ 2458.962996][T29878] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2458.993827][T14995] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2459.127573][T29878] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2459.131746][T29878] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2459.144400][T29878] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2459.153048][T29878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2459.182608][T29015] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2459.184204][T15001] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2459.219135][T29878] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2459.234581][T29015] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2459.297523][T29015] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2459.326236][T29015] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2459.475437][ T9142] usb 9-1: USB disconnect, device number 20 [ 2459.855711][T15026] /dev/sr0: Can't open blockdev [ 2460.574562][ T4969] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2460.580000][ T4969] Bluetooth: hci3: Injecting HCI hardware error event [ 2460.586828][ T5946] Bluetooth: hci3: hardware error 0x00 [ 2460.603803][T15037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11490'. [ 2460.673144][T15040] blk_print_req_error: 54 callbacks suppressed [ 2460.673219][T15040] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2460.679534][T15040] buffer_io_error: 54 callbacks suppressed [ 2460.679646][T15040] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2460.684989][T15040] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2460.687868][T15040] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2460.690607][T15040] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2460.693560][T15040] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2460.696583][T15040] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2460.699437][T15040] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2460.702236][T15040] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2460.705568][T15040] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2460.708058][T15040] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2460.710810][T15040] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2460.713463][T15040] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2460.716584][T15040] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2460.719237][T15040] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2460.722125][T15040] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2460.724909][T15040] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2460.727814][T15040] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2460.730495][T15040] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2460.733480][T15040] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2460.742227][T15040] ldm_validate_partition_table(): Disk read failed. [ 2460.749845][T15040] Dev nbd1: unable to read RDB block 0 [ 2460.756100][T15040] nbd1: unable to read partition table [ 2461.000352][T15044] syzkaller0: entered promiscuous mode [ 2461.002121][T15044] syzkaller0: entered allmulticast mode [ 2461.349260][ T4969] Bluetooth: hci3: unexpected event for opcode 0x0011 [ 2461.511601][T15054] vxfs: unable to read disk superblock at 1 [ 2461.513759][T15054] vxfs: unable to read disk superblock at 8 [ 2461.515866][T15054] vxfs: can't find superblock. [ 2461.667447][T15058] comedi comedi3: pcl726: I/O port conflict (0x4f29,16) [ 2461.673440][T15058] overlayfs: failed to resolve './file0': -2 [ 2461.885205][T15066] bridge47: entered promiscuous mode [ 2461.938033][T15067] macvlan2: entered allmulticast mode [ 2461.939847][T15067] veth1_vlan: entered allmulticast mode [ 2461.943206][T15067] veth1_vlan: left allmulticast mode [ 2462.307412][ T40] audit: type=1326 audit(2000000914.947:54775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.9.11502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 2462.314548][ T40] audit: type=1326 audit(2000000914.947:54776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.9.11502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 2462.321769][ T40] audit: type=1326 audit(2000000914.947:54777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.9.11502" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 2462.328792][ T40] audit: type=1326 audit(2000000914.947:54778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.9.11502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 2462.335996][ T40] audit: type=1326 audit(2000000914.947:54779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.9.11502" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 2462.342663][ T40] audit: type=1326 