last executing test programs: 18m34.551932418s ago: executing program 1 (id=2738): mkdir(&(0x7f0000000300)='./bus\x00', 0x44) r0 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x140) name_to_handle_at(r0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@orangefs_parent={0x28, 0x2, {{"9ce24c5b56c4b6ed9fd7692051008ac7", 0x5}, {"55376cbe8634cdf6780f8bcf46a20ab0", 0x6}}}, &(0x7f0000000140), 0x200) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x982}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)={0x4, 0x0, [{0x3000, 0x79, &(0x7f00000001c0)=""/121}, {0x1, 0x2b, &(0x7f0000000240)=""/43}, {0xf000, 0x1000, &(0x7f0000000580)=""/4096}, {0x100001, 0x8, &(0x7f0000000280)=""/8}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000540)={[{@redirect_dir_off}, {@userxattr}]}) 18m34.549563698s ago: executing program 1 (id=2739): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 64) recvmmsg(r1, &(0x7f0000003d80)=[{{&(0x7f0000000300)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/104, 0x68}, {&(0x7f00000015c0)=""/210, 0xd2}], 0x4, &(0x7f00000016c0)}}, {{&(0x7f0000001700)=@generic, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/190, 0xbe}, {&(0x7f0000002840)=""/117, 0x75}], 0x3, &(0x7f0000002900)=""/71, 0x47}, 0x5}, {{&(0x7f0000002980)=@sco, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a00)=""/188, 0xbc}, {&(0x7f0000002ac0)=""/138, 0x8a}, {&(0x7f0000002b80)=""/193, 0xc1}], 0x3, &(0x7f0000002cc0)=""/90, 0x5a}}, {{&(0x7f0000002d40)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002dc0)=""/99, 0x63}, {&(0x7f0000002e40)=""/216, 0xd8}, {&(0x7f0000002f40)=""/215, 0xd7}, {&(0x7f0000003040)=""/61, 0x3d}, {&(0x7f0000003080)=""/130, 0x82}, {&(0x7f0000003f40)=""/4096, 0x1000}], 0x6, &(0x7f0000003180)=""/255, 0xff}}, {{&(0x7f0000003280)=@qipcrtr, 0x80, &(0x7f0000003540)=[{&(0x7f0000003300)=""/189, 0xbd}, {&(0x7f00000033c0)=""/33, 0x21}, {&(0x7f0000003400)=""/25, 0x19}, {&(0x7f0000003440)=""/84, 0x54}, {&(0x7f00000034c0)=""/90, 0x5a}], 0x5}, 0x800}, {{&(0x7f0000003580)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003600)=""/26, 0x1a}, {&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000003640)=""/100, 0x64}, {&(0x7f00000036c0)=""/114, 0x72}], 0x4, &(0x7f0000003780)=""/222, 0xde}, 0x2}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/46, 0x2e}, {&(0x7f00000038c0)=""/224, 0xe0}, {&(0x7f00000039c0)=""/68, 0x44}], 0x3, &(0x7f0000003a80)=""/137, 0x89}, 0x6}, {{&(0x7f0000003b40)=@can, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003bc0)=""/92, 0x5c}, {&(0x7f0000003c40)=""/13, 0xd}, {&(0x7f0000005f40)=""/4096, 0x1000}], 0x3, &(0x7f0000003cc0)=""/157, 0x9d}, 0x4}], 0x8, 0x2, 0x0) (async, rerun: 64) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e008104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7f, 0xc1, &(0x7f00000001c0)='F', 0x1, 0x1, 0x7f, 0xfffffffe, 0x28, 0x1, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc884}, 0x0) r5 = gettid() (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x80000) connect$unix(r6, 0x0, 0x0) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="48ae049c"], 0x4) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) socket$nl_route(0x10, 0x3, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) pipe(0x0) 18m22.766879637s ago: executing program 1 (id=2754): openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1341, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$netlink(0x10, 0x3, 0xb) socket$isdn_base(0x22, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18012beb000000000000000000004b640800000000001d8c6cc093cb9cd2b3bf7f6b19b6a0b4afbdedede43774f29147fc2c6fb0f322c7545b9f4c47de397a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x0, 0x100, 0x0, {0x400e7fd, 0x1, 0x6, 0xfff}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000140)=0x1e) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0e9d0000000f000000000100000100000000000000", @ANYRES32=0x1, @ANYBLOB="f30600"/20, @ANYRES32, @ANYBLOB="02000000010000000000000098f9ffffffffffff0000000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)="651692e0e6e4b8bc04d87dbe5c691effffffff3a40f5a12108e4bfc39a92482e898a1b367145d6e3ae3dde855f91aa12ff10931178213b0c1063fa4c6f5f991681739254aea56a1f7c364858e085cd61f250aacc6d9daf880a192f0e7a9009a1d95ad4465434333e79904f27127bca063edc9a79b0844063fe7897642eb43c8984291e26c36d2a00000000000000004349", &(0x7f0000000540)="2419c62ab9ab0664a77b5a9f35f78a7ba510f60906f2064be166b67f0a87e2eefff875c55ee7f0bbfe1337ced495de3c38ed5672b2430458b6c7760c691d3bfdec2040fff443abc79e8c030379a2aa7cd678a925f2e518f2437e83c5ae1b3e06000000000000000bef096ee6e12eb814e7e68b16b8", 0xfffffffb, r0}, 0x38) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) socket$netlink(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101040, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40040) r4 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x200, 0x2]}}) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) times(&(0x7f00000002c0)) 18m22.538837113s ago: executing program 1 (id=2756): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='g\x00\x00', @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="00000000000000000000000c000000000000000032190000a5eb2c6100000000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) (async) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x2164018, &(0x7f0000000000)=ANY=[]) (async) chdir(&(0x7f0000000340)='./file0\x00') (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='f9', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async, rerun: 64) syz_open_dev$MSR(0x0, 0x0, 0x0) (rerun: 64) timer_create(0x0, &(0x7f0000000240)={0x0, 0x18, 0x2}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x6a113fc2) sendmsg(r1, 0x0, 0x44004) (async, rerun: 64) socket$inet(0x2, 0x2, 0x1) (rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) (async, rerun: 32) sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8880) (async, rerun: 32) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c0212408509022400010000100009040c0202c17f0c0009050202000202000009058202000200000000000000"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000c80)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(r7, 0x0, 0x0) 18m22.538498833s ago: executing program 1 (id=2757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat2$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x2240c6, 0x80, 0x65ce17f4bd5e23ea}, 0x18) r4 = openat2$dir(0xffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x224500, 0x144, 0x6}, 0x18) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r5, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000100)=0x7) renameat(r3, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00') openat$kvm(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r8 = socket(0x18, 0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0x3, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000206053199c1b1ee35ddc80005000005100003006269746d61703a706f7274000500040003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4044015) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x0, 0xeeee8000, 0x2000, &(0x7f0000004000/0x2000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 18m21.36017676s ago: executing program 32 (id=2729): socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x482, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x2, 0x6, 0x3831354f, 0x0, 0xb, [{0xfffffff1, 0x22}, {0xcbd, 0x10000}, {0x10, 0x6}, {0x40000001, 0x4}, {0x9, 0x200d1}, {0x2}, {0x0, 0x8}, {0x1, 0x8}], 0x6, 0x8, 0x3, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$nmem0(0xffffff9c, &(0x7f0000000100), 0x680c00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000480)=0x1000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000030c0)=""/102392, 0xfffffffffffffc4c) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x3, 0x200064f, 0x44, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x10, 0x81, 0xffffffff}}) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, 0x0}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x40100, 0x0) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) 18m19.971903253s ago: executing program 1 (id=2759): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x118, 0x4) ptrace$pokeuser(0x6, 0x0, 0x118, 0x6000003f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) 18m10.445087241s ago: executing program 33 (id=2753): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x118, 0x4) ptrace$pokeuser(0x6, 0x0, 0x118, 0x6000003f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) 18m7.339584463s ago: executing program 34 (id=2755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a8bae00000000000000000a0000010900010073797a310000000014048010000180090001006d617371000000000900020073797a3200000000140000001100010000000001000000001100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f7, 0x200, 0x5, 0x312}, 0x0, 0x0) io_uring_enter(r1, 0x1, 0xc6b6, 0x9, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newchain={0x68c, 0x64, 0x22, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0xd, 0xb}, {0x6, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x80}}, @filter_kind_options=@f_basic={{0xa}, {0x598, 0x2, [@TCA_BASIC_ACT={0xd8, 0x3, [@m_mpls={0xd4, 0x18, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe2d14}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3ff, 0xf, 0x2, 0x6, 0x2}, 0x5}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x57481}, @TCA_MPLS_BOS={0x5}]}, {0x53, 0x6, "f4032125861c4f494b12b46511b9b77f4ee8d778a1b025ce2981b115baa5ac03a3e25ebd0c9ef8ba3764d629db6a2ad3775bdf8f8484ce20d59dc1834f5bbe4afb95e114ed3044a6d04364df1f3a32"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xf}}, @TCA_BASIC_POLICE={0x4b4, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffe01}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x8, 0x2, 0x9, 0x2, 0x7, 0x0, 0x7, 0x4c24, 0x8000, 0x6, 0x6, 0x5c2374bf, 0x723aaeb3, 0x3, 0x0, 0x7f, 0x2, 0x2, 0x8000, 0xb, 0x7ff, 0x6, 0x7, 0x5, 0x36e, 0x5, 0x8, 0xa45d, 0x9, 0x5, 0x7, 0x80000000, 0xa0, 0x4, 0x2, 0x7, 0x7, 0xd899, 0x3, 0x5, 0x20, 0xa, 0x1, 0xffffffff, 0xfff, 0x0, 0x9, 0x9, 0xccf, 0x9, 0x6, 0x100, 0x8, 0x8, 0x3, 0x800, 0x5, 0x81, 0x7, 0xe, 0xc, 0xf8f3, 0x0, 0x8001, 0x7, 0x6, 0x5bbcc959, 0x9, 0x0, 0x10001, 0x6, 0x249, 0x5, 0x2, 0x6, 0xd, 0x8e, 0xa, 0x9, 0x9, 0x7, 0x10, 0xea, 0x8, 0x5, 0x0, 0xfff, 0x81, 0xffffffff, 0x7, 0x3, 0x0, 0x9, 0x85, 0xb67f, 0x2, 0x1ff, 0x0, 0x8, 0x80000000, 0xe, 0xffff8000, 0x9, 0x4, 0xffffffff, 0x0, 0x1, 0x1, 0x1ff, 0xd603, 0xfe47, 0x400, 0xd48, 0x80, 0x7, 0x4, 0xffffffff, 0x8a, 0xd, 0x7, 0xfffffffe, 0x976a, 0x0, 0x2, 0xf2, 0x8, 0x5, 0xdb, 0xffff231d, 0xe0, 0x4, 0x1, 0x7, 0x5, 0xfff, 0x5, 0x5, 0x7, 0x401, 0x3, 0x25d, 0x4, 0x0, 0xe7f5, 0x9b98, 0x100, 0x9, 0x4, 0x1, 0x81, 0x10001, 0xfffffffa, 0x6889832c, 0x20000000, 0x3, 0x5, 0x6, 0x2, 0x3, 0xfffffffb, 0x1, 0x4, 0xa, 0x39dd988f, 0x8, 0x1, 0xe, 0x9, 0x2, 0x7, 0x3ff, 0x6, 0xb, 0xf9b8, 0x10001, 0x3, 0x3, 0x3, 0x39, 0x4, 0x8, 0x3ff, 0x5bf4d3f7, 0x3, 0x4, 0x10001, 0x400, 0x800, 0x4, 0x8, 0x5, 0x2, 0x0, 0x7, 0x1, 0x198b, 0x7, 0x1, 0x8, 0x5, 0xe68, 0x4, 0x0, 0x5, 0x9, 0x81, 0x0, 0x4, 0x2, 0x5, 0x22b, 0xfffffffc, 0xff, 0xf8, 0xee, 0x59a, 0x2, 0xffffffff, 0x8, 0x8, 0x4, 0x0, 0x2, 0x2, 0xc, 0x4, 0x5b2, 0x2, 0x8, 0x7, 0x9, 0x1ff, 0x2, 0x6, 0x7f, 0x80000000, 0x2, 0x5, 0xee43, 0x3ff, 0xf, 0x3, 0x4, 0x2, 0x7, 0x8, 0x10, 0x9, 0xa5, 0x3, 0x2, 0x81, 0x3, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0xfff, 0xfff, 0x8, {0x0, 0x0, 0x6, 0x6, 0x0, 0x6}, {0xec, 0x2, 0x9, 0x1, 0xff, 0x40}, 0x80000001, 0x6f86, 0x4}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x101, 0x3ff, 0x19f2f654, {0x6, 0x1, 0x0, 0x7, 0x5, 0x3}, {0x4, 0x2, 0x3225, 0x3, 0x44, 0xfffffff9}, 0x68a3, 0x0, 0x7fff}}, @TCA_POLICE_RESULT={0x8}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0xa4, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x3, 0xfffffffc, 0xd46, 0x7, {0x6, 0x0, 0x8, 0x2, 0x3, 0x3}, {0x1, 0x1, 0x2, 0x3000, 0xfff, 0x9}, 0x6, 0x72, 0xfff}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x9, 0x4dbf708246e44843}}, @TCA_U32_INDEV={0x14, 0x8, 'lo\x00'}, @TCA_U32_POLICE={0x18, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffe}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_U32_INDEV={0x14, 0x8, 'bond_slave_0\x00'}, @TCA_U32_LINK={0x8, 0x3, 0x120}, @TCA_U32_LINK={0x8, 0x3, 0x101}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x8}}]}, 0x68c}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x45, 0x8b}, 0x0) r7 = getpid() sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r7, 0x3, &(0x7f0000000080)=0xc) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 18m4.710337064s ago: executing program 35 (id=2759): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x118, 0x4) ptrace$pokeuser(0x6, 0x0, 0x118, 0x6000003f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) 17m40.280401754s ago: executing program 7 (id=2767): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000c2106a3c82999aa02cb5620c0000007e080000000000000000000900080000db00"/54], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x90) syz_io_uring_setup(0x7440, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r4, 0x1, 0x70bd2d, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0xb6b}, {0x6}}]}, 0x4c}}, 0x4044040) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r7, 0x0}) io_uring_enter(r8, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 17m40.226577618s ago: executing program 4 (id=2775): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x3}, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x34000, 0x4000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17m40.099397748s ago: executing program 4 (id=2776): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0x4) ptrace$pokeuser(0x6, r0, 0x118, 0x6000003f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$qrtr(0x2a, 0x2, 0x0) 17m36.688140338s ago: executing program 4 (id=2778): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0x4) ptrace$pokeuser(0x6, r0, 0x118, 0x6000003f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$qrtr(0x2a, 0x2, 0x0) 17m36.348568973s ago: executing program 5 (id=2779): r0 = socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) ptrace$getregs(0xc, r1, 0xfff, &(0x7f0000000300)=""/155) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 17m35.353684833s ago: executing program 7 (id=2780): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0x4) ptrace$pokeuser(0x6, r0, 0x118, 0x6000003f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$qrtr(0x2a, 0x2, 0x0) 17m33.481297795s ago: executing program 6 (id=2782): syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}, {}, {}, {}, {}, {0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x5, 0x8000000) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000280)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c01000002060108000000ec56ce6a02ca4f5e7d621d05000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x9, @remote, 0xd}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000090601020007800c00018008e00040e00000020800f94000000002197a2cf7dd0000050001000700000028be018fc7aa12dff2b2d6e8447aa4850d6d320b935680402901441514ac07f89d595dc8f2d24b45e54f32c92f3d0a98f23a1b3cf7ef42aac870b9a48a925c528d1f2ce9ab2f63cd277b28b6cc131aef48bb0605aba61ec1fb00"/151], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x840d0) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 17m30.097543333s ago: executing program 6 (id=2783): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0x4) ptrace$pokeuser(0x6, r0, 0x118, 0x6000003f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$qrtr(0x2a, 0x2, 0x0) 17m28.962429416s ago: executing program 4 (id=2784): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYRES8=r1], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r3, &(0x7f0000000380)=ANY=[@ANYRES8=r3], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000002c0)=@multiplanar_fd={0xc3b4eab, 0x7, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x5, 0x0, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xac14, 0x4, {0x0}, 0x2}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x129282, 0x0) read$nci(r5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r6, 0x80045438, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000001100)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0x0, 0x2, 0xffd, 0x7ffe, 0x3, 0x101, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0xa, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000875f1ca52b9fd6f69a5352f65e3893116a9b0f8c690cd69b330050854b49802054cf5f2c919b0b9ac36555e7a5c988f1dabe696a3cc827f54bd7ee9eeb55342c6b46700ce31760dc1b8daa1f9d9d1e04f3f8b641daf3ec043cfca9127bb881434210fac2b9b851dfcdfac9cd5c7fc142d78a2544b17545010e63b40c834eb3ad2422dfe39df064926c5a903e5d02865d2936e22bf4"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900e1ffffffff540901000000000095000000000000008500000011000000bf91000000c5000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000010c0)={0x8000000000000001, 0x8000, 0x1, 0x0, 0x0, [{{r5}, 0x2}]}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) 17m28.136980322s ago: executing program 5 (id=2785): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fcffffff0000000007e7ffffff0000000f0000001811fb56226bc70888bc796922170000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a60000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xc0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10, 0x0) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40090}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) statx(0xffffffffffffffff, &(0x7f00000004c0)='./file0/file0\x00', 0x800, 0x2, &(0x7f0000000580)) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x200080, &(0x7f0000000680)) socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x0, 0x140) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40044104, 0xfffffffffffffffe) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000280)='./bus\x00', &(0x7f0000000440), &(0x7f0000000480)='./file0/file0\x00', 0xe, 0x3) rmdir(&(0x7f0000000000)='./file0\x00') 17m27.504290079s ago: executing program 7 (id=2786): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000c2106a3c82999aa02cb5620c0000007e080000000000000000000900080000db00"/54], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x90) syz_io_uring_setup(0x7440, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r5, 0x0}) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 17m27.333237098s ago: executing program 6 (id=2787): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}]}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x58, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000003017a0000000000000000000000000000060000000000"], 0x14}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050427bd7000fedbdf2501000000", @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 17m27.247135393s ago: executing program 5 (id=2788): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) io_setup(0x4, &(0x7f00000000c0)=0x0) io_destroy(r6) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000a4d000/0x1000)=nil, 0x20a4d000}}) keyctl$revoke(0x12, r3) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) 17m26.7931196s ago: executing program 4 (id=2789): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000c2106a3c82999aa02cb5620c0000007e080000000000000000000900080000db00"/54], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x90) syz_io_uring_setup(0x7440, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r5, 0x0}) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 17m26.276150844s ago: executing program 7 (id=2790): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0x4) ptrace$pokeuser(0x6, r0, 0x118, 0x6000003f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$qrtr(0x2a, 0x2, 0x0) 17m24.901004075s ago: executing program 5 (id=2791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = gettid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, 0x0, &(0x7f0000000040)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000500)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x2) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f0000000500)={'syz0\x00', {0x8000, 0x7f, 0x3, 0x3}, 0x3a, [0x5, 0x1, 0x7, 0x83e, 0x5, 0xd, 0x6, 0x0, 0x7, 0x9, 0x4, 0x7, 0x1, 0x3ff, 0x3, 0xfffffff9, 0x27e8, 0xf93, 0x6, 0x3, 0x2, 0x1, 0x47dc, 0x10000, 0x4, 0x3, 0xfffffffc, 0x1, 0x0, 0x18, 0x8, 0x9, 0x190a, 0x1000, 0x23, 0x0, 0x4, 0x1, 0x1, 0x5, 0x2, 0xfd84, 0x200, 0x3, 0x6, 0x9, 0xffffffc0, 0x8, 0xe0000000, 0x5, 0x77, 0xb, 0x7, 0x5, 0x7, 0x22, 0x1, 0x7fffffff, 0x4, 0x80000000, 0xdc6, 0xfffffffc, 0x0, 0x7], [0x9, 0x1, 0x0, 0xffffc5b3, 0x2, 0x5, 0x2, 0xdc0, 0x0, 0x3, 0x2, 0x8, 0x6, 0x661b, 0x7, 0x5f, 0x7d, 0x10001, 0x2, 0x2, 0x8, 0x7, 0xbda, 0x80000000, 0x20, 0x4, 0x8, 0xfffffffc, 0x2, 0x9, 0x7fff, 0x4, 0x8, 0x6, 0x60, 0x6, 0x5, 0xfff, 0xfffffff9, 0x8, 0x6, 0xfffffffc, 0x7fffffff, 0x8, 0x8, 0x3, 0x2, 0xe14, 0x200, 0x7, 0x63, 0x8, 0x9, 0x7f, 0x3, 0xcbf, 0x200, 0x2, 0x2, 0x8, 0x3, 0x0, 0x400, 0x7], [0x9, 0x4, 0x0, 0x0, 0x6, 0x8, 0xffffff81, 0x4, 0x401, 0xb, 0x200, 0x9, 0xfe0, 0x5, 0x4, 0x40, 0xfffffff9, 0x956, 0x63, 0xb72, 0xf816, 0x57d, 0x0, 0x7, 0x1, 0x6, 0x1, 0xe9, 0x0, 0x3, 0x1, 0xfffffffb, 0x3, 0x3, 0x81, 0xf, 0x9, 0x3, 0x3cc, 0x9, 0xc, 0x800, 0x9e86, 0x31, 0x2, 0x0, 0x3, 0x7, 0x3, 0x6, 0x9, 0xe0, 0x7, 0x7f, 0x1ff, 0x6d, 0x7, 0xfffffffb, 0x1175, 0x8000, 0x11d, 0x8f9b, 0x3, 0x6], [0x9, 0x5, 0xfffffbff, 0x5, 0x6, 0x5, 0x7fffffff, 0x7fff, 0xff, 0x0, 0x1, 0x1, 0x6, 0xffffd529, 0x408, 0x0, 0x2f5, 0x1ff, 0x8000, 0x3, 0x7f, 0x7fffffff, 0x40000000, 0x4b1, 0x6, 0xc, 0x5, 0x5, 