last executing test programs: 21m46.751620708s ago: executing program 2 (id=424): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c001280"], 0x74}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xa0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x1c3ff}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6a55c0c4ada8324e) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) ptrace(0x10, 0x0) 21m45.651731023s ago: executing program 2 (id=428): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500"], 0x74}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="180800f000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6a55c0c4ada8324e) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, 0x0) 21m44.237315299s ago: executing program 2 (id=432): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgid(0x0) prlimit64(r1, 0xd, &(0x7f0000000040)={0x14, 0xd233}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x20048010) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r7, 0xc10c5541, &(0x7f0000000280)={0x0, 0x804}) ioctl$TCSETS(r6, 0x404c4701, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0x28) 21m42.919287913s ago: executing program 2 (id=440): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000280)={0x6c, 0xdc47d465f214c1b2, 0x4, 0x0, 0x7}) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 21m42.86220268s ago: executing program 2 (id=442): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000004140)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x33, 0x4, 0x0) read$FUSE(r3, &(0x7f0000009780)={0x2020}, 0x2020) 21m42.610552547s ago: executing program 2 (id=444): socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6_sctp(0xa, 0x4, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='a,\x00') r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_io_uring_setup(0xd38, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000440)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) 21m42.103898387s ago: executing program 32 (id=444): socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6_sctp(0xa, 0x4, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='a,\x00') r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_io_uring_setup(0xd38, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000440)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) 16m34.775131431s ago: executing program 4 (id=2202): clock_adjtime(0x700, &(0x7f0000000000)={0x66b7, 0x4100000000000000, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000380)={0x170003, 0x0, {[0x7f, 0xf96d, 0x0, 0x80000000, 0x1, 0x3, 0x5]}}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) read(r4, &(0x7f0000000040)=""/190, 0xbe) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r6 = gettid() setpgid(r6, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000740)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0x1b, './file0\x00'}}) 16m34.606136231s ago: executing program 4 (id=2203): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1, 0x3fff}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x3, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) 16m34.605213973s ago: executing program 4 (id=2204): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x64, &(0x7f0000000580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000040)="628f45ce5d61151fd92e3a72bee789086d12a515b8094d468958947421ccb1a5ff22d0314e641ad603678cc2d99dc25b622df06f942f1e7664c551217916758573060fd6dcc420efe227b8a471d4c793e528f124c8e71a77574e32a7dd40aa4454db725ecdf4156811164018f000d4", 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="a2034975d66ad2a3272f479ce3d4", 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x9cdf, 0xffffffffffffffff, &(0x7f0000000440)="258dc86112bfda19bdde6bfa16d6862b04129ed06b3d46a749d8154f3909daf360ce5b05b020705dc49df11f4e327a8f30f4e7345fa5bd46e70741074e2b8081744007cbcb2d3399491f1a42e3de2f7a3c3054e3bb7d0884043b56410a2937eeffd2c23ca5a210f8b317", 