audit(2000000914.947:54780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.9.11502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 2462.349752][ T40] audit: type=1326 audit(2000000914.947:54781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.9.11502" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 2462.356809][ T40] audit: type=1326 audit(2000000914.947:54782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.9.11502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 2462.365390][ T40] audit: type=1326 audit(2000000914.947:54783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.9.11502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 2462.654688][ T5946] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2462.838238][T15084] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11505'. [ 2462.853574][T15084] vxfs: unable to read disk superblock at 1 [ 2462.855922][T15084] vxfs: unable to read disk superblock at 8 [ 2462.858423][T15084] vxfs: can't find superblock. [ 2463.116081][ T4969] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2463.120610][ T4969] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2463.135206][ T4969] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2463.175042][ T4969] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2463.184533][ T4969] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2463.495613][T15087] chnl_net:caif_netlink_parms(): no params data found [ 2463.584646][T15087] bridge0: port 1(bridge_slave_0) entered blocking state [ 2463.587690][T15087] bridge0: port 1(bridge_slave_0) entered disabled state [ 2463.589935][T15087] bridge_slave_0: entered allmulticast mode [ 2463.592571][T15087] bridge_slave_0: entered promiscuous mode [ 2463.595786][T15087] bridge0: port 2(bridge_slave_1) entered blocking state [ 2463.598056][T15087] bridge0: port 2(bridge_slave_1) entered disabled state [ 2463.600317][T15087] bridge_slave_1: entered allmulticast mode [ 2463.602927][T15087] bridge_slave_1: entered promiscuous mode [ 2463.695316][T15087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2463.700089][T15087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2463.735932][T15087] team0: Port device team_slave_0 added [ 2463.742046][T15087] team0: Port device team_slave_1 added [ 2463.781019][T29016] bond0: (slave netdevsim0): Releasing backup interface [ 2463.812072][T15087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2463.814751][T15087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2463.846279][T15087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2463.852145][T15087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2463.854682][T15087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2463.870217][T15087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2463.906119][T15110] bridge3: entered promiscuous mode [ 2463.992214][T15087] hsr_slave_0: entered promiscuous mode [ 2463.994815][T15087] hsr_slave_1: entered promiscuous mode [ 2463.999569][T15087] debugfs: 'hsr0' already exists in 'hsr' [ 2464.005431][T15087] Cannot create hsr debugfs directory [ 2464.053093][T29016] erspan0: left allmulticast mode [ 2464.054527][T29016] erspan0: left promiscuous mode [ 2464.056240][T29016] bridge0: port 4(erspan0) entered disabled state [ 2464.059971][T29016] bridge0: port 3(batadv0) entered disabled state [ 2464.063310][T29016] bridge_slave_1: left allmulticast mode [ 2464.064938][T29016] bridge_slave_1: left promiscuous mode [ 2464.066775][T29016] bridge0: port 2(bridge_slave_1) entered disabled state [ 2464.070194][T29016] bridge_slave_0: left allmulticast mode [ 2464.071829][T29016] bridge_slave_0: left promiscuous mode [ 2464.073472][T29016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2464.266424][T29016] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 2464.289524][T29016] team0: Port device geneve0 removed [ 2465.281585][T15132] tipc: Failed to remove unknown binding: 66,1,1/2130706433:139567645/139567647 [ 2465.284273][T15132] tipc: Failed to remove unknown binding: 66,1,1/2130706433:139567645/139567647 [ 2465.295991][ T4969] Bluetooth: hci4: command tx timeout [ 2467.386805][ T4969] Bluetooth: hci4: command tx timeout [ 2467.631624][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.014127][T29016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2468.018994][T29016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2468.022385][T29016] bond0 (unregistering): Released all slaves [ 2468.137541][T29016] bond1 (unregistering): Released all slaves [ 2468.144711][T29016] bond2 (unregistering): Released all slaves [ 2468.171191][T15122] bridge4: entered promiscuous mode [ 2468.172903][T15122] bridge4: entered allmulticast mode [ 2468.277326][T15143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11518'. [ 2468.338193][T15143] vxfs: unable