last executing test programs: 13m10.591642737s ago: executing program 2 (id=798): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0xffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x40}}, 0x0) 13m10.591253311s ago: executing program 2 (id=799): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r7, 0x31e, &(0x7f0000000080)={0xa1, 0x3, 0xfe, 0xca}) r8 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6]}}]}}]}, 0x94}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0xfffff801, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) unshare(0x64000600) 13m7.486417984s ago: executing program 2 (id=811): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r7, 0x31e, &(0x7f0000000080)={0xa1, 0x3, 0xfe, 0xca}) r8 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6]}}]}}]}, 0x94}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0xfffff801, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) unshare(0x64000600) 13m4.44597287s ago: executing program 2 (id=827): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETVNETBE(r4, 0x800454df, 0x0) 13m3.241699499s ago: executing program 2 (id=832): socket$inet(0x2, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = open_tree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffb9}, 0x48) 13m2.961115767s ago: executing program 2 (id=836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x11}, 0x2f) 13m2.870355768s ago: executing program 32 (id=836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x11}, 0x2f) 10m44.459079587s ago: executing program 4 (id=1807): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x401, 0x4006, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x40000000}, 0x90) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8}) write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0x6) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x6, 0x80000) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x48e5, 0xfffffffe, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in=@private=0xa010102, 0x4d2, 0x6c}, @in=@local, {0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'cbcmac(seed)\x00'}}}]}, 0x180}}, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0xef92, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x5, 0x0, &(0x7f0000000100)={r12, r13+60000000}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket(0x2, 0x80805, 0x0) r14 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x7f}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r14, 0x14, 0x0, 0x2) 10m44.425202256s ago: executing program 4 (id=1808): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x8000) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x81}, 0xa) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'vlan0\x00', {0xfffff03f}, 0x200}) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="8190c42f2e62be8b77a4f5", 0xb}, {&(0x7f0000000100)="eb2507f470f85959aa508992b3073bfc60c16769459b54e5651799e94bbcb039bb19921b3949b118756920d2a6e8fc1cc4919ce83b5ec88567507111ce2a5a29b18d435d1964e8a3abbbc06004ecfd1477265bc8f3b814b9509b0744356b4f29e416f3644f7b93f3a5339f72cbb67fb5611e793c79afe81c15490f233498dbf27b80eecdeb31d815f7d308fbc01a5049f441658ce4986cec0d859c510d9b7fbaa3e8903a82591d0c562fe89a6f5da2e23c8ccf1e1c66", 0xb6}, {&(0x7f00000001c0)="a974454c81a52d1029e02dd429b9f6981a407ac73a7fa432429d56499bff7ae5cf87cf82f6b1dcb8c0584f8c548c1b80164a3e6bf471d2748747fa6b69bfcb5addb90c1e567cb777d4abcd7acdeeb2850ab2f348acc093c48b42a022e17fce5745a1498dff92e32c6660927aad8bc447b971b6214d048936ed40cd30b6efe09dbd0176803f13aa0f159a308da71d6750e278ea892cd255b17731342379c459281b1e9ff3494771fd7134868705d15f6f58c24e59fe1eed829abd91195fe39077fe9f2610b400170f6afdff17a109c46406d24e1d5f88da722caa", 0xda}, {&(0x7f00000002c0)="6a6e4643990fa062bdf742e4e162c997b5b5bcd94a41416aabde21300ce8cbd8caa0997df2c99faf203aa42038640dd8d3d8aba53df1d76905df2b7adbbb459a86c239551310f70a090365af270455a42bd5fb34aebd6da3a8aeea2624c5678dfdf954a1df1cac78b888016762728280c557a72230b5e373d7668ee568d45931927744c7607a3cba784ccbf1d66f73208682c5ede4", 0x95}, {&(0x7f0000000380)="8689d8c97f1e7146c9a65b43e55c4f94a6b8c6cfbcdf5ea1f3a43e4cf9d2402e0b75b690a55f5fbb0adcf3c7876d", 0x2e}, {&(0x7f00000003c0)="be7ab96ba12c7cd36fa9b1add1a72f46a83365da7a22dcea377708420d0b0937d90715b5f6daca7759f998d0460f0cd1c4a9ab53385de0277014d618a07977893a67b68ac46b2339162a07a49dfb9e77341d9eacd41bdd510551c31d7fac919390f414945b635ecc70d439efbd801f6581581e5db213f6f4e921bac87189b35b805f1a47c7ed1eaf7e954251d42b4753fd44ca3b0c9cc191385b9786bb58ec5d4c967b61a61e849954293c3b4e794e5af414d1867fd9105f9f001b677c3689a0e8906e133dfe12272a91854227b5bb5fab8e6848200b739b6c524dbd664fcc0b3e4a", 0xe2}, {&(0x7f00000004c0)="73fe6249bca5815051c166", 0xb}], 0x7, 0x2) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000540), &(0x7f0000000580)=0x4) bind$bt_rfcomm(r0, &(0x7f00000005c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc}, 0xa) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000600)={r0}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000640)={0x2, 0x4, 0xdddd1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000680)={0x54f, 0xfff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000008600)={0x780, 0x30, 0x3c0, 0x40, 0xee6a, 0x6, 0xf, 0x0, {0x1ff, 0x9}, {0xff, 0xacef, 0x1}, {0x3, 0x2}, {0x9ed, 0xb, 0x1}, 0x2, 0x100, 0x6, 0x46, 0x1, 0x0, 0x4, 0x1f, 0x7ab, 0x10000, 0x7, 0x8, 0x11, 0x2, 0xc81061ccd4774283, 0x5}) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000008780)={&(0x7f00000086c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000008740)={&(0x7f0000008700)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000008840)={@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, {&(0x7f00000087c0)=""/35, 0x23}, &(0x7f0000008800), 0x40}, 0xa0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000008a00)={@map=r1, 0x1f, 0x0, 0x5, &(0x7f0000008900)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000008940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000008980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000089c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000008a80), 0x64800, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008b00)={0x0, r1, 0x0, 0x6, &(0x7f0000008ac0)='\xff\xff\xff\xff\xff\xff', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000008a40)={@cgroup=r4, 0xffffffffffffffff, 0x1a, 0x30, 0x0, @void, @void, @void, @value=r5, r3}, 0x20) r6 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000008b40)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) getgroups(0x4, &(0x7f0000008b80)=[0x0, 0x0, 0xffffffffffffffff, 0xee00]) fchown(r6, r8, r11) r13 = openat$cgroup_ro(r7, &(0x7f0000008bc0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) io_setup(0x8f, &(0x7f0000008c00)=0x0) r15 = openat$nmem0(0xffffff9c, &(0x7f0000009e40), 0xc0000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f000000a080)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) io_submit(r14, 0x5, &(0x7f000000a100)=[&(0x7f0000009c40)={0x0, 0x0, 0x0, 0x2, 0x6, r13, &(0x7f0000008c40)="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", 0x1000, 0x3800, 0x0, 0x2, r1}, &(0x7f0000009d00)={0x0, 0x0, 0x0, 0x8, 0xdbe3, r1, &(0x7f0000009c80)="e8c65f2973a8e69cea59f35279f377fcd688ae609bec27bcb9ba36d45ffeb72b20a8b5e88bceb727fcc485d65f1234efa1f950883c11db2afcf8428505c59c8de834f53176f2e79e4b", 0x49, 0x8, 0x0, 0x3, r0}, &(0x7f0000009e00)={0x0, 0x0, 0x0, 0x6, 0xb15, r0, &(0x7f0000009d40)="acd183fcc6af79e65e490420ca232d1cf28f12da8fb70df2b48544170d1a116533f33a3477a71eaf86690f6e973ee94a5681a33e04140ebd3d1ad70233537abf7b60e9201cf2d9c916f854e7cd44f7065ca0f825125764e068d55033f5c8700c12112d5ff5763cff688ef65efdea8a2e86af3dce3ebd0062dd9a500668e21a68cb", 0x81, 0x5}, &(0x7f0000009f80)={0x0, 0x0, 0x0, 0x2, 0x8, r15, &(0x7f0000009e80)="bb31024cb6fa1654f600ee68b4bc5ba1eb0ef4a95ada2f67d195cf36c9fb06a41d8dbb34efc7fb7ad8c3107f7156c867d1adce41cfb937cb2e6fcbaa0bcc08e989245b60eb613944a89d7c0c1eb3d918094249770abad0520f042cd24529465c9fb0670c2c3561f63de5579cb0918a9bf39f42b30c4150bad61e74518222911418efe6f8e4fe9a82cc89e54a9f7b92e3ddceefe8c8c8b0c2f1ee5055c0848b67bef9792882f95e2d38edd491aec7f3833fd64b67ba19d35f13235b518da02971cdcc958b865dff0aae52c9d14b552d8255404a7ab62cdd8f5007d530e875df46740a3ffaea54d2791bc3", 0xea, 0xe5f, 0x0, 0x3, r7}, &(0x7f000000a0c0)={0x0, 0x0, 0x0, 0x1, 0xc, r2, &(0x7f0000009fc0)="f7c3960b900ec3770684a2fe5dadae2646f18d717acf3fa199041cb52625ed80a9ad6acb4a1be0c425cb17576798661a978864c603dc4888db8680931621cf7755a309e238af781c773819030a588e20df57ce3d6bcc62654df5f5612a926d30ccf6e77c57a57d57b15c1037c9b44f0af781ecf04a55bab13db9ce621aa23c9ad5b3ae8fbad4966387643bcee101ea880f079247deaf783f", 0x98, 0x8, 0x0, 0x1, r16}]) r17 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r17, 0x0, 0xc9, 0x0, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f000000a140)={0x0, 0x0, 0x0}, &(0x7f000000a180)=0xc) getgroups(0x8, &(0x7f000000a1c0)=[r12, r18, r10, r10, r9, r12, r9, 0xee01]) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f000000a200)=0xb3) 10m44.29979105s ago: executing program 4 (id=1811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp_reply={0x11}}}}}, 0x0) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x94, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x2, 0x4, 0x0, 0x1}) (async) epoll_create1(0x80000) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc0445609, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ecc33085"}, 0x0, 0x1, {0x0}}) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000480140001800bb8ec620001007470726f78790000040002800900010073797a30000000000900020073797a32000000001400000011000100"/108], 0x6c}}, 0x40880) (async) dup(r0) 10m44.286773471s ago: executing program 4 (id=1812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f00000007c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_aout(r0, &(0x7f0000000840)={{0x107, 0xd0, 0x4, 0x27c, 0x1b7, 0xdd4, 0x276, 0x1}, "74c28d1a274699a39a327f4a3d882ec672bf1206b8800d8d88089ed623379aee1f8166b5db004b3ec63385fd254675c1b380bef1b78e830378cf12942e560b18c070f57b88fe0e72ad67ad84c3e108a3a4b3fb2c07f1506498cdc0a397b0c065b26e50ac8f4ea7df36e60e232b37084e717608749942acf56f4cc93563c877e4703aec82ef9393", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8a7) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 10m44.252451144s ago: executing program 4 (id=1814): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000006000000000000000000000300000000030000000400000000000000030000000000000700000000000000000002000000000000000400000000000008020000000000002e5f00bb400326feee75546e43296f0ec48b006bce288a7ef726155e859144e17ae4b953310c7f86e7f02394f9d9a783b5f100"/149], 0x0, 0x66}, 0x20) r0 = openat2$dir(0xffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000008c0)={0x200040, 0x40, 0x34}, 0x18) unlinkat(r0, &(0x7f0000000900)='./file0\x00', 0x200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getqdisc={0x28, 0x26, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x1}, {}, {0x1, 0x9}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x1, 0x2, {{0x19, 0x4, 0x2, 0x4, 0x64, 0x68, 0x0, 0xd, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, {[@end, @generic={0x13, 0xc, "1d8466706ea7009bdb52"}, @timestamp={0x44, 0x14, 0x46, 0x0, 0x4, [0x80, 0x5, 0x400, 0x8]}, @cipso={0x86, 0x18, 0x3, [{0x6, 0x12, "95009047ca36b34bbe01ba14a168cbbb"}]}, @rr={0x7, 0x17, 0xa6, [@local, @loopback, @multicast1, @loopback, @multicast2]}]}}}}}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="540000000000000007000000441c2a316401010200000007640101010000007fac1414bb5781b024070b00e0000001ac1414bb071fb5e00000010a010101ac14144000000000e000000100000000ffffffff0000100000000000000002000000e1f2ffff0d0000000000000001000000f2000000180000000000000008000000", @ANYRES32=r4, @ANYBLOB="3f456b99f23ff9d9857118aa9ca4a1c9cd34bf2e820bdb90c525163521e57cb996d3e517fd15cf49e15fde100ff30e0d09302662d7260e653774b493ece04aab9bcb1d522ee74113f57808f267d0aae7d0181dd1cdf2cd75d69983"], 0x8c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x10000, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) 10m43.990357969s ago: executing program 4 (id=1817): socket$inet(0x2, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = open_tree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffb9}, 0x48) 10m43.912716062s ago: executing program 33 (id=1817): socket$inet(0x2, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = open_tree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffb9}, 0x48) 8m49.717756039s ago: executing program 3 (id=2430): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file1\x00', 0x2) mmap(&(0x7f0000500000/0x1000)=nil, 0x1000, 0x8, 0x20010, r2, 0xfe0ab000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r5, 0x0, 0xb8) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0) getgid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f08864", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_emit_ethernet(0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaa99aabb0000dcf6177a8864aa8ae39d9b9f6e2cdc545bb2b06672cce96cf73163bd9287bd5002bd2facae2f963e2aea36c07971b9b78ac9f05cb2ae820907cc760848b0c1405132372ca6e449f9426177e6870783e872c30f67c7c2326725216741e99702783321324f123c464fdf776c5c2e5809003e489a2fa960"], 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx4\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000140)={0x0, 0x104}) clock_gettime(0x4, &(0x7f0000000100)) 8m48.801782984s ago: executing program 3 (id=2437): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x21, 0x67cd, 0xfffffffa, 0x5, 0xc411, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) syz_open_dev$ptys(0xc, 0x3, 0x1) 8m48.73921207s ago: executing program 3 (id=2438): socket$inet(0x2, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = open_tree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffb9}, 0x48) 8m47.85370148s ago: executing program 3 (id=2441): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = open$dir(&(0x7f00000068c0)='./file0\x00', 0x105500, 0x281) getdents64(r1, &(0x7f0000000000)=""/30, 0x1e) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) (async) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 8m47.699311909s ago: executing program 3 (id=2443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a31000005000900010073797a30000000000800054000000021640011800a0001006c696d6974000000540002800c00024000000000000000030c000140000000000000010108000440000000010c0002"], 0x120}}, 0x0) 8m47.348878314s ago: executing program 3 (id=2444): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r1, 0x0, 0x1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100fdff0000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 8m47.334746952s ago: executing program 34 (id=2444): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r1, 0x0, 0x1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100fdff0000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 6m11.788524772s ago: executing program 6 (id=3055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a31000000240900010073797a30000000000800054000000021640011800a0001006c696d6974000000540002800c00024000000000000000030c000140000000000000010108000440000000010c0002"], 0x120}}, 0x0) 6m11.634805524s ago: executing program 6 (id=3056): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x81) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0xd, 0xffc, 0x4a}, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 6m10.619161875s ago: executing program 6 (id=3059): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x0, 0x80008000, 0x9, 0x2, 0x0, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x5, 0x3ff, 0x10000, 0x800, 0xe2df, 0x2, 0xfffffffd, 0x1, 0x3, 0x7, 0x5, 0x5]}) mount(0x0, 0x0, 0x0, 0x200808, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000202010200000000000000000a0000003c0002802c00018014000300fc000000000000000000000000000000140004000000000000000000000000010000000000c8a55d19eff91b279600"/88], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f00000002c0)="240000001a005f0214f9d4010400000004000000000000000009000000000400012a46cdd3", 0x25) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000040)="cb", 0xfffffdef) 6m10.090289709s ago: executing program 6 (id=3061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x20000000) munlockall() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x98, 0xb, 0x148, 0x0, 0x148, 0x128, 0x240, 0x240, 0x128, 0x215, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @local, 0x0, 0xff000000, 'macvtap0\x00', 'veth0_to_bond\x00'}, 0x2e8, 0x70, 0x98, 0x0, {0xff0f000000000000}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0xc16}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x2, {0x0, 0x1, 0x3}, 0xfe}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) 6m9.964750864s ago: executing program 6 (id=3063): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./file1\x00', 0x2) mmap(&(0x7f0000500000/0x1000)=nil, 0x1000, 0x8, 0x20010, r1, 0xfe0ab000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb8) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0) getgid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_emit_ethernet(0x11, &(0x7f0000000380)=ANY=[], 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) clock_gettime(0x4, &(0x7f0000000100)) 6m9.749448649s ago: executing program 6 (id=3064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x20000000) munlockall() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x98, 0xb, 0x148, 0x0, 0x148, 0x128, 0x240, 0x240, 0x128, 0x215, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @local, 0x0, 0xff000000, 'macvtap0\x00', 'veth0_to_bond\x00'}, 0x2e8, 0x70, 0x98, 0x0, {0xff0f000000000000}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0xc16}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x2, {0x0, 0x1, 0x3}, 0xfe}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) 6m9.680552034s ago: executing program 35 (id=3064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x20000000) munlockall() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x98, 0xb, 0x148, 0x0, 0x148, 0x128, 0x240, 0x240, 0x128, 0x215, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @local, 0x0, 0xff000000, 'macvtap0\x00', 'veth0_to_bond\x00'}, 0x2e8, 0x70, 0x98, 0x0, {0xff0f000000000000}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0xc16}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x2, {0x0, 0x1, 0x3}, 0xfe}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) 2m18.345675792s ago: executing program 5 (id=4385): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r7, 0x31e, &(0x7f0000000080)={0xa1, 0x3, 0xfe, 0xca}) r8 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6]}}]}}]}, 0x94}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0xfffff801, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) unshare(0x64000600) 2m14.776557953s ago: executing program 5 (id=4400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x7a, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={r7, 0xa49a, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xffe4, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a0103000000000000000001000000140004800800024000000000080001400000000509000300"], 0x92fc}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m13.902552721s ago: executing program 5 (id=4404): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0), &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'blake2s-160-arm\x00'}}, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x668740) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) fchdir(r6) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r7 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r7, 0x3518, 0xaddf, 0x2, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff8305}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x4000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) 2m12.819569897s ago: executing program 5 (id=4412): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffff56825dcd8c83f80d8a43f237ff00000000000010ef042e955b65338100009500000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{}, {0x0, 0x4}, {}, {0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {}, {}, {}, {}, {}, {0x20}, {}, {0x0, 0x0, 0x5}]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f00000000c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2$dir(0xffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x2142, 0x48, 0x1}, 0x18) 2m12.630335344s ago: executing program 5 (id=4413): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f00000001c0)) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r1 = syz_io_uring_setup(0x3455, &(0x7f00000004c0)={0x0, 0xbfa5, 0x1, 0xfffffefe, 0x183}, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdffffffffbffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000002180)={0x0, 0x0, {0x0, 0x0, 0x300f}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0x6}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x400, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x2d, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40048c0}, 0xc000) r6 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)) 2m12.49328668s ago: executing program 5 (id=4414): syz_open_dev$usbmon(0x0, 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) syz_clone3(&(0x7f0000000540)={0x14018880, &(0x7f00000003c0), &(0x7f0000000440)=0x0, &(0x7f0000000480), {0x17}, &(0x7f0000000900)=""/4096, 0x1000, &(0x7f00000004c0)=""/34, &(0x7f0000000500)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) prlimit64(r0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000000c0)={{@my=0x1}, @any, 0x0, 0x0, 0x400005}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7aa, &(0x7f0000000000)={{@my=0x1}, @local}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) close(r4) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000080)) chdir(0x0) 