0x508f, 0xc6, 0x81, 0x9, 0x7ea692d0, 0x2, 0x8, 0x1d59, 0xfff, 0xe10d, 0xc, 0x40, 0x4, 0x3, 0xfff, 0xfe, 0x1, 0x3, 0x366e, 0x7, 0xfffffffc, 0x8001, 0x3, 0x3, 0x4, 0x0, 0x8, 0x0, 0x3ff, 0x6, 0x0, 0x1, 0x9, 0xffffffff, 0x7, 0x5]}, 0x45c) capset(&(0x7f0000000080)={0x20080522}, 0x0) socket$caif_stream(0x25, 0x1, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000180)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0xdb1846e8c973b355, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x800) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) 17m23.693136994s ago: executing program 7 (id=2792): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0x4) ptrace$pokeuser(0x6, r0, 0x118, 0x6000003f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) 17m23.272806807s ago: executing program 5 (id=2793): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x8080) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x8000000000000001) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xf8) 17m23.189342289s ago: executing program 6 (id=2794): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8fc0, 0x65f40}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="00000200000001ffffff060000003b000000000000000000000000000000000000000100004002000000004876233100"/61]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) fcntl$setlease(r6, 0x400, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000140)="d0b4163e96457321d877d01ac22c", 0xe, 0x40000, &(0x7f00000001c0)={0x11, 0x1c, r7, 0x1, 0x70, 0x6, @local}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7, @ANYBLOB="1000000101040000"], 0x20}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0xc0089364, &(0x7f00000001c0)) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex=r7, 0x11, 0x0, 0x7f, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r9, 0x2e, 0x0, @val=@netkit={@void, @value=r4, @void, @void, r10}}, 0x1c) 17m23.134305905s ago: executing program 4 (id=2795): openat$ptmx(0xffffffffffffff9c, 0x0, 0x48100, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0x4) ptrace$pokeuser(0x6, r0, 0x118, 0x6000003f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) 17m22.012023462s ago: executing program 6 (id=2796): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) ioctl$FS_IOC_RESVSP(r8, 0x402c5828, &(0x7f00000000c0)={0x20, 0x0, 0x1, 0x762}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004340)={0x24, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x40, 0x0, 0x1, [@nested={0x4, 0x78}]}]}]}, 0x24}}, 0x4010) 17m20.638673765s ago: executing program 5 (id=2797): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0xac, 0x30, 0x401, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffe}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x3c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40040c7}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r0, 0x700, 0x100000000000000}, 0x38) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x72, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffff1700ff0000000000008100000086dd6326010000000000000000007f000000000000fe00000000f5e7547014227dea9078020000006339afb8f6480400200fe0f000878afc2f6fda5e904378df010000000000020000000000000001fc0200000000000000000000000000010400041e02d8090039e3d9e862120e28d91bef25ecf3c9c57ecebe786cb27f7dc11407"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x59, 0x1403, 0x1, 0x70bd2a, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x880) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) write$tun(r7, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r1], 0x46) recvmmsg(r7, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002c0004800500030001000000050003000005000300000000000500030002000000080002000200"/74], 0x50}}, 0x0) 17m20.388656415s ago: executing program 6 (id=2798): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRESOCT=r0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="991f02612863aae7a357e1a01d1aa22928682bdeefb6560b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/3906], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0) ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f0000000040)={0x1, 0x3, 0x10}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000700)={0x0, 0x2f, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r6, 0x7, 0x0, 0x0, 0x1, [0x0], [0xfffffffc, 0x7], [0x0, 0x80000002], [0x4, 0x0, 0x1, 0x2]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) 17m20.346506458s ago: executing program 36 (id=2798): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRESOCT=r0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="991f02612863aae7a357e1a01d1aa22928682bdeefb6560b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/3906], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0) ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f0000000040)={0x1, 0x3, 0x10}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000700)={0x0, 0x2f, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r6, 0x7, 0x0, 0x0, 0x1, [0x0], [0xfffffffc, 0x7], [0x0, 0x80000002], [0x4, 0x0, 0x1, 0x2]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) 17m7.758905624s ago: executing program 37 (id=2792): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0x4) ptrace$pokeuser(0x6, r0, 0x118, 0x6000003f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) 17m7.734011815s ago: executing program 38 (id=2795): openat$ptmx(0xffffffffffffff9c, 0x0, 0x48100, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0x4) ptrace$pokeuser(0x6, r0, 0x118, 0x6000003f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) 17m5.292469313s ago: executing program 39 (id=2797): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0xac, 0x30, 0x401, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffe}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x3c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40040c7}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r0, 0x700, 0x100000000000000}, 0x38) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x72, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffff1700ff0000000000008100000086dd6326010000000000000000007f000000000000fe00000000f5e7547014227dea9078020000006339afb8f6480400200fe0f000878afc2f6fda5e904378df010000000000020000000000000001fc0200000000000000000000000000010400041e02d8090039e3d9e862120e28d91bef25ecf3c9c57ecebe786cb27f7dc11407"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x59, 0x1403, 0x1, 0x70bd2a, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x880) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) write$tun(r7, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r1], 0x46) recvmmsg(r7, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002c0004800500030001000000050003000005000300000000000500030002000000080002000200"/74], 0x50}}, 0x0) 3m39.322714264s ago: executing program 2 (id=6633): mkdir(&(0x7f0000000400)='./file1\x00', 0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440), 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept4$alg(r5, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000280)='./file0\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x90, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe11, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x73, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x1}}]}}}]}, 0x90}}, 0x0) 3m38.97489643s ago: executing program 2 (id=6634): openat$tun(0xffffffffffffff9c, 0x0, 0x8200, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 3m36.880952683s ago: executing program 2 (id=6642): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff0}, {0xe, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) socket(0x1d, 0x2, 0x6) r5 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setrlimit(0x0, &(0x7f0000000080)={0x80000001, 0xfeffffffffffffff}) r6 = dup3(r0, r5, 0x80000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r7, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r8 = syz_open_pts(r7, 0x8182) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x17) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000500)={r9, 0xfff, {0x0, 0x0, 0x0, 0xe7fe, 0x5, 0x0, 0x5, 0x20, 0x1, "ddfbd97494ea9770a9f6066e7e9d1d660544f94f3ffdc96dcf140fe45190e3f2d999381ef6566628375d0625cf5e620d48252793d17c06670c33c8cca54a33f1", "f8816afc6fd1e74e97f353de2739b44aa1fff115c38cddb51d351ed330bf8a1668c5946ec2efc80ddb79d93e896de6b213fb2e398b5ae3144811a50c1d5411c5", "c89c89cf4e5498dd621d358f723fa05064cdd71383985821cb5ccf22778fc6d0", [0x1, 0x800]}}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m35.91609163s ago: executing program 2 (id=6646): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f00000025c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) kcmp(r3, 0xffffffffffffffff, 0x4, r1, r1) r4 = socket$caif_stream(0x25, 0x1, 0x0) accept4(r4, 0x0, 0x0, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'nicvf0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0x1c, "afaa23776b67fb7c6d6f3f01ab66ecc634db9aa8b5f8b2a83c5c3acd"}, &(0x7f0000002540)=0x24) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c686f657874656e642c6163638173733d616e792c63616368653d66736361636865"]) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000b00)=0x6) r10 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r10, 0xc0044dff, &(0x7f0000000100)=0x9) chdir(&(0x7f00000000c0)='./file0\x00') r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c80)=ANY=[@ANYBLOB='8\x00\x00\a', @ANYRES16=r12, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r13, @ANYBLOB="180003800500050044000000040004000800020000000000"], 0x38}}, 0x0) 3m35.734821895s ago: executing program 2 (id=6647): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000300)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x20842, 0x100) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) (fail_nth: 20) 3m35.365260415s ago: executing program 2 (id=6648): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8949, &(0x7f0000000000)) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0xb00, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}}, 0x20000000) 3m34.942838708s ago: executing program 40 (id=6648): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8949, &(0x7f0000000000)) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0xb00, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}}, 0x20000000) 14.903081547s ago: executing program 9 (id=7477): openat$tun(0xffffffffffffff9c, 0x0, 0x8200, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200000800020010"], 0x44}}, 0x0) 13.168349668s ago: executing program 9 (id=7484): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="f0020000", @ANYRES16, @ANYBLOB="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"], 0x2f0}, 0x1, 0x0, 0x0, 0x20040044}, 0x4040000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x2, 0x15, 0x9, 0x6, 0xa, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_sec_ctx={0x2, 0x18, 0x2f, 0x1, 0x6, "587b56a10b78"}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@remote, 0x8, 0x0, 0x10}]}, 0x50}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000200)={r9}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0xffff}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffe0000}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d34}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) 13.03886643s ago: executing program 9 (id=7486): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) sendto$inet6(r1, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x11) 12.967426987s ago: executing program 9 (id=7487): openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, &(0x7f0000000100)='./mnt\x00', 0x271) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000655804e09171"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0x21c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="170000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r5, 0x0, 0x1, 0x4}}, 0x20) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRESHEX, @ANYRES32, @ANYRES8=r1, @ANYRES64=0x0, @ANYRES16, @ANYRES32=r3, @ANYRES8], 0x32600) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r8, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12.926940707s ago: executing program 9 (id=7488): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 9.904822221s ago: executing program 9 (id=7495): syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800010000000000180001001800000004000000020000000000000c01fffffe00000000000080ffffffff0000000000735f9ff9b986e989e46f2ec396cab616b8add2f609bc141db9ac32a57102951390260cbbe8e306fd86dd90ce22f7c0d93bea345d503c5da6d5e79e3418eebf6e95b2bc645cf24dfe49c1d780644eafa9025f04d907924e08f40b2fed85fba5d508fdd5fc6934ad706c9979aa86c3226376cc1a70ca4cf5316012cd4eaa25923304567e4a4492b7ced1f4dabc14c39832051f7fd521e4bd8ae82eb139f6a457243c95b30c60fc0d5294087966c271d6"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0xffffffff}, 0x8}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000003d000701000000000000002658faa800040008800c00018006000600800a0000280002802400140042a7ed1a0634218928630c8df6fd03d1d4bbb71fd650f60b7b83ea0ad0115f36"], 0x4c}}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='An\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="747275737465642e206ccbdb1119871c955613425aa1ecd4dee3898cea20312838c4fd25246b82d41e2ebc19fd84e048f05d4281c73a77660542483174fb670188965c2ffa00add060b57a2f8a52432eee957314821f3e532f082695a8be19c8c1b255fb0e04e2264543c598f0ea13d9f789a52c2d33bb22f45c61903a6aea7f2e0f2650574ad2dd0d82776f435942039881f23f23504d36ef54bb628392a393"]) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x13c, r3, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xe8, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @val={0x5, 0x9a, {0x7, 0x29, 0xca, "0c3117c5efb1882c0615b876c70059a0648f4832d2a8383fe06aa7c3a05bbac2fd54e6b27a003e0a60d348caf475827fd9078d9209e509a27f000000b2b27219afb3b45fecddf413a3b0427d335eb390c08398b1e0e87d1b641cb6bd1312e354790275ff21ba4dab3b3a8fd04a14182cda8d2a3e1bccc781af3cda4883db95c876603451d65866760ab2c8ab6dbca56c61e5723554f1d1"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xc, 0x88, 0x8}}, @val={0x2d, 0x1a, {0x2000, 0x0, 0x5, 0x0, {0x5, 0x8bc, 0x0, 0x3c0, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0x4, 0xe}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x121}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xce}]]}, 0x13c}}, 0x4000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES32, @ANYRES16=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6, 0x0, 0x4100000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 8.12993439s ago: executing program 8 (id=7503): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x7, 0x0, &(0x7f0000000040)) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) bind$ax25(r0, &(0x7f0000000380)={{0x3, @bcast, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 7.988817798s ago: executing program 8 (id=7505): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r1, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket(0x10, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@delqdisc={0x154, 0x25, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xf}, {0x7, 0xb}}, [@TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x6, 0x6, 0x0, 0x8, 0x7, 0x4}}, {0xc, 0x2, [0x5, 0x8, 0x3, 0x81]}}, {{0x1c, 0x1, {0x7, 0x7f, 0x2, 0x4, 0x1, 0x0, 0x2, 0x7}}, {0x12, 0x2, [0xfff9, 0x9, 0x7, 0x7, 0x2, 0x7ca6, 0x7]}}, {{0x1c, 0x1, {0x97, 0x6, 0x40, 0xe5a3, 0x0, 0x100, 0x80, 0x3}}, {0xa, 0x2, [0x5074, 0x5, 0xf165]}}, {{0x1c, 0x1, {0x9, 0x2, 0x5, 0x3, 0x2, 0x5, 0x5, 0x2}}, {0x8, 0x2, [0x2, 0x1]}}, {{0x1c, 0x1, {0x5, 0x1, 0x7, 0x3, 0x0, 0x1, 0x10, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x39, 0x24, 0x7f, 0xb08, 0x2, 0x9, 0x1, 0x7}}, {0x12, 0x2, [0x5, 0x4, 0x1, 0x9, 0x9, 0xe, 0x6f]}}, {{0x1c, 0x1, {0xb, 0x45, 0x6, 0x1000, 0x1, 0x10000, 0x9, 0x1}}, {0x6, 0x2, [0x1]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0xbf, 0x8}}]}, 0x154}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x3dff, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 7.123358322s ago: executing program 0 (id=7507): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250101f2800c00180008ac0f000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 4) 6.929543536s ago: executing program 0 (id=7508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000080)={0x44, r1, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x6a, 0x7}, 0x14}}, 0x0) 6.897048381s ago: executing program 8 (id=7509): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2c, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9851fd851afcec88, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10) brk(0x200000001000) 6.885356049s ago: executing program 3 (id=7510): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0xd, @val=@perf_event={0x9}}, 0x18) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000840)={0x8, 0x0, [{0x2000, 0x20, &(0x7f0000000080)=""/32}, {0x10000, 0x7f, &(0x7f00000001c0)=""/127}, {0x100000, 0x1000, &(0x7f0000001600)=""/4096}, {0xf000, 0x77, &(0x7f0000000580)=""/119}, {0xdddd1000, 0x36, &(0x7f0000000600)=""/54}, {0xeeee8000, 0x56, &(0x7f00000006c0)=""/86}, {0xf000, 0x86, &(0x7f0000000740)=""/134}, {0x2, 0x7, &(0x7f0000000640)=""/7}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000680)=0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8a}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) 6.885128705s ago: executing program 0 (id=7511): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x10, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002240)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r0) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x110, 0x6, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0xfffffffffffffff8, 0xc3, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0xffffffffffffffff, 0x9, 0x2, 0xf, 0x80080000006}, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_open_procfs(r6, &(0x7f0000000100)='net\x00') r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r8, r7, 0x0, 0x80000000) socket$rds(0x15, 0x5, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 6.386004909s ago: executing program 8 (id=7512): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00ffff00"]) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81b}}, './file0\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x301000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) mlockall(0x6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x98, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @generic="e8c47762e0fbb45e0086fd137ec43bfbd9fe7341e2f90aec8e3c3e919e87b9126db1b879cfdbff9f1f8ee875ae88a7782f2466ab266527b0d7155a5af50399ec4f9e5020a0378c93a2cf1cd05ebc4f116bad21d5b16702a16bad0783a3e831368d8183d11bf3d4f89f167c1b6afa6367", @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic="bc"]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write(0xffffffffffffffff, &(0x7f0000000000)="0a000000010001", 0x7) brk(0x55555ede6001) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x20, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) unshare(0x62040200) 5.53570763s ago: executing program 3 (id=7513): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x48) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) close(0x3) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x2, 0x156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r2, 0x26c8, 0x0, 0x1, 0x0, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r6 = bpf$PROG_LOAD(0x2, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fcntl$getown(r6, 0x9) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="e6fdffff10000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1da80100000000001c0012800900f7ff616f6e64000000000c0002800500010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) 5.50803844s ago: executing program 0 (id=7514): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) pwrite64(r2, 0x0, 0x0, 0x4fed0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c9301000"], 0x15) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x102080, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x2}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r6, 0x18000000000002a0, 0x3e, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da19244", 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sys_exit\x00', r0, 0x0, 0x8}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000bed977e5f3ac485cd748a6ea68ddd0b47c5ec952f5091f147156c954679a7448790698414a0e7a00d39aa13f09a12bd653094874ad67fd2c1be024b56c5525cb023ee7dc76273ebfb3b9d6240abee2dcc40eb461159e599e47065ac2a4274850258bcf3d9d8032cbd6233d7b3ad3a5ccf1d0edbe320615eca33185295597c612d4a02892b365a0a97294cae79218cd80220bd2f9cdcec8267324a6be60b20df61700c91e1d4d197ddabe631ad4f5012e0ac8c3e33998dc7afd2a", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf25180000000c0006000100000001000000"], 0x20}}, 0x20000000) 4.570830043s ago: executing program 3 (id=7515): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x3}, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x4000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 8) 4.509268783s ago: executing program 3 (id=7516): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab99273af0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x400000, {0x3, 0x0, 0xc550, 0x0, 0x1, 0x0, {0x8001, 0x0, 0x0, 0x803, 0x0, 0x0, 0x80, 0x0, 0x200, 0x1000, 0x0, r5, r6, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r3, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x20000, 0x9, 0x0, {0x0, 0x0, 0x7, 0x9, 0x4, 0xfffffffffffffffe, 