0x0, 0x4a43, 0x0, 0x3, r1}]) io_destroy(r2) r3 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r6, 0x541c, 0x0) setuid(0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", '\x00', "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000d40)={0x10000000000000, 0x60b, 0x23, 0xfffffff9, 0x5, 0x20000007, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x2, 0x7, 0xbd, 0x6, 0x21, 0xff}) syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x101840) r7 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r7, 0x48e9, 0x0, 0x2, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 16m34.147761233s ago: executing program 4 (id=2206): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc03e}}], 0x2, 0x0) 16m33.876839928s ago: executing program 4 (id=2208): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0xf0) 16m33.745526056s ago: executing program 4 (id=2209): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 16m33.623932383s ago: executing program 33 (id=2209): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 15m42.865133121s ago: executing program 5 (id=2380): ioperm(0x401, 0x3, 0x80000002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000808, &(0x7f0000000240)={0xa, 0x4e20, 0x8, @loopback, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) 15m42.815920847s ago: executing program 5 (id=2381): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000001c0)={0x24, 0x14, 0x105, 0x70bc2a, 0x2ddfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8086}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000002c0)="e3447830", 0x4) epoll_create1(0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15m41.868283883s ago: executing program 5 (id=2383): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000001c0)={0x24, 0x14, 0x105, 0x70bc2a, 0x2ddfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8086}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000002c0)="e3447830", 0x4) epoll_create1(0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15m40.826057789s ago: executing program 5 (id=2385): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) write$P9_RVERSION(r2, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x8, 0x8, 0xb31a, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) close(r4) bind$alg(0xffffffffffffffff, &(0x7f0000000640)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffee61435bbb3"], 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b0, 0x8031, 0xffffffffffffffff, 0x3000) 15m39.855396939s ago: executing program 5 (id=2389): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') write$cgroup_subtree(r5, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff5b, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f90224fc6028000e000a73e300053582c137153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b"}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x26}, 0x28) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETAF(r6, 0x5408, 0x0) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xff2e) r7 = openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x59f, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r6, 0x200) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req={0x200, 0xfffffff9, 0x0, 0x7f}, 0x10) recvmmsg$unix(r8, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/251, 0xfb}], 0x1}}], 0x1, 0x40010020, 0x0) r9 = dup3(r8, r7, 0x80000) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x12) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 15m38.56421591s ago: executing program 5 (id=2395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8010aebb, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c008d3eba42d836c86c3685e07dbbbd99f367add81134fe244731424a7397f6f7b047d40033835e04a0fb6332c6e3590fc934f208be470cdff5925f154157da726bf971938776eb68b21f3d395d4e39b174222963b087394de74c6b7f6fa8674a65493cc1617d029597b8e758851b93cf92aeeb4337a0f4ac5f3d0cbf18d2c8ceba8129a3fedca71d3549c84d14c41ae18e2cefbb1d8791a43ba32e638f47a27d5fdd8779149169664c07a243e999767e049fabba1e28cb18ea2a997fa892c4f4395df1b22e185be8f85a3bb60b7f015b0fd09f77ceff3ca9943b"]) (async) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) (async) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) (async) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x4, 0x1, 0x0, 0x3, 0x4a, @broadcast}, 0x10) syz_open_dev$hiddev(&(0x7f00000002c0), 0x400, 0x406000) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180)={0x80100, 0x101, 0x4}, 0x18) (async) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0xe4) (async) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0xfcf6) (async) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_init_net_socket$ax25(0x3, 0x7, 0xcc) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) 15m23.492414339s ago: executing program 34 (id=2395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8010aebb, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c008d3eba42d836c86c3685e07dbbbd99f367add81134fe244731424a7397f6f7b047d40033835e04a0fb6332c6e3590fc934f208be470cdff5925f154157da726bf971938776eb68b21f3d395d4e39b174222963b087394de74c6b7f6fa8674a65493cc1617d029597b8e758851b93cf92aeeb4337a0f4ac5f3d0cbf18d2c8ceba8129a3fedca71d3549c84d14c41ae18e2cefbb1d8791a43ba32e638f47a27d5fdd8779149169664c07a243e999767e049fabba1e28cb18ea2a997fa892c4f4395df1b22e185be8f85a3bb60b7f015b0fd09f77ceff3ca9943b"]) (async) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) (async) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) (async) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x4, 0x1, 0x0, 0x3, 0x4a, @broadcast}, 0x10) syz_open_dev$hiddev(&(0x7f00000002c0), 0x400, 0x406000) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180)={0x80100, 0x101, 0x4}, 0x18) (async) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0xe4) (async) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0xfcf6) (async) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_init_net_socket$ax25(0x3, 0x7, 0xcc) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) 9m18.89822391s ago: executing program 0 (id=4168): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x4000}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="74b17a07", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}}], 0x2, 0x1c000000) 9m18.821934505s ago: executing program 0 (id=4170): syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x9, 0x28, 0xfc, 0x10, 0x5ac, 0x291, 0x4325, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x3, 0xe1, 0x2}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @remote}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010022000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a300000000014000380080002400000000408000140000000001400000011"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010077673100"/108], 0x80}}, 0x4000000) close(r7) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6}, 0x10) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x3ec, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) 9m15.352117485s ago: executing program 0 (id=4191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14008081}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x4, &(0x7f0000000280)=[{0x5, 0x4, 0x9, 0x8001}, {0xf0f, 0x0, 0x4, 0x9}, {0x3, 0xf4, 0x6, 0x6}, {0xe1, 0x3, 0xa, 0xffffffff}]}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 9m14.150820295s ago: executing program 0 (id=4194): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0xfff6}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 9m14.146841815s ago: executing program 0 (id=4195): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c0015000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480", @ANYRESHEX], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 