1m55.629005751s ago: executing program 36 (id=4414): syz_open_dev$usbmon(0x0, 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) syz_clone3(&(0x7f0000000540)={0x14018880, &(0x7f00000003c0), &(0x7f0000000440)=0x0, &(0x7f0000000480), {0x17}, &(0x7f0000000900)=""/4096, 0x1000, &(0x7f00000004c0)=""/34, &(0x7f0000000500)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) prlimit64(r0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000000c0)={{@my=0x1}, @any, 0x0, 0x0, 0x400005}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7aa, &(0x7f0000000000)={{@my=0x1}, @local}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) close(r4) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000080)) chdir(0x0) 47.852567263s ago: executing program 1 (id=4874): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[]) r2 = dup(r0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$l2tp6(0xa, 0x2, 0x73) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='block_split\x00', r3, 0x0, 0x25cd7166}, 0x18) r7 = syz_clone(0x25948000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48182, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x80000001, {{0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x18}, 0x9}}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYRES32=r11, @ANYRESHEX=r5, @ANYBLOB="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"], 0xfc}}, 0x0) 43.745115811s ago: executing program 1 (id=4874): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[]) r2 = dup(r0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$l2tp6(0xa, 0x2, 0x73) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='block_split\x00', r3, 0x0, 0x25cd7166}, 0x18) r7 = syz_clone(0x25948000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48182, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x80000001, {{0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x18}, 0x9}}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYRES32=r11, @ANYRESHEX=r5, @ANYBLOB="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"], 0xfc}}, 0x0) 34.880208862s ago: executing program 1 (id=4874): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[]) r2 = dup(r0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$l2tp6(0xa, 0x2, 0x73) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='block_split\x00', r3, 0x0, 0x25cd7166}, 0x18) r7 = syz_clone(0x25948000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48182, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x80000001, {{0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x18}, 0x9}}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYRES32=r11, @ANYRESHEX=r5, @ANYBLOB="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"], 0xfc}}, 0x0) 25.883741105s ago: executing program 1 (id=4874): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[]) r2 = dup(r0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$l2tp6(0xa, 0x2, 0x73) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='block_split\x00', r3, 0x0, 0x25cd7166}, 0x18) r7 = syz_clone(0x25948000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48182, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x80000001, {{0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x18}, 0x9}}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYRES32=r11, @ANYRESHEX=r5, @ANYBLOB="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"], 0xfc}}, 0x0) 16.993668737s ago: executing program 1 (id=4874): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[]) r2 = dup(r0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$l2tp6(0xa, 0x2, 0x73) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='block_split\x00', r3, 0x0, 0x25cd7166}, 0x18) r7 = syz_clone(0x25948000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48182, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x80000001, {{0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x18}, 0x9}}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYRES32=r11, @ANYRESHEX=r5, @ANYBLOB="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"], 0xfc}}, 0x0) 8.279044688s ago: executing program 1 (id=4874): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[]) r2 = dup(r0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$l2tp6(0xa, 0x2, 0x73) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='block_split\x00', r3, 0x0, 0x25cd7166}, 0x18) r7 = syz_clone(0x25948000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48182, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x80000001, {{0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x18}, 0x9}}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYRES32=r11, @ANYRESHEX=r5, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800000010000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000030000000000000000000000000000f9a592742af66158f73d7ddff8097992b4cbeeb849975b0925e450ec27e7be771a7ee1f3de30b255efe153b13073c155da8b06c3796b81d8e75ca1bd86920ea1e120dd5408bc5414f6583bab08dcceaac8d2d72a3f8f5bf2d000b4c41414b60601436fe24d7740efc9a3e10fc25ef863fefcf0505e165e24279c0aae88aacd39006cadfa42227bbe25503c8bfdda1c20a0faaf90f3576c7c99d28119fb4df718b08f67d74f2f534b0938365801df5baf6198d1bcb97ddce83132d6f4cedb5857ce6bf40247976010f73ec19cb469c0d62d073d7bf6433946d01bf01ec9a4f22f8834d6c36bf4f4ec6196acac219c3abe60a9b67f062b0107a10822c3296786a26c7714f53718d27cebfd7db8f9516f25a3b1f06860e21c188d9de63571f179097ead9ab0aa97570ad989eba9c4eaeb8b056e7d"], 0xfc}}, 0x0) 3.405994493s ago: executing program 0 (id=5091): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x145040, 0x0) ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}, 0x1, 0x0, 0x0, 0x20000811}, 0x4810) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x0) openat$ttynull(0xffffff9c, &(0x7f00000001c0), 0x8a81, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$nfs(&(0x7f0000000000)='\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2001, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = dup(r2) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x1856, 0x0, 0x0, 0xfffffff9, 0xb, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r3, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7291abe632207e37) read$msr(r3, 0x0, 0x0) prlimit64(r4, 0x2, &(0x7f00000000c0)={0x8, 0x8}, &(0x7f0000000080)) ioctl$TIOCSETD(r3, 0x5423, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r5, 0x8910, 0x0) 3.351723606s ago: executing program 8 (id=5092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000023c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000006000000000000000100000d000000000400000002000000000000000000000604000000000000005f008f929db9dfc52aa653b6ea146ab09fba73222bfb1e449c5b50743c5b65635db97fff56bb5b27ec14667bd7d37ff2bc169222319ece5b51c95f58240797d9206e1b91b1575869a2c800193fa3397e89"], 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xc8}}, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r5) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r5) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) 2.493951549s ago: executing program 0 (id=5094): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) socket$inet(0x2, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 2.470990953s ago: executing program 8 (id=5095): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) socket$inet(0x2, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 2.417389624s ago: executing program 8 (id=5096): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x11, 0x3, 0x0) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0x1, 0x5) syz_emit_ethernet(0x1348, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0x41424344, @ANYBLOB="9104000690780002fe06f9895ef7220e86b0b3a21f8a83815cc10cd801fe06e2d4c3d9fe0ff989a96148f8737f36e83b17c0030309051e000000010000000461e29fba00000bf40000da1e00000009000000070402000000a23533dd538825310e75d267c24113bdc2d879c73d643467a26c528680"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x10e, &(0x7f00000003c0)={@local, @multicast, @void, {@mpls_mc={0x8848, {[{0x7}, {0x7, 0x0, 0x1}, {0x6a2a, 0x0, 0x1}, {0x400, 0x0, 0x1}], @ipv6=@tcp={0x8, 0x6, "f838ee", 0xc8, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e20, r3, r4, 0x0, 0x0, 0x4000000000000011, 0x2, 0x4, 0x0, 0x3, {[@exp_fastopen={0xfe, 0x7, 0xf989, "d7693b"}, @sack_perm={0x4, 0x2}, @mss={0x2, 0x4}]}}, {"e69bcca7ac3eace0109c08613d976d3e462a29afcafde2cc404abe7a23eade8eaf900ca8ac93dd1704c9d1c5f8ba1fe9e51b69c98cba3b79b06a7a1a4124f09244d80d09f1ecf2fd9ee4ae8097747d2a21f98d229cc7441b5026aec432469f32acf9ed09dd7108b25c86ea4f12bc03b612edfa556698c2fb4e0585912a9e6a34b2c4c7d2384b78ed15469c39459b5e9a9c18c6e9512bb5302314bee6832239782de91392"}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbmon(0x0, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8940, &(0x7f00000002c0)=@buf={0x2, &(0x7f0000000300)="066c"}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000306010800000000000000000300000805000100070a5b8b20e6098d07797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x44084) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 2.306037947s ago: executing program 7 (id=5097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0xe}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xc395}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x2}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x400a810}, 0x2000c081) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendfile(r2, r2, 0x0, 0x9) 2.172490569s ago: executing program 7 (id=5098): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000084010000000a000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e616161610061"], 0x0, 0x64, 0x0, 0x0, 0xa}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="000000a2b57d1d6464000000ee474ea7f14b1f68809ef986412a76fcd360d71bfa9250d6125f248394c09bd7bc7f53fc99971c5c6e640aa6f02202504bf4e03c5d60a66f43f193ef68b55df35a6c737d4b6a1aab9c5c6455242aa1d1e6b35701b8d413bac056b8590d91964a37efe1c2d0a92a67f61bdc", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf25570000000800", @ANYRES32=r2, @ANYBLOB="06009500faff0000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x893, 0x0, 0x0, 0x0) r4 = timerfd_create(0x8, 0x80000) timerfd_settime(r4, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003440)=@newtfilter={0x7f8, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x7c8, 0x2, [@TCA_BASIC_ACT={0x5b0, 0x3, [@m_mirred={0x114, 0x18, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x0, 0x0, 0x7}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x10, 0x2, 0x4d5, 0xff}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7, 0x6, 0xa5, 0x6}, 0x1, r7}}]}, {0x87, 0x6, "aae67905375cefdd15e338798a128afd2a537525ce3d9603edf6718320da4d66d5ce108115f02e3a8b5f3523793a114c774414cf03282d263845bdd1125ca58e9ab47b08b3d077697d04836a0ffc693900fbbab5ce65f240c8e831d0f4aa6701c097756fbc94ddf47ac62954a59fa660bdc40ce6d95d45e62a7c14220b4771b4990d5b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x1b8, 0x10, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x1, 0x2, 0x7}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x6, 0x3, 0x100}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x95, 0x2, 0x10000000, 0xa, 0xfff}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0x0, 0x80}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x6, 0x7fffffff, 0x7a}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x3, 0x4, 0x3}, 0x27}}]}, {0xe2, 0x6, "b198fa12d33b0f770184faa14a7fa13fc4dd2e250c9bc630049d11d69755cdf3c6c143d6dd5908249274fb8e07667915326f6c046ebea00f54ba922f82db18715ec46a566108147baba3268e4900d4f441aac5cb29db8fc0be3fbf5e8739cf7d5b0b5b5e986ba17bb9bbc866d7f0219ca1b6826cd242319ef71c38c913c75204e975d8592f4ac72e93474c66c29a7f6c81338dc7093b133ed1417d22f3f1c939473086be132cc01ff00abf28565339535ba8a902bf28046cfd95bf2389844cb1b202ae9c90dc7505a7ad8f36120d55334a718c282109d7785b40d08c68ef"}, {0xc}, {0xc, 0x8, {0x7}}}}, @m_skbedit={0xb4, 0x10, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xfff1}}]}, {0x7d, 0x6, "007b078fda1abfdcf02ffb43d2980ed78a84b5c37638376dc099702d9ce32e5da432af0cf6ac2fbd100524281b6defedd9f18a500b5e22df3cb35e5fd985cb73113e1ebb1de969468a4107f29513d3ae7f2ce637a6c40c25c4756426c51749d5980340eb76cbf560158c44430d0c3285ec2eeb0067f4413492"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0xb4, 0x1f, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80000001}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x1, 0x4}}]}, {0x58, 0x6, "f97e48fbcaf16ef0acc3cc6fd17f8894fd0301000000735ec6c3a818884067eae0035edb00334f4009bd92e8af126e2caf8b0bb2b608002992b844897d003776258be156c8720b17f8632ae5f672d393d5d0ad9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_skbmod={0xd0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xa3, 0x6, "f1e7a4ff90cc7bc7111486d8013f8ceb6ad26a3d886706a4394fd564ba8a6402c156a75cb13a6ffe456bdb0d5c0b97b556a78b558a63ca7948322029bd2648b92b5d821f44a79c7e89efe12ef403cea4a43b7c6fe06e3d85201d057add216239502934b2f29f19b54c17b2efd0d0c8cd5f0312ea7c5a75c2ead83e3226d58e99d8045e16b713c3ccd03e37296ff64c4d5849a9fe133b0f61ceb264c893231b"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0xa8, 0x1d, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x19}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x9ed6b}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_PROTO={0x6, 0x4, 0x2a21}]}, {0x42, 0x6, "00a34516413f8810aa1480c29a11d995640c21cd4fe3cc8795fc14e6c0bb0cfd2868bbcd1ce8f7e9ceba2505bffbb33b879c1d999ead42622f978c76788c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_EMATCHES={0x20c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1b71}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}, @TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0xffff}, {0x0, 0x1, 0x401, 0x1, 0x9, 0x0, 0x1}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x6}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x3, 0x6}, {0x4, 0x8001, 0x5, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe8d4, 0x1, 0x1ff}, {0x0, 0x6, 0x1, 0x6, 0x5}}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x9}, {0x3, 0x5, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x5}, {0x99}}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0xd42c, 0x4, 0x3ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x40, 0x1}, {0x2, 0xa, 0x2}}}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR='E%', @TCF_META_TYPE_VAR="6617", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="e833d3ebfb874e6376"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x2, 0x2, 0xfff8}, {0x8, 0x2, 0x2, '8\a'}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x400, 0x8, 0xb1c}, {0x1, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x8}, {0x81, 0x25, 0x0, 0x8001}}}]}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x2}, {0x2, 0x5, 0x6}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x101}, {0x3, 0x7, 0x6, 0x400}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x890b}, {0x4d, 0x4, 0xd, 0x4, 0x8, 0x2}}}, @TCF_EM_META={0x54, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xa2, 0x1}, {0x96d8, 0x4, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="259792f8a7c899e2"]}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="f2", @TCF_META_TYPE_VAR="04000000000000006b", @TCF_META_TYPE_VAR="e89a750733"]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x100, 0x2, 0x101}, {0x7, 0x5, 0x0, "ca685e1a4e"}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x4}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r8) syz_genetlink_get_family_id$tipc(&(0x7f0000001780), r8) recvmmsg(r8, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {0x0}, {&(0x7f0000001980)=""/230, 0xe6}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f00000018c0)=""/147, 0x93}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}], 0x9}, 0x80000000}], 0x4, 0x40008062, 0x0) 1.618660543s ago: executing program 0 (id=5099): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.484266771s ago: executing program 8 (id=5100): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa10100000009b0bb3a53ab1200f5d01a68a4acdec49d6a7aa90b8e8b9c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad7c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af801034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929b3c2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce207e5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b00700bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b4198a5a06850c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad204c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502960a1dde9dbf62586ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e6795156e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae94b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecd20286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25f8d4e65d243b7eab91063a7bfd8b7b239e39fbbb32b5c9517886287a1877cd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d128c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca803422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mount(0x0, 0x0, 0x0, 0xa00000, &(0x7f0000000140)='grpquota') write$FUSE_CREATE_OPEN(r0, &(0x7f0000000300)={0xa0, 0x3000000, 0x0, {{0x3, 0x0, 0xc, 0x7fff, 0x2, 0x80000000, {0x4, 0x2, 0x2, 0x9, 0xd, 0x80, 0x3, 0x200, 0x33a, 0x4000, 0xfff, 0xee01, 0x0, 0x0, 0x80}}, {0x0, 0xc}}}, 0xa0) 1.452130807s ago: executing program 8 (id=5101): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x2, "5a309a426be809a48aa9bc68b9de658caf5999a771019fefcf54e97d739d47b9", 0x30314142}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f0000245000/0x4000)=nil, 0x4000, 0x19) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket(0x2, 0x5, 0x26) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x7}}, 0x30) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '\\\x00'}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x50a, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x0) 1.347511699s ago: executing program 0 (id=5102): bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0xffffffb4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x402000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0xfffffffffffffdee) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)="1621730ffacae1d85e2494ff58f67510d90f6626a1a27a503e8aadd58d5cdb94e43f5397f7eb9af0a5a79bd787c5a9ad070648c653c95c153cf03afcdf4d23be1b2a863a549f6fc85e013718cd9797fb723771f8dd232ea58c7d59452b40260d06775c0a79931244381ea6559f847158d4fcd5a0a4c3f319353bd06005168c54c078e4c90434cc91dbc03eda0204ec5b1586351af17722500822e9a13de0e3167ba490d801c4f4ccbac3e7720a3b2fdbfbd99a720159b84b6c", 0xb9}, {&(0x7f0000000040)="82d76c684e4d9464a20665e5f6cac50ee747608aa3e8e4862722b705922a38542366a2a1000f8257d258764d1ea502ed8e68d2506732905d64", 0x39}, {&(0x7f0000000500)="d827d35fea4df6eacf8474f07537a32706d9eaff82264a37db4859a158d48df06660f294f7c82514f4e645086b87146d48df85c340614eec2dae21b96c3b3b082ad8dd4d1a546cee16f919384390948a6e9efffbbf21849d226914df87a82fa47f7bddc61f9d3edfdd942ff1f0c96486d1708c24e9dcf41944df1043d3b7a50add9541c1fa23a06698754964f23bb7957d17c6a8", 0x94}, {&(0x7f00000005c0)="27b8221a830df55740bcf4232c7d05f59d3e1402000000000000008827b816e735c9c08b6b742a3eede7ff59c26450a34d979af9e7fba6c865c034fe70ca2a30ffdb267e9373be2186b3933bd161dc78f23d49eb81a670673d38", 0x5a}, {&(0x7f0000000640)="667962e8a5bafb0518aaab5741b6db8a1a8a4cf646100cde9239fc8af8addc9bad1707de581010311952ba2d95d99d21db85e73bcbec3f3dc06cba38718d3b9fe6b3511f0b454ec47f3982fb928af462fb8892a25267663a58c5e177af723b4d9036cb6fdf53125fa6a06d260e0e38ca3ca1db9bbe95790fa969808ec9137b36bd94ae17ee43bad0936a1aa2117f461981c471d8599777072f6ea84bb1786dc887a3", 0xa2}, {&(0x7f0000000700)="e13c9d2e4e51f385b813a6f5b76075513e5c6e227cbdb542ef0cf1c3150068d4af0ddc01d7367fc3c823b368de24edad25ca04fe866f760c8d54f947d6a977496d3a9eabefc0fda191950486567ff178c0f082c74050fc47f16d3dd64d388d797264ddf9c9c06f60227a0b82", 0x6c}, {&(0x7f00000008c0)="8d3592fdc90d77651a2928e5c5496547d0e1820e384b846843e2e75e731a80552cec75b3387f38b1f75be885693b108a24af72676077724d63a9e15f068955522f8e9c211df587a0a1947782cbced8f9d5e2c5cad1085ab99f83d2269b87219bf4544487974ac87300f80dbaf187d9b7e31737d1e43659e6eebca873ffe2a9a2fe344b2558a8d762829642877bcfb19f877a50e3436a76d2238fc6871cf491e7a186197f2dc3d9bf9285b3d3c77a5483de661ee41652213d3120b62c8e01f5ddfc04a0fda6655e08f04fed0d905cf868cdbe699dbca4914d0c4d4f4e1c", 0xdd}, {&(0x7f0000002080)="be9b847fcb521d2ddc2bcec228ceb8e1a1b79595e3b68687833bf5aa96db480bdaf706000000abbf160d919acf357411a1c6c777d365beaf3cc7a97fe70917a1329876cec9a001d4cf6620151af1754beb41b9931bb3e79a7fbd9e4e911d8c847d83d2af92e0038f01420655aa957a9ca0951788c1d138cda49cea23873ddcea0736e4bbae41b64cb7d57bfa4b1f60ab6de3f0523e6982dc7f006d47248888bbd90e1559ad1d58b4bc517f7ee5d2561e76d56e33900ff4373a309ee347cef97d801583ee42d1875abe42b767bb5c0519973f9d5c7c225cfbd8afb2d690b5dd878d3a64c0968f81a56e5aa25059943d86e33bedde900e03b300"/262, 0x106}, {&(0x7f0000000a40)="2dda63843d15683929a6e17d37139243fd781e8108f06b1deb43cbea76a278500d6dec0e2f4de8493321697f599e18a0072807fa5f6474ec8c366996fde2cac97eb400b0459c4152b188a3195c7cab7fe9725906eb44332c4962e12e4dd4103119d7c7b4ab26314c47d96872fa0c2b93b5ccc84cc9577d1e910c17c41f09e2c15803cd9252677b1f803ea26579ac04865dda52775e4d9d1ae840d8c2a5a32354f73e9f6fcb732a5b8f275102b4e84df9cb5fdba36aec77f93e0f0d720406edb5a9a924e226455fdc56bee864713bb3e5c0", 0xd1}, {&(0x7f0000000b40)="e8cdca4fef74a31513185876c74d96e0eb50ac5773c03d19e420b7d43467c108708736686ed10135510044c5980b64ef43c57916d7f2ee8fa9232830ff7b2b560af5290e2ee00757cf767001657a35d4c3f7fd5ce1004334bf26b05551e5a36bd1f7709bb21146572d7f681d9f8d987e06edb96d3363dfe0e06b1d69746d74fd52d63245d9080895921c6c2d4729c2554dddb17102969a6fa7c038ed2ae2973614cda13cce916946ff309f285dc2442e67f27f62e4db725f95018cf0f9a38735d5354fda939abef8926521b8bedd12036fb9352383245063e755168ab56fb0ecd374548a61197ca33142", 