0x1, 0x40, 0x77, 0x1000, 0xfffffffe, 0x0, r6, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)={0x14, 0x5f, 0xe25, 0x0, 0x3, "", [@nested={0x4, 0xea}]}, 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000100000100"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f00000000c0), 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000002060500000000000000cdf1fe140ecc85580400000000000900020073797a32000000000c0007800800064000000fff0500050002000000050001000e00686173683a6e65742c696661636500000000000000009dbe0f9d8a8ffc74535e53f4571ef3e15f76f07ec32a7ea093b552d4d1265899cd5575e6c50701ed05751058a17b587cf8978e26f886c9084f8142ae61e9bf29ccfd08db7e4b0600df83125c37a8097c2d7a8391d93cd63c51286e7a98021f9eace13ef1903e07f191daf91319f8239cf70940c34ccb1dc0a7fd8d95e35249aa517a32130b2c77ec0e15"], 0x58}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f00000008c0)={r12, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r12}, 0x8) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@delneigh={0x28, 0x1d, 0x200, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, r8, 0x8, 0x11, 0x6}, [@NDA_LLADDR={0xa, 0x2, @random="d015cec75622"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x12) 4.253691667s ago: executing program 0 (id=7517): syslog(0x2, &(0x7f0000001740), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x6, &(0x7f00000000c0)=[{0x1ff, 0x14, 0xe, 0x7ff}, {0xfd53, 0x5, 0x7, 0xfffffff9}, {0xfffd, 0x1, 0xff, 0x7}, {0x25, 0x0, 0x8, 0x7}, {0x800, 0x9, 0x1, 0x6}, {0x100, 0x0, 0x5, 0x9}]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x800000, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0, 0x40, 0x7], &(0x7f0000000780), 0x2) inotify_init() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000400000000000000030000008d0000002c00000085dd679d561f2ea08300000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x2000006, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}}}}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x3ffc, 0x0, 0x1, 0x35, "ffff00"}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0) io_setup(0x7, &(0x7f0000000000)) getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0xff00, 0x1000000}) 3.670288601s ago: executing program 3 (id=7518): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r1, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r5 = socket(0x10, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@delqdisc={0x154, 0x25, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xf}, {0x7, 0xb}}, [@TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x6, 0x6, 0x0, 0x8, 0x7, 0x4}}, {0xc, 0x2, [0x5, 0x8, 0x3, 0x81]}}, {{0x1c, 0x1, {0x7, 0x7f, 0x2, 0x4, 0x1, 0x0, 0x2, 0x7}}, {0x12, 0x2, [0xfff9, 0x9, 0x7, 0x7, 0x2, 0x7ca6, 0x7]}}, {{0x1c, 0x1, {0x97, 0x6, 0x40, 0xe5a3, 0x0, 0x100, 0x80, 0x3}}, {0xa, 0x2, [0x5074, 0x5, 0xf165]}}, {{0x1c, 0x1, {0x9, 0x2, 0x5, 0x3, 0x2, 0x5, 0x5, 0x2}}, {0x8, 0x2, [0x2, 0x1]}}, {{0x1c, 0x1, {0x5, 0x1, 0x7, 0x3, 0x0, 0x1, 0x10, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x39, 0x24, 0x7f, 0xb08, 0x2, 0x9, 0x1, 0x7}}, {0x12, 0x2, [0x5, 0x4, 0x1, 0x9, 0x9, 0xe, 0x6f]}}, {{0x1c, 0x1, {0xb, 0x45, 0x6, 0x1000, 0x1, 0x10000, 0x9, 0x1}}, {0x6, 0x2, [0x1]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0xbf, 0x8}}]}, 0x154}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x3dff, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 1.228274509s ago: executing program 3 (id=7519): mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd, 0x10, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x74, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000300)=@x86={0x0, 0x1, 0xd, 0x0, 0x7f, 0x9, 0x5, 0x8, 0x3, 0x9, 0x5, 0xff, 0x0, 0x7, 0xc, 0x4, 0xa, 0x9, 0x38, '\x00', 0xc3, 0xed1}) 1.096769639s ago: executing program 8 (id=7520): socket(0x2c, 0x80000, 0x188) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000280)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010102}}, 0x24) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x8c941, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="c30014016800"}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1) capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x7}) 857.192358ms ago: executing program 0 (id=7521): socket(0x2c, 0x80000, 0x188) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000280)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010102}}, 0x24) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x8c941, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="c30014016800"}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1) capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x7}) 0s ago: executing program 8 (id=7522): r0 = socket$nl_audit(0x10, 0x3, 0x9) socket$caif_seqpacket(0x25, 0x5, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x224000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setscheduler(r2, 0x728b6b6fc6da3854, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x3, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000003c0)="1e04000000818e02f5fc607ecc6460a4bcae769b5d129bab1c6ea44d9c8e5099f0c145dfe3a45356374edf9c4125ddfedd51439657280b6e84fcbdd58c17fb7bcbafacee357b6e8d0a46b4e35fbda2d0d63d1cdd084408a52914953535e502d87b5bb9272c03a2bb2d05447bd3f2223c761dcfa4a0f585b3287c08a84241e204d1f85989403383cef89ac2f0189e06553fb3e3fdf56ddc67e8702c71ff08ca8da9079efc60902a9cb926a5cab17d241fb9383c2b0d5cd8737239a4d3d07cdc2d8fa1a4", 0xc3}, {0x0}], 0x2) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip_vti0\x00'}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x78}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x46b}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x8011) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) r3 = socket(0x1f, 0xa, 0x7) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80), 0x0, 0x10122, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x6, 0x0, 0x8, 0x100000107fff, 0x8, 0x1, 0x10000003ff, 0x6, 0x9}) socket$nl_audit(0x10, 0x3, 0x9) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): 7345][ T789] ? __pfx_skb_network_protocol+0x10/0x10 [ 1529.617359][ T789] should_failslab+0xc2/0x120 [ 1529.617375][ T789] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1529.617388][ T789] ? skb_clone+0x190/0x3f0 [ 1529.617404][ T789] skb_clone+0x190/0x3f0 [ 1529.617419][ T789] dev_queue_xmit_nit+0x3e7/0xca0 [ 1529.617438][ T789] dev_hard_start_xmit+0x5c3/0x740 [ 1529.617449][ T789] ? skb_clone+0x190/0x3f0 [ 1529.617465][ T789] __dev_queue_xmit+0xa46/0x4490 [ 1529.617482][ T789] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1529.617503][ T789] ? __asan_memcpy+0x3c/0x60 [ 1529.617520][ T789] ? __asan_memcpy+0x3c/0x60 [ 1529.617530][ T789] ? __skb_clone+0x570/0x760 [ 1529.617545][ T789] netlink_deliver_tap+0xa87/0xd30 [ 1529.617563][ T789] netlink_unicast+0x64c/0x870 [ 1529.617581][ T789] ? __pfx_netlink_unicast+0x10/0x10 [ 1529.617595][ T789] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1529.617614][ T789] netlink_sendmsg+0x8d1/0xdd0 [ 1529.617632][ T789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1529.617648][ T789] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1529.617662][ T789] ____sys_sendmsg+0xa95/0xc70 [ 1529.617675][ T789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1529.617684][ T789] ? get_compat_msghdr+0x11a/0x170 [ 1529.617704][ T789] ___sys_sendmsg+0x134/0x1d0 [ 1529.617719][ T789] ? __pfx____sys_sendmsg+0x10/0x10 [ 1529.617740][ T789] ? find_held_lock+0x2b/0x80 [ 1529.617759][ T789] __sys_sendmsg+0x16d/0x220 [ 1529.617773][ T789] ? __pfx___sys_sendmsg+0x10/0x10 [ 1529.617793][ T789] ? rcu_is_watching+0x12/0xc0 [ 1529.617806][ T789] __do_fast_syscall_32+0x7c/0x3a0 [ 1529.617823][ T789] do_fast_syscall_32+0x32/0x80 [ 1529.617838][ T789] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1529.617851][ T789] RIP: 0023:0xf70ce579 [ 1529.617860][ T789] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1529.617871][ T789] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1529.617882][ T789] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1529.617889][ T789] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1529.617895][ T789] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1529.617901][ T789] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1529.617907][ T789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1529.617920][ T789] [ 1529.835291][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 1529.835318][T29287] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1530.105511][ T40] audit: type=1326 audit(2000000519.954:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=800 comm="syz.9.6861" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1530.112559][ T40] audit: type=1326 audit(2000000519.964:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=800 comm="syz.9.6861" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1530.118917][ T40] audit: type=1326 audit(2000000519.964:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=800 comm="syz.9.6861" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1530.124947][ T40] audit: type=1326 audit(2000000519.964:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=800 comm="syz.9.6861" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1530.128899][T15015] Bluetooth: hci4: Frame reassembly failed (-84) [ 1530.131233][ T40] audit: type=1326 audit(2000000519.964:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=800 comm="syz.9.6861" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1530.139231][ T40] audit: type=1326 audit(2000000519.964:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=800 comm="syz.9.6861" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1530.145310][ T40] audit: type=1326 audit(2000000519.964:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=800 comm="syz.9.6861" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1530.151410][ T40] audit: type=1326 audit(2000000519.964:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=800 comm="syz.9.6861" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1530.157622][ T40] audit: type=1326 audit(2000000519.974:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=800 comm="syz.9.6861" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1531.225911][ T815] netlink: 332 bytes leftover after parsing attributes in process `syz.8.6864'. [ 1532.155164][T29287] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1532.155437][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 1532.848308][ T824] netlink: 'syz.0.6865': attribute type 1 has an invalid length. [ 1532.851830][ T824] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6865'. [ 1532.905257][T26399] usb 14-1: new high-speed USB device number 27 using dummy_hcd [ 1533.086994][T26399] usb 14-1: Using ep0 maxpacket: 32 [ 1533.090961][T26399] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1533.106345][T26399] usb 14-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1533.109202][T26399] usb 14-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1533.111753][T26399] usb 14-1: Product: syz [ 1533.113086][T26399] usb 14-1: Manufacturer: syz [ 1533.114570][T26399] usb 14-1: SerialNumber: syz [ 1533.126563][T26399] usb 14-1: config 0 descriptor?? [ 1533.147977][ T827] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1533.151190][T26399] hub 14-1:0.0: bad descriptor, ignoring hub [ 1533.153102][T26399] hub 14-1:0.0: probe with driver hub failed with error -5 [ 1534.065361][ T827] usb 14-1: reset high-speed USB device number 27 using dummy_hcd [ 1534.231314][ T840] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1534.443469][T17643] usb 14-1: USB disconnect, device number 27 [ 1534.895290][T26399] usb 14-1: new high-speed USB device number 28 using dummy_hcd [ 1535.056810][T26399] usb 14-1: config 0 has no interfaces? [ 1535.060519][T26399] usb 14-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.40 [ 1535.063401][T26399] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.065995][T26399] usb 14-1: Product: syz [ 1535.067393][T26399] usb 14-1: Manufacturer: ᰁ [ 1535.068931][T26399] usb 14-1: SerialNumber: syz [ 1535.075561][T26399] usb 14-1: config 0 descriptor?? [ 1535.282833][T26399] usb 14-1: USB disconnect, device number 28 [ 1535.725384][T26399] usb 14-1: new high-speed USB device number 29 using dummy_hcd [ 1535.886689][T26399] usb 14-1: config 0 has no interfaces? [ 1535.890920][T26399] usb 14-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.40 [ 1535.894471][T26399] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.897409][T26399] usb 14-1: Product: syz [ 1535.899059][T26399] usb 14-1: Manufacturer: syz [ 1535.900903][T26399] usb 14-1: SerialNumber: syz [ 1535.904379][T26399] usb 14-1: config 0 descriptor?? [ 1536.118563][T26377] usb 14-1: USB disconnect, device number 29 [ 1537.150759][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 1537.150776][ T40] audit: type=1326 audit(2000000527.004:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.9.6879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1537.174742][ T40] audit: type=1326 audit(2000000527.014:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.9.6879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1537.183366][ T40] audit: type=1326 audit(2000000527.014:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.9.6879" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1537.192398][T17315] Bluetooth: hci4: Frame reassembly failed (-84) [ 1537.194846][ T40] audit: type=1326 audit(2000000527.014:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.9.6879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1537.206643][ T868] FAULT_INJECTION: forcing a failure. [ 1537.206643][ T868] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.210877][ T868] CPU: 2 UID: 0 PID: 868 Comm: syz.9.6879 Not tainted syzkaller #0 PREEMPT(full) [ 1537.210894][ T868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1537.210912][ T868] Call Trace: [ 1537.210918][ T868] [ 1537.210923][ T868] dump_stack_lvl+0x16c/0x1f0 [ 1537.210941][ T868] should_fail_ex+0x512/0x640 [ 1537.210956][ T868] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1537.210972][ T868] should_failslab+0xc2/0x120 [ 1537.210986][ T868] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1537.210999][ T868] ? audit_log_start+0x2c5/0x7f0 [ 1537.211016][ T868] audit_log_start+0x2c5/0x7f0 [ 1537.211030][ T868] ? __pfx_audit_log_start+0x10/0x10 [ 1537.211043][ T868] ? __schedule+0x3fef/0x5de0 [ 1537.211056][ T868] ? rcu_is_watching+0x12/0xc0 [ 1537.211067][ T868] ? trace_sched_exit_tp+0xd1/0x120 [ 1537.211085][ T868] ? migrate_enable+0x1ed/0x260 [ 1537.211102][ T868] ? __pfx_migrate_enable+0x10/0x10 [ 1537.211120][ T868] audit_seccomp+0x60/0x1f0 [ 1537.211133][ T868] __seccomp_filter+0x7b6/0xea0 [ 1537.211148][ T868] ? __pfx___seccomp_filter+0x10/0x10 [ 1537.211162][ T868] ? fput+0x9b/0xd0 [ 1537.211178][ T868] ? ksys_write+0x1ac/0x250 [ 1537.211192][ T868] __secure_computing+0x215/0x320 [ 1537.211205][ T868] syscall_trace_enter+0x89/0x240 [ 1537.211222][ T868] __do_fast_syscall_32+0x21b/0x3a0 [ 1537.211238][ T868] do_fast_syscall_32+0x32/0x80 [ 1537.211252][ T868] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1537.211266][ T868] RIP: 0023:0xf7f97579 [ 1537.211276][ T868] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1537.211290][ T868] RSP: 002b:00000000f5474590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1537.211306][ T868] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f5474620 [ 1537.211318][ T868] RDX: 000000000000000f RSI: 00000000f7424ff4 RDI: 0000000000000000 [ 1537.211330][ T868] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1537.211340][ T868] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1537.211351][ T868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1537.211372][ T868] [ 1537.211397][ T868] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 1537.272758][ T40] audit: type=1326 audit(2000000527.014:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.9.6879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1537.296144][ T40] audit: type=1326 audit(2000000527.014:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.9.6879" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1537.304621][ T40] audit: type=1326 audit(2000000527.014:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.9.6879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1537.313517][ T40] audit: type=1326 audit(2000000527.014:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.9.6879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1537.323207][ T40] audit: type=1326 audit(2000000527.014:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.9.6879" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1537.767316][ T877] netlink: 'syz.8.6880': attribute type 1 has an invalid length. [ 1537.769585][ T877] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6880'. [ 1538.891151][ T894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6888'. [ 1539.195398][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 1539.196022][T29287] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1539.307227][ T903] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6891'. [ 1540.698950][ T923] random: crng reseeded on system resumption [ 1540.968605][ T934] block nbd3: Attempted send on invalid socket [ 1540.971574][ T934] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.976135][ T934] block nbd3: Attempted send on invalid socket [ 1540.978531][ T934] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.982437][ T934] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1540.987851][ T934] block nbd3: Attempted send on invalid socket [ 1540.990516][ T934] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.994441][ T934] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1540.999402][ T934] block nbd3: Attempted send on invalid socket [ 1541.002169][ T934] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.006359][ T934] block nbd3: Attempted send on invalid socket [ 1541.009022][ T934] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.012282][ T934] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1541.016373][ T934] block nbd3: Attempted send on invalid socket [ 1541.018696][ T934] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.022423][ T934] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1541.026596][ T934] block nbd3: Attempted send on invalid socket [ 1541.028865][ T934] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.032665][ T934] block nbd3: Attempted send on invalid socket [ 1541.035362][ T934] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.038752][ T934] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1541.042291][ T934] block nbd3: Attempted send on invalid socket [ 1541.044733][ T934] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.048796][ T934] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1541.053162][ T934] block nbd3: Attempted send on invalid socket [ 1541.055586][ T934] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.059385][ T934] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1541.063427][ T934] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1541.067106][ T934] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1541.508239][T18153] hid_parser_main: 28 callbacks suppressed [ 1541.508254][T18153] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1541.512901][T18153] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1541.515560][T18153] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1541.517985][T18153] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1541.520713][T18153] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1541.523400][T18153] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1541.526032][T18153] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1541.528812][T18153] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1541.531241][T18153] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1541.533987][T18153] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1541.541054][T18153] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz0 [ 1541.848988][ T943] fido_id[943]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1544.604130][ T998] FAULT_INJECTION: forcing a failure. [ 1544.604130][ T998] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.609553][ T998] CPU: 1 UID: 0 PID: 998 Comm: syz.0.6906 Not tainted syzkaller #0 PREEMPT(full) [ 1544.609592][ T998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1544.609604][ T998] Call Trace: [ 1544.609611][ T998] [ 1544.609619][ T998] dump_stack_lvl+0x16c/0x1f0 [ 1544.609647][ T998] should_fail_ex+0x512/0x640 [ 1544.609671][ T998] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1544.609695][ T998] should_failslab+0xc2/0x120 [ 1544.609719][ T998] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1544.609740][ T998] ? __alloc_skb+0x2b2/0x380 [ 1544.609767][ T998] __alloc_skb+0x2b2/0x380 [ 1544.609788][ T998] ? __pfx___alloc_skb+0x10/0x10 [ 1544.609813][ T998] ? find_held_lock+0x2b/0x80 [ 1544.609834][ T998] __ip6_append_data+0x2b74/0x4750 [ 1544.609862][ T998] ? __pfx_raw6_getfrag+0x10/0x10 [ 1544.609892][ T998] ? __pfx___ip6_append_data+0x10/0x10 [ 1544.609913][ T998] ? __pfx_ip6_mtu+0x10/0x10 [ 1544.609928][ T998] ? ip6_setup_cork+0xc51/0x1530 [ 1544.609950][ T998] ip6_append_data+0x1bd/0x4c0 [ 1544.609971][ T998] ? __pfx_raw6_getfrag+0x10/0x10 [ 1544.609992][ T998] rawv6_sendmsg+0x163d/0x4820 [ 1544.610010][ T998] ? aa_label_sk_perm+0x195/0x600 [ 