to read disk superblock at 1 [ 2468.340775][T15143] vxfs: unable to read disk superblock at 8 [ 2468.342923][T15143] vxfs: can't find superblock. [ 2468.739011][T15148] erspan0: left allmulticast mode [ 2468.741151][T15148] erspan0: left promiscuous mode [ 2468.748532][T15148] bridge0: port 4(erspan0) entered disabled state [ 2468.798023][T15149] netlink: 'syz.8.11520': attribute type 10 has an invalid length. [ 2468.819786][T15148] bond0: (slave syz_tun): Releasing backup interface [ 2468.881601][T15148] bridge0: port 3(batadv0) entered disabled state [ 2468.974149][T15148] bridge_slave_0: left allmulticast mode [ 2468.976390][T15148] bridge_slave_0: left promiscuous mode [ 2468.978980][T15148] bridge0: port 1(bridge_slave_0) entered disabled state [ 2468.990050][T15148] bridge_slave_1: left allmulticast mode [ 2468.995080][T15148] bridge_slave_1: left promiscuous mode [ 2468.997424][T15148] bridge0: port 2(bridge_slave_1) entered disabled state [ 2469.005083][T15148] bond0: (slave bond_slave_0): Releasing backup interface [ 2469.012899][T15148] bond0: (slave bond_slave_1): Releasing backup interface [ 2469.025167][T15148] team0: Port device team_slave_0 removed [ 2469.033595][T15148] team0: Port device team_slave_1 removed [ 2469.035699][T15148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2469.038413][T15148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2469.042433][T15148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2469.045431][T15148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2469.049785][T15148] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2469.072856][T15149] bond0: (slave wlan1): Opening slave failed [ 2469.171509][T15087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2469.185971][T15087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2469.202966][T15087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2469.209594][T15087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2469.355629][T15165] bridge5: entered promiscuous mode [ 2469.364137][T15166] vxfs: unable to read disk superblock at 1 [ 2469.367047][T15166] vxfs: unable to read disk superblock at 8 [ 2469.369215][T15166] vxfs: can't find superblock. [ 2469.386493][T15087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2469.431357][T15087] 8021q: adding VLAN 0 to HW filter on device team0 [ 2469.439243][T29007] bridge0: port 1(bridge_slave_0) entered blocking state [ 2469.441486][T29007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2469.450326][T29007] bridge0: port 2(bridge_slave_1) entered blocking state [ 2469.452942][T29007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2469.458059][ T4969] Bluetooth: hci4: command tx timeout [ 2469.783809][T29016] tipc: Disabling bearer [ 2469.786135][T29016] tipc: Left network mode [ 2470.154423][T15087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2470.218606][T15087] veth0_vlan: entered promiscuous mode [ 2470.224912][T15087] veth1_vlan: entered promiscuous mode [ 2470.247759][T15087] veth0_macvtap: entered promiscuous mode [ 2470.253099][T15087] veth1_macvtap: entered promiscuous mode [ 2470.264242][T15087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2470.273488][T15087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2470.360070][T29002] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2470.383615][T29002] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2470.391564][T29002] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2470.395980][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11527'. [ 2470.396551][T29002] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2470.406508][T15179] fuseblk: Unknown parameter 'rootÿÿÿÿ' [ 2470.411490][T15179] fuse: Bad value for 'fd' [ 2470.447206][T16209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2470.450543][T16209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2470.465386][ T3602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2470.467972][ T3602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2470.787164][T29016] hsr_slave_0: left promiscuous mode [ 2470.796937][T29016] hsr_slave_1: left promiscuous mode [ 2470.798980][T15200] vxfs: unable to read disk superblock at 1 [ 2470.801516][T15200] vxfs: unable to read disk superblock at 8 [ 2470.803681][T15200] vxfs: can't find superblock. [ 2470.806846][T29016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2470.811303][T29016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2471.200311][T15207] vxfs: unable to read disk superblock at 1 [ 2471.203018][T15207] vxfs: unable to read disk superblock at 8 [ 2471.204952][T15207] vxfs: can't find superblock. [ 2472.007418][T15212] vxfs: unable to read disk superblock at 1 [ 2472.009454][T15212] vxfs: unable to read disk superblock at 8 [ 