0xea}], 0xa, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x284}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setrlimit(0x8, &(0x7f0000000080)={0xc8, 0x8}) openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0f00000004000000080700000700001000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.332918964s ago: executing program 7 (id=5103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640011800a0001006c696d6974000000540002800c00024000000000000000030c000140000000000000010108000440000000010c0002"], 0x120}}, 0x20) 1.208728651s ago: executing program 7 (id=5104): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) socket$inet(0x2, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 1.158757124s ago: executing program 7 (id=5105): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_adjtime(0x5, &(0x7f0000000080)={0xc, 0x997, 0xffffffff, 0x80, 0x6, 0x10000, 0x7, 0x51dd, 0xeb, 0x0, 0x7, 0x5, 0x200, 0x6, 0x7ff, 0x7ff, 0xfffffffc, 0x40, 0x0, 0x0, 0x3, 0x1, 0x3000, 0x8001, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x551e531b54736393, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000e000000000e6c13489d7ca6ba9ab5f71c47766", @ANYBLOB="9daf", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x7f36}, {0x200, 0x60}, {0x3, 0xf}, {0xa, 0x100}, {0x6, 0x589}, {0x8, 0x7}, {0x10041, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) openat$nmem0(0xffffff9c, &(0x7f0000000380), 0x450000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, 0xffffffffffffffff, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000300)='/proc/diskstats\x00', 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x11, r1, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10000, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0xc04c561a, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) listen(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f72"], 0x4c}}, 0x2) 1.008042162s ago: executing program 8 (id=5106): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) openat$kvm(0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000084010000000a000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e616161610061"], 0x0, 0x64, 0x0, 0x0, 0xa}, 0x28) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f000000cdc0)=0x10, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x200800, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x1, r6, 0x24, r1}, 0x10) 97.010933ms ago: executing program 0 (id=5107): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="20000000290000003200000000000000000000000000000000010000f5"], 0x20}}], 0x1, 0xbcef9a7337e68e7e) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2000004) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000f5ff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) 73.984494ms ago: executing program 7 (id=5108): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x2, 0x8001, 0x1, 0x0, 0x2, 0x9, "2636ee87b5f286d158ffffffffff00", 0x0, 0x0, 0x4a, 0x4, 0x3, 0x0, 0x8}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x60000) openat$incfs(0xffffffffffffffff, 0x0, 0x24000, 0x122) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="01060000000000000000090000002c00048013000100", @ANYRES8], 0xac}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='ecryptfs\x00', 0x1800408, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) 0s ago: executing program 0 (id=5109): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0xf, 0x9a8, "381482b94e28"}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtaction={0x1f4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x1e0, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x198, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x6}}}]}, {0x154, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare(0x22020400) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0x0, 0x0, 0x5b, 0x10000, @value=r3}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$udambuf(0xffffff9c, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): romiscuous mode [ 890.852250][T17108] veth0_vlan: left promiscuous mode [ 891.230270][ T5958] Bluetooth: hci2: command tx timeout [ 891.264833][T23962] netlink: 186984 bytes leftover after parsing attributes in process `syz.8.4570'. [ 892.440243][T17108] team0 (unregistering): Port device team_slave_1 removed [ 892.567657][T17108] team0 (unregistering): Port device team_slave_0 removed [ 893.448881][ T5958] Bluetooth: hci2: command tx timeout [ 893.482280][T23977] lo speed is unknown, defaulting to 1000 [ 893.485094][T23977] lo speed is unknown, defaulting to 1000 [ 893.485324][T23968] lo speed is unknown, defaulting to 1000 [ 894.155698][T23968] lo speed is unknown, defaulting to 1000 [ 894.751982][T23909] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 894.767687][T23909] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 894.776384][T23909] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 894.781669][T23909] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 894.994538][T23909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.008989][T23909] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.033646][ T8407] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.035967][ T8407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.045902][ T8407] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.048134][ T8407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.246715][T23909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.354074][T23909] veth0_vlan: entered promiscuous mode [ 895.361751][T23909] veth1_vlan: entered promiscuous mode [ 895.391031][T23909] veth0_macvtap: entered promiscuous mode [ 895.395399][T23909] veth1_macvtap: entered promiscuous mode [ 895.429625][T23909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.436043][T23909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.440669][T23909] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.443422][T23909] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.446106][T23909] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.449308][T23909] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.560243][ T8407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.562872][ T8407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.589464][ T8407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.591986][ T8407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.638628][T24054] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 895.640686][T24054] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 895.646163][T24054] vhci_hcd vhci_hcd.0: Device attached [ 895.649007][T24055] usbip_core: unknown command [ 895.651467][T24055] vhci_hcd: unknown pdu 0 [ 895.652885][T24055] usbip_core: unknown command [ 895.654618][ T8407] vhci_hcd: stop threads [ 895.655992][ T8407] vhci_hcd: release socket [ 895.657403][ T8407] vhci_hcd: disconnect device [ 895.693209][ T5958] Bluetooth: hci2: command tx timeout [ 896.005836][T24091] syz.8.4587: attempt to access beyond end of device [ 896.005836][T24091] nbd8: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 896.010228][T24091] XFS (nbd8): SB validate failed with error -5. [ 896.036016][T23772] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 896.199082][T23772] usb 6-1: config 0 has an invalid interface number: 198 but max is 0 [ 896.201691][T23772] usb 6-1: config 0 has no interface number 0 [ 896.203725][T23772] usb 6-1: config 0 interface 198 altsetting 8 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 896.207459][T23772] usb 6-1: config 0 interface 198 altsetting 8 endpoint 0x86 is Bulk; changing to Interrupt [ 896.210475][T23772] usb 6-1: config 0 interface 198 has no altsetting 0 [ 896.212759][T23772] usb 6-1: New USB device found, idVendor=1b3d, idProduct=0138, bcdDevice=74.e6 [ 896.215680][T23772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.228248][T23772] usb 6-1: config 0 descriptor?? [ 896.230417][T24072] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 896.233056][T24072] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 896.530365][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 896.881072][T15188] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 897.063995][T15188] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 897.067556][T15188] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 897.073635][T15188] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 897.078338][T15188] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.084812][T24125] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 897.089401][T15188] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 897.896395][ T5958] Bluetooth: hci2: command tx timeout [ 898.356306][T24147] syz.8.4597: attempt to access beyond end of device [ 898.356306][T24147] nbd8: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 898.371060][T24147] XFS (nbd8): SB validate failed with error -5. [ 898.968779][T23772] usb 6-1: string descriptor 0 read error: -71 [ 899.060537][T24165] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4599'. [ 899.101088][T24168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4603'. [ 899.174668][T24169] netlink: 'syz.1.4602': attribute type 1 has an invalid length. [ 899.318916][T24172] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4604'. [ 899.841226][T23772] ftdi_sio 6-1:0.198: FTDI USB Serial Device converter detected [ 899.846026][T23772] ftdi_sio ttyUSB0: unknown device type: 0x74e6 [ 899.850932][T23772] usb 6-1: USB disconnect, device number 27 [ 899.871302][T23772] ftdi_sio 6-1:0.198: device disconnected [ 899.931549][T15163] usb 12-1: USB disconnect, device number 6 [ 901.025219][T24193] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4610'. [ 901.680591][T15188] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 901.851611][T15188] usb 5-1: Using ep0 maxpacket: 16 [ 901.855734][T15188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.862301][T15188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.868419][T15188] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 901.874028][T15188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.881403][T15188] usb 5-1: config 0 descriptor?? [ 903.133441][T24224] netfs: Couldn't get user pages (rc=-14) [ 903.572896][T24235] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 903.579162][T24233] IPVS: stopping backup sync thread 24235 ... [ 903.586473][ T40] audit: type=1326 audit(1752244850.412:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24236 comm="syz.7.4622" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x0 [ 903.619146][T24233] binder: 24225:24233 ioctl c0306201 0 returned -14 [ 904.265947][T15188] usbhid 5-1:0.0: can't add hid device: -71 [ 904.271627][T15188] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 904.279157][T15188] usb 5-1: USB disconnect, device number 19 [ 904.315284][T24242] loop2: detected capacity change from 0 to 7 [ 904.324480][T24242] loop2: [POWERTEC] p1 p2 p3 [ 904.338239][T24242] loop2: p1 start 1600481121 is beyond EOD, truncated [ 904.341269][T24242] loop2: p2 start 9038 is beyond EOD, truncated [ 904.343670][T24242] loop2: p3 size 1835008 extends beyond EOD, truncated [ 904.354921][T24245] tipc: Failed to remove unknown binding: 66,1,1/134418688:3716253599/3716253601 [ 904.367144][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 904.386569][T24245] lo speed is unknown, defaulting to 1000 [ 904.389065][T24245] lo speed is unknown, defaulting to 1000 [ 904.407856][T24248] netfs: Couldn't get user pages (rc=-14) [ 905.436667][T24276] netlink: 'syz.1.4635': attribute type 10 has an invalid length. [ 905.439183][T24276] openvswitch: netlink: Flow actions attr not present in new flow. [ 905.563587][T24277] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 905.565636][T24277] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 905.568139][T24277] vhci_hcd vhci_hcd.0: Device attached [ 905.613607][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4636'. [ 905.682814][T24278] vhci_hcd: connection closed [ 905.683226][T17128] vhci_hcd: stop threads [ 905.686589][T17128] vhci_hcd: release socket [ 905.687867][T17128] vhci_hcd: disconnect device [ 905.723791][T24284] loop2: detected capacity change from 0 to 7 [ 905.727335][T24284] loop2: [POWERTEC] p1 p2 p3 [ 905.728893][T24284] loop2: p1 start 1600481121 is beyond EOD, truncated [ 905.730890][T24284] loop2: p2 start 9038 is beyond EOD, truncated [ 905.741683][T24284] loop2: p3 size 1835008 extends beyond EOD, truncated [ 905.880866][ T40] audit: type=1326 audit(1752244852.564:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24288 comm="syz.1.4637" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x0 [ 905.889068][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 906.848500][T24302] tipc: Resetting bearer [ 907.169368][T24321] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4647'. [ 907.233876][T14731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 907.238982][T14731] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 907.242739][T14731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 907.245641][T14731] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 907.256654][T14731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 907.322184][T24327] syz.7.4648: attempt to access beyond end of device [ 907.322184][T24327] nbd7: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 907.330187][T24315] lo speed is unknown, defaulting to 1000 [ 907.333050][T24315] lo speed is unknown, defaulting to 1000 [ 907.337193][T24327] XFS (nbd7): SB validate failed with error -5. [ 907.632010][T24315] chnl_net:caif_netlink_parms(): no params data found [ 907.728937][T24348] lo speed is unknown, defaulting to 1000 [ 907.729465][T24315] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.733865][T24315] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.736181][T24315] bridge_slave_0: entered allmulticast mode [ 907.738811][T24315] bridge_slave_0: entered promiscuous mode [ 907.741667][T24348] lo speed is unknown, defaulting to 1000 [ 907.743250][T24315] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.745786][T24315] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.747951][T24315] bridge_slave_1: entered allmulticast mode [ 907.750842][T24315] bridge_slave_1: entered promiscuous mode [ 907.788235][T24315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.793696][T24315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.836373][T24315] team0: Port device team_slave_0 added [ 907.842141][T24315] team0: Port device team_slave_1 added [ 907.907870][T24315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.910013][T24315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.928885][T24315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.939709][T24315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.941892][T24315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.954532][T24315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.188940][T24315] hsr_slave_0: entered promiscuous mode [ 908.194756][T24315] hsr_slave_1: entered promiscuous mode [ 908.198212][T24315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 908.201718][T24315] Cannot create hsr debugfs directory [ 908.283179][T24360] netlink: 'syz.8.4652': attribute type 1 has an invalid length. [ 908.407560][T24315] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.411872][T24315] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 908.511087][T24315] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.515911][T24315] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 908.609762][T24315] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.613017][T24315] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 908.744741][T24315] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.751012][T24315] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 908.922531][T24315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 908.929602][T24315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 908.941565][T24315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 908.945713][T24315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 909.123410][T24315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.133827][T24315] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.144773][T17110] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.147831][T17110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.155323][T17110] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.157626][T17110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.190880][T24315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 909.194068][T24315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 909.441369][T24386] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4656'. [ 909.442242][T14731] Bluetooth: hci3: command tx timeout [ 909.462563][T24315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.516288][T24315] veth0_vlan: entered promiscuous mode [ 909.526039][T24315] veth1_vlan: entered promiscuous mode [ 909.555109][T24315] veth0_macvtap: entered promiscuous mode [ 909.561204][T24315] veth1_macvtap: entered promiscuous mode [ 909.577927][T24315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.598614][T24315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.612340][T24315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.616652][T24315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.619865][T24315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.623569][T24315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.639942][T24395] loop2: detected capacity change from 0 to 7 [ 909.642655][T24395] loop2: [POWERTEC] p1 p2 p3 [ 909.644280][T24395] loop2: p1 start 1600481121 is beyond EOD, truncated [ 909.646804][T24395] loop2: p2 start 9038 is beyond EOD, truncated [ 909.648800][T24395] loop2: p3 size 1835008 extends beyond EOD, truncated [ 909.724298][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 909.813891][T17107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.822071][T17107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.869092][T17110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.880296][T17110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.002103][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4660'. [ 910.020267][T24403] tipc: Enabling of bearer rejected, failed to enable media [ 910.222051][T24410] JFS: discard option not supported on device [ 910.224710][T24410] Mount JFS Failure: -22 [ 910.226094][T24410] jfs_mount failed w/return code = -22 [ 910.666844][T24414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4661'. [ 910.786395][T24420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4664'. [ 910.827344][T24423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4665'. [ 911.191954][T24431] befs: (nullb0): No write support. Marking filesystem read-only [ 911.197197][T24431] befs: (nullb0): invalid magic header [ 911.203475][T24431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.266355][T24431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.665767][T14731] Bluetooth: hci3: command tx timeout [ 912.061950][T24441] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.4670'. [ 912.098816][T24444] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4671'. [ 912.430732][T24450] fuse: Unknown parameter 'd' [ 912.658686][T24454] fuseblk: Unknown parameter '"' [ 912.769923][T24456] tmpfs: Bad value for 'mpol' [ 912.784816][T24456] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4674'. [ 912.823916][ T40] audit: type=1326 audit(1752244859.065:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24459 comm="syz.8.4675" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 913.236142][T24465] lo speed is unknown, defaulting to 1000 [ 913.239954][T24465] lo speed is unknown, defaulting to 1000 [ 913.901332][T14731] Bluetooth: hci3: command tx timeout [ 913.990729][T24477] random: crng reseeded on system resumption [ 914.250314][T24482] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4680'. [ 915.283861][T24505] FAULT_INJECTION: forcing a failure. [ 915.283861][T24505] name failslab, interval 1, probability 0, space 0, times 0 [ 915.287844][T24505] CPU: 3 UID: 0 PID: 24505 Comm: syz.8.4687 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 915.287860][T24505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 915.287867][T24505] Call Trace: [ 915.287872][T24505] [ 915.287876][T24505] dump_stack_lvl+0x16c/0x1f0 [ 915.287910][T24505] should_fail_ex+0x512/0x640 [ 915.287939][T24505] should_failslab+0xc2/0x120 [ 915.287952][T24505] __kmalloc_cache_noprof+0x6a/0x3e0 [ 915.287972][T24505] ? __pfx___might_resched+0x10/0x10 [ 915.287991][T24505] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 915.288007][T24505] __hw_addr_add_ex+0x3c9/0x7c0 [ 915.288021][T24505] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 915.288034][T24505] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 915.288054][T24505] ? __pfx_vxcan_setup+0x10/0x10 [ 915.288066][T24505] dev_addr_init+0x161/0x250 [ 915.288081][T24505] ? __pfx_dev_addr_init+0x10/0x10 [ 915.288110][T24505] alloc_netdev_mqs+0x3d2/0x1570 [ 915.288137][T24505] rtnl_create_link+0xc08/0xf90 [ 915.288157][T24505] vxcan_newlink+0x2f8/0x640 [ 915.288169][T24505] ? netlink_sendmsg+0x8d1/0xdd0 [ 915.288180][T24505] ? ____sys_sendmsg+0xa95/0xc70 [ 915.288192][T24505] ? __pfx_vxcan_newlink+0x10/0x10 [ 915.288203][T24505] ? do_fast_syscall_32+0x32/0x80 [ 915.288244][T24505] ? __pfx_validate_linkmsg+0x10/0x10 [ 