1544.610037][ T998] ? aa_profile_af_perm+0x340/0x3a0 [ 1544.610061][ T998] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1544.610079][ T998] ? __lock_acquire+0x62e/0x1ce0 [ 1544.610161][ T998] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1544.610180][ T998] ? inet_sendmsg+0x119/0x140 [ 1544.610196][ T998] inet_sendmsg+0x119/0x140 [ 1544.610215][ T998] sock_write_iter+0x4aa/0x5b0 [ 1544.610232][ T998] ? __pfx_sock_write_iter+0x10/0x10 [ 1544.610260][ T998] ? __lock_acquire+0x62e/0x1ce0 [ 1544.610285][ T998] do_iter_readv_writev+0x65f/0x9e0 [ 1544.610307][ T998] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1544.610330][ T998] ? bpf_lsm_file_permission+0x9/0x10 [ 1544.610354][ T998] ? security_file_permission+0x71/0x210 [ 1544.610383][ T998] ? rw_verify_area+0xcf/0x6c0 [ 1544.610403][ T998] vfs_writev+0x35f/0xde0 [ 1544.610429][ T998] ? __pfx_vfs_writev+0x10/0x10 [ 1544.610449][ T998] ? find_held_lock+0x2b/0x80 [ 1544.610482][ T998] ? __fget_files+0x20e/0x3c0 [ 1544.610500][ T998] ? __fget_files+0x1b0/0x3c0 [ 1544.610525][ T998] ? do_writev+0x28c/0x340 [ 1544.610543][ T998] do_writev+0x28c/0x340 [ 1544.610562][ T998] ? __pfx_do_writev+0x10/0x10 [ 1544.610584][ T998] ? rcu_is_watching+0x12/0xc0 [ 1544.610605][ T998] __do_fast_syscall_32+0x7c/0x3a0 [ 1544.610632][ T998] do_fast_syscall_32+0x32/0x80 [ 1544.610656][ T998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1544.610676][ T998] RIP: 0023:0xf7f74579 [ 1544.610690][ T998] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1544.610707][ T998] RSP: 002b:00000000f545455c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 1544.610722][ T998] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0 [ 1544.610733][ T998] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1544.610742][ T998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1544.610751][ T998] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1544.610762][ T998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1544.610785][ T998] [ 1544.742357][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.758144][ T995] netlink: 'syz.3.6913': attribute type 1 has an invalid length. [ 1544.760899][ T995] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6913'. [ 1545.670316][ T1015] loop2: detected capacity change from 0 to 7 [ 1545.679648][ T1015] Dev loop2: unable to read RDB block 7 [ 1545.681605][ T1015] loop2: unable to read partition table [ 1545.683589][ T1015] loop2: partition table beyond EOD, truncated [ 1545.686746][ T1015] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1545.924176][ T1024] 9pnet_fd: Insufficient options for proto=fd [ 1545.954573][ T1026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6922'. [ 1546.021702][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 1546.021714][ T40] audit: type=1400 audit(2000000535.874:6057): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=1025 comm="syz.0.6922" [ 1546.074518][ T1032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6923'. [ 1546.320206][ T1035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6923'. [ 1547.540207][ T1050] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6926'. [ 1547.547914][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.550486][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.058231][ T1057] netlink: 'syz.8.6929': attribute type 1 has an invalid length. [ 1548.061668][ T1057] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6929'. [ 1548.267280][ T40] audit: type=1326 audit(2000000538.124:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1079 comm="syz.8.6932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1548.280773][ T40] audit: type=1326 audit(2000000538.124:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1079 comm="syz.8.6932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1548.288890][ T40] audit: type=1326 audit(2000000538.134:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1079 comm="syz.8.6932" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1548.298755][ T40] audit: type=1326 audit(2000000538.134:6061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1079 comm="syz.8.6932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1548.391239][ T40] audit: type=1326 audit(2000000538.134:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1079 comm="syz.8.6932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1548.401614][ T40] audit: type=1326 audit(2000000538.154:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1079 comm="syz.8.6932" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1548.415217][ T40] audit: type=1326 audit(2000000538.154:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1079 comm="syz.8.6932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1548.427508][ T40] audit: type=1326 audit(2000000538.154:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1079 comm="syz.8.6932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1548.445001][ T40] audit: type=1326 audit(2000000538.154:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1079 comm="syz.8.6932" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1548.733420][ T1091] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1548.736265][ T1091] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1548.742979][ T1091] vhci_hcd vhci_hcd.0: Device attached [ 1549.075205][T17643] usb 53-1: new low-speed USB device number 6 using vhci_hcd [ 1549.112125][ T1099] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6932'. [ 1549.246226][ T1091] netdevsim netdevsim8: Direct firmware load for @ failed with error -2 [ 1549.297505][ T1091] netdevsim netdevsim8: Falling back to sysfs fallback for: @ [ 1549.334408][ T1094] vhci_hcd: connection reset by peer [ 1549.341429][T15015] vhci_hcd: stop threads [ 1549.343319][T15015] vhci_hcd: release socket [ 1549.345439][T15015] vhci_hcd: disconnect device [ 1551.472028][ T1175] netlink: 'syz.3.6947': attribute type 1 has an invalid length. [ 1551.684063][ T1184] tipc: New replicast peer: 100.1.1.2 [ 1551.687741][ T1184] tipc: Enabled bearer , priority 10 [ 1551.696134][ T1184] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1551.700528][ T1184] tipc: Enabled bearer , priority 10 [ 1551.939966][ T1193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6952'. [ 1552.628507][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 1552.628520][ T40] audit: type=1326 audit(2000000542.484:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1201 comm="syz.8.6954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1552.670477][ T1207] 9pnet_fd: Insufficient options for proto=fd [ 1552.705259][ T40] audit: type=1326 audit(2000000542.484:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1201 comm="syz.8.6954" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1552.712041][ T40] audit: type=1326 audit(2000000542.484:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1201 comm="syz.8.6954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1552.719225][ T40] audit: type=1326 audit(2000000542.484:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1201 comm="syz.8.6954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1552.726284][ T40] audit: type=1326 audit(2000000542.484:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1201 comm="syz.8.6954" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1552.733525][ T5983] tipc: Node number set to 2977755567 [ 1552.737508][ T40] audit: type=1326 audit(2000000542.484:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1201 comm="syz.8.6954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1552.746783][ T40] audit: type=1326 audit(2000000542.484:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1201 comm="syz.8.6954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1552.755921][ T40] audit: type=1326 audit(2000000542.484:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1201 comm="syz.8.6954" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1552.763322][ T40] audit: type=1326 audit(2000000542.484:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1201 comm="syz.8.6954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1552.770212][ T40] audit: type=1326 audit(2000000542.484:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1201 comm="syz.8.6954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1553.830665][ T1223] netlink: 'syz.9.6959': attribute type 10 has an invalid length. [ 1553.833304][ T1223] syz_tun: entered promiscuous mode [ 1553.841840][ T1223] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1554.235207][T17643] vhci_hcd: vhci_device speed not set [ 1554.517396][ T1241] comedi comedi3: dmm32at: I/O port conflict (0xcf8,16) [ 1554.525961][ T1242] comedi comedi3: board detection failed [ 1554.886988][ T1251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6967'. [ 1554.889844][ T1251] bridge_slave_1: left allmulticast mode [ 1554.891635][ T1251] bridge_slave_1: left promiscuous mode [ 1554.893507][ T1251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.910345][ T1251] bridge_slave_0: left allmulticast mode [ 1554.912939][ T1251] bridge_slave_0: left promiscuous mode [ 1554.918540][ T1251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.225232][T17684] usb 14-1: new high-speed USB device number 30 using dummy_hcd [ 1555.475971][T17684] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.479618][T17684] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.484118][T17684] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.495327][T17684] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1555.509518][T17684] usb 14-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1555.512245][T17684] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.527899][T17684] usb 14-1: config 0 descriptor?? [ 1555.942516][T17684] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 1555.950590][T17684] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:0926:3333.000E/input/input121 [ 1556.035855][T17684] keytouch 0003:0926:3333.000E: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 1556.135727][ T5983] usb 14-1: USB disconnect, device number 30 [ 1556.507573][ T1281] overlayfs: workdir and upperdir must be separate subtrees [ 1556.566314][ T1286] befs: (nbd3): No write support. Marking filesystem read-only [ 1556.569695][ T1286] nbd_handle_cmd: 2 callbacks suppressed [ 1556.569722][ T1286] block nbd3: Attempted send on invalid socket [ 1556.574753][ T1286] blk_print_req_error: 2 callbacks suppressed [ 1556.574801][ T1286] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1556.581277][ T1286] befs: (nbd3): unable to read superblock [ 1556.980063][ T1295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6978'. [ 1557.470695][ T1309] befs: (nbd8): No write support. Marking filesystem read-only [ 1557.473866][ T1309] block nbd8: Attempted send on invalid socket [ 1557.478068][ T1309] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1557.478876][ T1309] befs: (nbd8): unable to read superblock [ 1558.178819][ T1310] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1558.228943][ T1319] comedi: valid board names for 8255 driver are: [ 1558.230852][ T1319] 8255 [ 1558.231664][ T1319] comedi: valid board names for vmk80xx driver are: [ 1558.235816][ T1319] vmk80xx [ 1558.236815][ T1319] comedi: valid board names for usbduxsigma driver are: [ 1558.238804][ T1319] usbduxsigma [ 1558.239802][ T1319] comedi: valid board names for usbduxfast driver are: [ 1558.241742][ T1319] usbduxfast [ 1558.242730][ T1319] comedi: valid board names for usbdux driver are: [ 1558.246609][ T1319] usbdux [ 1558.247527][ T1319] comedi: valid board names for ni6501 driver are: [ 1558.249911][ T1319] ni6501 [ 1558.251063][ T1319] comedi: valid board names for dt9812 driver are: [ 1558.254951][ T1319] dt9812 [ 1558.255925][ T1319] comedi: valid board names for ni_labpc_cs driver are: [ 1558.257905][ T1319] ni_labpc_cs [ 1558.259030][ T1319] comedi: valid board names for ni_daq_700 driver are: [ 1558.260922][ T1319] ni_daq_700 [ 1558.261903][ T1319] comedi: valid board names for labpc_pci driver are: [ 1558.263845][ T1319] labpc_pci [ 1558.264817][ T1319] comedi: valid board names for adl_pci9118 driver are: [ 1558.270856][ T1319] pci9118dg [ 1558.271973][ T1319] pci9118hg [ 1558.273056][ T1319] pci9118hr [ 1558.274143][ T1319] comedi: valid board names for 8255_pci driver are: [ 1558.276956][ T1319] 8255_pci [ 1558.278034][ T1319] comedi: valid board names for s526 driver are: [ 1558.280671][ T1319] s526 [ 1558.281578][ T1319] comedi: valid board names for multiq3 driver are: [ 1558.284256][ T1319] multiq3 [ 1558.285465][ T1319] comedi: valid board names for pcmuio driver are: [ 1558.287900][ T1319] pcmuio48 [ 1558.288960][ T1319] pcmuio96 [ 1558.290021][ T1319] comedi: valid board names for pcmmio driver are: [ 1558.292068][ T1319] pcmmio [ 1558.293047][ T1319] comedi: valid board names for pcmda12 driver are: [ 1558.295367][ T1319] pcmda12 [ 1558.296476][ T1319] comedi: valid board names for pcmad driver are: [ 1558.298816][ T1319] pcmad12 [ 1558.299924][ T1319] pcmad16 [ 1558.300978][ T1319] comedi: valid board names for ni_labpc driver are: [ 1558.303130][ T1319] lab-pc-1200 [ 1558.304273][ T1319] lab-pc-1200ai [ 1558.317081][ T1319] lab-pc+ [ 1558.318324][ T1319] comedi: valid board names for atmio16 driver are: [ 1558.320178][ T1319] atmio16 [ 1558.321085][ T1319] atmio16d [ 1558.322022][ T1319] comedi: valid board names for ni_at_ao driver are: [ 1558.324358][ T1319] at-ao-6 [ 1558.335128][ T1319] at-ao-10 [ 1558.336280][ T1319] comedi: valid board names for ni_at_a2150 driver are: [ 1558.338917][ T1319] ni_at_a2150 [ 1558.340044][ T1319] comedi: valid board names for adq12b driver are: [ 1558.342083][ T1319] adq12b [ 1558.343061][ T1319] comedi: valid board names for mpc624 driver are: [ 1558.355119][ T1319] mpc624 [ 1558.356173][ T1319] comedi: valid board names for c6xdigio driver are: [ 1558.358286][ T1319] c6xdigio [ 1558.359353][ T1319] comedi: valid board names for aio_iiro_16 driver are: [ 1558.361528][ T1319] aio_iiro_16 [ 1558.362652][ T1319] comedi: valid board names for aio_aio12_8 driver are: [ 1558.364943][ T1319] aio_aio12_8 [ 1558.375131][ T1319] aio_ai12_8 [ 1558.376352][ T1319] aio_ao12_4 [ 1558.377575][ T1319] comedi: valid board names for fl512 driver are: [ 1558.379760][ T1319] fl512 [ 1558.380728][ T1319] comedi: valid board names for dmm32at driver are: [ 1558.383086][ T1319] dmm32at [ 1558.384108][ T1319] comedi: valid board names for dt282x driver are: [ 1558.386244][ T1319] dt2821 [ 1558.387243][ T1319] dt2821-f [ 1558.388291][ T1319] dt2821-g [ 1558.389355][ T1319] dt2823 [ 1558.390343][ T1319] dt2824-pgh [ 1558.391465][ T1319] dt2824-pgl [ 1558.392588][ T1319] dt2825 [ 1558.393583][ T1319] dt2827 [ 1558.394592][ T1319] dt2828 [ 1558.395654][ T1319] dt2829 [ 1558.396677][ T1319] dt21-ez [ 1558.397725][ T1319] dt23-ez [ 1558.398857][ T1319] dt24-ez [ 1558.399913][ T1319] dt24-ez-pgl [ 1558.401059][ T1319] comedi: valid board names for dt2817 driver are: [ 1558.403282][ T1319] dt2817 [ 1558.404300][ T1319] comedi: valid board names for dt2815 driver are: [ 1558.407735][ T1319] dt2815 [ 1558.408851][ T1319] comedi: valid board names for dt2814 driver are: [ 1558.411092][ T1319] dt2814 [ 1558.412179][ T1319] comedi: valid board names for dt2811 driver are: [ 1558.414292][ T1319] dt2811-pgh [ 1558.415438][ T1319] dt2811-pgl [ 1558.416610][ T1319] comedi: valid board names for dt2801 driver are: [ 1558.418769][ T1319] dt2801 [ 1558.419771][ T1319] comedi: valid board names for das6402 driver are: [ 1558.422192][ T1319] das6402-12 [ 1558.423811][ T1319] das6402-16 [ 1558.425268][ T1319] comedi: valid board names for das1800 driver are: [ 1558.427529][ T1319] das-1701st [ 1558.428693][ T1319] das-1701st-da [ 1558.429908][ T1319] das-1702st [ 1558.431040][ T1319] das-1702st-da [ 1558.432248][ T1319] das-1702hr [ 1558.433373][ T1319] das-1702hr-da [ 1558.434564][ T1319] das-1701ao [ 1558.436832][ T1319] das-1702ao [ 1558.438164][ T1319] das-1801st [ 1558.439369][ T1319] das-1801st-da [ 1558.440612][ T1319] das-1802st [ 1558.441725][ T1319] das-1802st-da [ 1558.442948][ T1319] das-1802hr [ 1558.444073][ T1319] das-1802hr-da [ 1558.445539][ T1319] das-1801hc [ 1558.446949][ T1319] das-1802hc [ 1558.448164][ T1319] das-1801ao [ 1558.449307][ T1319] das-1802ao [ 1558.450452][ T1319] comedi: valid board names for das800 driver are: [ 1558.452518][ T1319] das-800 [ 1558.453566][ T1319] cio-das800 [ 1558.454734][ T1319] das-801 [ 1558.455830][ T1319] cio-das801 [ 1558.456949][ T1319] das-802 [ 1558.457978][ T1319] cio-das802 [ 1558.459077][ T1319] cio-das802/16 [ 1558.460209][ T1319] comedi: valid board names for isa-das08 driver are: [ 1558.462361][ T1319] isa-das08 [ 1558.463422][ T1319] das08-pgm [ 1558.464476][ T1319] das08-pgh [ 1558.465604][ T1319] das08-pgl [ 1558.466707][ T1319] das08-aoh [ 1558.467776][ T1319] das08-aol [ 1558.468867][ T1319] das08-aom [ 1558.469980][ T1319] das08/jr-ao [ 1558.471110][ T1319] das08jr-16-ao [ 1558.472295][ T1319] pc104-das08 [ 1558.473477][ T1319] das08jr/16 [ 1558.474719][ T1319] comedi: valid board names for das16m1 driver are: [ 1558.476902][ T1319] das16m1 [ 1558.477954][ T1319] comedi: valid board names for dac02 driver are: [ 1558.480072][ T1319] dac02 [ 1558.481032][ T1319] comedi: valid board names for rti802 driver are: [ 1558.483233][ T1319] rti802 [ 1558.484310][ T1319] comedi: valid board names for rti800 driver are: [ 1558.486421][ T1319] rti800 [ 1558.487439][ T1319] rti815 [ 1558.488441][ T1319] comedi: valid board names for pcm3724 driver are: [ 1558.490520][ T1319] pcm3724 [ 1558.491538][ T1319] comedi: valid board names for pcl818 driver are: [ 1558.493668][ T1319] pcl818l [ 1558.494709][ T1319] pcl818h [ 1558.496854][ T1319] pcl818hd [ 1558.497984][ T1319] pcl818hg [ 1558.499055][ T1319] pcl818 [ 1558.500121][ T1319] pcl718 [ 1558.501229][ T1319] pcm3718 [ 1558.502274][ T1319] comedi: valid board names for pcl816 driver are: [ 1558.504326][ T1319] pcl816 [ 1558.505322][ T1319] pcl814b [ 1558.506398][ T1319] comedi: valid board names for pcl812 driver are: [ 1558.515176][ T1319] pcl812 [ 1558.516231][ T1319] pcl812pg [ 1558.517322][ T1319] acl8112pg [ 1558.518453][ T1319] acl8112dg [ 1558.519756][ T1319] acl8112hg [ 1558.520912][ T1319] a821pgl [ 1558.521953][ T1319] a821pglnda [ 1558.524400][ T1319] a821pgh [ 1558.525689][ T1319] a822pgl [ 1558.526811][ T1319] a822pgh [ 1558.527864][ T1319] a823pgl [ 1558.528928][ T1319] a823pgh [ 1558.530136][ T1319] pcl813 [ 1558.531399][ T1319] pcl813b [ 1558.532557][ T1319] acl8113 [ 1558.533679][ T1319] iso813 [ 1558.534760][ T1319] acl8216 [ 1558.535947][ T1319] a826pg [ 1558.536991][ T1319] comedi: valid board names for pcl730 driver are: [ 1558.539186][ T1319] pcl730 [ 1558.540402][ T1319] iso730 [ 1558.542366][ T1319] acl7130 [ 1558.543768][ T1319] pcm3730 [ 1558.544967][ T1319] pcl725 [ 1558.546434][ T1319] p8r8dio [ 1558.547502][ T1319] acl7225b [ 1558.548574][ T1319] p16r16dio [ 1558.550205][ T1319] pcl733 [ 1558.551273][ T1319] pcl734 [ 1558.552337][ T1319] opmm-1616-xt [ 1558.553564][ T1319] pearl-mm-p [ 1558.554889][ T1319] ir104-pbf [ 1558.556154][ T1319] comedi: valid board names for pcl726 driver are: [ 1558.559196][ T1319] pcl726 [ 1558.560433][ T1319] pcl727 [ 1558.561495][ T1319] pcl728 [ 1558.562707][ T1319] acl6126 [ 1558.563847][ T1319] acl6128 [ 1558.565049][ T1319] comedi: valid board names for pcl724 driver are: [ 1558.577287][ T1319] pcl724 [ 1558.578543][ T1319] pcl722 [ 1558.579665][ T1319] pcl731 [ 1558.580814][ T1319] acl7122 [ 1558.581888][ T1319] acl7124 [ 1558.582981][ T1319] pet48dio [ 1558.584366][ T1319] pcmio48 [ 1558.585979][ T1319] onyx-mm-dio [ 1558.591943][ T1319] comedi: valid board names for pcl711 driver are: [ 1558.595297][ T1319] pcl711 [ 1558.598680][ T1319] pcl711b [ 1558.600521][ T1319] acl8112hg [ 1558.601889][ T1319] acl8112dg [ 1558.603434][ T1319] comedi: valid board names for amplc_pc263 driver are: [ 1558.606183][ T1319] pc263 [ 1558.607247][ T1319] comedi: valid board names for amplc_pc236 driver are: [ 1558.609510][ T1319] pc36at [ 1558.610559][ T1319] comedi: valid board names for amplc_dio200 driver are: [ 1558.612820][ T1319] pc212e [ 1558.613872][ T1319] pc214e [ 1558.614886][ T1319] pc215e [ 1558.616022][ T1319] pc218e [ 1558.617080][ T1319] pc272e [ 1558.618086][ T1319] comedi: valid board names for comedi_parport driver are: [ 1558.621030][ T1319] comedi_parport [ 1558.622315][ T1319] comedi: valid board names for comedi_test driver are: [ 1558.624587][ T1319] comedi_test [ 1558.627769][ T1319] comedi: valid board names for comedi_bond driver are: [ 1558.630465][ T1319] comedi_bond [ 1560.125238][T26399] usb 13-1: new high-speed USB device number 37 using dummy_hcd [ 1560.295309][T26399] usb 13-1: Using ep0 maxpacket: 8 [ 1560.298283][T26399] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1560.302151][T26399] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1560.306801][T26399] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1560.310057][T26399] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1560.314177][T26399] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1560.317181][T26399] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.528238][T26399] usb 13-1: GET_CAPABILITIES returned 0 [ 1560.530692][T26399] usbtmc 13-1:16.0: can't read capabilities [ 1560.849238][ T6022] usb 13-1: USB disconnect, device number 37 [ 1560.902031][ T1361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6992'. [ 