9m13.962585641s ago: executing program 0 (id=4200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000400000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (fail_nth: 3) 9m13.85121568s ago: executing program 35 (id=4200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000400000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (fail_nth: 3) 6m26.310840546s ago: executing program 3 (id=5086): syz_emit_ethernet(0x86, &(0x7f00000004c0)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x1d, 0x78, 0x68, 0x0, 0xf, 0x11, 0x0, @rand_addr=0x64010100, @multicast1}, {0x4e21, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "0f5d28a169c98f784a0feaaff746198c71e18d262877974781f9d62ff32ea036", "c2b51f16324e0d27985fa2a74e7dc9f1", {"2c9703ca697a6ada59616447377197cb", "6941395b030000000060000023ed1c00"}}}}}}}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@deltclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x8, 0xfff5}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000850}, 0x4002010) socket$l2tp(0x2, 0x2, 0x73) 6m26.249999716s ago: executing program 3 (id=5088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0xf334, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x2000, 0x7fffffff}, 0x0, 0x0) 6m25.382233235s ago: executing program 3 (id=5096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7961000000001f0000007e"], 0x54}}, 0x4000054) 6m25.316754692s ago: executing program 3 (id=5097): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') openat$incfs(0xffffffffffffff9c, &(0x7f00000a0040)='.pending_reads\x00', 0x80102, 0x10) syz_io_uring_setup(0x4c34, &(0x7f0000000000)={0x0, 0xd65d, 0x4000, 0x1, 0x177}, &(0x7f0000000080), &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f0000000340)='./file0\x00') (async) openat$incfs(0xffffffffffffff9c, &(0x7f00000a0040)='.pending_reads\x00', 0x80102, 0x10) (async) syz_io_uring_setup(0x4c34, &(0x7f0000000000)={0x0, 0xd65d, 0x4000, 0x1, 0x177}, &(0x7f0000000080), &(0x7f00000000c0)) (async) 6m25.226083992s ago: executing program 3 (id=5099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f80)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0xeb, 0x7fffffff, 0x6, 0x0, 0xf0, 0x8000, 0x10001, 0x10b, 0x9, 0x9ec, 0x200, 0x1, 0xffff, 0x6, 0x4, 0x9, 0x6, 0x70000000, 0x5, 0x37, 0x7fff, 0xfc8, 0x4, 0x8000, 0x9, 0x6b4, 0x0, 0xd2c, 0x8, 0x0, 0x1ff, 0x62, 0x0, 0xd, 0x100, 0x0, 0x9d, 0x10001, 0xffffffff, 0x1, 0xaa9, 0xd33c000, 0xffffffff, 0xffffffcf, 0x9, 0x5, 0x8, 0x4, 0x0, 0x1, 0xc9cf, 0x6f, 0x4, 0x5, 0x3, 0x7, 0x7, 0x1, 0x3, 0x4, 0x80000001, 0x4, 0xfffffffc, 0x3, 0x8, 0x401, 0x7, 0x8, 0x8, 0x8001, 0x401, 0xc693, 0x1, 0x2, 0x80000000, 0xe, 0x0, 0x248, 0x7, 0x200, 0x0, 0x8, 0x8e, 0x7, 0x20000000, 0x10001, 0x40, 0x4, 0x0, 0xe68, 0x1, 0x8000001, 0x1, 0x0, 0xffff, 0x8, 0x6, 0xa8, 0x9, 0x633, 0x5, 0x4, 0x2, 0x7, 0x1ff, 0x2, 0x1, 0x8, 0x2, 0xfffff109, 0x7fff, 0x8, 0x5, 0x48d, 0x9, 0x2, 0x1, 0x9, 0xfffffffe, 0x9, 0x3, 0x80000000, 0x2, 0x3, 0x7f, 0x6, 0x0, 0x5, 0x8, 0x4, 0x0, 0x4, 0xfffffffe, 0x3, 0x7fff, 0x2, 0x2, 0x8, 0x200, 0x2, 0xd1e, 0x6, 0x80000000, 0xd, 0xacc1, 0xb, 0x2, 0x6, 0x9, 0x1, 0x0, 0x7, 0x800, 0x80000000, 0x6, 0x3, 0x7fffffff, 0xfffffffd, 0x9, 0x9, 0x200, 0xc, 0xfff, 0x2, 0x8, 0x9, 0x7, 0xb, 0x7, 0x0, 0x5, 0x7ff, 0x5, 0x8, 0x4, 0x5, 0x4, 0x4, 0x5, 0x4, 0x3, 0x6, 0xbc59, 0x3, 0xd53, 0x3ff, 0x1, 0x1, 0x1000, 0x0, 0x5, 0x8001, 0x8, 0x4, 0x4, 0x4, 0x0, 0x401, 0x7f, 0x574, 0x0, 0x1ff, 0x51343c33, 0x1ff, 0x3, 0x6, 0x401, 0x5, 0xffffffc0, 0x1, 0x1, 0x7ff, 0x2c09, 0x8, 0x0, 0x8, 0x1, 0x2, 0x4, 0x3, 0x401, 0x2, 0x4, 0xfffffffa, 0x2, 0xff, 0xfff, 0x0, 0x2, 0x1000, 0x80, 0x5, 0x2, 0xb6c, 0x0, 0x7, 0x5, 0x2, 0x7, 0x6, 0x8, 0x0, 0x160e, 0xfffffffb, 0x4d2e, 0x8001, 0x2, 0xfffffffd, 0x1, 0x9, 0x5, 0x7, 0x5, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xa71f, 