915.288261][T24505] ? alloc_netdev_mqs+0xe7e/0x1570 [ 915.288280][T24505] ? rtnl_create_link+0xa4a/0xf90 [ 915.288297][T24505] ? __pfx_vxcan_newlink+0x10/0x10 [ 915.288310][T24505] rtnl_newlink+0xc42/0x2000 [ 915.288341][T24505] ? __pfx_rtnl_newlink+0x10/0x10 [ 915.288364][T24505] ? kfree_skbmem+0x1a4/0x1f0 [ 915.288391][T24505] ? rcu_is_watching+0x12/0xc0 [ 915.288404][T24505] ? trace_cap_capable+0x18d/0x200 [ 915.288419][T24505] ? find_held_lock+0x2b/0x80 [ 915.288430][T24505] ? __pfx_rtnl_newlink+0x10/0x10 [ 915.288446][T24505] ? __pfx_rtnl_newlink+0x10/0x10 [ 915.288462][T24505] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 915.288479][T24505] ? __pfx_rtnl_newlink+0x10/0x10 [ 915.288497][T24505] rtnetlink_rcv_msg+0x95e/0xe90 [ 915.288516][T24505] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 915.288537][T24505] ? ref_tracker_free+0x37c/0x830 [ 915.288558][T24505] netlink_rcv_skb+0x155/0x420 [ 915.288569][T24505] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 915.288587][T24505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 915.288604][T24505] ? netlink_deliver_tap+0x1ae/0xd30 [ 915.288626][T24505] netlink_unicast+0x58d/0x850 [ 915.288639][T24505] ? __pfx_netlink_unicast+0x10/0x10 [ 915.288655][T24505] netlink_sendmsg+0x8d1/0xdd0 [ 915.288668][T24505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 915.288681][T24505] ? __import_iovec+0x1dd/0x650 [ 915.288694][T24505] ____sys_sendmsg+0xa95/0xc70 [ 915.288708][T24505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 915.288719][T24505] ? get_compat_msghdr+0x11a/0x170 [ 915.288743][T24505] ___sys_sendmsg+0x134/0x1d0 [ 915.288761][T24505] ? __pfx____sys_sendmsg+0x10/0x10 [ 915.288784][T24505] ? find_held_lock+0x2b/0x80 [ 915.288804][T24505] __sys_sendmsg+0x16d/0x220 [ 915.288821][T24505] ? __pfx___sys_sendmsg+0x10/0x10 [ 915.288843][T24505] ? rcu_is_watching+0x12/0xc0 [ 915.288857][T24505] __do_fast_syscall_32+0x7c/0x3a0 [ 915.288875][T24505] do_fast_syscall_32+0x32/0x80 [ 915.288891][T24505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 915.288906][T24505] RIP: 0023:0xf710e579 [ 915.288915][T24505] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 915.288925][T24505] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 915.288936][T24505] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 915.288943][T24505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 915.288949][T24505] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 915.288956][T24505] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 915.288962][T24505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 915.288976][T24505] [ 915.508261][T24508] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 916.113152][T14731] Bluetooth: hci3: command tx timeout [ 916.292600][T24514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4690'. [ 916.511836][T24522] bond0: entered promiscuous mode [ 916.513745][T24522] bond_slave_0: entered promiscuous mode [ 916.516104][T24522] bond_slave_1: entered promiscuous mode [ 916.520898][T24522] batadv0: entered promiscuous mode [ 916.524123][T24522] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 916.528940][T24522] bond0: left promiscuous mode [ 916.530914][T24522] bond_slave_0: left promiscuous mode [ 916.533416][T24522] bond_slave_1: left promiscuous mode [ 916.536477][T24522] batadv0: left promiscuous mode [ 916.857031][T24535] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4696'. [ 917.355812][T24547] FAULT_INJECTION: forcing a failure. [ 917.355812][T24547] name failslab, interval 1, probability 0, space 0, times 0 [ 917.361082][T24547] CPU: 0 UID: 0 PID: 24547 Comm: syz.8.4700 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 917.361107][T24547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 917.361119][T24547] Call Trace: [ 917.361126][T24547] [ 917.361133][T24547] dump_stack_lvl+0x16c/0x1f0 [ 917.361165][T24547] should_fail_ex+0x512/0x640 [ 917.361190][T24547] ? __kvmalloc_node_noprof+0x124/0x620 [ 917.361218][T24547] should_failslab+0xc2/0x120 [ 917.361236][T24547] __kvmalloc_node_noprof+0x137/0x620 [ 917.361266][T24547] ? lockdep_init_map_type+0x5c/0x280 [ 917.361292][T24547] ? alloc_netdev_mqs+0xcf8/0x1570 [ 917.361324][T24547] ? alloc_netdev_mqs+0xcf8/0x1570 [ 917.361349][T24547] alloc_netdev_mqs+0xcf8/0x1570 [ 917.361382][T24547] rtnl_create_link+0xc08/0xf90 [ 917.361413][T24547] vxcan_newlink+0x2f8/0x640 [ 917.361434][T24547] ? netlink_sendmsg+0x8d1/0xdd0 [ 917.361451][T24547] ? ____sys_sendmsg+0xa95/0xc70 [ 917.361469][T24547] ? __pfx_vxcan_newlink+0x10/0x10 [ 917.361486][T24547] ? do_fast_syscall_32+0x32/0x80 [ 917.361556][T24547] ? __pfx_validate_linkmsg+0x10/0x10 [ 917.361581][T24547] ? alloc_netdev_mqs+0xe7e/0x1570 [ 917.361613][T24547] ? rtnl_create_link+0xa4a/0xf90 [ 917.361639][T24547] ? __pfx_vxcan_newlink+0x10/0x10 [ 917.361663][T24547] rtnl_newlink+0xc42/0x2000 [ 917.361699][T24547] ? __pfx_rtnl_newlink+0x10/0x10 [ 917.361732][T24547] ? kfree_skbmem+0x1a4/0x1f0 [ 917.361764][T24547] ? rcu_is_watching+0x12/0xc0 [ 917.361784][T24547] ? trace_cap_capable+0x18d/0x200 [ 917.361808][T24547] ? find_held_lock+0x2b/0x80 [ 917.361824][T24547] ? __pfx_rtnl_newlink+0x10/0x10 [ 917.361847][T24547] ? __pfx_rtnl_newlink+0x10/0x10 [ 917.361870][T24547] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 917.361897][T24547] ? __pfx_rtnl_newlink+0x10/0x10 [ 917.361924][T24547] rtnetlink_rcv_msg+0x95e/0xe90 [ 917.361953][T24547] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 917.361986][T24547] ? ref_tracker_free+0x37c/0x830 [ 917.362015][T24547] netlink_rcv_skb+0x155/0x420 [ 917.362033][T24547] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 917.362079][T24547] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 917.362106][T24547] ? netlink_deliver_tap+0x1ae/0xd30 [ 917.362139][T24547] netlink_unicast+0x58d/0x850 [ 917.362161][T24547] ? __pfx_netlink_unicast+0x10/0x10 [ 917.362186][T24547] netlink_sendmsg+0x8d1/0xdd0 [ 917.362207][T24547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.362226][T24547] ? __import_iovec+0x1dd/0x650 [ 917.362249][T24547] ____sys_sendmsg+0xa95/0xc70 [ 917.362276][T24547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 917.362294][T24547] ? get_compat_msghdr+0x11a/0x170 [ 917.362332][T24547] ___sys_sendmsg+0x134/0x1d0 [ 917.362360][T24547] ? __pfx____sys_sendmsg+0x10/0x10 [ 917.362401][T24547] ? find_held_lock+0x2b/0x80 [ 917.362436][T24547] __sys_sendmsg+0x16d/0x220 [ 917.362462][T24547] ? __pfx___sys_sendmsg+0x10/0x10 [ 917.362499][T24547] ? rcu_is_watching+0x12/0xc0 [ 917.362521][T24547] __do_fast_syscall_32+0x7c/0x3a0 [ 917.362549][T24547] do_fast_syscall_32+0x32/0x80 [ 917.362575][T24547] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 917.362597][T24547] RIP: 0023:0xf710e579 [ 917.362611][T24547] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 917.362628][T24547] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 917.362645][T24547] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 917.362656][T24547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 917.362666][T24547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 917.362676][T24547] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 917.362686][T24547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 917.362709][T24547] [ 917.496935][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.499850][T24549] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 917.502622][T24549] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 917.505956][T24549] vhci_hcd vhci_hcd.0: Device attached [ 917.666572][T24550] vhci_hcd: connection closed [ 917.668235][T17110] vhci_hcd: stop threads [ 917.676600][T17110] vhci_hcd: release socket [ 917.680071][T17110] vhci_hcd: disconnect device [ 917.738160][ T1465] vhci_hcd: vhci_device speed not set [ 918.187928][T24562] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 918.536392][T24565] loop2: detected capacity change from 0 to 7 [ 918.553337][T23792] loop2: [POWERTEC] p1 p2 p3 [ 918.557732][T23792] loop2: p1 start 1600481121 is beyond EOD, truncated [ 918.564567][T23792] loop2: p2 start 9038 is beyond EOD, truncated [ 918.566610][T23792] loop2: p3 size 1835008 extends beyond EOD, truncated [ 918.586516][T24565] loop2: [POWERTEC] p1 p2 p3 [ 918.588465][T24565] loop2: p1 start 1600481121 is beyond EOD, truncated [ 918.590725][T24565] loop2: p2 start 9038 is beyond EOD, truncated [ 918.592788][T24565] loop2: p3 size 1835008 extends beyond EOD, truncated [ 918.634633][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 918.649232][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 918.661455][T24567] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4705'. [ 918.876626][T24577] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4708'. [ 919.339327][T24590] binder: 24589:24590 ioctl c0306201 800007c0 returned -14 [ 919.873020][T24603] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4716'. [ 920.882386][T24628] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 920.884367][T24628] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 920.886929][T24628] vhci_hcd vhci_hcd.0: Device attached [ 920.970343][T24628] netlink: 'syz.1.4723': attribute type 6 has an invalid length. [ 920.973357][T24628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4723'. [ 921.281477][ T61] usb 39-1: new high-speed USB device number 14 using vhci_hcd [ 921.319481][T24636] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4725'. [ 921.395741][T24636] batadv1: entered allmulticast mode [ 921.494409][T24637] input: syz1 as /devices/virtual/input/input39 [ 921.728741][T24629] vhci_hcd: connection reset by peer [ 921.731958][ T8407] vhci_hcd: stop threads [ 921.733291][ T8407] vhci_hcd: release socket [ 921.735956][ T8407] vhci_hcd: disconnect device [ 922.242321][ T40] audit: type=1326 audit(1752244867.876:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24650 comm="syz.8.4729" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 922.671712][T24658] loop2: detected capacity change from 0 to 7 [ 922.674676][T23792] loop2: [POWERTEC] p1 p2 p3 [ 922.676303][T23792] loop2: p1 start 1600481121 is beyond EOD, truncated [ 922.679070][T23792] loop2: p2 start 9038 is beyond EOD, truncated [ 922.681185][T23792] loop2: p3 size 1835008 extends beyond EOD, truncated [ 922.688274][T24658] loop2: [POWERTEC] p1 p2 p3 [ 922.690033][T24658] loop2: p1 start 1600481121 is beyond EOD, truncated [ 922.692147][T24658] loop2: p2 start 9038 is beyond EOD, truncated [ 922.694236][T24658] loop2: p3 size 1835008 extends beyond EOD, truncated [ 922.728121][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 922.749230][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 922.806365][T24663] FAULT_INJECTION: forcing a failure. [ 922.806365][T24663] name failslab, interval 1, probability 0, space 0, times 0 [ 922.815901][T24663] CPU: 2 UID: 0 PID: 24663 Comm: syz.7.4733 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 922.815918][T24663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 922.815925][T24663] Call Trace: [ 922.815929][T24663] [ 922.815934][T24663] dump_stack_lvl+0x16c/0x1f0 [ 922.815955][T24663] should_fail_ex+0x512/0x640 [ 922.815974][T24663] ? dev_prep_valid_name.constprop.0+0x16a/0x6c0 [ 922.815990][T24663] should_failslab+0xc2/0x120 [ 922.816002][T24663] __kmalloc_noprof+0xd2/0x510 [ 922.816021][T24663] dev_prep_valid_name.constprop.0+0x16a/0x6c0 [ 922.816040][T24663] ? __pfx_dev_prep_valid_name.constprop.0+0x10/0x10 [ 922.816058][T24663] ? lockdep_init_map_type+0x5c/0x280 [ 922.816077][T24663] register_netdevice+0x49d/0x2270 [ 922.816091][T24663] ? __pfx_register_netdevice+0x10/0x10 [ 922.816102][T24663] ? rtnl_create_link+0xa4a/0xf90 [ 922.816121][T24663] vxcan_newlink+0x3f4/0x640 [ 922.816135][T24663] ? ____sys_sendmsg+0xa95/0xc70 [ 922.816147][T24663] ? __pfx_vxcan_newlink+0x10/0x10 [ 922.816158][T24663] ? do_fast_syscall_32+0x32/0x80 [ 922.816197][T24663] ? __pfx_validate_linkmsg+0x10/0x10 [ 922.816213][T24663] ? alloc_netdev_mqs+0xe7e/0x1570 [ 922.816233][T24663] ? rtnl_create_link+0xa4a/0xf90 [ 922.816249][T24663] ? __pfx_vxcan_newlink+0x10/0x10 [ 922.816262][T24663] rtnl_newlink+0xc42/0x2000 [ 922.816287][T24663] ? __pfx_rtnl_newlink+0x10/0x10 [ 922.816303][T24663] ? __kernel_text_address+0xd/0x40 [ 922.816313][T24663] ? unwind_get_return_address+0x59/0xa0 [ 922.816331][T24663] ? arch_stack_walk+0xa6/0x100 [ 922.816351][T24663] ? rcu_is_watching+0x12/0xc0 [ 922.816363][T24663] ? trace_cap_capable+0x18d/0x200 [ 922.816378][T24663] ? find_held_lock+0x2b/0x80 [ 922.816389][T24663] ? __pfx_rtnl_newlink+0x10/0x10 [ 922.816405][T24663] ? __pfx_rtnl_newlink+0x10/0x10 [ 922.816421][T24663] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 922.816438][T24663] ? __pfx_rtnl_newlink+0x10/0x10 [ 922.816455][T24663] rtnetlink_rcv_msg+0x95e/0xe90 [ 922.816474][T24663] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 922.816494][T24663] ? __lock_acquire+0x622/0x1c90 [ 922.816511][T24663] netlink_rcv_skb+0x155/0x420 [ 922.816523][T24663] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 922.816542][T24663] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 922.816558][T24663] ? netlink_deliver_tap+0x1ae/0xd30 [ 922.816576][T24663] ? is_vmalloc_addr+0x86/0xa0 [ 922.816593][T24663] netlink_unicast+0x58d/0x850 [ 922.816607][T24663] ? __pfx_netlink_unicast+0x10/0x10 [ 922.816622][T24663] netlink_sendmsg+0x8d1/0xdd0 [ 922.816635][T24663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 922.816648][T24663] ? __import_iovec+0x1dd/0x650 [ 922.816661][T24663] ____sys_sendmsg+0xa95/0xc70 [ 922.816674][T24663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 922.816686][T24663] ? get_compat_msghdr+0x11a/0x170 [ 922.816716][T24663] ___sys_sendmsg+0x134/0x1d0 [ 922.816741][T24663] ? __pfx____sys_sendmsg+0x10/0x10 [ 922.816774][T24663] ? find_held_lock+0x2b/0x80 [ 922.816808][T24663] __sys_sendmsg+0x16d/0x220 [ 922.816833][T24663] ? __pfx___sys_sendmsg+0x10/0x10 [ 922.816868][T24663] ? rcu_is_watching+0x12/0xc0 [ 922.816889][T24663] __do_fast_syscall_32+0x7c/0x3a0 [ 922.816916][T24663] do_fast_syscall_32+0x32/0x80 [ 922.816958][T24663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 922.816982][T24663] RIP: 0023:0xf712e579 [ 922.816996][T24663] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 922.817013][T24663] RSP: 002b:00000000f511e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 922.817030][T24663] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 922.817042][T24663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 922.817052][T24663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 922.817060][T24663] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 922.817070][T24663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 922.817095][T24663] [ 923.239803][T24669] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4735'. [ 923.351729][T24675] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4737'. [ 923.354639][T24675] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4737'. [ 924.116303][ T40] audit: type=1326 audit(1752244869.626:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24694 comm="syz.1.4743" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x0 [ 924.368674][T24700] pim6reg1: entered promiscuous mode [ 924.370778][T24700] pim6reg1: entered allmulticast mode [ 924.633377][T23773] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 924.795181][T23773] usb 13-1: config 0 has no interfaces? [ 924.798702][T23773] usb 13-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 924.801506][T23773] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.803960][T23773] usb 13-1: Product: syz [ 924.806640][T23773] usb 13-1: Manufacturer: syz [ 924.808096][T23773] usb 13-1: SerialNumber: syz [ 924.815432][T23773] usb 13-1: config 0 descriptor?? [ 925.044252][T24704] loop2: detected capacity change from 0 to 7 [ 925.046961][T24704] loop2: [POWERTEC] p1 p2 p3 [ 925.048738][T24704] loop2: p1 start 1600481121 is beyond EOD, truncated [ 925.051109][T24704] loop2: p2 start 9038 is beyond EOD, truncated [ 925.053494][T24704] loop2: p3 size 1835008 extends beyond EOD, truncated [ 925.078059][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 926.199153][T24727] wireguard: wg1: Could not create IPv4 socket [ 926.254903][T24729] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4753'. [ 926.296062][T24731] 9pnet_fd: Insufficient options for proto=fd [ 926.707642][ T61] vhci_hcd: vhci_device speed not set [ 927.079165][T24743] netlink: 'syz.0.4757': attribute type 1 has an invalid length. [ 927.266367][ T40] audit: type=1326 audit(1752244872.563:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24747 comm="syz.1.4758" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x0 [ 927.501397][ T1019] usb 13-1: USB disconnect, device number 2 [ 928.129303][T24763] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4763'. [ 928.149627][T24765] netlink: 'syz.1.4764': attribute type 1 has an invalid length. [ 928.396029][T24773] lo speed is unknown, defaulting to 1000 [ 928.403756][T24773] lo speed is unknown, defaulting to 1000 [ 928.487544][T24776] lo speed is unknown, defaulting to 1000 [ 928.590246][T24776] lo speed is unknown, defaulting to 1000 [ 929.153784][T24783] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4768'. [ 929.338050][T24783] bond0: (slave bond_slave_0): Releasing backup interface [ 930.152830][T24794] ptrace attach of "/syz-executor exec"[18212] was attempted by "/syz-executor exec"[24794] [ 930.222008][T24796] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4773'. [ 931.539177][T24824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4782'. [ 931.574514][T24825] overlayfs: workdir and upperdir must be separate subtrees [ 931.881347][T24843] all: renamed from lo (while UP) [ 931.888660][T24843] all: renamed from lo (while UP) [ 932.685482][T24854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4790'. [ 932.744459][T24865] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4793'. [ 932.813967][ T40] audit: type=1326 audit(1752244877.764:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24869 comm="syz.0.4795" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 933.054741][T24874] netlink: 'syz.8.4796': attribute type 21 has an invalid length. [ 933.415267][T24882] netlink: 'syz.8.4799': attribute type 1 has an invalid length. [ 933.764070][T24896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4803'. [ 934.045166][T24905] wireguard0: entered promiscuous mode [ 934.047588][T24905] wireguard0: entered allmulticast mode [ 934.068162][T24910] netlink: 830 bytes leftover after parsing attributes in process `syz.8.4808'. [ 934.556658][T24921] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4810'. [ 934.682786][ T40] audit: type=1326 audit(1752244879.513:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24923 comm="syz.7.4811" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x0 [ 934.767108][T24927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4813'. [ 935.368114][T24952] ip6gre1: entered allmulticast mode [ 935.487068][T24955] loop2: detected capacity change from 0 to 7 [ 935.490981][T23792] loop2: [POWERTEC] p1 p2 p3 [ 935.493122][T23792] loop2: p1 start 1600481121 is beyond EOD, truncated [ 935.498209][T23792] loop2: p2 start 9038 is beyond EOD, truncated [ 935.500222][T23792] loop2: p3 size 1835008 extends beyond EOD, truncated [ 935.505379][T24955] loop2: [POWERTEC] p1 p2 p3 [ 935.507172][T24955] loop2: p1 start 1600481121 is beyond EOD, truncated [ 935.509374][T24955] loop2: p2 start 9038 is beyond EOD, truncated [ 935.511322][T24955] loop2: p3 size 1835008 extends beyond EOD, truncated [ 935.528377][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 935.531338][T24957] openvswitch: netlink: Actions may not be safe on all matching packets [ 935.538727][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 935.858604][T23773] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 935.887326][T24971] lo speed is unknown, defaulting to 1000 [ 935.889827][T24971] lo speed is unknown, defaulting to 1000 [ 935.984957][T24974] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4827'. [ 936.020573][T23773] usb 13-1: config 0 has no interfaces? [ 936.022467][T23773] usb 13-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 936.025274][T23773] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.032784][T23773] usb 13-1: config 0 descriptor?? [ 936.255165][T23773] usb 13-1: USB disconnect, device number 3 [ 936.519808][T24986] loop2: detected capacity change from 0 to 7 [ 936.524877][T24986] loop2: [POWERTEC] p1 p2 p3 [ 936.526685][T24986] loop2: p1 start 1600481121 is beyond EOD, truncated [ 936.528878][T24986] loop2: p2 start 9038 is beyond EOD, truncated [ 936.531686][T24986] loop2: p3 size 1835008 extends beyond EOD, truncated [ 936.550485][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 936.908298][T25000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4834'. [ 937.067196][T25002] FAULT_INJECTION: forcing a failure. [ 937.067196][T25002] name failslab, interval 1, probability 0, space 0, times 0 [ 937.071023][T25002] CPU: 2 UID: 0 PID: 25002 Comm: syz.8.4836 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 937.071046][T25002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 937.071057][T25002] Call Trace: [ 937.071064][T25002] [ 937.071072][T25002] dump_stack_lvl+0x16c/0x1f0 [ 937.071109][T25002] should_fail_ex+0x512/0x640 [ 937.071134][T25002] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 937.071163][T25002] should_failslab+0xc2/0x120 [ 937.071181][T25002] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 