1560.904873][ T1361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6992'. [ 1560.996127][ T40] kauditd_printk_skb: 177 callbacks suppressed [ 1560.996140][ T40] audit: type=1107 audit(2000000550.854:6272): pid=1365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='q' [ 1560.996138][ T1366] FAULT_INJECTION: forcing a failure. [ 1560.996138][ T1366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1561.010241][ T1366] CPU: 2 UID: 0 PID: 1366 Comm: syz.9.6994 Not tainted syzkaller #0 PREEMPT(full) [ 1561.010266][ T1366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1561.010277][ T1366] Call Trace: [ 1561.010283][ T1366] [ 1561.010291][ T1366] dump_stack_lvl+0x16c/0x1f0 [ 1561.010342][ T1366] should_fail_ex+0x512/0x640 [ 1561.010378][ T1366] _copy_to_user+0x32/0xd0 [ 1561.010398][ T1366] simple_read_from_buffer+0xcb/0x170 [ 1561.010420][ T1366] proc_fail_nth_read+0x197/0x240 [ 1561.010446][ T1366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1561.010469][ T1366] ? rw_verify_area+0xcf/0x6c0 [ 1561.010487][ T1366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1561.010507][ T1366] vfs_read+0x1e4/0xcf0 [ 1561.010534][ T1366] ? __pfx_vfs_read+0x10/0x10 [ 1561.010552][ T1366] ? find_held_lock+0x2b/0x80 [ 1561.010580][ T1366] ? __fget_files+0x20e/0x3c0 [ 1561.010609][ T1366] ksys_read+0x12a/0x250 [ 1561.010630][ T1366] ? __pfx_ksys_read+0x10/0x10 [ 1561.010654][ T1366] ? rcu_is_watching+0x12/0xc0 [ 1561.010677][ T1366] __do_fast_syscall_32+0x7c/0x3a0 [ 1561.010710][ T1366] do_fast_syscall_32+0x32/0x80 [ 1561.010734][ T1366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1561.010760][ T1366] RIP: 0023:0xf7f97579 [ 1561.010775][ T1366] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1561.010793][ T1366] RSP: 002b:00000000f54b6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1561.010811][ T1366] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54b6620 [ 1561.010823][ T1366] RDX: 000000000000000f RSI: 00000000f7424ff4 RDI: 0000000000000000 [ 1561.010835][ T1366] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1561.010846][ T1366] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1561.010857][ T1366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1561.010882][ T1366] [ 1561.163558][ T1370] FAULT_INJECTION: forcing a failure. [ 1561.163558][ T1370] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.169105][ T1370] CPU: 1 UID: 0 PID: 1370 Comm: syz.9.6995 Not tainted syzkaller #0 PREEMPT(full) [ 1561.169130][ T1370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1561.169156][ T1370] Call Trace: [ 1561.169164][ T1370] [ 1561.169171][ T1370] dump_stack_lvl+0x16c/0x1f0 [ 1561.169199][ T1370] should_fail_ex+0x512/0x640 [ 1561.169227][ T1370] ? fs_reclaim_acquire+0xae/0x150 [ 1561.169254][ T1370] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1561.169278][ T1370] should_failslab+0xc2/0x120 [ 1561.169302][ T1370] __kmalloc_noprof+0xd2/0x510 [ 1561.169327][ T1370] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1561.169354][ T1370] ? tomoyo_profile+0x47/0x60 [ 1561.169372][ T1370] tomoyo_path_number_perm+0x245/0x580 [ 1561.169392][ T1370] ? tomoyo_path_number_perm+0x237/0x580 [ 1561.169415][ T1370] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1561.169461][ T1370] ? find_held_lock+0x2b/0x80 [ 1561.169478][ T1370] ? hook_file_ioctl_common+0x145/0x410 [ 1561.169506][ T1370] ? __fget_files+0x20e/0x3c0 [ 1561.169529][ T1370] security_file_ioctl_compat+0x9b/0x240 [ 1561.169554][ T1370] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1561.169584][ T1370] __do_fast_syscall_32+0x7c/0x3a0 [ 1561.169609][ T1370] do_fast_syscall_32+0x32/0x80 [ 1561.169632][ T1370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1561.169652][ T1370] RIP: 0023:0xf7f97579 [ 1561.169665][ T1370] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1561.169682][ T1370] RSP: 002b:00000000f54b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1561.169700][ T1370] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 1561.169712][ T1370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1561.169722][ T1370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1561.169732][ T1370] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1561.169741][ T1370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1561.169764][ T1370] [ 1561.169855][ T1370] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1562.473299][ T1384] netlink: 'syz.9.6999': attribute type 1 has an invalid length. [ 1562.476873][ T1384] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6999'. [ 1562.789175][ T1392] netlink: 'syz.3.6998': attribute type 1 has an invalid length. [ 1562.791926][ T1392] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6998'. [ 1563.334764][ T1412] befs: (nbd8): No write support. Marking filesystem read-only [ 1563.337884][ T1412] block nbd8: Attempted send on invalid socket [ 1563.339883][ T1412] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1563.342914][ T1412] befs: (nbd8): unable to read superblock [ 1564.348564][ T1429] FAULT_INJECTION: forcing a failure. [ 1564.348564][ T1429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1564.352611][ T1429] CPU: 1 UID: 0 PID: 1429 Comm: syz.0.7007 Not tainted syzkaller #0 PREEMPT(full) [ 1564.352626][ T1429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1564.352633][ T1429] Call Trace: [ 1564.352638][ T1429] [ 1564.352643][ T1429] dump_stack_lvl+0x16c/0x1f0 [ 1564.352661][ T1429] should_fail_ex+0x512/0x640 [ 1564.352679][ T1429] _copy_from_iter+0x29f/0x1720 [ 1564.352697][ T1429] ? __alloc_skb+0x200/0x380 [ 1564.352711][ T1429] ? __pfx__copy_from_iter+0x10/0x10 [ 1564.352729][ T1429] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1564.352748][ T1429] netlink_sendmsg+0x829/0xdd0 [ 1564.352766][ T1429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1564.352782][ T1429] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1564.352796][ T1429] ____sys_sendmsg+0xa95/0xc70 [ 1564.352808][ T1429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1564.352817][ T1429] ? get_compat_msghdr+0x11a/0x170 [ 1564.352837][ T1429] ___sys_sendmsg+0x134/0x1d0 [ 1564.352852][ T1429] ? __pfx____sys_sendmsg+0x10/0x10 [ 1564.352872][ T1429] ? find_held_lock+0x2b/0x80 [ 1564.352891][ T1429] __sys_sendmsg+0x16d/0x220 [ 1564.352906][ T1429] ? __pfx___sys_sendmsg+0x10/0x10 [ 1564.352925][ T1429] ? rcu_is_watching+0x12/0xc0 [ 1564.352939][ T1429] __do_fast_syscall_32+0x7c/0x3a0 [ 1564.352955][ T1429] do_fast_syscall_32+0x32/0x80 [ 1564.352970][ T1429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1564.352984][ T1429] RIP: 0023:0xf7f74579 [ 1564.352993][ T1429] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1564.353004][ T1429] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1564.353015][ T1429] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 1564.353022][ T1429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1564.353028][ T1429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1564.353034][ T1429] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1564.353040][ T1429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1564.353053][ T1429] [ 1564.495187][T32436] usb 13-1: new high-speed USB device number 38 using dummy_hcd [ 1564.665427][T32436] usb 13-1: Using ep0 maxpacket: 8 [ 1564.669707][T32436] usb 13-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.674577][T32436] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1564.679504][T32436] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1564.683802][T32436] usb 13-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1564.689597][T32436] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1564.693529][T32436] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.702444][T32436] usbtmc 13-1:16.0: bulk endpoints not found [ 1564.907260][ T1255] usb 13-1: USB disconnect, device number 38 [ 1565.115248][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 1565.116319][T29287] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1566.614535][ T1460] IPVS: Scheduler module ip_vs_sip not found [ 1566.621583][ T1460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7016'. [ 1567.274944][ T1483] netlink: 'syz.8.7014': attribute type 1 has an invalid length. [ 1567.278352][ T1483] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7014'. [ 1568.018692][T29287] Bluetooth: hci2: unexpected event for opcode 0x200d [ 1570.741596][ T1559] syzkaller0: entered promiscuous mode [ 1570.743395][ T1559] syzkaller0: entered allmulticast mode [ 1570.820641][ T1567] netlink: zone id is out of range [ 1570.824542][ T1567] netlink: zone id is out of range [ 1570.827107][ T1567] netlink: zone id is out of range [ 1570.829574][ T1567] netlink: zone id is out of range [ 1570.832068][ T1567] netlink: zone id is out of range [ 1570.834398][ T1567] netlink: zone id is out of range [ 1570.838643][ T1567] netlink: zone id is out of range [ 1570.841103][ T1567] netlink: zone id is out of range [ 1570.843906][ T1567] netlink: zone id is out of range [ 1570.846551][ T1567] netlink: zone id is out of range [ 1570.906454][ T1569] netlink: 'syz.8.7031': attribute type 1 has an invalid length. [ 1570.927698][ T1569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1573.313568][ T1567] bond1: (slave geneve2): making interface the new active one [ 1573.317711][ T1567] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1573.625387][ T5983] usb 13-1: new high-speed USB device number 39 using dummy_hcd [ 1573.795255][ T5983] usb 13-1: Using ep0 maxpacket: 8 [ 1573.801207][ T5983] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1573.805429][ T5983] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1573.808698][ T5983] usb 13-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1573.812193][ T5983] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1573.816794][ T5983] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1573.819730][ T5983] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.831284][ T5983] usbtmc 13-1:16.0: bulk endpoints not found [ 1574.031436][ T6022] usb 13-1: USB disconnect, device number 39 [ 1574.523651][ T1616] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7044'. [ 1574.524232][ T1615] mmap: syz.3.7045 (1615) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1574.527423][ T1616] Bluetooth: MGMT ver 1.23 [ 1574.557719][ T1616] netlink: 'syz.9.7044': attribute type 29 has an invalid length. [ 1574.560955][ T1616] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7044'. [ 1574.592881][ T1617] 9pnet: Unknown protocol version 9p2000.uPo4=\`1cbz [ 1577.295846][ T1650] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7054'. [ 1579.411483][ T1683] JFS: discard option not supported on device [ 1579.414236][ T1683] Mount JFS Failure: -22 [ 1579.415663][ T1683] jfs_mount failed w/return code = -22 [ 1579.630072][ T1679] netlink: 'syz.8.7058': attribute type 1 has an invalid length. [ 1579.632618][ T1679] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7058'. [ 1580.299719][ T1687] siw: device registration error -23 [ 1580.707989][ T1700] nvme_fabrics: missing parameter 'transport=%s' [ 1580.710225][ T1700] nvme_fabrics: missing parameter 'nqn=%s' [ 1581.027873][ T1699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7064'. [ 1581.034778][ T1699] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7064'. [ 1581.204013][ T1694] netlink: 'syz.8.7060': attribute type 1 has an invalid length. [ 1581.206793][ T1694] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7060'. [ 1581.287465][ T1699] bond0 (unregistering): Released all slaves [ 1581.879768][ T1712] netlink: 'syz.9.7063': attribute type 29 has an invalid length. [ 1581.882795][ T1712] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7063'. [ 1582.539533][ T1733] net_ratelimit: 4 callbacks suppressed [ 1582.539546][ T1733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1583.775272][T26399] usb 13-1: new high-speed USB device number 40 using dummy_hcd [ 1583.936064][T26399] usb 13-1: Using ep0 maxpacket: 8 [ 1583.945809][T26399] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1583.950501][T26399] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1583.954962][T26399] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1583.960160][T26399] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1583.964390][T26399] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1583.972381][T26399] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1583.976649][T26399] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.017891][T26399] usbtmc 13-1:16.0: probe with driver usbtmc failed with error -22 [ 1584.149254][ T40] audit: type=1326 audit(2000000574.004:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.0.7078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1584.159839][ T40] audit: type=1326 audit(2000000574.004:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.0.7078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1584.187624][ T1759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7078'. [ 1584.194906][ T40] audit: type=1326 audit(2000000574.014:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.0.7078" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1584.202034][ T40] audit: type=1326 audit(2000000574.014:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.0.7078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1584.212601][ T40] audit: type=1326 audit(2000000574.024:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.0.7078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1584.221772][ T40] audit: type=1326 audit(2000000574.024:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.0.7078" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1584.227062][T14380] usb 13-1: USB disconnect, device number 40 [ 1584.229427][ T40] audit: type=1326 audit(2000000574.024:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.0.7078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1584.239104][ T40] audit: type=1326 audit(2000000574.024:6280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.0.7078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1584.249307][ T40] audit: type=1326 audit(2000000574.024:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.0.7078" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1584.258536][ T40] audit: type=1326 audit(2000000574.024:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.0.7078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1584.790901][ T1762] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1584.793247][ T1762] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1584.807512][ T1762] vhci_hcd vhci_hcd.0: Device attached [ 1584.816617][ T1762] netdevsim netdevsim0: Direct firmware load for @ failed with error -2 [ 1584.820177][ T1762] netdevsim netdevsim0: Falling back to sysfs fallback for: @ [ 1584.983531][ T1766] vhci_hcd: connection closed [ 1584.984171][ T75] vhci_hcd: stop threads [ 1584.987859][ T75] vhci_hcd: release socket [ 1584.990619][ T75] vhci_hcd: disconnect device [ 1585.073346][ T5983] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 1585.241601][ T5983] usb 37-1: enqueue for inactive port 0 [ 1585.925566][ T5983] vhci_hcd: vhci_device speed not set [ 1585.985184][T32436] usb 14-1: new full-speed USB device number 31 using dummy_hcd [ 1586.136581][T32436] usb 14-1: device descriptor read/64, error -71 [ 1586.236878][ C2] vcan0: j1939_tp_rxtimer: 0xffff88805f089c00: rx timeout, send abort [ 1586.243412][ C2] vcan0: j1939_tp_rxtimer: 0xffff88805f08ac00: rx timeout, send abort [ 1586.247012][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f089c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1586.253591][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f08ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1586.385284][T32436] usb 14-1: new full-speed USB device number 32 using dummy_hcd [ 1586.502711][ T1795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7087'. [ 1586.535345][T32436] usb 14-1: device descriptor read/64, error -71 [ 1586.659824][T32436] usb usb14-port1: attempt power cycle [ 1586.804899][ T1800] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7089'. [ 1586.808643][ T1800] netlink: 'syz.8.7089': attribute type 7 has an invalid length. [ 1586.816526][ T1800] netlink: 'syz.8.7089': attribute type 8 has an invalid length. [ 1586.820334][ T1800] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7089'. [ 1587.005379][T32436] usb 14-1: new full-speed USB device number 33 using dummy_hcd [ 1587.025886][T32436] usb 14-1: device descriptor read/8, error -71 [ 1587.265184][T32436] usb 14-1: new full-speed USB device number 34 using dummy_hcd [ 1587.285748][T32436] usb 14-1: device descriptor read/8, error -71 [ 1587.395302][T32436] usb usb14-port1: unable to enumerate USB device [ 1587.487798][ T1811] netlink: 'syz.0.7092': attribute type 1 has an invalid length. [ 1588.173878][ T1830] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7094'. [ 1588.176903][ T1830] openvswitch: netlink: Flow key attr not present in new flow. [ 1588.561457][ T1850] FAULT_INJECTION: forcing a failure. [ 1588.561457][ T1850] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.566327][ T1850] CPU: 0 UID: 0 PID: 1850 Comm: syz.0.7096 Not tainted syzkaller #0 PREEMPT(full) [ 1588.566353][ T1850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1588.566360][ T1850] Call Trace: [ 1588.566369][ T1850] [ 1588.566373][ T1850] dump_stack_lvl+0x16c/0x1f0 [ 1588.566394][ T1850] should_fail_ex+0x512/0x640 [ 1588.566409][ T1850] ? fs_reclaim_acquire+0xae/0x150 [ 1588.566428][ T1850] should_failslab+0xc2/0x120 [ 1588.566443][ T1850] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1588.566457][ T1850] ? security_inode_alloc+0x3b/0x2b0 [ 1588.566472][ T1850] security_inode_alloc+0x3b/0x2b0 [ 1588.566485][ T1850] inode_init_always_gfp+0xce4/0x1030 [ 1588.566500][ T1850] alloc_inode+0x86/0x240 [ 1588.566516][ T1850] new_inode+0x22/0x1c0 [ 1588.566532][ T1850] __debugfs_create_file+0x11c/0x6b0 [ 1588.566547][ T1850] debugfs_create_file_full+0x41/0x60 [ 1588.566561][ T1850] ? __pfx_macvlan_setup+0x10/0x10 [ 1588.566572][ T1850] ref_tracker_dir_debugfs+0x19d/0x290 [ 1588.566589][ T1850] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1588.566615][ T1850] ? __kvmalloc_node_noprof+0x298/0x620 [ 1588.566627][ T1850] ? rcu_is_watching+0x12/0xc0 [ 1588.566653][ T1850] ? lockdep_init_map_type+0x5c/0x280 [ 1588.566671][ T1850] alloc_netdev_mqs+0x30f/0x1530 [ 1588.566690][ T1850] rtnl_create_link+0xc08/0xf90 [ 1588.566708][ T1850] rtnl_newlink+0xb69/0x2000 [ 1588.566727][ T1850] ? __pfx_rtnl_newlink+0x10/0x10 [ 1588.566746][ T1850] ? kfree_skbmem+0x1a4/0x1f0 [ 1588.566764][ T1850] ? rcu_is_watching+0x12/0xc0 [ 1588.566780][ T1850] ? find_held_lock+0x2b/0x80 [ 1588.566790][ T1850] ? __pfx_rtnl_newlink+0x10/0x10 [ 1588.566805][ T1850] ? __pfx_rtnl_newlink+0x10/0x10 [ 1588.566819][ T1850] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1588.566834][ T1850] ? __pfx_rtnl_newlink+0x10/0x10 [ 1588.566849][ T1850] rtnetlink_rcv_msg+0x95e/0xe90 [ 1588.566866][ T1850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1588.566885][ T1850] ? ref_tracker_free+0x37c/0x830 [ 1588.566907][ T1850] netlink_rcv_skb+0x155/0x420 [ 1588.566923][ T1850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1588.566939][ T1850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1588.566959][ T1850] ? netlink_deliver_tap+0x1ae/0xd30 [ 1588.566976][ T1850] netlink_unicast+0x5aa/0x870 [ 1588.566993][ T1850] ? __pfx_netlink_unicast+0x10/0x10 [ 1588.567008][ T1850] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1588.567027][ T1850] netlink_sendmsg+0x8d1/0xdd0 [ 1588.567044][ T1850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1588.567061][ T1850] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1588.567075][ T1850] ____sys_sendmsg+0xa95/0xc70 [ 1588.567087][ T1850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1588.567097][ T1850] ? get_compat_msghdr+0x11a/0x170 [ 1588.567113][ T1850] ? __pfx__kstrtoull+0x10/0x10 [ 1588.567129][ T1850] ___sys_sendmsg+0x134/0x1d0 [ 1588.567144][ T1850] ? __pfx____sys_sendmsg+0x10/0x10 [ 1588.567177][ T1850] __sys_sendmmsg+0x2f9/0x420 [ 1588.567193][ T1850] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1588.567212][ T1850] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1588.567233][ T1850] ? fput+0x9b/0xd0 [ 1588.567248][ T1850] ? ksys_write+0x1ac/0x250 [ 1588.567260][ T1850] ? __pfx_ksys_write+0x10/0x10 [ 1588.567276][ T1850] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1588.567290][ T1850] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1588.567306][ T1850] __do_fast_syscall_32+0x7c/0x3a0 [ 1588.567322][ T1850] do_fast_syscall_32+0x32/0x80 [ 1588.567336][ T1850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1588.567350][ T1850] RIP: 0023:0xf7f74579 [ 1588.567359][ T1850] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1588.567370][ T1850] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1588.567381][ T1850] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 1588.567388][ T1850] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1588.567394][ T1850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1588.567400][ T1850] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1588.567406][ T1850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1588.567420][ T1850] [ 1588.567695][ T1850] debugfs: out of free dentries, can not create file 'netdev@ffff888012d16610' [ 