2472.011153][T15212] vxfs: can't find superblock. [ 2472.330477][T29016] team0 (unregistering): Port device team_slave_1 removed [ 2472.490241][T29016] team0 (unregistering): Port device team_slave_0 removed [ 2473.499913][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11529'. [ 2473.674241][T15221] pimreg: entered allmulticast mode [ 2473.678721][T15213] pimreg: left allmulticast mode [ 2473.745870][T15227] bridge6: entered promiscuous mode [ 2473.771239][T15229] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 2473.773315][T15229] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2473.776354][T15229] vhci_hcd vhci_hcd.0: Device attached [ 2474.163372][T29016] IPVS: stop unused estimator thread 0... [ 2474.179779][ T6025] usb 40-1: SetAddress Request (103) to port 0 [ 2474.182582][ T6025] usb 40-1: new SuperSpeed USB device number 103 using vhci_hcd [ 2474.308219][T15241] bridge34: entered promiscuous mode [ 2474.400092][T15230] vhci_hcd: connection reset by peer [ 2474.403480][T29009] vhci_hcd: stop threads [ 2474.404936][T29009] vhci_hcd: release socket [ 2474.408864][T29009] vhci_hcd: disconnect device [ 2475.358965][T15257] blk_print_req_error: 54 callbacks suppressed [ 2475.359063][T15257] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2475.364257][T15257] buffer_io_error: 54 callbacks suppressed [ 2475.364354][T15257] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2475.370228][T15257] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2475.373109][T15257] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2475.376732][T15257] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2475.379750][T15257] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2475.383018][T15257] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2475.386043][T15257] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2475.388916][T15257] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2475.392230][T15257] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2475.395076][T15257] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2475.398089][T15257] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2475.401960][T15257] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2475.405571][T15257] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2475.410124][T15257] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2475.414786][T15257] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2475.422059][T15257] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2475.427934][T15257] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2475.435697][T15257] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2475.440678][T15257] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2475.477019][T15257] ldm_validate_partition_table(): Disk read failed. [ 2475.499603][T15257] Dev nbd1: unable to read RDB block 0 [ 2475.520074][T15257] nbd1: unable to read partition table [ 2476.431258][T15264] xt_hashlimit: overflow, try lower: 60585/0 [ 2476.552802][ T10] libceph: connect (1)[c::]:6789 error -101 [ 2476.554940][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 2476.654131][T15268] ceph: No mds server is up or the cluster is laggy [ 2476.755620][T15282] bridge24: entered promiscuous mode [ 2477.084253][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11555'. [ 2477.159973][T15288] ldm_validate_partition_table(): Disk read failed. [ 2477.166141][T15288] Dev nbd1: unable to read RDB block 0 [ 2477.170452][T15288] nbd1: unable to read partition table [ 2477.422255][T15291] vxfs: unable to read disk superblock at 1 [ 2477.425120][T15291] vxfs: unable to read disk superblock at 8 [ 2477.427902][T15291] vxfs: can't find superblock. [ 2477.772080][ T841] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 2478.546909][ T841] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2478.550890][ T841] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2478.562158][ T841] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2478.568129][ T841] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2478.570925][ T841] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2478.575555][ T841] usb 14-1: config 0 descriptor?? [ 2478.821831][T15138] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 2478.975580][T15138] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 2478.977969][T15138] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2478.981433][T15138] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2478.985312][T15138] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2478.987448][ T841] hid_parser_main: 68 callbacks suppressed [ 2478.987459][ T841] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 2478.988809][T15138] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2478.990690][ T841] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 2478.994000][T15138] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 2478.997097][ T841] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 2478.999062][T15138] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2479.001355][ T841] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 2479.003947][T15138] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2479.007209][ T841] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 2479.009439][T15138] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2479.013416][ T841] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 2479.015474][T15138] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2479.018883][ T841] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 2479.022108][T15138] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 2479.029303][ T841] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 2479.029601][T15138] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2479.031621][ T841] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 2479.035179][T15138] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2479.041135][ T841] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 2479.041185][T15138] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2479.045493][ T841] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 2479.046961][T15138] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2479.057045][T15138] usb 9-1: string descriptor 0 read error: -22 [ 2479.059091][T15138] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2479.062025][T15138] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2479.067795][T15138] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 2479.181922][ T9142] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2479.231952][ T6025] usb 40-1: device descriptor read/8, error -110 [ 2479.290645][T15325] ================================================================== [ 2479.294192][T15325] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x21d2/0x43c0 [ 2479.297832][T15325] Write of size 2560 at addr ffffc9000317a620 by task vivid-000-vid-c/15325 [ 2479.303134][T15325] [ 2479.304235][T15325] CPU: 3 UID: 0 PID: 15325 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 2479.304257][T15325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2479.304268][T15325] Call Trace: [ 2479.304275][T15325] [ 2479.304282][T15325] dump_stack_lvl+0x116/0x1f0 [ 2479.304305][T15325] print_report+0xcd/0x630 [ 2479.304326][T15325] ? __virt_addr_valid+0x81/0x610 [ 2479.304348][T15325] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 2479.304371][T15325] kasan_report+0xe0/0x110 [ 2479.304393][T15325] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 2479.304418][T15325] kasan_check_range+0x100/0x1b0 [ 2479.304442][T15325] __asan_memcpy+0x3c/0x60 [ 2479.304456][T15325] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 2479.304494][T15325] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2479.304515][T15325] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 2479.304543][T15325] vivid_fillbuff+0x8d2/0x4250 [ 2479.304562][T15325] ? __lock_acquire+0xb8a/0x1c90 [ 2479.304595][T15325] ? __pfx_vivid_fillbuff+0x10/0x10 [ 2479.304625][T15325] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 2479.304650][T15325] ? lockdep_hardirqs_on+0x7c/0x110 [ 2479.304671][T15325] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 2479.304689][T15325] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 2479.304712][T15325] vivid_thread_vid_cap+0x454/0xda0 [ 2479.304735][T15325] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 2479.304757][T15325] ? do_raw_spin_lock+0x12c/0x2b0 [ 2479.304782][T15325] ? find_held_lock+0x2b/0x80 [ 2479.304800][T15325] ? rcu_is_watching+0x12/0xc0 [ 2479.304815][T15325] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2479.304830][T15325] ? lockdep_hardirqs_on+0x7c/0x110 [ 2479.304849][T15325] ? __kthread_parkme+0x19e/0x250 [ 2479.304871][T15325] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 2479.304894][T15325] kthread+0x3c5/0x780 [ 2479.304916][T15325] ? __pfx_kthread+0x10/0x10 [ 2479.304937][T15325] ? rcu_is_watching+0x12/0xc0 [ 2479.304954][T15325] ? __pfx_kthread+0x10/0x10 [ 2479.304982][T15325] ret_from_fork+0x675/0x7d0 [ 2479.305005][T15325] ? __pfx_kthread+0x10/0x10 [ 2479.305030][T15325] ret_from_fork_asm+0x1a/0x30 [ 2479.305059][T15325] [ 2479.305067][T15325] [ 2479.334073][ T9142] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2479.335304][T15325] The buggy address belongs to a 6-page vmalloc region starting at 0xffffc90003175000 allocated at vb2_vmalloc_alloc+0x135/0x3f0 [ 2479.337877][ T9142] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2479.340357][T15325] The buggy address belongs to the physical page: [ 2479.340367][T15325] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888052dae000 pfn:0x52dae [ 2479.342967][ T9142] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2479.344505][T15325] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 2479.346704][ T9142] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2479.349058][T15325] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 2479.351173][ T9142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2479.353675][T15325] raw: ffff888052dae000 0000000000000000 00000001ffffffff 0000000000000000 [ 2479.353687][T15325] page dumped because: kasan: bad access detected [ 2479.353696][T15325] page_owner tracks the page as allocated [ 2479.353703][T15325] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_NOWARN), pid 15311, tgid 15310 (syz.4.11562), ts 2479272538090, free_ts 2475100370554 [ 2479.353732][T15325] post_alloc_hook+0x1c0/0x230 [ 2479.356639][ T9142] usb 6-1: config 0 descriptor?? [ 2479.357155][T15325] get_page_from_freelist+0x10a3/0x3a30 [ 2479.429056][T15325] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 2479.430937][T15325] alloc_pages_mpol+0x1fb/0x550 [ 2479.432478][T15325] alloc_pages_noprof+0x131/0x390 [ 2479.434062][T15325] __vmalloc_node_range_noprof+0x6f8/0x1480 [ 2479.435962][T15325] vmalloc_user_noprof+0x9e/0xe0 [ 2479.437531][T15325] vb2_vmalloc_alloc+0x135/0x3f0 [ 2479.439111][T15325] __vb2_queue_alloc+0x8c9/0x1280 [ 2479.440700][T15325] vb2_core_reqbufs+0xa90/0xfe0 [ 2479.442239][T15325] __vb2_init_fileio+0x3f1/0x1100 [ 2479.443842][T15325] vb2_core_poll+0x5ec/0x700 [ 2479.445310][T15325] vb2_poll+0x4b/0xe0 [ 2479.446582][T15325] vb2_fop_poll+0x10f/0x2c0 [ 2479.448032][T15325] v4l2_poll+0x163/0x320 [ 2479.449380][T15325] io_file_supports_nowait+0x204/0x290 [ 2479.451140][T15325] page last free pid 15245 tgid 15245 stack trace: [ 2479.453178][T15325] __free_frozen_pages+0x7df/0x1160 [ 2479.454849][T15325] tlb_remove_table_rcu+0x121/0x320 [ 2479.456526][T15325] rcu_core+0x79c/0x1530 [ 2479.457917][T15325] handle_softirqs+0x219/0x8e0 [ 2479.459448][T15325] __irq_exit_rcu+0x109/0x170 [ 2479.460937][T15325] irq_exit_rcu+0x9/0x30 [ 2479.462290][T15325] sysvec_apic_timer_interrupt+0x57/0xc0 [ 2479.464065][T15325] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2479.465967][T15325] [ 2479.466742][T15325] Memory state around the buggy address: [ 2479.468494][T15325] ffffc9000317af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2479.470994][T15325] ffffc9000317af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2479.473489][T15325] >ffffc9000317b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2479.475990][T15325] ^ [ 2479.477278][T15325] ffffc9000317b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2479.479773][T15325] ffffc9000317b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2479.482310][T15325] ================================================================== [ 2479.485719][T15325] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2479.487978][T15325] CPU: 3 UID: 0 PID: 15325 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 2479.490971][T15325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2479.494306][T15325] Call Trace: [ 2479.495380][T15325] [ 2479.496334][T15325] dump_stack_lvl+0x3d/0x1f0 [ 2479.497799][T15325] vpanic+0x640/0x6f0 [ 2479.499081][T15325] panic+0xca/0xd0 [ 2479.500282][T15325] ? __pfx_panic+0x10/0x10 [ 2479.501736][T15325] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 2479.503505][T15325] ? preempt_schedule_common+0x44/0xc0 [ 2479.505231][T15325] ? preempt_schedule_thunk+0x16/0x30 SYZFAIL: failed to recv rpc [ 2479.507037][T15325] ? check_panic_on_warn+0x1f/0xb0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2479.508883][T15325] check_panic_on_warn+0xab/0xb0 [ 2479.510739][T15325] end_report+0x107/0x170 [ 2479.512207][T15325] kasan_report+0xee/0x110 [ 2479.513663][T15325] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 2479.515436][T15325] kasan_check_range+0x100/0x1b0 [ 2479.517021][T15325] __asan_memcpy+0x3c/0x60 [ 2479.518434][T15325] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 2479.520168][T15325] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2479.522075][T15325] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 2479.523921][T15325] vivid_fillbuff+0x8d2/0x4250 [ 2479.525435][T15325] ? __lock_acquire+0xb8a/0x1c90 [ 2479.527042][T15325] ? __pfx_vivid_fillbuff+0x10/0x10 [ 2479.528683][T15325] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 2479.530446][T15325] ? lockdep_hardirqs_on+0x7c/0x110 [ 2479.532123][T15325] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 2479.533979][T15325] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 2479.535818][T15325] vivid_thread_vid_cap+0x454/0xda0 [ 