937.071207][T25002] ? __kernfs_new_node+0xd2/0x8e0 [ 937.071236][T25002] __kernfs_new_node+0xd2/0x8e0 [ 937.071264][T25002] ? __pfx___kernfs_new_node+0x10/0x10 [ 937.071295][T25002] ? find_held_lock+0x2b/0x80 [ 937.071316][T25002] ? kernfs_root+0xee/0x2a0 [ 937.071345][T25002] kernfs_new_node+0x13c/0x1e0 [ 937.071376][T25002] kernfs_create_link+0xcc/0x240 [ 937.071399][T25002] sysfs_do_create_link_sd+0x90/0x140 [ 937.071426][T25002] sysfs_create_link+0x61/0xc0 [ 937.071449][T25002] device_add+0x62c/0x1a70 [ 937.071472][T25002] ? __pfx_device_add+0x10/0x10 [ 937.071491][T25002] ? lockdep_init_map_type+0x5c/0x280 [ 937.071516][T25002] ? __init_waitqueue_head+0xca/0x150 [ 937.071541][T25002] netdev_register_kobject+0x182/0x3a0 [ 937.071564][T25002] register_netdevice+0x13dc/0x2270 [ 937.071588][T25002] ? __pfx_register_netdevice+0x10/0x10 [ 937.071607][T25002] ? rtnl_create_link+0xa4a/0xf90 [ 937.071638][T25002] vxcan_newlink+0x3f4/0x640 [ 937.071660][T25002] ? ____sys_sendmsg+0xa95/0xc70 [ 937.071679][T25002] ? __pfx_vxcan_newlink+0x10/0x10 [ 937.071697][T25002] ? do_fast_syscall_32+0x32/0x80 [ 937.071770][T25002] ? __pfx_validate_linkmsg+0x10/0x10 [ 937.071796][T25002] ? alloc_netdev_mqs+0xe7e/0x1570 [ 937.071829][T25002] ? rtnl_create_link+0xa4a/0xf90 [ 937.071856][T25002] ? __pfx_vxcan_newlink+0x10/0x10 [ 937.071877][T25002] rtnl_newlink+0xc42/0x2000 [ 937.071912][T25002] ? __pfx_rtnl_newlink+0x10/0x10 [ 937.071961][T25002] ? kfree_skbmem+0x1a4/0x1f0 [ 937.071996][T25002] ? rcu_is_watching+0x12/0xc0 [ 937.072016][T25002] ? trace_cap_capable+0x18d/0x200 [ 937.072042][T25002] ? find_held_lock+0x2b/0x80 [ 937.072060][T25002] ? __pfx_rtnl_newlink+0x10/0x10 [ 937.072089][T25002] ? __pfx_rtnl_newlink+0x10/0x10 [ 937.072114][T25002] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 937.072142][T25002] ? __pfx_rtnl_newlink+0x10/0x10 [ 937.072169][T25002] rtnetlink_rcv_msg+0x95e/0xe90 [ 937.072199][T25002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 937.072234][T25002] ? ref_tracker_free+0x37c/0x830 [ 937.072265][T25002] netlink_rcv_skb+0x155/0x420 [ 937.072283][T25002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 937.072313][T25002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 937.072339][T25002] ? netlink_deliver_tap+0x1ae/0xd30 [ 937.072372][T25002] netlink_unicast+0x58d/0x850 [ 937.072392][T25002] ? __pfx_netlink_unicast+0x10/0x10 [ 937.072416][T25002] netlink_sendmsg+0x8d1/0xdd0 [ 937.072438][T25002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.072457][T25002] ? __import_iovec+0x1dd/0x650 [ 937.072478][T25002] ____sys_sendmsg+0xa95/0xc70 [ 937.072500][T25002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 937.072517][T25002] ? get_compat_msghdr+0x11a/0x170 [ 937.072555][T25002] ___sys_sendmsg+0x134/0x1d0 [ 937.072584][T25002] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.072623][T25002] ? find_held_lock+0x2b/0x80 [ 937.072657][T25002] __sys_sendmsg+0x16d/0x220 [ 937.072684][T25002] ? __pfx___sys_sendmsg+0x10/0x10 [ 937.072710][T25002] ? rcu_is_watching+0x12/0xc0 [ 937.072724][T25002] __do_fast_syscall_32+0x7c/0x3a0 [ 937.072743][T25002] do_fast_syscall_32+0x32/0x80 [ 937.072760][T25002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 937.072774][T25002] RIP: 0023:0xf710e579 [ 937.072784][T25002] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 937.072795][T25002] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 937.072806][T25002] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 937.072813][T25002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 937.072819][T25002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 937.072826][T25002] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 937.072832][T25002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 937.072846][T25002] [ 937.240960][ T40] audit: type=1400 audit(1752244881.907:5565): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=25003 comm="syz.8.4837" [ 937.653053][T25010] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4839'. [ 938.294578][T25022] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4842'. [ 938.464889][T25028] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 939.614303][T25047] Invalid source name [ 939.615719][T25047] UBIFS error (pid: 25047): cannot open "./file0", error -22 [ 939.625090][T25050] FAULT_INJECTION: forcing a failure. [ 939.625090][T25050] name failslab, interval 1, probability 0, space 0, times 0 [ 939.632125][T25050] CPU: 3 UID: 0 PID: 25050 Comm: syz.8.4850 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 939.632146][T25050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 939.632153][T25050] Call Trace: [ 939.632158][T25050] [ 939.632162][T25050] dump_stack_lvl+0x16c/0x1f0 [ 939.632195][T25050] should_fail_ex+0x512/0x640 [ 939.632212][T25050] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 939.632230][T25050] should_failslab+0xc2/0x120 [ 939.632241][T25050] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 939.632259][T25050] ? __kernfs_new_node+0xd2/0x8e0 [ 939.632276][T25050] __kernfs_new_node+0xd2/0x8e0 [ 939.632293][T25050] ? __pfx___kernfs_new_node+0x10/0x10 [ 939.632312][T25050] ? find_held_lock+0x2b/0x80 [ 939.632325][T25050] ? kernfs_root+0xee/0x2a0 [ 939.632342][T25050] kernfs_new_node+0x13c/0x1e0 [ 939.632363][T25050] __kernfs_create_file+0x53/0x350 [ 939.632377][T25050] sysfs_add_file_mode_ns+0x207/0x3c0 [ 939.632395][T25050] internal_create_group+0x578/0xf30 [ 939.632415][T25050] ? __pfx_internal_create_group+0x10/0x10 [ 939.632433][T25050] ? kernfs_create_link+0x1bd/0x240 [ 939.632447][T25050] internal_create_groups+0x9d/0x150 [ 939.632464][T25050] device_add+0x6d1/0x1a70 [ 939.632478][T25050] ? __pfx_device_add+0x10/0x10 [ 939.632490][T25050] ? lockdep_init_map_type+0x5c/0x280 [ 939.632506][T25050] ? __init_waitqueue_head+0xca/0x150 [ 939.632520][T25050] netdev_register_kobject+0x182/0x3a0 [ 939.632534][T25050] register_netdevice+0x13dc/0x2270 [ 939.632548][T25050] ? __pfx_register_netdevice+0x10/0x10 [ 939.632559][T25050] ? rtnl_create_link+0xa4a/0xf90 [ 939.632578][T25050] vxcan_newlink+0x3f4/0x640 [ 939.632591][T25050] ? ____sys_sendmsg+0xa95/0xc70 [ 939.632603][T25050] ? __pfx_vxcan_newlink+0x10/0x10 [ 939.632615][T25050] ? do_fast_syscall_32+0x32/0x80 [ 939.632656][T25050] ? __pfx_validate_linkmsg+0x10/0x10 [ 939.632672][T25050] ? alloc_netdev_mqs+0xe7e/0x1570 [ 939.632693][T25050] ? rtnl_create_link+0xa4a/0xf90 [ 939.632720][T25050] ? __pfx_vxcan_newlink+0x10/0x10 [ 939.632736][T25050] rtnl_newlink+0xc42/0x2000 [ 939.632757][T25050] ? __pfx_rtnl_newlink+0x10/0x10 [ 939.632778][T25050] ? kfree_skbmem+0x1a4/0x1f0 [ 939.632797][T25050] ? rcu_is_watching+0x12/0xc0 [ 939.632810][T25050] ? trace_cap_capable+0x18d/0x200 [ 939.632825][T25050] ? find_held_lock+0x2b/0x80 [ 939.632836][T25050] ? __pfx_rtnl_newlink+0x10/0x10 [ 939.632852][T25050] ? __pfx_rtnl_newlink+0x10/0x10 [ 939.632867][T25050] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 939.632885][T25050] ? __pfx_rtnl_newlink+0x10/0x10 [ 939.632902][T25050] rtnetlink_rcv_msg+0x95e/0xe90 [ 939.632921][T25050] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 939.632942][T25050] ? ref_tracker_free+0x37c/0x830 [ 939.632961][T25050] netlink_rcv_skb+0x155/0x420 [ 939.632973][T25050] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 939.632992][T25050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 939.633008][T25050] ? netlink_deliver_tap+0x1ae/0xd30 [ 939.633029][T25050] netlink_unicast+0x58d/0x850 [ 939.633043][T25050] ? __pfx_netlink_unicast+0x10/0x10 [ 939.633058][T25050] netlink_sendmsg+0x8d1/0xdd0 [ 939.633072][T25050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.633085][T25050] ? __import_iovec+0x1dd/0x650 [ 939.633098][T25050] ____sys_sendmsg+0xa95/0xc70 [ 939.633112][T25050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.633123][T25050] ? get_compat_msghdr+0x11a/0x170 [ 939.633154][T25050] ___sys_sendmsg+0x134/0x1d0 [ 939.633172][T25050] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.633195][T25050] ? find_held_lock+0x2b/0x80 [ 939.633215][T25050] __sys_sendmsg+0x16d/0x220 [ 939.633232][T25050] ? __pfx___sys_sendmsg+0x10/0x10 [ 939.633254][T25050] ? rcu_is_watching+0x12/0xc0 [ 939.633268][T25050] __do_fast_syscall_32+0x7c/0x3a0 [ 939.633285][T25050] do_fast_syscall_32+0x32/0x80 [ 939.633302][T25050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 939.633317][T25050] RIP: 0023:0xf710e579 [ 939.633326][T25050] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 939.633337][T25050] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 939.633348][T25050] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 939.633354][T25050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 939.633361][T25050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 939.633367][T25050] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 939.633373][T25050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 939.633387][T25050] [ 940.433528][T25075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4859'. [ 940.436658][T25077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4859'. [ 940.449531][T25075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4859'. [ 940.545185][T25081] FAULT_INJECTION: forcing a failure. [ 940.545185][T25081] name failslab, interval 1, probability 0, space 0, times 0 [ 940.549221][T25081] CPU: 1 UID: 0 PID: 25081 Comm: syz.1.4861 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 940.549237][T25081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 940.549244][T25081] Call Trace: [ 940.549248][T25081] [ 940.549253][T25081] dump_stack_lvl+0x16c/0x1f0 [ 940.549274][T25081] should_fail_ex+0x512/0x640 [ 940.549290][T25081] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 940.549308][T25081] should_failslab+0xc2/0x120 [ 940.549333][T25081] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 940.549349][T25081] ? __kernfs_new_node+0xd2/0x8e0 [ 940.549367][T25081] __kernfs_new_node+0xd2/0x8e0 [ 940.549384][T25081] ? __pfx___kernfs_new_node+0x10/0x10 [ 940.549402][T25081] ? find_held_lock+0x2b/0x80 [ 940.549415][T25081] ? kernfs_root+0xee/0x2a0 [ 940.549432][T25081] kernfs_new_node+0x13c/0x1e0 [ 940.549452][T25081] __kernfs_create_file+0x53/0x350 [ 940.549467][T25081] sysfs_add_file_mode_ns+0x207/0x3c0 [ 940.549484][T25081] internal_create_group+0x578/0xf30 [ 940.549504][T25081] ? __pfx_internal_create_group+0x10/0x10 [ 940.549522][T25081] ? kernfs_create_link+0x1bd/0x240 [ 940.549537][T25081] internal_create_groups+0x9d/0x150 [ 940.549554][T25081] device_add+0x6d1/0x1a70 [ 940.549568][T25081] ? __pfx_device_add+0x10/0x10 [ 940.549579][T25081] ? lockdep_init_map_type+0x5c/0x280 [ 940.549595][T25081] ? __init_waitqueue_head+0xca/0x150 [ 940.549610][T25081] netdev_register_kobject+0x182/0x3a0 [ 940.549624][T25081] register_netdevice+0x13dc/0x2270 [ 940.549638][T25081] ? __pfx_register_netdevice+0x10/0x10 [ 940.549649][T25081] ? rtnl_create_link+0xa4a/0xf90 [ 940.549668][T25081] vxcan_newlink+0x3f4/0x640 [ 940.549681][T25081] ? ____sys_sendmsg+0xa95/0xc70 [ 940.549693][T25081] ? __pfx_vxcan_newlink+0x10/0x10 [ 940.549705][T25081] ? do_fast_syscall_32+0x32/0x80 [ 940.549746][T25081] ? __pfx_validate_linkmsg+0x10/0x10 [ 940.549762][T25081] ? alloc_netdev_mqs+0xe7e/0x1570 [ 940.549782][T25081] ? rtnl_create_link+0xa4a/0xf90 [ 940.549798][T25081] ? __pfx_vxcan_newlink+0x10/0x10 [ 940.549811][T25081] rtnl_newlink+0xc42/0x2000 [ 940.549833][T25081] ? __pfx_rtnl_newlink+0x10/0x10 [ 940.549853][T25081] ? kfree_skbmem+0x1a4/0x1f0 [ 940.549873][T25081] ? rcu_is_watching+0x12/0xc0 [ 940.549886][T25081] ? trace_cap_capable+0x18d/0x200 [ 940.549901][T25081] ? find_held_lock+0x2b/0x80 [ 940.549911][T25081] ? __pfx_rtnl_newlink+0x10/0x10 [ 940.549927][T25081] ? __pfx_rtnl_newlink+0x10/0x10 [ 940.549943][T25081] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 940.549960][T25081] ? __pfx_rtnl_newlink+0x10/0x10 [ 940.549978][T25081] rtnetlink_rcv_msg+0x95e/0xe90 [ 940.549996][T25081] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 940.550021][T25081] ? ref_tracker_free+0x37c/0x830 [ 940.550040][T25081] netlink_rcv_skb+0x155/0x420 [ 940.550052][T25081] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 940.550070][T25081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 940.550086][T25081] ? netlink_deliver_tap+0x1ae/0xd30 [ 940.550107][T25081] netlink_unicast+0x58d/0x850 [ 940.550120][T25081] ? __pfx_netlink_unicast+0x10/0x10 [ 940.550135][T25081] netlink_sendmsg+0x8d1/0xdd0 [ 940.550149][T25081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.550161][T25081] ? __import_iovec+0x1dd/0x650 [ 940.550175][T25081] ____sys_sendmsg+0xa95/0xc70 [ 940.550188][T25081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.550200][T25081] ? get_compat_msghdr+0x11a/0x170 [ 940.550223][T25081] ___sys_sendmsg+0x134/0x1d0 [ 940.550240][T25081] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.550263][T25081] ? find_held_lock+0x2b/0x80 [ 940.550284][T25081] __sys_sendmsg+0x16d/0x220 [ 940.550300][T25081] ? __pfx___sys_sendmsg+0x10/0x10 [ 940.550316][T25081] ? __pfx_bpf_trace_run2+0x10/0x10 [ 940.550335][T25081] ? syscall_trace_enter+0x1cb/0x260 [ 940.550354][T25081] ? rcu_is_watching+0x12/0xc0 [ 940.550367][T25081] __do_fast_syscall_32+0x7c/0x3a0 [ 940.550385][T25081] do_fast_syscall_32+0x32/0x80 [ 940.550401][T25081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 940.550416][T25081] RIP: 0023:0xf70ae579 [ 940.550425][T25081] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 940.550436][T25081] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 940.550447][T25081] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 940.550454][T25081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 940.550460][T25081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 940.550467][T25081] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 940.550473][T25081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 940.550487][T25081] [ 940.892665][T25091] loop2: detected capacity change from 0 to 7 [ 940.897136][T25091] loop2: [POWERTEC] p1 p2 p3 [ 940.899003][T25091] loop2: p1 start 1600481121 is beyond EOD, truncated [ 940.901234][T25091] loop2: p2 start 9038 is beyond EOD, truncated [ 940.903369][T25091] loop2: p3 size 1835008 extends beyond EOD, truncated [ 940.956438][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 941.602349][T25103] vlan2: entered allmulticast mode [ 941.604263][T25103] macsec0: entered allmulticast mode [ 941.797280][ T838] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 941.952740][ T838] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 941.956545][ T838] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 941.960352][ T838] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 941.963810][ T838] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.976007][T25101] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 941.980499][ T838] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 942.195841][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 942.205204][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 942.210276][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 942.212910][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 942.215338][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 942.229603][ T838] usb 13-1: USB disconnect, device number 4 [ 942.247403][T25122] lo speed is unknown, defaulting to 1000 [ 942.252604][T25122] lo speed is unknown, defaulting to 1000 [ 942.448540][T25122] chnl_net:caif_netlink_parms(): no params data found [ 942.548723][T25122] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.555461][T25122] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.559524][T25122] bridge_slave_0: entered allmulticast mode [ 942.563138][T25122] bridge_slave_0: entered promiscuous mode [ 942.590535][T25122] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.593267][T25122] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.595831][T25122] bridge_slave_1: entered allmulticast mode [ 942.596799][T25132] loop2: detected capacity change from 0 to 7 [ 942.598802][T25122] bridge_slave_1: entered promiscuous mode [ 942.602890][T25132] loop2: [POWERTEC] p1 p2 p3 [ 942.608552][T25132] loop2: p1 start 1600481121 is beyond EOD, truncated [ 942.611440][T25132] loop2: p2 start 9038 is beyond EOD, truncated [ 942.614047][T25132] loop2: p3 size 1835008 extends beyond EOD, truncated [ 942.646802][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 942.672076][T25122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.678071][T25122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.724547][T25122] team0: Port device team_slave_0 added [ 942.728906][T25122] team0: Port device team_slave_1 added [ 942.764507][T25122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.766773][T25122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.775222][T25122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.779822][T25122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.781810][T25122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.790811][T25122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.834242][T25122] hsr_slave_0: entered promiscuous mode [ 942.837129][T25122] hsr_slave_1: entered promiscuous mode [ 942.839612][T25122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 942.842085][T25122] Cannot create hsr debugfs directory [ 942.985529][T25122] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.062290][T25122] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.205369][T25122] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.322045][T25122] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.485363][T25122] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 943.489641][T25122] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 943.501308][T25122] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 943.505413][T25122] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 943.545933][T25122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.561268][T25122] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.566705][T17128] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.569721][T17128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.577166][ T8407] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.579612][ T8407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.585630][T25150] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 943.587709][T25150] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 943.590623][T25150] vhci_hcd vhci_hcd.0: Device attached [ 943.729723][T25122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.762015][T25122] veth0_vlan: entered promiscuous mode [ 943.767828][T25122] veth1_vlan: entered promiscuous mode [ 943.787654][T25122] veth0_macvtap: entered promiscuous mode [ 943.792749][T25122] veth1_macvtap: entered promiscuous mode [ 943.806356][T25122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.821530][T25122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.829353][T25122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.832694][T25122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.836683][T25122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.840327][T25122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.855295][ T6018] usb 52-1: SetAddress Request (2) to port 0 [ 943.857895][ T6018] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 943.917498][T17128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.920741][T17128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.941541][T17128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.944475][T17128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.258031][T25151] vhci_hcd: connection reset by peer [ 944.260029][T17107] vhci_hcd: stop threads [ 944.261612][T17107] vhci_hcd: release socket [ 944.263070][T17107] vhci_hcd: disconnect device [ 944.914246][T25177] loop2: detected capacity change from 0 to 7 [ 944.916666][T25177] loop2: [POWERTEC] p1 p2 p3 [ 944.918271][T25177] loop2: p1 start 1600481121 is beyond EOD, truncated [ 944.920324][T25177] loop2: p2 start 9038 is beyond EOD, truncated [ 944.926861][T25177] loop2: p3 size 1835008 extends beyond EOD, truncated [ 945.000505][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 945.294585][T25190] netlink: 'syz.0.4888': attribute type 1 has an invalid length. [ 945.476576][T25192] lo speed is unknown, defaulting to 1000 [ 945.479187][T25192] lo speed is unknown, defaulting to 1000 [ 946.103494][T17110] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.285623][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 946.295768][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 946.299729][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 946.303737][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 946.306528][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 946.340150][T25209] lo speed is unknown, defaulting to 1000 [ 946.345064][T25209] lo speed is unknown, defaulting to 1000 [ 946.629694][T25209] chnl_net:caif_netlink_parms(): no params data found [ 946.810376][T25209] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.812849][T25209] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.815108][T25209] bridge_slave_0: entered allmulticast mode [ 946.819219][T25209] bridge_slave_0: entered promiscuous mode [ 946.824721][T25209] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.827234][T25209] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.829624][T25209] bridge_slave_1: entered allmulticast mode [ 946.832352][T25209] bridge_slave_1: entered promiscuous mode [ 