1588.768219][ T1852] tmpfs: Bad value for 'huge' [ 1589.045208][ T1255] usb 13-1: new high-speed USB device number 41 using dummy_hcd [ 1589.165203][T32490] usb 14-1: new high-speed USB device number 35 using dummy_hcd [ 1589.198163][ T1255] usb 13-1: config index 0 descriptor too short (expected 45, got 36) [ 1589.202171][ T1255] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1589.206014][ T1255] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1589.209486][ T1255] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1589.213037][ T1255] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1589.217239][ T1255] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1589.220132][ T1255] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.226927][ T1255] usb 13-1: config 0 descriptor?? [ 1589.230051][ T1854] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1589.327891][T32490] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1589.331408][T32490] usb 14-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1589.336565][T32490] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1589.339592][T32490] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.342054][T32490] usb 14-1: Product: syz [ 1589.343414][T32490] usb 14-1: Manufacturer: syz [ 1589.344929][T32490] usb 14-1: SerialNumber: syz [ 1589.351578][T32490] cdc_mbim 14-1:1.0: skipping garbage [ 1589.559347][ T1859] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1589.648748][ T1255] usbhid 13-1:0.0: can't add hid device: -71 [ 1589.650897][ T1255] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 1589.656893][ T1255] usb 13-1: USB disconnect, device number 41 [ 1590.058710][ T1870] siw: device registration error -23 [ 1590.753323][ T1873] FAULT_INJECTION: forcing a failure. [ 1590.753323][ T1873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1590.759196][ T1873] CPU: 1 UID: 0 PID: 1873 Comm: syz.8.7104 Not tainted syzkaller #0 PREEMPT(full) [ 1590.759222][ T1873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1590.759250][ T1873] Call Trace: [ 1590.759257][ T1873] [ 1590.759264][ T1873] dump_stack_lvl+0x16c/0x1f0 [ 1590.759292][ T1873] should_fail_ex+0x512/0x640 [ 1590.759320][ T1873] _copy_from_user+0x2e/0xd0 [ 1590.759348][ T1873] get_compat_msghdr+0xa7/0x170 [ 1590.759370][ T1873] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1590.759392][ T1873] ? __lock_acquire+0x62e/0x1ce0 [ 1590.759418][ T1873] ___sys_recvmsg+0x191/0x1a0 [ 1590.759442][ T1873] ? __pfx____sys_recvmsg+0x10/0x10 [ 1590.759466][ T1873] ? find_held_lock+0x2b/0x80 [ 1590.759491][ T1873] ? __pfx___might_resched+0x10/0x10 [ 1590.759514][ T1873] do_recvmmsg+0x55d/0x750 [ 1590.759541][ T1873] ? __pfx_do_recvmmsg+0x10/0x10 [ 1590.759580][ T1873] ? __fget_files+0x20e/0x3c0 [ 1590.759603][ T1873] __sys_recvmmsg+0x21c/0x280 [ 1590.759628][ T1873] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1590.759653][ T1873] ? __pfx_ksys_write+0x10/0x10 [ 1590.759677][ T1873] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 1590.759700][ T1873] ? lockdep_hardirqs_on+0x7c/0x110 [ 1590.759721][ T1873] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1590.759745][ T1873] __do_fast_syscall_32+0x7c/0x3a0 [ 1590.759771][ T1873] do_fast_syscall_32+0x32/0x80 [ 1590.759795][ T1873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1590.759816][ T1873] RIP: 0023:0xf7fe6579 [ 1590.759830][ T1873] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1590.759846][ T1873] RSP: 002b:00000000f550655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1590.759863][ T1873] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800004c0 [ 1590.759874][ T1873] RDX: 0000000000000f02 RSI: 00000000000000f0 RDI: 0000000000000000 [ 1590.759884][ T1873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1590.759894][ T1873] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1590.759904][ T1873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1590.759925][ T1873] [ 1591.055489][ T1882] random: crng reseeded on system resumption [ 1591.455395][ T1885] FAULT_INJECTION: forcing a failure. [ 1591.455395][ T1885] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.461580][ T1885] CPU: 2 UID: 0 PID: 1885 Comm: syz.8.7105 Not tainted syzkaller #0 PREEMPT(full) [ 1591.461612][ T1885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1591.461626][ T1885] Call Trace: [ 1591.461637][ T1885] [ 1591.461648][ T1885] dump_stack_lvl+0x16c/0x1f0 [ 1591.461908][ T1885] should_fail_ex+0x512/0x640 [ 1591.461935][ T1885] ? fs_reclaim_acquire+0xae/0x150 [ 1591.461968][ T1885] should_failslab+0xc2/0x120 [ 1591.461996][ T1885] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1591.462022][ T1885] ? security_inode_alloc+0x3b/0x2b0 [ 1591.462050][ T1885] security_inode_alloc+0x3b/0x2b0 [ 1591.462077][ T1885] inode_init_always_gfp+0xce4/0x1030 [ 1591.462114][ T1885] alloc_inode+0x86/0x240 [ 1591.462142][ T1885] sock_alloc+0x40/0x280 [ 1591.462173][ T1885] do_accept+0xf7/0x530 [ 1591.462197][ T1885] ? do_raw_spin_lock+0x12c/0x2b0 [ 1591.462230][ T1885] ? __pfx_do_accept+0x10/0x10 [ 1591.462272][ T1885] io_accept+0x259/0x950 [ 1591.462309][ T1885] ? __pfx_io_accept+0x10/0x10 [ 1591.462346][ T1885] __io_issue_sqe+0xe8/0x7c0 [ 1591.462383][ T1885] io_issue_sqe+0x86/0xe50 [ 1591.462411][ T1885] io_submit_sqes+0x94b/0x25c0 [ 1591.462454][ T1885] __do_sys_io_uring_enter+0xd6a/0x1630 [ 1591.462484][ T1885] ? __fget_files+0x20e/0x3c0 [ 1591.462507][ T1885] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1591.462533][ T1885] ? fput+0x9b/0xd0 [ 1591.462562][ T1885] ? ksys_write+0x1ac/0x250 [ 1591.462587][ T1885] ? __pfx_ksys_write+0x10/0x10 [ 1591.462614][ T1885] ? rcu_is_watching+0x12/0xc0 [ 1591.462641][ T1885] __do_fast_syscall_32+0x7c/0x3a0 [ 1591.462675][ T1885] do_fast_syscall_32+0x32/0x80 [ 1591.462703][ T1885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1591.462725][ T1885] RIP: 0023:0xf7fe6579 [ 1591.462742][ T1885] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1591.462759][ T1885] RSP: 002b:00000000f54c455c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 1591.462776][ T1885] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000003516 [ 1591.462788][ T1885] RDX: 000000000000c2de RSI: 0000000000000008 RDI: 0000000000000000 [ 1591.462798][ T1885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1591.462809][ T1885] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1591.462821][ T1885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1591.462844][ T1885] [ 1591.923129][T32490] cdc_mbim 14-1:1.0: failed GET_NTB_PARAMETERS [ 1591.926147][T32490] cdc_mbim 14-1:1.0: bind() failure [ 1591.967711][T32490] cdc_ncm 14-1:1.1: CDC Union missing and no IAD found [ 1591.969947][T32490] cdc_ncm 14-1:1.1: bind() failure [ 1591.984286][T32490] usb 14-1: USB disconnect, device number 35 [ 1592.834732][ T1917] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7112'. [ 1593.790395][ T1921] netlink: 'syz.9.7113': attribute type 1 has an invalid length. [ 1593.793666][ T1921] netlink: 224 bytes leftover after parsing attributes in process `syz.9.7113'. [ 1593.906227][ T1925] netlink: 'syz.8.7114': attribute type 1 has an invalid length. [ 1593.909508][ T1925] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7114'. [ 1594.465726][ T1931] syz_tun: entered allmulticast mode [ 1595.376057][ T1947] usb usb1: usbfs: process 1947 (syz.0.7120) did not claim interface 0 before use [ 1597.628713][ T1983] netlink: 'syz.0.7128': attribute type 1 has an invalid length. [ 1597.631210][ T1983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7128'. [ 1597.693420][ T1983] netlink: 'syz.0.7128': attribute type 10 has an invalid length. [ 1597.979951][ T1992] : renamed from bond_slave_0 (while UP) [ 1598.025467][ T1255] usb 14-1: new high-speed USB device number 36 using dummy_hcd [ 1598.175269][ T1255] usb 14-1: Using ep0 maxpacket: 8 [ 1598.180110][ T1255] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1598.273229][ T1255] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1598.283240][ T1255] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1598.293370][ T1255] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1598.300753][ T1255] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1598.325383][ T1255] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.562670][ T1255] usb 14-1: usb_control_msg returned -71 [ 1598.570518][ T1255] usbtmc 14-1:16.0: can't read capabilities [ 1598.583035][ T1255] usb 14-1: USB disconnect, device number 36 [ 1600.264317][ T2041] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7135'. [ 1600.267500][ T2041] openvswitch: netlink: Flow key attr not present in new flow. [ 1603.942370][ T2099] netlink: 'syz.8.7142': attribute type 1 has an invalid length. [ 1603.945469][ T2099] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7142'. [ 1605.417132][ T2116] netlink: 'syz.8.7145': attribute type 11 has an invalid length. [ 1605.420090][ T2116] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7145'. [ 1606.836399][ T2147] siw: device registration error -23 [ 1607.671138][ T2156] siw: device registration error -23 [ 1608.772387][ T2191] siw: device registration error -23 [ 1609.518803][ T2199] netlink: 'syz.0.7156': attribute type 1 has an invalid length. [ 1609.521346][ T2199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7156'. [ 1610.115312][ T2204] siw: device registration error -23 [ 1611.138667][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 1611.138679][ T40] audit: type=1326 audit(2000000600.994:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2214 comm="syz.3.7161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 1611.215307][ T40] audit: type=1326 audit(2000000600.994:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2214 comm="syz.3.7161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 1611.222095][ T40] audit: type=1326 audit(2000000601.034:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2214 comm="syz.3.7161" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 1611.231378][ T40] audit: type=1326 audit(2000000601.034:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2214 comm="syz.3.7161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 1611.245668][ T40] audit: type=1326 audit(2000000601.034:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2214 comm="syz.3.7161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 1611.257949][ T40] audit: type=1326 audit(2000000601.064:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2214 comm="syz.3.7161" exe="/syz-executor" sig=0 arch=40000003 syscall=118 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 1611.275300][ T40] audit: type=1326 audit(2000000601.064:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2214 comm="syz.3.7161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 1611.284595][ T40] audit: type=1326 audit(2000000601.064:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2214 comm="syz.3.7161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 1611.335687][ T40] audit: type=1326 audit(2000000601.194:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2214 comm="syz.3.7161" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 1611.342668][ T40] audit: type=1326 audit(2000000601.194:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2214 comm="syz.3.7161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 1611.459283][ T2221] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1611.893746][ T2230] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7163'. [ 1611.896763][ T2230] openvswitch: netlink: Flow key attr not present in new flow. [ 1611.904286][ T2230] netlink: 'syz.3.7163': attribute type 29 has an invalid length. [ 1611.907072][ T2230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7163'. [ 1613.763688][ T2265] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7168'. [ 1613.769028][ T2265] openvswitch: netlink: Flow key attr not present in new flow. [ 1613.863573][ T2283] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7171'. [ 1613.869613][ T2283] openvswitch: netlink: Flow key attr not present in new flow. [ 1614.731620][ T2303] netlink: 'syz.8.7174': attribute type 10 has an invalid length. [ 1615.242568][ T2313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7178'. [ 1615.247399][ T2313] netlink: 'syz.0.7178': attribute type 2 has an invalid length. [ 1615.251579][ T2313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7178'. [ 1616.876969][ T2349] sp0: Synchronizing with TNC [ 1616.880530][ T2349] [U] [ 1617.125894][ T2356] siw: device registration error -23 [ 1617.589764][ T2347] netlink: 'syz.3.7182': attribute type 1 has an invalid length. [ 1617.592602][ T2347] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7182'. [ 1622.188175][ T2482] nbd: must specify a device to reconfigure [ 1622.401343][ T2499] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7214'. [ 1622.404404][ T2499] openvswitch: netlink: Flow key attr not present in new flow. [ 1622.412640][ T2500] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7213'. [ 1622.413199][ T2499] netlink: 'syz.8.7214': attribute type 29 has an invalid length. [ 1622.415793][ T2500] openvswitch: netlink: Flow key attr not present in new flow. [ 1622.418684][ T2499] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7214'. [ 1623.923288][ T2520] input: syz0 as /devices/virtual/input/input122 [ 1625.069390][ T2539] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7227'. [ 1625.072295][ T2539] openvswitch: netlink: Flow key attr not present in new flow. [ 1625.885698][ T2556] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7230'. [ 1625.889371][ T2556] openvswitch: netlink: Flow key attr not present in new flow. [ 1625.931878][ T2556] netlink: 'syz.0.7230': attribute type 29 has an invalid length. [ 1625.934521][ T2556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7230'. [ 1626.619743][ T2580] siw: device registration error -23 [ 1627.571182][ T2606] fuse: Bad value for 'rootmode' [ 1628.199494][ T2631] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7238'. [ 1628.202657][ T2631] openvswitch: netlink: Flow key attr not present in new flow. [ 1628.209641][ T2631] netlink: 'syz.9.7238': attribute type 29 has an invalid length. [ 1628.213748][ T2631] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7238'. [ 1628.317394][ T2635] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7239'. [ 1628.321448][ T2635] openvswitch: netlink: Flow key attr not present in new flow. [ 1628.338708][ T2635] netlink: 'syz.0.7239': attribute type 29 has an invalid length. [ 1628.341505][ T2635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7239'. [ 1629.144324][ T2647] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7241'. [ 1629.147942][ T2647] openvswitch: netlink: Flow key attr not present in new flow. [ 1629.242019][ T2647] netlink: 'syz.9.7241': attribute type 29 has an invalid length. [ 1629.244729][ T2647] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7241'. [ 1630.088661][ T2676] netlink: 'syz.0.7245': attribute type 4 has an invalid length. [ 1630.125426][ T2679] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1630.259922][ T2684] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7248'. [ 1630.264347][ T2684] openvswitch: netlink: Flow key attr not present in new flow. [ 1630.276669][ T2684] netlink: 'syz.9.7248': attribute type 29 has an invalid length. [ 1630.280227][ T2684] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7248'. [ 1632.390862][ T2732] 9pnet_fd: Insufficient options for proto=fd [ 1632.788960][ T2746] netlink: 'syz.3.7259': attribute type 1 has an invalid length. [ 1632.791471][ T2746] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7259'. [ 1633.677357][ T2764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7260'. [ 1633.781296][ T2765] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7262'. [ 1633.784397][ T2765] openvswitch: netlink: Flow key attr not present in new flow. [ 1633.792594][ T2765] netlink: 'syz.9.7262': attribute type 29 has an invalid length. [ 1633.795241][ T2765] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7262'. [ 1634.208834][ T2776] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7264'. [ 1634.212267][ T2776] openvswitch: netlink: Flow key attr not present in new flow. [ 1634.220560][ T2776] netlink: 'syz.3.7264': attribute type 29 has an invalid length. [ 1634.223495][ T2776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7264'. [ 1634.617794][ T2779] netlink: 'syz.0.7263': attribute type 1 has an invalid length. [ 1634.621522][ T2779] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7263'. [ 1634.990305][ T2778] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1634.992374][ T2778] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1634.995603][ T2778] vhci_hcd vhci_hcd.0: Device attached [ 1635.018572][ T2778] netdevsim netdevsim8: Direct firmware load for @ failed with error -2 [ 1635.021646][ T2778] netdevsim netdevsim8: Falling back to sysfs fallback for: @ [ 1635.074494][ T2795] netlink: 'syz.8.7265': attribute type 9 has an invalid length. [ 1635.195372][ T2444] vhci_hcd: vhci_device speed not set [ 1635.205619][ T2805] netlink: 236 bytes leftover after parsing attributes in process `syz.0.7269'. [ 1635.265475][ T2444] usb 53-1: new full-speed USB device number 7 using vhci_hcd [ 1635.279536][ T2790] vhci_hcd: connection reset by peer [ 1635.282096][ T2719] vhci_hcd: stop threads [ 1635.283425][ T2719] vhci_hcd: release socket [ 1635.294007][ T2719] vhci_hcd: disconnect device [ 1635.370895][ T2807] vlan2: entered allmulticast mode [ 1635.376695][ T2807] veth1: entered allmulticast mode [ 1635.494832][ T2809] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1635.560253][ T2810] netlink: 212184 bytes leftover after parsing attributes in process `syz.3.7270'. [ 1636.196173][ T2821] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7272'. [ 1636.199179][ T2821] openvswitch: netlink: Flow key attr not present in new flow. [ 1636.203199][ T2821] netlink: 'syz.8.7272': attribute type 29 has an invalid length. [ 1636.205923][ T2821] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7272'. [ 1636.494567][ T2826] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7273'. [ 1636.501741][ T2826] openvswitch: netlink: Flow key attr not present in new flow. [ 1636.511040][ T2826] netlink: 'syz.3.7273': attribute type 29 has an invalid length. [ 1636.513646][ T2826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7273'. [ 1637.029830][ T2838] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7275'. [ 1637.032962][ T2838] openvswitch: netlink: Flow key attr not present in new flow. [ 1637.040934][ T2838] netlink: 'syz.0.7275': attribute type 29 has an invalid length. [ 1637.043813][ T2838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7275'. [ 1637.224254][ T2842] overlayfs: missing 'lowerdir' [ 1637.395850][ T2851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7277'. [ 1637.719879][ T2861] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1638.769581][ T2891] binder: 2888:2891 ioctl 400c620e 80000000 returned -22 [ 1640.385279][ T2444] vhci_hcd: vhci_device speed not set [ 1640.405906][ T2905] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7284'. [ 1640.411130][ T2905] openvswitch: netlink: Flow key attr not present in new flow. [ 1640.506454][ T2926] netlink: 'syz.0.7284': attribute type 29 has an invalid length. [ 1640.510064][ T2926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7284'. [ 1640.754616][ T2934] bridge0: entered promiscuous mode [ 1640.768909][ T2934] macvlan2: entered promiscuous mode [ 1640.774995][ T2943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7291'. [ 1641.759480][ T2976] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 1641.764474][ T2976] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 1641.809328][ T2976] ALSA: mixer_oss: invalid OSS volume 'lg' [ 1641.811781][ T2976] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 1641.840958][ T2976] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 1641.848281][ T2976] ALSA: mixer_oss: invalid OSS volume '' [ 1641.855692][ T2976] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 1641.861400][ T2976] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 1641.864051][ T2976] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 1641.875199][ T2976] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 1641.883219][ T2976] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 1642.101101][ T2991] siw: device registration error -23 [ 1642.245385][ T6433] usb 13-1: new high-speed USB device number 42 using dummy_hcd [ 1642.405296][ T6433] usb 13-1: Using ep0 maxpacket: 8 [ 1642.409543][ T6433] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1642.414360][ T6433] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1642.418732][ T6433] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1642.423090][ T6433] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1642.428854][ T6433] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1642.432762][ T6433] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.725743][ T6433] usb 13-1: GET_CAPABILITIES returned 0 [ 1642.727587][ T6433] usbtmc 13-1:16.0: can't read capabilities [ 1642.809060][ T2998] overlayfs: missing 'lowerdir' [ 1642.841413][ T2998] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 1642.844716][ T3003] dummy0: entered promiscuous mode [ 1642.848102][ T3003] macsec1: entered promiscuous mode [ 1642.853257][ T3003] dummy0: left promiscuous mode [ 1642.990622][ T6433] usb 13-1: USB disconnect, device number 42 [ 1643.174375][ T3011] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7301'. [ 1643.177881][ T3011] openvswitch: netlink: Flow key attr not present in new flow. [ 1643.183171][ T3011] netlink: 'syz.3.7301': attribute type 29 has an invalid length. [ 1643.187078][ T3011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7301'. [ 1643.681739][ T3021] siw: device registration error -23 [ 1643.797553][ T3024] siw: device registration error -23 [ 1645.703522][ T3069] FAULT_INJECTION: forcing a failure. [ 1645.703522][ T3069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1645.709378][ T3069] CPU: 2 UID: 0 PID: 3069 Comm: syz.0.7310 Not tainted syzkaller #0 PREEMPT(full) [ 1645.709404][ T3069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1645.709415][ T3069] Call Trace: [ 1645.709422][ T3069] [ 1645.709430][ T3069] dump_stack_lvl+0x16c/0x1f0 [ 1645.709467][ T3069] should_fail_ex+0x512/0x640 [ 1645.709497][ T3069] should_fail_alloc_page+0xe7/0x130 [ 1645.709522][ T3069] prepare_alloc_pages+0x3c2/0x610 [ 1645.709551][ T3069] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1645.709584][ T3069] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1645.709605][ T3069] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1645.709630][ T3069] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1645.709656][ T3069] ? find_held_lock+0x2b/0x80 [ 1645.709680][ T3069] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1645.709708][ T3069] ? policy_nodemask+0xea/0x4e0 [ 1645.709734][ T3069] alloc_pages_mpol+0x1fb/0x550 [ 1645.709759][ T3069] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1645.709790][ T3069] alloc_pages_noprof+0x131/0x390 [ 1645.709815][ T3069] __pmd_alloc+0x3b/0x930 [ 1645.709845][ T3069] __handle_mm_fault+0xa06/0x2a50 [ 1645.709868][ T3069] ? mt_find+0x3ef/0xa30 [ 1645.709895][ T3069] ? __pfx___handle_mm_fault+0x10/0x10 [ 1645.709911][ T3069] ? __pfx_mt_find+0x10/0x10 [ 1645.709950][ T3069] ? find_vma+0xbf/0x140 [ 1645.709972][ T3069] ? __pfx_find_vma+0x10/0x10 [ 1645.709996][ T3069] handle_mm_fault+0x589/0xd10 [ 1645.710014][ T3069] ? __bpf_trace_exceptions+0x1/0x40 [ 1645.710041][ T3069] do_user_addr_fault+0x7a6/0x1370 [ 1645.710068][ T3069] ? rcu_is_watching+0x12/0xc0 [ 1645.710086][ T3069] exc_page_fault+0x5c/0xb0 [ 1645.710108][ T3069] asm_exc_page_fault+0x26/0x30 [ 1645.710124][ T3069] RIP: 0010:__put_user_4+0xd/0x20 [ 1645.710142][ T3069] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 68 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 1645.710153][ T3069] RSP: 0018:ffffc90007acfe10 EFLAGS: 00050206 [ 1645.710163][ T3069] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000080000000 [ 1645.710169][ T3069] RDX: ffff88802251c880 RSI: ffffffff89608044 RDI: ffffffff8c162d00 [ 1645.710176][ T3069] RBP: 1ffff92000f59fc6 R08: 6e3da4e5b782f7c8 R09: 0000000000000001 [ 1645.710183][ T3069] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 1645.710189][ T3069] R13: 0000000000000005 R14: 0000000000000001 R15: dffffc0000000000 [ 1645.710200][ T3069] ? __sys_socketpair+0x114/0x5a0 [ 1645.710214][ T3069] __sys_socketpair+0x120/0x5a0 [ 1645.710226][ T3069] ? __pfx___sys_socketpair+0x10/0x10 [ 1645.710236][ T3069] ? fput+0x9b/0xd0 [ 1645.710252][ T3069] ? __pfx_ksys_write+0x10/0x10 [ 1645.710267][ T3069] __ia32_sys_socketpair+0x95/0x100 [ 1645.710279][ T3069] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1645.710294][ T3069] __do_fast_syscall_32+0x7c/0x3a0 [ 1645.710310][ T3069] do_fast_syscall_32+0x32/0x80 [ 1645.710325][ T3069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1645.710337][ T3069] RIP: 0023:0xf7f74579 [ 1645.710346][ T3069] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1645.710356][ T3069] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000168 [ 1645.710366][ T3069] RAX: ffffffffffffffda RBX: 0000000000000025 RCX: 0000000000000001 [ 1645.710372][ T3069] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1645.710379][ T3069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1645.710385][ T3069] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1645.710391][ T3069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1645.710404][ T3069] [ 1646.202768][ T3096] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7313'. [ 1646.207999][ T3096] openvswitch: netlink: Flow key attr not present in new flow. [ 1646.217044][ T3096] netlink: 'syz.9.7313': attribute type 29 has an invalid length. [ 1646.220579][ T3096] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7313'. [ 1646.847487][ T3109] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7316'. [ 1646.851511][ T3109] openvswitch: netlink: Flow key attr not present in new flow. [ 1646.861772][ T3109] netlink: 'syz.8.7316': attribute type 29 has an invalid length. [ 1646.864570][ T3109] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7316'. [ 1647.295935][T32440] IPVS: starting estimator thread 0... [ 1647.415222][ T3121] IPVS: using max 26 ests per chain, 62400 per kthread [ 1648.229600][ T3146] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7325'. [ 1648.232933][ T3146] openvswitch: netlink: Flow key attr not present in new flow. [ 1648.240313][ T3146] netlink: 'syz.0.7325': attribute type 29 has an invalid length. [ 1648.243071][ T3146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7325'. [ 1649.431821][ T3163] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7331'. [ 1649.436311][ T3163] openvswitch: netlink: Flow key attr not present in new flow. [ 1649.450299][ T3163] netlink: 'syz.0.7331': attribute type 29 has an invalid length. [ 1649.453865][ T3163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7331'. [ 1650.909940][ T3185] FAULT_INJECTION: forcing a failure. [ 1650.909940][ T3185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.914397][ T3185] CPU: 1 UID: 0 PID: 3185 Comm: syz.9.7337 Not tainted syzkaller #0 PREEMPT(full) [ 1650.914414][ T3185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1650.914432][ T3185] Call Trace: [ 1650.914438][ T3185] [ 1650.914443][ T3185] dump_stack_lvl+0x16c/0x1f0 [ 1650.914461][ T3185] should_fail_ex+0x512/0x640 [ 1650.914478][ T3185] _copy_from_user+0x2e/0xd0 [ 1650.914496][ T3185] v4l2_compat_get_user+0x3ab/0x1200 [ 1650.914511][ T3185] ? __pfx_v4l2_compat_get_user+0x10/0x10 [ 1650.914522][ T3185] ? lockdep_hardirqs_on+0x7c/0x110 [ 1650.914538][ T3185] ? find_held_lock+0x2b/0x80 [ 1650.914553][ T3185] ? tomoyo_path_number_perm+0x18d/0x580 [ 1650.914572][ T3185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1650.914587][ T3185] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1650.914605][ T3185] video_usercopy+0x362/0x1440 [ 1650.914621][ T3185] ? __pfx___video_do_ioctl+0x10/0x10 [ 1650.914635][ T3185] ? __pfx_video_usercopy+0x10/0x10 [ 1650.914655][ T3185] ? hook_file_ioctl_common+0x145/0x410 [ 1650.914672][ T3185] v4l2_ioctl+0x1ba/0x250 [ 1650.914687][ T3185] v4l2_compat_ioctl32+0x214/0x2c0 [ 1650.914699][ T3185] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1650.914711][ T3185] __ia32_compat_sys_ioctl+0x242/0x370 [ 1650.914732][ T3185] __do_fast_syscall_32+0x7c/0x3a0 [ 1650.914749][ T3185] do_fast_syscall_32+0x32/0x80 [ 1650.914767][ T3185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1650.914781][ T3185] RIP: 0023:0xf7f97579 [ 1650.914790][ T3185] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1650.914801][ T3185] RSP: 002b:00000000f54b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1650.914812][ T3185] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c044565d [ 1650.914819][ T3185] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1650.914825][ T3185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1650.914831][ T3185] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1650.914837][ T3185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1650.914850][ T3185] [ 1651.416583][ T3203] usb usb8: usbfs: process 3203 (syz.9.7341) did not claim interface 0 before use [ 1652.455999][ T3216] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7343'. [ 1652.501277][ T3216] openvswitch: netlink: Flow key attr not present in new flow. [ 1652.515977][ T3216] netlink: 'syz.8.7343': attribute type 29 has an invalid length. [ 1652.519415][ T3216] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7343'. [ 1653.355411][T14380] usb 13-1: new high-speed USB device number 43 using dummy_hcd [ 1653.420683][ T3238] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7348'. [ 1653.424052][ T3238] openvswitch: netlink: Flow key attr not present in new flow. [ 1653.430759][ T3238] netlink: 'syz.3.7348': attribute type 29 has an invalid length. [ 1653.433694][ T3238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7348'. [ 1653.518603][T14380] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1653.529654][T14380] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1653.536984][T14380] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1653.540951][T14380] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1653.557934][T14380] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1653.561734][T14380] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.569987][T14380] usb 13-1: config 0 descriptor?? [ 1653.822359][T14380] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1653.832221][T14380] usb 13-1: USB disconnect, device number 43 [ 1653.902441][ T3243] fido_id[3243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb13/report_descriptor': No such file or directory [ 1653.955620][ T3246] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7349'. [ 1654.620282][ T3272] wireguard0: entered promiscuous mode [ 1654.622718][ T3272] wireguard0: entered allmulticast mode [ 1654.639847][ T3272] wireguard1: entered promiscuous mode [ 1654.642271][ T3272] wireguard1: entered allmulticast mode [ 1655.096891][ T3285] netlink: 'syz.3.7357': attribute type 1 has an invalid length. [ 1655.100544][ T3285] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7357'. [ 1655.484450][ T3301] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 1655.692196][ T3307] uprobe: syz.8.7362:3307 failed to unregister, leaking uprobe [ 1656.832873][ T3340] usb usb8: usbfs: process 3340 (syz.8.7365) did not claim interface 0 before use [ 1656.980605][ T3345] usb usb8: usbfs: process 3345 (syz.3.7367) did not claim interface 0 before use [ 1657.565639][ T3353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7369'. [ 1657.577296][ T3353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7369'. [ 1657.681631][ T3363] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 1661.849115][ T3437] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7384'. [ 1667.644498][ T3556] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7404'. [ 1668.175287][T26377] usb 14-1: new high-speed USB device number 37 using dummy_hcd [ 1668.325253][T26377] usb 14-1: Using ep0 maxpacket: 8 [ 1668.328387][T26377] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1668.331978][T26377] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1668.335451][T26377] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1668.338859][T26377] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1668.343088][T26377] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1668.346055][T26377] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.557982][T26377] usb 14-1: GET_CAPABILITIES returned 0 [ 1668.560090][T26377] usbtmc 14-1:16.0: can't read capabilities [ 1668.831273][T32490] usb 14-1: USB disconnect, device number 37 [ 1669.936587][ T3599] netlink: 'syz.3.7411': attribute type 29 has an invalid length. [ 1669.939117][ T3599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7411'. [ 1671.276036][ T3615] siw: device registration error -23 [ 1672.086761][ T3623] siw: device registration error -23 [ 1673.808812][ T3655] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 1674.630584][ T3666] Bluetooth: MGMT ver 1.23 [ 1676.621724][ T2035] usb 14-1: new high-speed USB device number 38 using dummy_hcd [ 1676.700368][ T3704] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7438'. [ 1676.775246][ T2035] usb 14-1: Using ep0 maxpacket: 32 [ 1676.778736][ T2035] usb 14-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1676.785281][ T2035] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.795845][ T2035] usb 14-1: config 0 descriptor?? [ 1676.808185][ T2035] as10x_usb: device has been detected [ 1676.811039][ T2035] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1676.855641][ T2035] usb 14-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1676.876263][ T2035] as10x_usb: error during firmware upload part1 [ 1676.879411][ T2035] Registered device nBox DVB-T Dongle [ 1677.120179][ T2035] usb 14-1: USB disconnect, device number 38 [ 1677.139033][ T2035] Unregistered device nBox DVB-T Dongle [ 1677.140232][ T2035] as10x_usb: device has been disconnected [ 1677.317776][ T3732] siw: device registration error -23 [ 1678.259093][ T3742] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 1680.734710][ T3764] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1681.386438][ T3777] netlink: 'syz.3.7454': attribute type 58 has an invalid length. [ 1681.389516][ T3777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7454'. [ 1681.406825][ T3779] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 1682.130277][ T3786] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 1682.832427][ T3812] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7459'. [ 1682.839534][ T3812] openvswitch: netlink: Flow key attr not present in new flow. [ 1682.923886][ T3812] netlink: 'syz.3.7459': attribute type 29 has an invalid length. [ 1682.927671][ T3812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7459'. [ 1683.601693][ T3817] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1684.050955][ T3826] netlink: 'syz.0.7462': attribute type 1 has an invalid length. [ 1684.053892][ T3826] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7462'. [ 1684.131063][ T3835] siw: device registration error -23 [ 1684.357206][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1684.363572][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1684.367746][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1684.375108][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1684.384373][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1684.662152][ T3840] chnl_net:caif_netlink_parms(): no params data found [ 1684.739581][ T3840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.741913][ T3840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.744574][ T3840] bridge_slave_0: entered allmulticast mode [ 1684.748707][ T3840] bridge_slave_0: entered promiscuous mode [ 1684.752405][ T3840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.755518][ T3840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.758651][ T3840] bridge_slave_1: entered allmulticast mode [ 1684.762683][ T3840] bridge_slave_1: entered promiscuous mode [ 1684.804504][ T3840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1684.809474][ T3840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1684.907596][ T3840] team0: Port device team_slave_0 added [ 1684.925814][ T3840] team0: Port device team_slave_1 added [ 1684.975557][ T3840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.978226][ T3840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1684.986492][ T3840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.990842][ T3840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.993015][ T3840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.003085][ T3840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.065488][ T3840] hsr_slave_0: entered promiscuous mode [ 1685.068679][ T3840] hsr_slave_1: entered promiscuous mode [ 1685.071612][ T3840] debugfs: 'hsr0' already exists in 'hsr' [ 1685.073972][ T3840] Cannot create hsr debugfs directory [ 1685.103959][ T3855] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7467'. [ 1685.109533][ T3855] openvswitch: netlink: Flow key attr not present in new flow. [ 1685.126971][ T3855] netlink: 'syz.9.7467': attribute type 29 has an invalid length. [ 1685.130611][ T3855] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7467'. [ 1685.267067][ T3859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7469'. [ 1685.311003][ T3859] vlan2: entered promiscuous mode [ 1685.313531][ T3859] vlan2: entered allmulticast mode [ 1685.316309][ T3859] hsr_slave_1: entered allmulticast mode [ 1685.388876][ T3859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7469'. [ 1685.396027][ T3862] siw: device registration error -23 [ 1685.718920][ T3840] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.844708][ T3840] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.962922][ T3840] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.156161][ T3840] team0: Port device netdevsim0 removed [ 1686.161084][ T3840] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.478015][T29287] Bluetooth: hci4: command tx timeout [ 1686.949680][ T3840] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1687.186737][ T3840] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1687.222242][ T3840] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1687.282044][ T3840] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1687.377943][ T3840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1687.387252][ T3840] 8021q: adding VLAN 0 to HW filter on device team0 [ 1687.400967][T15977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.403296][T15977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1687.408841][T15977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.411152][T15977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1687.924503][ T3840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1688.347931][ T3897] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7475'. [ 1688.498517][ T3840] veth0_vlan: entered promiscuous mode [ 1688.508622][ T3840] veth1_vlan: entered promiscuous mode [ 1688.534496][ T3840] veth0_macvtap: entered promiscuous mode [ 1688.548943][ T3840] veth1_macvtap: entered promiscuous mode [ 1688.555811][T29287] Bluetooth: hci4: command tx timeout [ 1688.569938][ T3840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.587118][ T3840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.600237][ T2719] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.604037][ T2719] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.618675][ T2719] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.635970][ T2719] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.711561][ T2719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.714548][ T2719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.732070][T15015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.734694][T15015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.010151][ T3966] siw: device registration error -23 [ 1690.212979][ T3970] netlink: 'syz.9.7484': attribute type 12 has an invalid length. [ 1690.215628][ T3970] netlink: 'syz.9.7484': attribute type 29 has an invalid length. [ 1690.218597][ T3970] netlink: 148 bytes leftover after parsing attributes in process `syz.9.7484'. [ 1690.221550][ T3970] netlink: 'syz.9.7484': attribute type 1 has an invalid length. [ 1690.224835][ T3970] netlink: 'syz.9.7484': attribute type 12 has an invalid length. [ 1690.228844][ T3970] netlink: 'syz.9.7484': attribute type 29 has an invalid length. [ 1690.233407][ T3970] netlink: 148 bytes leftover after parsing attributes in process `syz.9.7484'. [ 1690.236799][ T3970] netlink: 'syz.9.7484': attribute type 1 has an invalid length. [ 1690.645417][T29287] Bluetooth: hci4: command tx timeout [ 1691.782285][ T3994] netlink: 'syz.3.7490': attribute type 29 has an invalid length. [ 1691.785205][ T3994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7490'. [ 1692.613061][ T3997] loop2: detected capacity change from 0 to 7 [ 1692.621875][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.626599][ C3] buffer_io_error: 31 callbacks suppressed [ 1692.626615][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 1692.633044][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.636021][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 1692.639383][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.643904][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 1692.648955][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.653524][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1692.658639][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.662868][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1692.667841][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.671886][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 1692.676694][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.679749][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 1692.685369][ T3997] ldm_validate_partition_table(): Disk read failed. [ 1692.691491][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.695398][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1692.701503][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.705513][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1692.708641][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.712607][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 1692.715733][T29287] Bluetooth: hci4: command tx timeout [ 1692.717088][ T3997] Dev loop2: unable to read RDB