2479.537464][T15325] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 2479.539252][T15325] ? do_raw_spin_lock+0x12c/0x2b0 [ 2479.540843][T15325] ? find_held_lock+0x2b/0x80 [ 2479.542355][T15325] ? rcu_is_watching+0x12/0xc0 [ 2479.543909][T15325] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2479.545761][T15325] ? lockdep_hardirqs_on+0x7c/0x110 [ 2479.547435][T15325] ? __kthread_parkme+0x19e/0x250 [ 2479.549026][T15325] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 2479.550819][T15325] kthread+0x3c5/0x780 [ 2479.552145][T15325] ? __pfx_kthread+0x10/0x10 [ 2479.553620][T15325] ? rcu_is_watching+0x12/0xc0 [ 2479.555146][T15325] ? __pfx_kthread+0x10/0x10 [ 2479.556647][T15325] ret_from_fork+0x675/0x7d0 [ 2479.558115][T15325] ? __pfx_kthread+0x10/0x10 [ 2479.559581][T15325] ret_from_fork_asm+0x1a/0x30 [ 2479.561123][T15325] [ 2479.562852][T15325] Kernel Offset: disabled [ 2479.564218][T15325] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:12:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000003ecee83 RBX=0000000000000000 RCX=ffffffff8b5d42a9 RDX=0000000000000000 RSI=ffffffff8da27cf7 RDI=ffffffff8bf075c0 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff908238d0 R15=0000000000000000 RIP=ffffffff8b5d2d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097810000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080003000 CR3=0000000059ac1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000e000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000073bedf1 RBX=0000000000000001 RCX=ffffffff8b5d42a9 RDX=0000000000000000 RSI=ffffffff8da27cf7 RDI=ffffffff8bf075c0 RBP=ffffed1003b5f490 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801dafa480 R14=ffffffff908238d0 R15=0000000000000000 RIP=ffffffff8b5d2d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097910000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=0000000049946000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000e000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000000 RCX=1ffff11007fff776 RDX=0000000000000080 RSI=0000000000000000 RDI=ffff88803fffbbb0 RBP=0000000000000003 RSP=ffffc9000d9cf428 R8 =000000000000166a R9 =0000000000001387 R10=ffff88803fffbb80 R11=ffffc9000d9cf6b0 R12=0000000000000000 R13=ffff88803fffbb80 R14=000000000000166a R15=0000000000000881 RIP=ffffffff8216365f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5acdb4a300 ffffffff 00c00000 GS =0000 ffff888097a10000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b2f893ff40 CR3=000000004b596000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feeff800 Opmask01=000000000000ffff Opmask02=00000000ff7fefbf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0fef0769111f49cc d34fff013c6b2a3d 0fef0769111f49cc d34fff013c6b2a3d 0fef0769111f49cc d34fff013c6b2a3d 0fef0769111f49cc d34fff013c6b2a3d ZMM18=5ed66910d26c4f41 9a7367667149b66a 5ed66910d26c4f41 9a7367667149b66a 5ed66910d26c4f41 9a7367667149b66a 5ed66910d26c4f41 9a7367667149b66a ZMM19=e024000000000000 0000000000000004 e024000000000000 0000000000000003 e024000000000000 0000000000000002 e024000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03fe02005faa0322 02005fa803489004 84005fa403423e9f 06085f9e030c40a0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8082005f9c030a40 808082005f9c0304 9bba0484005f9803 0000000900000c08 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f8c030002005f8a 030002005f880300 02005f8603038402 005f840302800200 ZMM24=7149b66a7149b66a 7149b66a7149b66a 7149b66a7149b66a 7149b66a7149b66a 7149b66a7149b66a 7149b66a7149b66a 7149b66a7149b66a 7149b66a7149b66a ZMM25=9a7367669a736766 9a7367669a736766 9a7367669a736766 9a7367669a736766 9a7367669a736766 9a7367669a736766 9a7367669a736766 9a7367669a736766 ZMM26=d26c4f41d26c4f41 d26c4f41d26c4f41 d26c4f41d26c4f41 d26c4f41d26c4f41 d26c4f41d26c4f41 d26c4f41d26c4f41 d26c4f41d26c4f41 d26c4f41d26c4f41 ZMM27=5ed669105ed66910 5ed669105ed66910 5ed669105ed66910 5ed669105ed66910 5ed669105ed66910 5ed669105ed66910 5ed669105ed66910 5ed669105ed66910 ZMM28=000000600000005f 0000005e0000005d 0000005c0000005b 0000005a00000059 0000005800000057 0000005600000055 0000005400000053 0000005200000051 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=df240000df240000 df240000df240000 df240000df240000 df240000df240000 df240000df240000 df240000df240000 df240000df240000 df240000df240000 info registers vcpu 3 CPU#3 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85267af5 RDI=ffffffff9adc2de0 RBP=ffffffff9adc2da0 RSP=ffffc90002e37148 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000074 R14=ffffffff9adc2da0 R15=ffffffff85267a90 RIP=ffffffff85267b1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b10000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f31bff8 CR3=000000004d086000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000