946.875619][T25209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.881185][T25209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.919177][T25209] team0: Port device team_slave_0 added [ 946.923639][T25209] team0: Port device team_slave_1 added [ 946.967942][T25209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.970304][T25209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.978236][T25209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.982986][T25209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.985146][T25209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.996831][T25209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.079820][T25209] hsr_slave_0: entered promiscuous mode [ 947.083066][T25209] hsr_slave_1: entered promiscuous mode [ 947.091356][T25209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 947.095655][T25209] Cannot create hsr debugfs directory [ 947.889359][T17110] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.992708][T17110] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.032352][T25231] syz.7.4894: attempt to access beyond end of device [ 948.032352][T25231] nbd7: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 948.038991][T25231] XFS (nbd7): SB validate failed with error -5. [ 948.095225][T17110] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.125044][T25240] FAULT_INJECTION: forcing a failure. [ 948.125044][T25240] name failslab, interval 1, probability 0, space 0, times 0 [ 948.129857][T25240] CPU: 0 UID: 0 PID: 25240 Comm: syz.0.4895 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 948.129880][T25240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 948.129893][T25240] Call Trace: [ 948.129900][T25240] [ 948.129906][T25240] dump_stack_lvl+0x16c/0x1f0 [ 948.129950][T25240] should_fail_ex+0x512/0x640 [ 948.129983][T25240] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 948.130009][T25240] should_failslab+0xc2/0x120 [ 948.130023][T25240] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 948.130045][T25240] ? __kernfs_new_node+0xd2/0x8e0 [ 948.130071][T25240] __kernfs_new_node+0xd2/0x8e0 [ 948.130089][T25240] ? __pfx___kernfs_new_node+0x10/0x10 [ 948.130107][T25240] ? find_held_lock+0x2b/0x80 [ 948.130120][T25240] ? kernfs_root+0xee/0x2a0 [ 948.130137][T25240] kernfs_new_node+0x13c/0x1e0 [ 948.130157][T25240] __kernfs_create_file+0x53/0x350 [ 948.130171][T25240] sysfs_add_file_mode_ns+0x207/0x3c0 [ 948.130189][T25240] internal_create_group+0x578/0xf30 [ 948.130210][T25240] ? __pfx_internal_create_group+0x10/0x10 [ 948.130228][T25240] ? kernfs_create_link+0x1bd/0x240 [ 948.130242][T25240] internal_create_groups+0x9d/0x150 [ 948.130259][T25240] device_add+0x6d1/0x1a70 [ 948.130273][T25240] ? __pfx_device_add+0x10/0x10 [ 948.130285][T25240] ? lockdep_init_map_type+0x5c/0x280 [ 948.130301][T25240] ? __init_waitqueue_head+0xca/0x150 [ 948.130315][T25240] netdev_register_kobject+0x182/0x3a0 [ 948.130330][T25240] register_netdevice+0x13dc/0x2270 [ 948.130344][T25240] ? __pfx_register_netdevice+0x10/0x10 [ 948.130355][T25240] ? rtnl_create_link+0xa4a/0xf90 [ 948.130374][T25240] vxcan_newlink+0x3f4/0x640 [ 948.130388][T25240] ? ____sys_sendmsg+0xa95/0xc70 [ 948.130400][T25240] ? __pfx_vxcan_newlink+0x10/0x10 [ 948.130411][T25240] ? do_fast_syscall_32+0x32/0x80 [ 948.130450][T25240] ? __pfx_validate_linkmsg+0x10/0x10 [ 948.130467][T25240] ? alloc_netdev_mqs+0xe7e/0x1570 [ 948.130487][T25240] ? rtnl_create_link+0xa4a/0xf90 [ 948.130503][T25240] ? __pfx_vxcan_newlink+0x10/0x10 [ 948.130516][T25240] rtnl_newlink+0xc42/0x2000 [ 948.130537][T25240] ? __pfx_rtnl_newlink+0x10/0x10 [ 948.130558][T25240] ? kfree_skbmem+0x1a4/0x1f0 [ 948.130577][T25240] ? rcu_is_watching+0x12/0xc0 [ 948.130589][T25240] ? trace_cap_capable+0x18d/0x200 [ 948.130604][T25240] ? find_held_lock+0x2b/0x80 [ 948.130615][T25240] ? __pfx_rtnl_newlink+0x10/0x10 [ 948.130631][T25240] ? __pfx_rtnl_newlink+0x10/0x10 [ 948.130647][T25240] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 948.130664][T25240] ? __pfx_rtnl_newlink+0x10/0x10 [ 948.130681][T25240] rtnetlink_rcv_msg+0x95e/0xe90 [ 948.130700][T25240] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 948.130721][T25240] ? ref_tracker_free+0x37c/0x830 [ 948.130739][T25240] netlink_rcv_skb+0x155/0x420 [ 948.130751][T25240] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 948.130790][T25240] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 948.130810][T25240] ? netlink_deliver_tap+0x1ae/0xd30 [ 948.130831][T25240] netlink_unicast+0x58d/0x850 [ 948.130844][T25240] ? __pfx_netlink_unicast+0x10/0x10 [ 948.130859][T25240] netlink_sendmsg+0x8d1/0xdd0 [ 948.130873][T25240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.130885][T25240] ? __import_iovec+0x1dd/0x650 [ 948.130898][T25240] ____sys_sendmsg+0xa95/0xc70 [ 948.130911][T25240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.130923][T25240] ? get_compat_msghdr+0x11a/0x170 [ 948.130946][T25240] ___sys_sendmsg+0x134/0x1d0 [ 948.130969][T25240] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.130991][T25240] ? find_held_lock+0x2b/0x80 [ 948.131011][T25240] __sys_sendmsg+0x16d/0x220 [ 948.131027][T25240] ? __pfx___sys_sendmsg+0x10/0x10 [ 948.131049][T25240] ? rcu_is_watching+0x12/0xc0 [ 948.131062][T25240] __do_fast_syscall_32+0x7c/0x3a0 [ 948.131080][T25240] do_fast_syscall_32+0x32/0x80 [ 948.131097][T25240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 948.131111][T25240] RIP: 0023:0xf706e579 [ 948.131120][T25240] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 948.131132][T25240] RSP: 002b:00000000f505e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 948.131142][T25240] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 948.131149][T25240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 948.131156][T25240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 948.131162][T25240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 948.131169][T25240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 948.131182][T25240] [ 948.275042][ T5958] Bluetooth: hci2: command tx timeout [ 948.359498][T17110] bridge_slave_1: left allmulticast mode [ 948.361955][T17110] bridge_slave_1: left promiscuous mode [ 948.364427][T17110] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.375162][T17110] bridge_slave_0: left allmulticast mode [ 948.376946][T17110] bridge_slave_0: left promiscuous mode [ 948.378858][T17110] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.505609][T25245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.512781][T25245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.684928][T17110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.689924][T17110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.694388][T17110] bond0 (unregistering): Released all slaves [ 948.731486][ T6018] usb 52-1: device descriptor read/8, error -110 [ 948.733562][T15163] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 948.914639][T25245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.917602][T25245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.113666][T17110] hsr_slave_0: left promiscuous mode [ 949.115802][T17110] hsr_slave_1: left promiscuous mode [ 949.117752][T17110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.120226][T17110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.124383][ T6018] usb usb52-port1: attempt power cycle [ 949.144595][T17110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.146881][T17110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.182506][T17110] veth1_macvtap: left promiscuous mode [ 949.184773][T17110] veth0_macvtap: left promiscuous mode [ 949.187037][T17110] veth1_vlan: left promiscuous mode [ 949.189601][T17110] veth0_vlan: left promiscuous mode [ 949.190442][T25269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4902'. [ 949.232369][T25271] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4903'. [ 949.665567][ T6018] usb usb52-port1: unable to enumerate USB device [ 949.699024][T25277] syz.7.4904: attempt to access beyond end of device [ 949.699024][T25277] nbd7: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 949.703208][T25277] XFS (nbd7): SB validate failed with error -5. [ 950.246964][ T5958] Bluetooth: hci2: command tx timeout [ 950.906945][T25288] netlink: 'syz.7.4905': attribute type 41 has an invalid length. [ 951.460548][T17110] team0 (unregistering): Port device team_slave_1 removed [ 951.603899][T17110] team0 (unregistering): Port device team_slave_0 removed [ 952.228321][ T5958] Bluetooth: hci2: command tx timeout [ 952.302272][T25301] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 952.305383][T25301] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 952.308434][T25301] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 952.382765][T25309] netlink: 'syz.7.4911': attribute type 11 has an invalid length. [ 952.432370][T25209] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 952.444094][T25209] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 952.453026][T25209] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 952.464375][T25209] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 952.568951][T25209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.579777][T25209] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.585571][T25336] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 952.595152][T17141] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.597413][T17141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.603540][T17141] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.605799][T17141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.618864][T25338] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4917'. [ 952.653850][T25341] comedi comedi4: bad chanlist[0]=0x00000fb3 chan=4019 range length=2 [ 952.657687][T25341] ksmbd: Unknown IPC event: 3, ignore. [ 952.659792][T25341] netlink: 204 bytes leftover after parsing attributes in process `syz.8.4918'. [ 952.663427][ T40] audit: type=1326 audit(1752245665.789:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25340 comm="syz.8.4918" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 952.721116][T25209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.749836][T25209] veth0_vlan: entered promiscuous mode [ 952.755300][T25209] veth1_vlan: entered promiscuous mode [ 952.775681][T25209] veth0_macvtap: entered promiscuous mode [ 952.794784][T25209] veth1_macvtap: entered promiscuous mode [ 952.804919][T25209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.811608][T25209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.816200][T25209] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.822258][T25209] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.824963][T25209] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.827654][T25209] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.866379][T17113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.869446][T17113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.902063][T17115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.905304][T17115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.498627][T25360] loop2: detected capacity change from 0 to 7 [ 953.501748][T23792] loop2: [POWERTEC] p1 p2 p3 [ 953.503507][T23792] loop2: p1 start 1600481121 is beyond EOD, truncated [ 953.507016][T23792] loop2: p2 start 9038 is beyond EOD, truncated [ 953.508996][T23792] loop2: p3 size 1835008 extends beyond EOD, truncated [ 953.516031][T25360] loop2: [POWERTEC] p1 p2 p3 [ 953.518092][T25360] loop2: p1 start 1600481121 is beyond EOD, truncated [ 953.520227][T25360] loop2: p2 start 9038 is beyond EOD, truncated [ 953.522235][T25360] loop2: p3 size 1835008 extends beyond EOD, truncated [ 953.550400][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 953.573254][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 953.585366][T25363] netfs: Couldn't get user pages (rc=-14) [ 953.923115][T25369] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 953.938068][T25369] netlink: 201660 bytes leftover after parsing attributes in process `syz.8.4924'. [ 954.642484][ T40] audit: type=1326 audit(1752245667.878:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25378 comm="syz.8.4927" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 954.742359][T14731] Bluetooth: hci4: command 0x1003 tx timeout [ 954.745197][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 954.938067][T17115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.188759][T14731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 955.194182][T14731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 955.199553][T14731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 955.203370][T14731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 955.206252][T14731] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 955.227977][T25383] lo speed is unknown, defaulting to 1000 [ 955.230853][T25383] lo speed is unknown, defaulting to 1000 [ 955.397120][T25383] chnl_net:caif_netlink_parms(): no params data found [ 955.465132][T25383] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.467900][T25383] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.470134][T25383] bridge_slave_0: entered allmulticast mode [ 955.472686][T25383] bridge_slave_0: entered promiscuous mode [ 955.477605][T25383] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.480047][T25383] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.482251][T25383] bridge_slave_1: entered allmulticast mode [ 955.484817][T25383] bridge_slave_1: entered promiscuous mode [ 955.523032][T25383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.527746][T25383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.566492][T25383] team0: Port device team_slave_0 added [ 955.569915][T25383] team0: Port device team_slave_1 added [ 955.606346][T25383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.608461][T25383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.616327][T25383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.620864][T25383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.623098][T25383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.631231][T25383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.681516][T25395] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 955.705153][T25383] hsr_slave_0: entered promiscuous mode [ 955.707584][T25383] hsr_slave_1: entered promiscuous mode [ 955.710025][T25383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 955.712500][T25383] Cannot create hsr debugfs directory [ 956.625849][T25407] netfs: Couldn't get user pages (rc=-14) [ 957.181223][ T5958] Bluetooth: hci2: command tx timeout [ 957.444394][T25418] input: syz1 as /devices/virtual/input/input41 [ 957.510069][T25422] loop2: detected capacity change from 0 to 7 [ 957.512930][T23792] loop2: [POWERTEC] p1 p2 p3 [ 957.514826][T23792] loop2: p1 start 1600481121 is beyond EOD, truncated [ 957.516923][T23792] loop2: p2 start 9038 is beyond EOD, truncated [ 957.518953][T23792] loop2: p3 size 1835008 extends beyond EOD, truncated [ 957.526632][T25422] loop2: [POWERTEC] p1 p2 p3 [ 957.528641][T25422] loop2: p1 start 1600481121 is beyond EOD, truncated [ 957.530702][T25422] loop2: p2 start 9038 is beyond EOD, truncated [ 957.532680][T25422] loop2: p3 size 1835008 extends beyond EOD, truncated [ 957.555594][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 957.569212][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 957.593712][T17115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.666489][T17115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.707560][T25429] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.743695][T17115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.802034][T25430] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4939'. [ 957.816835][T25429] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.824723][T25430] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4939'. [ 957.932064][T25429] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.942912][T17115] bridge_slave_1: left allmulticast mode [ 957.944699][T17115] bridge_slave_1: left promiscuous mode [ 957.946523][T17115] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.951222][T17115] bridge_slave_0: left allmulticast mode [ 957.954016][T17115] bridge_slave_0: left promiscuous mode [ 957.955888][T17115] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.271416][T17115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.275910][T17115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.281614][T17115] bond0 (unregistering): Released all slaves [ 958.406200][T25429] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.535582][T25429] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.543075][T25429] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.550540][T25429] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.559006][T25429] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.607544][T25444] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4942'. [ 958.837420][T17115] hsr_slave_0: left promiscuous mode [ 958.839773][T17115] hsr_slave_1: left promiscuous mode [ 958.841895][T17115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.844212][T17115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.846936][T17115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.875085][T17115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.918990][T17115] veth1_macvtap: left promiscuous mode [ 958.920791][T17115] veth0_macvtap: left promiscuous mode [ 958.923316][T17115] veth1_vlan: left promiscuous mode [ 958.926998][T17115] veth0_vlan: left promiscuous mode [ 959.162804][ T5958] Bluetooth: hci2: command tx timeout [ 959.777494][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 959.962417][T17115] team0 (unregistering): Port device team_slave_1 removed [ 960.060774][T17115] team0 (unregistering): Port device team_slave_0 removed [ 960.803595][T25470] lo speed is unknown, defaulting to 1000 [ 960.807344][T25470] lo speed is unknown, defaulting to 1000 [ 960.876725][T25483] netfs: Duplicate cookie detected [ 960.878558][T25483] netfs: O-cookie c=0000000d [fl=4008 na=0 nA=0 s=-] [ 960.880672][T25483] netfs: O-cookie V=00000010 [9p,syz,] [ 960.882393][T25483] netfs: O-key=[8] '1200440200000000' [ 960.884100][T25483] netfs: N-cookie c=0000000f [fl=8 na=0 nA=0 s=-] [ 960.886061][T25483] netfs: N-cookie V=00000010 [9p,syz,] [ 960.887943][T25483] netfs: N-key=[8] '1200440200000000' [ 960.914078][T25383] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 960.923681][T25383] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 960.939179][T25383] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 960.944443][T25383] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 961.066102][T25383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.086381][T25383] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.102930][T17129] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.105486][T17129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.143877][ T5958] Bluetooth: hci2: command tx timeout [ 961.147137][T17129] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.149388][T17129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.297669][T25383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.354533][T25383] veth0_vlan: entered promiscuous mode [ 961.374723][T25383] veth1_vlan: entered promiscuous mode [ 961.401328][T25383] veth0_macvtap: entered promiscuous mode [ 961.405268][T25383] veth1_macvtap: entered promiscuous mode [ 961.420791][T25383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.426138][T25383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.432374][T25383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.435126][T25383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.437876][T25383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.442853][T25383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.540648][T17115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.554035][ T8407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.564740][T17115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.568522][ T8407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.805812][T25524] wireguard0: entered promiscuous mode [ 962.814197][T25524] wireguard0: entered allmulticast mode [ 963.029288][T25528] trusted_key: encrypted_key: insufficient parameters specified [ 963.032689][T25528] trusted_key: encrypted_key: insufficient parameters specified [ 963.062372][T25528] raw_sendmsg: syz.8.4960 forgot to set AF_INET. Fix it! [ 963.235713][T25533] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4961'. [ 963.501659][T25552] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4965'. [ 963.950109][T17129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.437577][T25569] autofs4:pid:25569:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 964.439271][T25570] autofs4:pid:25570:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 964.545478][T14731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 964.548405][ T40] audit: type=1326 audit(1752245678.271:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.8.4974" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 964.554883][T14731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 964.559408][T14731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 964.562883][T14731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 964.566785][T14731] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 964.593724][T25580] lo speed is unknown, defaulting to 1000 [ 964.597619][T25580] lo speed is unknown, defaulting to 1000 [ 