block 0 [ 1692.724087][ T3997] loop2: unable to read partition table [ 1692.726995][ T3997] loop2: partition table beyond EOD, truncated [ 1692.729880][ T3997] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1692.929361][ T4002] netlink: 'syz.3.7492': attribute type 29 has an invalid length. [ 1692.931912][ T4002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7492'. [ 1693.004903][ C0] vkms_vblank_simulate: vblank timer overrun [ 1693.333959][ T4006] siw: device registration error -23 [ 1694.209555][ T4012] netlink: 'syz.0.7494': attribute type 29 has an invalid length. [ 1694.212237][ T4012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7494'. [ 1695.030342][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1695.044156][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1695.068325][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1695.107602][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1695.111543][ T4033] overlay: Unknown parameter 'obj_type' [ 1695.129022][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1695.359312][ T4024] chnl_net:caif_netlink_parms(): no params data found [ 1695.663859][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.666296][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.668649][ T4024] bridge_slave_0: entered allmulticast mode [ 1695.671507][ T4024] bridge_slave_0: entered promiscuous mode [ 1695.674699][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.680812][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.683525][ T4024] bridge_slave_1: entered allmulticast mode [ 1695.686359][ T4024] bridge_slave_1: entered promiscuous mode [ 1695.762016][ T4051] netlink: 'syz.8.7505': attribute type 1 has an invalid length. [ 1695.764736][ T4051] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7505'. [ 1695.828016][ T1932] syz_tun (unregistering): left allmulticast mode [ 1695.840897][ T1932] bond0: (slave syz_tun): Releasing backup interface [ 1695.950230][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.954830][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1696.053390][ T4024] team0: Port device team_slave_0 added [ 1696.057972][ T4024] team0: Port device team_slave_1 added [ 1696.124260][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1696.128912][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.137557][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1696.158242][ T4061] tmpfs: Bad value for 'mpol' [ 1696.176794][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1696.179752][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.190717][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.223335][ T4048] netlink: 'syz.3.7504': attribute type 1 has an invalid length. [ 1696.228330][ T4048] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7504'. [ 1696.252997][ T4024] hsr_slave_0: entered promiscuous mode [ 1696.255479][ T4024] hsr_slave_1: entered promiscuous mode [ 1696.257597][ T4024] debugfs: 'hsr0' already exists in 'hsr' [ 1696.259451][ T4024] Cannot create hsr debugfs directory [ 1696.326656][ T4065] FAULT_INJECTION: forcing a failure. [ 1696.326656][ T4065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1696.330922][ T4065] CPU: 2 UID: 0 PID: 4065 Comm: syz.0.7507 Not tainted syzkaller #0 PREEMPT(full) [ 1696.330937][ T4065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1696.330944][ T4065] Call Trace: [ 1696.330949][ T4065] [ 1696.330953][ T4065] dump_stack_lvl+0x16c/0x1f0 [ 1696.330973][ T4065] should_fail_ex+0x512/0x640 [ 1696.330995][ T4065] _copy_from_iter+0x29f/0x1720 [ 1696.331014][ T4065] ? __alloc_skb+0x200/0x380 [ 1696.331028][ T4065] ? __pfx__copy_from_iter+0x10/0x10 [ 1696.331046][ T4065] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1696.331066][ T4065] netlink_sendmsg+0x829/0xdd0 [ 1696.331083][ T4065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1696.331112][ T4065] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1696.331138][ T4065] ____sys_sendmsg+0xa95/0xc70 [ 1696.331151][ T4065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1696.331161][ T4065] ? get_compat_msghdr+0x11a/0x170 [ 1696.331180][ T4065] ___sys_sendmsg+0x134/0x1d0 [ 1696.331196][ T4065] ? __pfx____sys_sendmsg+0x10/0x10 [ 1696.331216][ T4065] ? find_held_lock+0x2b/0x80 [ 1696.331238][ T4065] __sys_sendmsg+0x16d/0x220 [ 1696.331253][ T4065] ? __pfx___sys_sendmsg+0x10/0x10 [ 1696.331273][ T4065] ? rcu_is_watching+0x12/0xc0 [ 1696.331286][ T4065] __do_fast_syscall_32+0x7c/0x3a0 [ 1696.331302][ T4065] do_fast_syscall_32+0x32/0x80 [ 1696.331316][ T4065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1696.331330][ T4065] RIP: 0023:0xf7f74579 [ 1696.331340][ T4065] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1696.331350][ T4065] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1696.331361][ T4065] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 1696.331368][ T4065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1696.331374][ T4065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1696.331380][ T4065] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1696.331387][ T4065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1696.331400][ T4065] [ 1696.530019][ T4072] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7509'. [ 1696.537654][ T4072] input: syz0 as /devices/virtual/input/input125 [ 1697.275220][T29287] Bluetooth: hci0: command tx timeout [ 1698.194732][ T4085] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7512'. [ 1698.194817][ T4085] openvswitch: netlink: Flow key attr not present in new flow. [ 1698.309158][ T219] team0: left allmulticast mode [ 1698.309202][ T219] team_slave_0: left allmulticast mode [ 1698.309222][ T219] team_slave_1: left allmulticast mode [ 1698.309364][ T219] bridge0: port 4(team0) entered disabled state [ 1698.384476][ T219] dummy0: left allmulticast mode [ 1698.384635][ T219] bridge0: port 3(dummy0) entered disabled state [ 1698.399543][ T219] bridge_slave_1: left allmulticast mode [ 1698.399557][ T219] bridge_slave_1: left promiscuous mode [ 1698.399659][ T219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.409733][ T219] bridge_slave_0: left allmulticast mode [ 1698.409749][ T219] bridge_slave_0: left promiscuous mode [ 1698.409853][ T219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.555365][T29287] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1698.843746][ T4094] FAULT_INJECTION: forcing a failure. [ 1698.843746][ T4094] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.850183][ T4094] CPU: 1 UID: 0 PID: 4094 Comm: syz.3.7515 Not tainted syzkaller #0 PREEMPT(full) [ 1698.850210][ T4094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1698.850223][ T4094] Call Trace: [ 1698.850229][ T4094] [ 1698.850238][ T4094] dump_stack_lvl+0x16c/0x1f0 [ 1698.850266][ T4094] should_fail_ex+0x512/0x640 [ 1698.850297][ T4094] should_failslab+0xc2/0x120 [ 1698.850322][ T4094] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1698.850342][ T4094] ? sctp_add_bind_addr+0xae/0x3f0 [ 1698.850366][ T4094] sctp_add_bind_addr+0xae/0x3f0 [ 1698.850389][ T4094] sctp_copy_local_addr_list+0x349/0x550 [ 1698.850416][ T4094] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1698.850441][ T4094] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 1698.850466][ T4094] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1698.850497][ T4094] sctp_bind_addr_copy+0xe0/0x530 [ 1698.850523][ T4094] sctp_connect_new_asoc+0x1c9/0x770 [ 1698.850552][ T4094] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1698.850585][ T4094] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1698.850615][ T4094] sctp_sendmsg+0x1560/0x1e10 [ 1698.850647][ T4094] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1698.850672][ T4094] ? __pfx___might_resched+0x10/0x10 [ 1698.850698][ T4094] ? aa_sk_perm+0x2f4/0xb10 [ 1698.850726][ T4094] ? __pfx_aa_sk_perm+0x10/0x10 [ 1698.850747][ T4094] ? __might_fault+0xe3/0x190 [ 1698.850777][ T4094] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1698.850804][ T4094] inet_sendmsg+0x119/0x140 [ 1698.850826][ T4094] __sys_sendto+0x43c/0x520 [ 1698.850849][ T4094] ? __pfx___sys_sendto+0x10/0x10 [ 1698.850895][ T4094] ? ksys_write+0x1ac/0x250 [ 1698.850922][ T4094] ? __pfx_ksys_write+0x10/0x10 [ 1698.850947][ T4094] __ia32_sys_sendto+0xdd/0x1b0 [ 1698.850969][ T4094] ? lockdep_hardirqs_on+0x7c/0x110 [ 1698.850992][ T4094] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1698.851018][ T4094] __do_fast_syscall_32+0x7c/0x3a0 [ 1698.851046][ T4094] do_fast_syscall_32+0x32/0x80 [ 1698.851071][ T4094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1698.851094][ T4094] RIP: 0023:0xf70ce579 [ 1698.851109][ T4094] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1698.851127][ T4094] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 1698.851145][ T4094] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 1698.851156][ T4094] RDX: 0000000000000001 RSI: 0000000004000000 RDI: 000000008005ffe4 [ 1698.851167][ T4094] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1698.851177][ T4094] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1698.851188][ T4094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1698.851213][ T4094] [ 1699.032461][ T219] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1699.128751][ T4098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7516'. [ 1699.245584][ T4103] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7516'. [ 1699.346587][ T219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1699.350324][ T219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1699.353929][ T219] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1699.355287][T29287] Bluetooth: hci0: command tx timeout [ 1699.363389][ T219] bond0 (unregistering): Released all slaves [ 1699.369470][ T4085] netlink: 'syz.8.7512': attribute type 29 has an invalid length. [ 1699.372209][ T4085] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7512'. [ 1699.411213][ T4104] can0: slcan on pty20. [ 1699.900797][ T219] hsr_slave_0: left promiscuous mode [ 1699.910818][ T219] hsr_slave_1: left promiscuous mode [ 1699.913860][ T219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1699.922534][ T219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.175667][ T4119] netlink: 'syz.3.7518': attribute type 1 has an invalid length. [ 1700.178322][ T4119] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7518'. [ 1701.144653][ T219] team_slave_1 (unregistering): left promiscuous mode [ 1701.147494][ T219] team0 (unregistering): Port device team_slave_1 removed [ 1701.271410][ T219] team_slave_0 (unregistering): left promiscuous mode [ 1701.275361][ T219] team0 (unregistering): Port device team_slave_0 removed [ 1701.435352][T29287] Bluetooth: hci0: command tx timeout [ 1702.169668][ T4024] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1702.188687][ T4024] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1702.198095][ T4024] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1702.226544][ T4099] can0 (unregistered): slcan off pty20. [ 1702.238303][ T4024] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1702.358422][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1702.379883][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1702.388568][T21042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.390922][T21042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1702.439489][T21042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.441786][T21042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1703.087882][ T4024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1703.470528][ T61] ------------[ cut here ]------------ [ 1703.473419][ T61] WARNING: CPU: 0 PID: 61 at io_uring/io_uring.c:2982 io_ring_exit_work+0x3fc/0x10a0 [ 1703.477539][ T61] Modules linked in: [ 1703.479958][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 1703.485805][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1703.490711][ T61] Workqueue: iou_exit io_ring_exit_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1703.493158][ T61] RIP: 0010:io_ring_exit_work+0x3fc/0x10a0 [ 1703.495876][ T61] Code: 0f 85 b6 0a 00 00 48 8b 05 01 dd 4b 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 ff ce e5 fc 4d 85 f6 79 12 e8 85 d3 e5 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 73 d3 e5 fc 48 8b 74 24 60 [ 1703.505840][ T61] RSP: 0018:ffffc900007cfa90 EFLAGS: 00010293 [ 1703.508984][ T61] RAX: 0000000000000000 RBX: ffff888058b106c8 RCX: ffffffff84d53511 [ 1703.512338][ T61] RDX: ffff8880204ca440 RSI: ffffffff84d5351b RDI: 0000000000000007 [ 1703.515981][ T61] RBP: ffffc900007cfc50 R08: 0000000000000007 R09: 0000000000000000 [ 1703.519320][ T61] R10: fffffffffffffff6 R11: 0000000000000000 R12: ffff888058b10000 [ 1703.522840][ T61] R13: dffffc0000000000 R14: fffffffffffffff6 R15: ffff888058b10040 [ 1703.527539][ T61] FS: 0000000000000000(0000) GS:ffff8880974c3000(0000) knlGS:0000000000000000 [ 1703.527560][T29287] Bluetooth: hci0: command tx timeout [ 1703.531067][ T61] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1703.535168][ T61] CR2: 00000000322f1ffc CR3: 00000000602cb000 CR4: 0000000000352ef0 [ 1703.537800][ T61] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1703.540844][ T61] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1703.544100][ T61] Call Trace: [ 1703.545610][ T61] [ 1703.546987][ T61] ? do_raw_spin_lock+0x12c/0x2b0 [ 1703.549245][ T61] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1703.551869][ T61] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1703.555515][ T61] ? debug_object_deactivate+0x1ec/0x3a0 [ 1703.558356][ T61] ? rcu_is_watching+0x12/0xc0 [ 1703.560418][ T61] process_one_work+0x9cf/0x1b70 [ 1703.562661][ T61] ? __pfx_process_one_work+0x10/0x10 [ 1703.565033][ T61] ? assign_work+0x1a0/0x250 [ 1703.567254][ T61] worker_thread+0x6c8/0xf10 [ 1703.569353][ T61] ? __kthread_parkme+0x19e/0x250 [ 1703.571594][ T61] ? __pfx_worker_thread+0x10/0x10 [ 1703.573926][ T61] kthread+0x3c5/0x780 [ 1703.575779][ T61] ? __pfx_kthread+0x10/0x10 [ 1703.577951][ T61] ? rcu_is_watching+0x12/0xc0 [ 1703.579912][ T61] ? __pfx_kthread+0x10/0x10 [ 1703.581921][ T61] ret_from_fork+0x5d4/0x6f0 [ 1703.583923][ T61] ? __pfx_kthread+0x10/0x10 [ 1703.586072][ T61] ret_from_fork_asm+0x1a/0x30 [ 1703.588103][ T61] [ 1703.589582][ T61] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1703.592720][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 1703.596911][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1703.600934][ T61] Workqueue: iou_exit io_ring_exit_work [ 1703.602801][ T61] Call Trace: [ 1703.603850][ T61] [ 1703.604801][ T61] dump_stack_lvl+0x3d/0x1f0 [ 1703.606280][ T61] vpanic+0x6e8/0x7a0 [ 1703.607610][ T61] ? __pfx_vpanic+0x10/0x10 [ 1703.609139][ T61] ? io_ring_exit_work+0x3fc/0x10a0 [ 1703.610789][ T61] panic+0xca/0xd0 [ 1703.612046][ T61] ? __pfx_panic+0x10/0x10 [ 1703.613496][ T61] ? check_panic_on_warn+0x1f/0xb0 [ 1703.615134][ T61] check_panic_on_warn+0xab/0xb0 [ 1703.616715][ T61] __warn+0xf6/0x3c0 [ 1703.618026][ T61] ? io_ring_exit_work+0x3fc/0x10a0 [ 1703.619745][ T61] report_bug+0x3c3/0x580 [ 1703.621094][ T61] ? io_ring_exit_work+0x3fc/0x10a0 [ 1703.622726][ T61] handle_bug+0x184/0x210 [ 1703.624094][ T61] exc_invalid_op+0x17/0x50 [ 1703.625538][ T61] asm_exc_invalid_op+0x1a/0x20 [ 1703.627089][ T61] RIP: 0010:io_ring_exit_work+0x3fc/0x10a0 [ 1703.629290][ T61] Code: 0f 85 b6 0a 00 00 48 8b 05 01 dd 4b 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 ff ce e5 fc 4d 85 f6 79 12 e8 85 d3 e5 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 73 d3 e5 fc 48 8b 74 24 60 [ 1703.636237][ T61] RSP: 0018:ffffc900007cfa90 EFLAGS: 00010293 [ 1703.638415][ T61] RAX: 0000000000000000 RBX: ffff888058b106c8 RCX: ffffffff84d53511 [ 1703.641738][ T61] RDX: ffff8880204ca440 RSI: ffffffff84d5351b RDI: 0000000000000007 [ 1703.644710][ T61] RBP: ffffc900007cfc50 R08: 0000000000000007 R09: 0000000000000000 [ 1703.647192][ T61] R10: fffffffffffffff6 R11: 0000000000000000 R12: ffff888058b10000 [ 1703.650172][ T61] R13: dffffc0000000000 R14: fffffffffffffff6 R15: ffff888058b10040 [ 1703.653084][ T61] ? io_ring_exit_work+0x3f1/0x10a0 [ 1703.655063][ T61] ? io_ring_exit_work+0x3fb/0x10a0 [ 1703.657098][ T61] ? do_raw_spin_lock+0x12c/0x2b0 [ 1703.659094][ T61] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1703.661009][ T61] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1703.662887][ T61] ? debug_object_deactivate+0x1ec/0x3a0 [ 1703.664657][ T61] ? rcu_is_watching+0x12/0xc0 [ 1703.666172][ T61] process_one_work+0x9cf/0x1b70 [ 1703.667769][ T61] ? __pfx_process_one_work+0x10/0x10 [ 1703.669625][ T61] ? assign_work+0x1a0/0x250 [ 1703.671092][ T61] worker_thread+0x6c8/0xf10 [ 1703.672582][ T61] ? __kthread_parkme+0x19e/0x250 [ 1703.674199][ T61] ? __pfx_worker_thread+0x10/0x10 [ 1703.675818][ T61] kthread+0x3c5/0x780 [ 1703.677168][ T61] ? __pfx_kthread+0x10/0x10 [ 1703.678823][ T61] ? rcu_is_watching+0x12/0xc0 [ 1703.680887][ T61] ? __pfx_kthread+0x10/0x10 [ 1703.682603][ T61] ret_from_fork+0x5d4/0x6f0 [ 1703.684067][ T61] ? __pfx_kthread+0x10/0x10 [ 1703.685543][ T61] ret_from_fork_asm+0x1a/0x30 [ 1703.687097][ T61] [ 1703.688827][ T61] Kernel Offset: disabled [ 1703.690193][ T61] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:13:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617045 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc900007cf400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b0f96c0 R15=ffffffff85616fe0 RIP=ffffffff8561706f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000322f1ffc CR3=00000000602cb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000fff Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 92b54673fa17ec56 60879dc7494facc1 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f165a6daa366ffd5 20ef9ba0da273332 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 88147a537d90eaba b419820bdd4a4cda ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6583e036abcab609 4000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001020304050607 08090a0b0c0d0e0f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 63557cdb00000000 0000013400000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc72375573e2a564 1b3a556695d76d4a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45a611187c950d8b ecb7d19d15bb3f62 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 176390ef9dba268a b1024373b73e5df8 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 63557cdb00000000 0000013400000008 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8779fc74e77d77ee c37ed04c7b3ddee3 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d51d6d828f7c7c0 5462ca4bb8d51bd6 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 c200000000000000 0000000000000001 info registers vcpu 1 CPU#1 RAX=00000000067c5d7b RBX=0000000000000001 RCX=ffffffff8b90abf9 RDX=0000000000000000 RSI=ffffffff8de4cab1 RDI=ffffffff8c162d00 RBP=ffffed1003bd8488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90ab8190 R15=0000000000000000 RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080006000 CR3=00000000793c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 35e2f3eb8b2389e6 03f2aa685ba34eca ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cd9a27db4ba3b381 e98e0451b660b103 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae80de881e3b2e05 edd2331c79234979 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 799e3235a1e72e12 405a2b071ef9afd6 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003ec0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 055aebe906661174 0000000000000408 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a8b8ecc87b6d0d8 002c9e8b88d92a8c ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8629fb0400000408 72fd4333323e524b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040800000408 8832fcb000000408 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ea1487f13440162 b578a1fd9dc78234 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a43af918930bf197 afae6b8d49073e13 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff8880263336c0 RCX=ffffffff823ad383 RDX=1ffff11004c666f2 RSI=ffffffff823ad4c0 RDI=ffff888026333790 RBP=0000000000000180 RSP=ffffc90006e3fc08 R8 =0000000000000003 R9 =0000000000002000 R10=000000000000c000 R11=0000000000000000 R12=ffff888026333790 R13=0000000000000000 R14=ffff888026333848 R15=ffffffff8ce413e0 RIP=ffffffff823ad4ef RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056376edf1ec8 CR3=000000004a2cd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000020486fd RBX=0000000000000003 RCX=ffffffff8b90abf9 RDX=0000000000000000 RSI=ffffffff8de4cab1 RDI=ffffffff8c162d00 RBP=ffffed1003863000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801c318000 R14=ffffffff90ab8190 R15=0000000000000000 RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1661f33000 CR3=0000000057b01000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1661e78dd8 00007f1661f360c0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1661e78dd8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200020002000200 0300020000000035 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000035 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005000400020002 0002000200030002 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002538 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005268 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1661f36b20 00007f1661f37050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000