964.692088][T25587] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 964.694682][T25587] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 964.697349][T25587] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 964.700027][T25587] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 964.705959][T25587] sctp: [Deprecated]: syz.7.4975 (pid 25587) Use of int in max_burst socket option. [ 964.705959][T25587] Use struct sctp_assoc_value instead [ 964.812418][T25580] chnl_net:caif_netlink_parms(): no params data found [ 964.889059][T25580] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.891442][T25580] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.894737][T25580] bridge_slave_0: entered allmulticast mode [ 964.898684][T25580] bridge_slave_0: entered promiscuous mode [ 964.902005][T25580] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.904180][T25580] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.906283][T25580] bridge_slave_1: entered allmulticast mode [ 964.909366][T25580] bridge_slave_1: entered promiscuous mode [ 964.946327][T25580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.950861][T25580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.986972][T25580] team0: Port device team_slave_0 added [ 964.992671][T25580] team0: Port device team_slave_1 added [ 965.026895][T25580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.028960][T25580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.036536][T25580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.042103][T25580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.044158][T25580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.051811][T25580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.090599][T25580] hsr_slave_0: entered promiscuous mode [ 965.092757][T25580] hsr_slave_1: entered promiscuous mode [ 965.094735][T25580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 965.097034][T25580] Cannot create hsr debugfs directory [ 965.578330][T17129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.694979][T25609] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4980'. [ 965.698449][T17129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.837105][T17129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.103046][T17129] bridge_slave_1: left allmulticast mode [ 966.104780][T17129] bridge_slave_1: left promiscuous mode [ 966.106731][T17129] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.111482][T17129] bridge_slave_0: left allmulticast mode [ 966.113304][T17129] bridge_slave_0: left promiscuous mode [ 966.115176][T17129] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.479127][T14731] Bluetooth: hci2: command tx timeout [ 966.673318][T17129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.678829][T17129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.683005][T17129] bond0 (unregistering): Released all slaves [ 967.017704][T25646] overlayfs: missing 'lowerdir' [ 967.038860][ T40] audit: type=1804 audit(1752245680.885:5569): pid=25646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.4989" name="/newroot/141/bus/bus" dev="tmpfs" ino=796 res=1 errno=0 [ 967.396640][T17129] hsr_slave_0: left promiscuous mode [ 967.420623][T17129] hsr_slave_1: left promiscuous mode [ 967.429491][T17129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.440361][T17129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.443515][T17129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.446474][T17129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.496498][T17129] veth1_macvtap: left promiscuous mode [ 967.498380][T17129] veth0_macvtap: left promiscuous mode [ 967.500187][T17129] veth1_vlan: left promiscuous mode [ 967.501866][T17129] veth0_vlan: left promiscuous mode [ 968.459566][T14731] Bluetooth: hci2: command tx timeout [ 968.572225][T25667] FAULT_INJECTION: forcing a failure. [ 968.572225][T25667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.576644][T25667] CPU: 0 UID: 0 PID: 25667 Comm: syz.8.4997 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 968.576660][T25667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 968.576667][T25667] Call Trace: [ 968.576671][T25667] [ 968.576676][T25667] dump_stack_lvl+0x16c/0x1f0 [ 968.576697][T25667] should_fail_ex+0x512/0x640 [ 968.576716][T25667] _copy_to_user+0x32/0xd0 [ 968.576735][T25667] simple_read_from_buffer+0xcb/0x170 [ 968.576751][T25667] proc_fail_nth_read+0x197/0x270 [ 968.576764][T25667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.576778][T25667] ? rw_verify_area+0xcf/0x680 [ 968.576793][T25667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.576805][T25667] vfs_read+0x1e1/0xc60 [ 968.576821][T25667] ? fdget_pos+0x2a2/0x370 [ 968.576839][T25667] ? __pfx_vfs_read+0x10/0x10 [ 968.576853][T25667] ? find_held_lock+0x2b/0x80 [ 968.576869][T25667] ? __fget_files+0x20e/0x3c0 [ 968.576892][T25667] ksys_read+0x12a/0x250 [ 968.576908][T25667] ? __pfx_ksys_read+0x10/0x10 [ 968.576924][T25667] ? rcu_is_watching+0x12/0xc0 [ 968.576938][T25667] __do_fast_syscall_32+0x7c/0x3a0 [ 968.576956][T25667] do_fast_syscall_32+0x32/0x80 [ 968.576973][T25667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.576988][T25667] RIP: 0023:0xf710e579 [ 968.576996][T25667] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 968.577007][T25667] RSP: 002b:00000000f50fe590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 968.577018][T25667] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50fe620 [ 968.577025][T25667] RDX: 000000000000000f RSI: 00000000f7473ff4 RDI: 0000000000000000 [ 968.577031][T25667] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 968.577038][T25667] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 968.577044][T25667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 968.577058][T25667] [ 968.641046][T17129] team0 (unregistering): Port device team_slave_1 removed [ 968.643492][T25673] loop6: detected capacity change from 0 to 524287999 [ 968.656134][T25673] buffer_io_error: 10321 callbacks suppressed [ 968.656147][T25673] Buffer I/O error on dev loop6, logical block 0, async page read [ 968.663033][T25673] Buffer I/O error on dev loop6, logical block 0, async page read [ 968.666298][T25673] Buffer I/O error on dev loop6, logical block 0, async page read [ 968.670011][T25673] Buffer I/O error on dev loop6, logical block 0, async page read [ 968.673219][T25673] Buffer I/O error on dev loop6, logical block 0, async page read [ 968.676582][T25673] Buffer I/O error on dev loop6, logical block 0, async page read [ 968.680645][T25673] Buffer I/O error on dev loop6, logical block 0, async page read [ 968.683904][T25673] Buffer I/O error on dev loop6, logical block 0, async page read [ 968.687149][T25673] ldm_validate_partition_table(): Disk read failed. [ 968.690314][T25673] Buffer I/O error on dev loop6, logical block 0, async page read [ 968.694606][T25673] Buffer I/O error on dev loop6, logical block 0, async page read [ 968.698357][T25673] Dev loop6: unable to read RDB block 0 [ 968.739253][T25673] loop6: unable to read partition table [ 968.741781][T25673] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 968.746319][T23792] ldm_validate_partition_table(): Disk read failed. [ 968.749289][T23792] Dev loop6: unable to read RDB block 0 [ 968.751745][T23792] loop6: unable to read partition table [ 968.755229][T25674] ldm_validate_partition_table(): Disk read failed. [ 968.757433][T25674] Dev loop6: unable to read RDB block 0 [ 968.761013][T25674] loop6: unable to read partition table [ 968.762808][T25674] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 968.797483][T17129] team0 (unregistering): Port device team_slave_0 removed [ 969.681669][T25683] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 969.784107][T25679] lo speed is unknown, defaulting to 1000 [ 969.786519][T25679] lo speed is unknown, defaulting to 1000 [ 969.812571][T25580] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 969.836422][T25580] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 969.852179][T25580] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 969.900837][T25580] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 970.232559][T25580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.249193][T25580] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.254813][T17110] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.257062][T17110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.263300][ T8407] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.265595][ T8407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.431635][T25580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.440736][T14731] Bluetooth: hci2: command tx timeout [ 970.454673][T25580] veth0_vlan: entered promiscuous mode [ 970.462265][T25580] veth1_vlan: entered promiscuous mode [ 970.517930][T25580] veth0_macvtap: entered promiscuous mode [ 970.526225][T25580] veth1_macvtap: entered promiscuous mode [ 970.544649][T25580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.557429][T25580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.565696][T25580] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.571880][T25580] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.578638][T25580] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.584347][T25580] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.712809][T17129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.715163][T17129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.737284][T17129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.741968][T17129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.317655][T25723] lo speed is unknown, defaulting to 1000 [ 971.320127][T25723] lo speed is unknown, defaulting to 1000 [ 971.488176][T25727] netlink: 'syz.8.5010': attribute type 1 has an invalid length. [ 971.634795][T25729] loop2: detected capacity change from 0 to 7 [ 971.637223][T25729] loop2: [POWERTEC] p1 p2 p3 [ 971.638802][T25729] loop2: p1 start 1600481121 is beyond EOD, truncated [ 971.640875][T25729] loop2: p2 start 9038 is beyond EOD, truncated [ 971.650906][T25729] loop2: p3 size 1835008 extends beyond EOD, truncated [ 971.723632][T25735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5014'. [ 971.775127][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 973.048353][T17115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.686886][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 973.693035][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 973.696145][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 973.709888][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 973.712568][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 973.762474][T25755] lo speed is unknown, defaulting to 1000 [ 973.764982][T25755] lo speed is unknown, defaulting to 1000 [ 973.783313][ T40] audit: type=1326 audit(1752245687.961:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.8.5020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 973.795565][ T40] audit: type=1326 audit(1752245687.961:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.8.5020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 973.806081][ T40] audit: type=1326 audit(1752245687.961:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.8.5020" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 973.816845][ T40] audit: type=1326 audit(1752245687.961:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.8.5020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 973.827340][ T40] audit: type=1326 audit(1752245687.972:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.8.5020" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 973.834763][ T40] audit: type=1326 audit(1752245687.972:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.8.5020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 973.843875][ T40] audit: type=1326 audit(1752245687.972:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.8.5020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 973.852415][ T40] audit: type=1326 audit(1752245687.972:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.8.5020" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 973.861564][ T40] audit: type=1326 audit(1752245687.972:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.8.5020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 973.871438][ T40] audit: type=1326 audit(1752245687.972:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.8.5020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 974.091344][T25755] chnl_net:caif_netlink_parms(): no params data found [ 974.201054][T25755] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.205272][T25755] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.207744][T25755] bridge_slave_0: entered allmulticast mode [ 974.210481][T25755] bridge_slave_0: entered promiscuous mode [ 974.213909][T25755] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.216167][T25755] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.218429][T25755] bridge_slave_1: entered allmulticast mode [ 974.221847][T25755] bridge_slave_1: entered promiscuous mode [ 974.262333][T25755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.267771][T25755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.313773][T25755] team0: Port device team_slave_0 added [ 974.320633][T25755] team0: Port device team_slave_1 added [ 974.357433][T25755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.359928][T25755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.370168][T25755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.375818][T25755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.378165][T25755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.387853][T25755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.428276][T25755] hsr_slave_0: entered promiscuous mode [ 974.430567][T25755] hsr_slave_1: entered promiscuous mode [ 974.439349][T25755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.450850][T25755] Cannot create hsr debugfs directory [ 974.895697][T17115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.976900][T17115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.063651][T17115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.166820][T25801] loop2: detected capacity change from 0 to 7 [ 975.169854][T25801] loop2: [POWERTEC] p1 p2 p3 [ 975.171544][T25801] loop2: p1 start 1600481121 is beyond EOD, truncated [ 975.173765][T25801] loop2: p2 start 9038 is beyond EOD, truncated [ 975.178642][T25801] loop2: p3 size 1835008 extends beyond EOD, truncated [ 975.220189][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 975.250729][T25803] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 975.253219][T25803] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 975.257653][T25803] vhci_hcd vhci_hcd.0: Device attached [ 975.265351][T17115] bridge_slave_1: left allmulticast mode [ 975.267209][T17115] bridge_slave_1: left promiscuous mode [ 975.269139][T17115] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.272141][T25809] No memory to map [ 975.277937][T17115] bridge_slave_0: left allmulticast mode [ 975.281813][T17115] bridge_slave_0: left promiscuous mode [ 975.283735][T17115] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.313057][T25806] vhci_hcd: connection closed [ 975.313221][T17110] vhci_hcd: stop threads [ 975.316503][T17110] vhci_hcd: release socket [ 975.318026][ T24] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 975.321766][T17110] vhci_hcd: disconnect device [ 975.462271][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.465714][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.468784][ T24] usb 12-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 975.472118][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.477813][ T24] usb 12-1: config 0 descriptor?? [ 975.580323][T17115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.586987][T17115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.592267][T17115] bond0 (unregistering): Released all slaves [ 975.702847][ T5958] Bluetooth: hci2: command tx timeout [ 975.758199][T25794] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 975.762242][T25794] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 975.865105][ T24] usbhid 12-1:0.0: can't add hid device: -71 [ 975.867169][ T24] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 975.870991][ T24] usb 12-1: USB disconnect, device number 8 [ 975.909884][T25823] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 975.914002][T25823] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 975.919951][T25823] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 975.923194][T25823] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 976.015339][T25823] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 976.020291][T25823] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 976.052173][T25823] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 976.054087][T25823] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 976.214106][T17115] hsr_slave_0: left promiscuous mode [ 976.216486][T17115] hsr_slave_1: left promiscuous mode [ 976.218930][T17115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.222007][T17115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.225240][T17115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.227644][T17115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.266341][T17115] veth1_macvtap: left promiscuous mode [ 976.268819][T17115] veth0_macvtap: left promiscuous mode [ 976.271752][T17115] veth1_vlan: left promiscuous mode [ 976.274409][T17115] veth0_vlan: left promiscuous mode [ 977.026346][T25867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 978.334643][T17115] team0 (unregistering): Port device team_slave_1 removed [ 978.451918][T17115] team0 (unregistering): Port device team_slave_0 removed [ 979.196326][T25879] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5052'. [ 979.324135][T25755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 979.330765][T25755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 979.363041][T25755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 979.370099][T25755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 979.497828][T25755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.512272][T25755] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.517297][T17140] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.519626][T17140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.536592][T17138] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.538955][T17138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.568418][T25910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5058'. [ 979.579229][T25755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 979.608016][T25910] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 979.757878][T25755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.847061][T25755] veth0_vlan: entered promiscuous mode [ 979.856816][T25755] veth1_vlan: entered promiscuous mode [ 979.876868][T25755] veth0_macvtap: entered promiscuous mode [ 979.884287][T25755] veth1_macvtap: entered promiscuous mode [ 980.023375][T25755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.079250][T25755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.088092][T25755] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.091709][T25755] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.094560][T25755] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.097328][T25755] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.176528][T17134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.179019][T17134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.208032][T17134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.210389][T17134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.498254][T25927] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5062'. [ 980.570886][T25927] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5062'. [ 980.768268][T25927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.776716][T25927] bond0 (unregistering): Released all slaves [ 980.818272][T25932] netlink: 'syz.7.5063': attribute type 4 has an invalid length. [ 981.372078][T25948] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5067'. [ 981.431506][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 981.431528][ T40] audit: type=1326 audit(1752245695.992:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25952 comm="syz.8.5068" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 981.572514][T17117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.305425][T25959] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5070'. [ 982.412622][T14731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 982.418397][T14731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 982.429519][T14731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 982.433400][T14731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 982.436990][T14731] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 982.467714][T25962] lo speed is unknown, defaulting to 1000 [ 982.470270][T25962] lo speed is unknown, defaulting to 1000 [ 982.675108][T25962] chnl_net:caif_netlink_parms(): no params data found [ 982.717766][T25974] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5073'. [ 982.768456][T25962] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.770758][T25962] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.772995][T25962] bridge_slave_0: entered allmulticast mode [ 982.775608][T25962] bridge_slave_0: entered promiscuous mode [ 982.788557][T25962] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.791234][T25962] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.793567][T25962] bridge_slave_1: entered allmulticast mode [ 982.797499][T25962] bridge_slave_1: entered promiscuous mode [ 982.838209][T25962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.842740][T25962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.882328][T25962] team0: Port device team_slave_0 added [ 982.887631][T25962] team0: Port device team_slave_1 added [ 982.922154][T25962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.924330][T25962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.932345][T25962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.936819][T25962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.940200][T25962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.948156][T25962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.988265][T25962] hsr_slave_0: entered promiscuous mode [ 982.990968][T25962] hsr_slave_1: entered promiscuous mode [ 982.993316][T25962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.996229][T25962] Cannot create hsr debugfs directory [ 983.166021][T17117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.502794][ T40] audit: type=1326 audit(1752245698.176:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25998 comm="syz.8.5079" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 983.527318][T17117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.617507][T17117] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.718788][T17117] bridge_slave_1: left allmulticast mode [ 983.721394][T17117] bridge_slave_1: left promiscuous mode [ 983.723241][T17117] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.727361][T17117] bridge_slave_0: left allmulticast mode [ 983.730745][T17117] bridge_slave_0: left promiscuous mode [ 983.732609][T17117] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.004405][T17117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.009094][T17117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.012969][T17117] bond0 (unregistering): Released all slaves [ 984.043013][T26011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5082'. [ 984.396569][ T5958] Bluetooth: hci2: command tx timeout [ 984.504101][T17117] hsr_slave_0: left promiscuous mode [ 984.506273][T17117] hsr_slave_1: left promiscuous mode [ 984.512713][T17117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.515207][T17117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.520878][T17117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.523345][T17117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.579478][T17117] veth1_macvtap: left promiscuous mode [ 984.581393][T17117] veth0_macvtap: left promiscuous mode [ 984.583399][T17117] veth1_vlan: left promiscuous mode [ 984.585228][T17117] veth0_vlan: left promiscuous mode [ 985.381963][T26056] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5088'. [ 985.426241][T26058] netlink: 'syz.0.5089': attribute type 4 has an invalid length. [ 985.536414][T17117] team0 (unregistering): Port device team_slave_1 removed [ 985.635371][T17117] team0 (unregistering): Port device team_slave_0 removed [ 986.381712][ T5958] Bluetooth: hci2: command tx timeout [ 986.473272][T25962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 986.483557][T25962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 986.488323][T25962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 986.492730][T25962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 986.576320][T25962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.586070][T25962] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.591775][T17115] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.594059][T17115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.602877][T17134] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.605883][T17134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.717048][T26089] netlink: 88 bytes leftover after parsing attributes in process `syz.8.5092'. [ 986.736453][T25962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.765229][T25962] veth0_vlan: entered promiscuous mode [ 986.772593][T25962] veth1_vlan: entered promiscuous mode [ 986.790877][T25962] veth0_macvtap: entered promiscuous mode [ 986.795477][T25962] veth1_macvtap: entered promiscuous mode [ 986.805298][T25962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.812351][T25962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.818046][T25962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.820780][T25962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.823615][T25962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.826781][T25962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.036315][T17134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.039105][T17134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.065733][T17137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.068156][T17137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.296328][ T40] audit: type=1326 audit(1752245702.154:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26092 comm="syz.0.5094" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 987.648110][T26105] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5096'. [ 987.719894][T26105] lo speed is unknown, defaulting to 1000 [ 987.725066][T26105] lo speed is unknown, defaulting to 1000 [ 987.806032][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.481686][T26115] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5103'. [ 989.015532][ T24] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 989.158478][ T24] usb 13-1: Using ep0 maxpacket: 16 [ 989.161572][ T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.165155][ T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.168363][ T24] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 989.172345][ T24] usb 13-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 989.175205][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.178909][ T24] usb 13-1: config 0 descriptor?? [ 989.520608][ C0] vkms_vblank_simulate: vblank timer overrun [ 989.575175][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 989.577365][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 989.579860][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 989.582006][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 989.584191][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 989.588443][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 989.624175][ T24] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 989.627435][ T24] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 989.724361][T26135] loop2: detected capacity change from 0 to 7 [ 989.726904][T26135] loop2: [POWERTEC] p1 p2 p3 [ 989.728532][T26135] loop2: p1 start 1600481121 is beyond EOD, truncated [ 989.731341][T26135] loop2: p2 start 9038 is beyond EOD, truncated [ 989.733390][T26135] loop2: p3 size 1835008 extends beyond EOD, truncated [ 989.754569][T23792] udevd[23792]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 989.765795][T26129] random: crng reseeded on system resumption [ 989.785745][T23820] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 989.785806][ T1019] usb 13-1: USB disconnect, device number 5 [ 989.790536][T23820] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 989.802750][T23820] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 989.805001][ T1019] ------------[ cut here ]------------ [ 989.808793][ T1019] workqueue: work disable count underflowed [ 989.810574][T23820] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 989.814106][ T1019] WARNING: CPU: 0 PID: 1019 at kernel/workqueue.c:4328 enable_work+0x2f8/0x340 [ 989.816880][ T1019] Modules linked in: [ 989.818444][ T1019] CPU: 0 UID: 0 PID: 1019 Comm: kworker/0:2 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 989.824215][ T1019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 989.828506][ T1019] Workqueue: usb_hub_wq hub_event [ 989.830592][ T1019] RIP: 0010:enable_work+0x2f8/0x340 [ 989.832667][ T1019] Code: 89 ee e8 db ce 37 00 45 84 ed 0f 85 29 fe ff ff e8 ed d3 37 00 c6 05 68 58 0e 0f 01 90 48 c7 c7 c0 07 ac 8b e8 d9 1f f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 d7 b7 9d 00 e9 aa fe ff ff [ 989.838615][ T1019] RSP: 0018:ffffc90006bf73c8 EFLAGS: 00010086 [ 989.840538][ T1019] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ab108 [ 989.843016][ T1019] RDX: ffff888022968000 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 989.845464][ T1019] RBP: ffff888028655730 R08: 0000000000000001 R09: 0000000000000000 [ 989.847930][ T1019] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000d7ee7a [ 989.850365][ T1019] R13: 0000000000000000 R14: ffff888028655728 R15: ffffffff8fe6a620 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 989.852869][ T1019] FS: 0000000000000000(0000) GS:ffff888097521000(0000) knlGS:0000000000000000 [ 989.855757][ T1019] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 989.857815][ T1019] CR2: 000000002c6ddffc CR3: 0000000023d71000 CR4: 0000000000352ef0 [ 989.860296][ T1019] Call Trace: [ 989.861390][ T1019] [ 989.862344][ T1019] ? __pfx_enable_work+0x10/0x10 [ 989.863921][ T1019] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 989.865741][ T1019] __cancel_work_sync+0xe7/0x130 [ 989.867309][ T1019] thermal_zone_device_unregister+0x239/0x450 [ 989.869214][ T1019] ? __pfx_shield_remove+0x10/0x10 [ 989.870834][ T1019] power_supply_unregister+0x10a/0x150 [ 989.872612][ T1019] shield_remove+0x75/0x130 [ 989.874096][ T1019] ? __pfx_shield_remove+0x10/0x10 [ 989.875719][ T1019] hid_device_remove+0xce/0x260 [ 989.877246][ T1019] ? __pfx_hid_device_remove+0x10/0x10 [ 989.879070][ T1019] device_remove+0xcb/0x170 [ 989.880499][ T1019] device_release_driver_internal+0x44b/0x620 [ 989.882491][ T1019] bus_remove_device+0x22f/0x420 [ 989.883988][ T1019] device_del+0x396/0x9f0 [ 989.885355][ T1019] ? __pfx_device_del+0x10/0x10 [ 989.886900][ T1019] ? do_raw_spin_lock+0x12c/0x2b0 [ 989.888502][ T1019] hid_destroy_device+0x19c/0x240 [ 989.890083][ T1019] usbhid_disconnect+0xa0/0xe0 [ 989.891649][ T1019] usb_unbind_interface+0x1da/0x9a0 [ 989.893291][ T1019] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 989.895052][ T1019] ? __pfx_usb_unbind_interface+0x10/0x10 [ 989.896811][ T1019] device_remove+0x122/0x170 [ 989.898294][ T1019] device_release_driver_internal+0x44b/0x620 [ 989.900202][ T1019] bus_remove_device+0x22f/0x420 [ 989.901784][ T1019] device_del+0x396/0x9f0 [ 989.903155][ T1019] ? __pfx_device_del+0x10/0x10 [ 989.904677][ T1019] ? kobject_put+0x210/0x5a0 [ 989.906106][ T1019] usb_disable_device+0x355/0x7d0 [ 989.907674][ T1019] usb_disconnect+0x2e1/0x9c0 [ 989.909186][ T1019] hub_event+0x1c57/0x4fa0 [ 989.910627][ T1019] ? __lock_acquire+0xb8a/0x1c90 [ 989.912490][ T1019] ? __pfx_hub_event+0x10/0x10 [ 989.914481][ T1019] ? assoc_array_insert+0x1a60/0x3970 [ 989.916673][ T1019] ? finish_task_switch.isra.0+0x221/0xc10 [ 989.919035][ T1019] ? rcu_is_watching+0x12/0xc0 [ 989.920541][ T1019] process_one_work+0x9cf/0x1b70 [ 989.922131][ T1019] ? __pfx_process_one_work+0x10/0x10 [ 989.923860][ T1019] ? assign_work+0x1a0/0x250 [ 989.925399][ T1019] worker_thread+0x6c8/0xf10 [ 989.926880][ T1019] ? __kthread_parkme+0x19e/0x250 [ 989.928563][ T1019] ? __pfx_worker_thread+0x10/0x10 [ 989.930154][ T1019] kthread+0x3c2/0x780 [ 989.931356][ T1019] ? __pfx_kthread+0x10/0x10 [ 989.932683][T26140] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5108'. [ 989.936040][ T1019] ? rcu_is_watching+0x12/0xc0 [ 989.936813][T26140] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5108'. [ 989.937950][ T1019] ? __pfx_kthread+0x10/0x10 [ 989.942656][ T1019] ret_from_fork+0x5d7/0x6f0 [ 989.944489][ T1019] ? __pfx_kthread+0x10/0x10 [ 989.946358][ T1019] ret_from_fork_asm+0x1a/0x30 [ 989.947900][ T1019] [ 989.948897][ T1019] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 989.951175][ T1019] CPU: 0 UID: 0 PID: 1019 Comm: kworker/0:2 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 989.954864][ T1019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 989.958836][ T1019] Workqueue: usb_hub_wq hub_event [ 989.960885][ T1019] Call Trace: [ 989.962274][ T1019] [ 989.963475][ T1019] dump_stack_lvl+0x3d/0x1f0 [ 989.965338][ T1019] panic+0x71c/0x800 [ 989.966903][ T1019] ? __pfx_panic+0x10/0x10 [ 989.968749][ T1019] ? show_trace_log_lvl+0x29b/0x3e0 [ 989.970801][ T1019] ? check_panic_on_warn+0x1f/0xb0 [ 989.972851][ T1019] ? enable_work+0x2f8/0x340 [ 989.974676][ T1019] check_panic_on_warn+0xab/0xb0 [ 989.976656][ T1019] __warn+0xf6/0x3c0 [ 989.978224][ T1019] ? enable_work+0x2f8/0x340 [ 989.980076][ T1019] report_bug+0x3c3/0x580 [ 989.981869][ T1019] ? enable_work+0x2f8/0x340 [ 989.983427][ T1019] handle_bug+0x184/0x210 [ 989.984969][ T1019] exc_invalid_op+0x17/0x50 [ 989.986510][ T1019] asm_exc_invalid_op+0x1a/0x20 [ 989.988282][ T1019] RIP: 0010:enable_work+0x2f8/0x340 [ 989.990195][ T1019] Code: 89 ee e8 db ce 37 00 45 84 ed 0f 85 29 fe ff ff e8 ed d3 37 00 c6 05 68 58 0e 0f 01 90 48 c7 c7 c0 07 ac 8b e8 d9 1f f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 d7 b7 9d 00 e9 aa fe ff ff [ 989.996375][ T1019] RSP: 0018:ffffc90006bf73c8 EFLAGS: 00010086 [ 989.998211][ T1019] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ab108 [ 990.000672][ T1019] RDX: ffff888022968000 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 990.003329][ T1019] RBP: ffff888028655730 R08: 0000000000000001 R09: 0000000000000000 [ 990.006584][ T1019] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000d7ee7a [ 990.009970][ T1019] R13: 0000000000000000 R14: ffff888028655728 R15: ffffffff8fe6a620 [ 990.013248][ T1019] ? __warn_printk+0x198/0x350 [ 990.015274][ T1019] ? __warn_printk+0x1a5/0x350 [ 990.017309][ T1019] ? enable_work+0x2f7/0x340 [ 990.019397][ T1019] ? __pfx_enable_work+0x10/0x10 [ 990.021465][ T1019] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 990.023919][ T1019] __cancel_work_sync+0xe7/0x130 [ 990.025990][ T1019] thermal_zone_device_unregister+0x239/0x450 [ 990.028539][ T1019] ? __pfx_shield_remove+0x10/0x10 [ 990.030700][ T1019] power_supply_unregister+0x10a/0x150 [ 990.032953][ T1019] shield_remove+0x75/0x130 [ 990.034874][ T1019] ? __pfx_shield_remove+0x10/0x10 [ 990.037018][ T1019] hid_device_remove+0xce/0x260 [ 990.039062][ T1019] ? __pfx_hid_device_remove+0x10/0x10 [ 990.041325][ T1019] device_remove+0xcb/0x170 [ 990.043220][ T1019] device_release_driver_internal+0x44b/0x620 [ 990.045783][ T1019] bus_remove_device+0x22f/0x420 [ 990.047876][ T1019] device_del+0x396/0x9f0 [ 990.049712][ T1019] ? __pfx_device_del+0x10/0x10 [ 990.051772][ T1019] ? do_raw_spin_lock+0x12c/0x2b0 [ 990.053884][ T1019] hid_destroy_device+0x19c/0x240 [ 990.056004][ T1019] usbhid_disconnect+0xa0/0xe0 [ 990.058003][ T1019] usb_unbind_interface+0x1da/0x9a0 [ 990.060082][ T1019] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 990.062417][ T1019] ? __pfx_usb_unbind_interface+0x10/0x10 [ 990.064686][ T1019] device_remove+0x122/0x170 [ 990.066611][ T1019] device_release_driver_internal+0x44b/0x620 [ 990.069113][ T1019] bus_remove_device+0x22f/0x420 [ 990.071152][ T1019] device_del+0x396/0x9f0 [ 990.072992][ T1019] ? __pfx_device_del+0x10/0x10 [ 990.075036][ T1019] ? kobject_put+0x210/0x5a0 [ 990.076976][ T1019] usb_disable_device+0x355/0x7d0 [ 990.079099][ T1019] usb_disconnect+0x2e1/0x9c0 [ 990.081092][ T1019] hub_event+0x1c57/0x4fa0 [ 990.082989][ T1019] ? __lock_acquire+0xb8a/0x1c90 [ 990.085062][ T1019] ? __pfx_hub_event+0x10/0x10 [ 990.087077][ T1019] ? assoc_array_insert+0x1a60/0x3970 [ 990.089291][ T1019] ? finish_task_switch.isra.0+0x221/0xc10 [ 990.091746][ T1019] ? rcu_is_watching+0x12/0xc0 [ 990.093748][ T1019] process_one_work+0x9cf/0x1b70 [ 990.095852][ T1019] ? __pfx_process_one_work+0x10/0x10 [ 990.098124][ T1019] ? assign_work+0x1a0/0x250 [ 990.100087][ T1019] worker_thread+0x6c8/0xf10 [ 990.102007][ T1019] ? __kthread_parkme+0x19e/0x250 [ 990.104045][ T1019] ? __pfx_worker_thread+0x10/0x10 [ 990.106121][ T1019] kthread+0x3c2/0x780 [ 990.107861][ T1019] ? __pfx_kthread+0x10/0x10 [ 990.109812][ T1019] ? rcu_is_watching+0x12/0xc0 [ 990.111866][ T1019] ? __pfx_kthread+0x10/0x10 [ 990.113424][ T1019] ret_from_fork+0x5d7/0x6f0 [ 990.114891][ T1019] ? __pfx_kthread+0x10/0x10 [ 990.116340][ T1019] ret_from_fork_asm+0x1a/0x30 [ 990.117845][ T1019] [ 990.119566][ T1019] Kernel Offset: disabled [ 990.121146][ T1019] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:42:44 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000044 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85583d15 RDI=ffffffff9b0ab980 RBP=ffffffff9b0ab940 RSP=ffffc90006bf6d30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000044 R14=ffffffff9b0ab940 R15=ffffffff85583cb0 RIP=ffffffff85583d3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097521000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002c6ddffc CR3=0000000023d71000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000003588d3d RBX=0000000000000001 RCX=ffffffff8b845c49 RDX=0000000000000000 RSI=ffffffff8de2c2e3 RDI=ffffffff8c1578e0 RBP=ffffed1003bd8488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90a99d50 R15=0000000000000000 RIP=ffffffff8b8447af RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097621000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002c6f8ff8 CR3=00000000581ca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=d58d603b32923abb cdf2ea1953c02101 d58d603b32923abb cdf2ea1953c02101 d58d603b32923abb cdf2ea1953c02101 d58d603b32923abb cdf2ea1953c02101 ZMM18=cc0dfd2c60fb9ba2 0c4045fcd47eb019 cc0dfd2c60fb9ba2 0c4045fcd47eb019 cc0dfd2c60fb9ba2 0c4045fcd47eb019 cc0dfd2c60fb9ba2 0c4045fcd47eb019 ZMM19=9a52000000000000 0000000000000004 9a52000000000000 0000000000000003 9a52000000000000 0000000000000002 9a52000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800201c708000802 42f0006f69647561 2f7665642f01ffff ffffffffffffe908 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0580031280020880 a2d4e40800010000 0008060601248800 0800128003000800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000002060074 ea0023436c6f7274 6e6f632f646e732f 7665642f01ffffff ZMM24=d47eb019d47eb019 d47eb019d47eb019 d47eb019d47eb019 d47eb019d47eb019 d47eb019d47eb019 d47eb019d47eb019 d47eb019d47eb019 d47eb019d47eb019 ZMM25=0c4045fc0c4045fc 0c4045fc0c4045fc 0c4045fc0c4045fc 0c4045fc0c4045fc 0c4045fc0c4045fc 0c4045fc0c4045fc 0c4045fc0c4045fc 0c4045fc0c4045fc ZMM26=60fb9ba260fb9ba2 60fb9ba260fb9ba2 60fb9ba260fb9ba2 60fb9ba260fb9ba2 60fb9ba260fb9ba2 60fb9ba260fb9ba2 60fb9ba260fb9ba2 60fb9ba260fb9ba2 ZMM27=cc0dfd2ccc0dfd2c cc0dfd2ccc0dfd2c cc0dfd2ccc0dfd2c cc0dfd2ccc0dfd2c cc0dfd2ccc0dfd2c cc0dfd2ccc0dfd2c cc0dfd2ccc0dfd2c cc0dfd2ccc0dfd2c ZMM28=000001e0000001df 000001de000001dd 000001dc000001db 000001da000001d9 000001d8000001d7 000001d6000001d5 000001d4000001d3 000001d2000001d1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9952000099520000 9952000099520000 9952000099520000 9952000099520000 9952000099520000 9952000099520000 9952000099520000 9952000099520000 info registers vcpu 2 CPU#2 RAX=0000000000000dea RBX=0000000000000002 RCX=ffffffff84df7656 RDX=ffff888024eb2440 RSI=0000000000000dea RDI=0000000000000002 RBP=ffffc90003f5f330 RSP=ffffc90003f5f1f0 R8 =0000000000000001 R9 =0000000000000040 R10=0000000000000020 R11=0000000000000001 R12=1ffff920007ebe48 R13=0000000000000002 R14=0000000000000002 R15=ffffffff8c15ca6a RIP=ffffffff81bb5e20 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9926944300 ffffffff 00c00000 GS =0000 ffff888097721000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000559857c09000 CR3=000000004b6fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000013fd 0000001800000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0390031608000388 0322080003800320 000002cd0000000f 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d80300080003d003 0fffffffff0403c0 0300080003b80300 080003b0030fffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0403a0039500 0000720000008520 000000000003b700 000008000003b7ff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffff80000010700 0000000000a1bf00 000000fff81a7b20 2020000000000025 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7020200000011800 0000000000000000 0000000000021801 a208068003068004 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00020800080171a0 0008000208000408 00060170ae000400 04080057800201c7 ZMM25=c69b00ddc69b00dd c69b00ddc69b00dd c69b00ddc69b00dd c69b00ddc69b00dd c69b00ddc69b00dd c69b00ddc69b00dd c69b00ddc69b00dd c69b00ddc69b00dd ZMM26=ffccbeb9ffccbeb9 ffccbeb9ffccbeb9 ffccbeb9ffccbeb9 ffccbeb9ffccbeb9 ffccbeb9ffccbeb9 ffccbeb9ffccbeb9 ffccbeb9ffccbeb9 ffccbeb9ffccbeb9 ZMM27=20ed1f4320ed1f43 20ed1f4320ed1f43 20ed1f4320ed1f43 20ed1f4320ed1f43 20ed1f4320ed1f43 20ed1f4320ed1f43 20ed1f4320ed1f43 20ed1f4320ed1f43 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=502a0000502a0000 502a0000502a0000 502a0000502a0000 502a0000502a0000 502a0000502a0000 502a0000502a0000 502a0000502a0000 502a0000502a0000 info registers vcpu 3 CPU#3 RAX=000000000101fe0d RBX=0000000000000003 RCX=ffffffff8b845c49 RDX=0000000000000000 RSI=ffffffff8de2c2e3 RDI=ffffffff8c1578e0 RBP=ffffed1003868000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a6645 R10=ffff88802b53322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801c340000 R14=ffffffff90a99d50 R15=0000000000000000 RIP=ffffffff8b8447af RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097821000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=000000006aa48000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000