0x3, 0x8, 0x8001, 0x9, 0x9, 0x7, 0x2, 0x7af, 0xfffffff4, 0x5, 0x1ff, 0x8, 0xda, 0x8, 0x7, 0xaeb41200, 0x0, 0x6, 0x0, 0x0, 0x8, 0x9, 0xffffffff, 0x916, 0x8000, 0x6, 0x9, 0x5, 0x0, 0x3, 0x4d74, 0x7, 0x6, 0x7, 0x7fffffff, 0x9, 0x9, 0x9, 0x0, 0x8, 0x80000001, 0x7, 0xffffff7b, 0x5, 0x81, 0x2, 0xffffffff, 0x9, 0x0, 0x3, 0x1000, 0x4, 0x0, 0x8, 0x8, 0xd, 0x4, 0xc, 0x4, 0x101, 0x1ff, 0xc, 0x0, 0x6, 0x2, 0x4, 0x3ff, 0x80000001, 0x401, 0x8, 0x0, 0x7fff, 0x7, 0xec, 0x3ff, 0x8, 0xf, 0x3, 0xb, 0x4, 0x5, 0x2, 0x7, 0x1, 0x10, 0x9, 0x6, 0x0, 0x27, 0xfff, 0x2, 0xffffffff, 0x0, 0x6, 0x9, 0x9e4a, 0xf, 0x6, 0x68a4, 0x6, 0x401, 0x10001, 0x4, 0x3cd, 0x1000, 0x3, 0x2, 0xe, 0x0, 0x7fda, 0x40000, 0xb299, 0x7, 0x14000000, 0x4c8, 0x5, 0x3, 0xea, 0x1, 0x5, 0x3, 0x3, 0x7, 0xb8, 0x8f, 0x4, 0x3, 0x4, 0x3, 0xc2, 0xfffeffff, 0x2, 0x2, 0x8, 0x5, 0xfad, 0x2, 0x10001, 0x4aa, 0x6, 0x9, 0x2, 0x10000000, 0x7, 0xffffff0a, 0x3, 0x7, 0x8001, 0xce, 0x30, 0x4, 0x0, 0x0, 0x1000, 0x1, 0x10, 0x1, 0x10001, 0x689, 0x0, 0x9, 0x7, 0x8, 0xb, 0x9, 0xe2cf, 0x2, 0xa, 0xff, 0x1, 0x4, 0x4, 0x1ff, 0xffff542b, 0x0, 0x1, 0x8, 0xc394, 0xffffffff, 0x5, 0x8000, 0x5, 0xe, 0x9, 0x9, 0x7fffffff, 0x2, 0x3, 0xdd, 0x4, 0x4, 0x9, 0x1, 0x1, 0x7, 0xd4, 0x7, 0x6, 0x7fffffff, 0x4, 0x4, 0x9, 0xb9, 0x5, 0x2, 0x4, 0xfff, 0x0, 0x1285, 0xbdf, 0x5558, 0xfffffff7, 0x4, 0x5, 0x9, 0xfcca, 0x20004000, 0x80000001, 0x5, 0x1, 0x9, 0x8, 0x9, 0x0, 0xf1b3, 0x4af2, 0x101, 0x4, 0x1, 0x96, 0x8001, 0xc6, 0xa321, 0x1, 0x59115142, 0x400, 0x2, 0x3, 0xfff, 0x1, 0x7, 0x5, 0xff, 0x5, 0x5, 0x7, 0x8, 0x5, 0xa2af, 0x6, 0x1, 0x0, 0x6, 0x800]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x30a7, 0x2, 0x2, {0x2, 0x0, 0x4, 0x5, 0x1, 0x7}, {0x3, 0x0, 0x6, 0x1, 0x5201, 0x7}, 0x80000001, 0x2, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) 6m24.988680172s ago: executing program 3 (id=5103): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x103100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000080)={0x2, 0x2, 0x8c86, 0x3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x1d, 0x2, 0x6) r2 = add_key$keyring(&(0x7f0000001080), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='Q', 0x1, r2) pipe2$watch_queue(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x10, 0xc, 0x7a, 0x2}, {0x9, 0x5, 0x0, 0x2, 0x3ff, 0x3, 0x3, 0x7}, {0x9, 0x5, 0x6, 0x3, 0x3ff, 0x7, 0xda, 0x1a}}}}}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000001640)={0x18, &(0x7f00000003c0)={0x10, 0xc, 0x82, {0x82, 0x22, "00126ae242478b3ec31d306a97ade4c67d9500e99842cfe5a37be02c513bf020f4d860a4e79e48c964763f7b173afec30ba02315590fc4c2f3c874d76a41d8f83c3b78f0a85744a10d8fdfc84099a8613e27a9d8308fa590418e502eddd9bcd3a07702fb7daa278868ea30c0031c5284b9f3156fd6d8a16ad1fc2d891d2baba3"}}, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000014c0)=ANY=[@ANYBLOB="000fed000000050fed00040a1003020a006304010014100a790200000000f00700f0ff0000003f00000b1001040400f882001002a5100a3374a67634db05e80162bd786332591af89089a289ea5ad2757ada9fc9beb80a269d4a7c3cd1aac6ea2e52ae8306c1df56b72a2c519d37f054d295c2a0739530c895ad023fb5c32dbc3384999446046bcd918ceaf3a8205d82295d48663d0a845bd769390b27300154f8ab75eeb71f3b08fcf0dd156a0098cb7ebb63225cf5f82f76aa6e027b4e216f8746feea463a4aa028d632431cbf35977063cc43d9430fb1ffb81aedcaadd4ea9b3dd81f4369ecc93a86f414b6b5059effdacf"], &(0x7f00000015c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x2, 0x81, "f20915e0", "b6ddc6e7"}}, &(0x7f0000001600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x10, 0x1, 0x9, 0xff, 0x4, 0x7}}}, &(0x7f0000001b40)={0x44, &(0x7f0000001680)={0x40, 0x16, 0xe2, "8a4b2b9f65a691a3b9a69c278b32934fe890ec087e7e57b2773139e8dc134ba41154383bc58243d35ff7f7235e578b3a7fad29bfe10afb15bb49e3395570ad15aa980575477147b7c4b09c19b257097ff492b8a0510e00c4476a5bc04cf85d116ccb189f9cc210ec2e33367507bffc7d397f59a89041af2c96335f3a076ee7aa7b6bf779b428538dca0f7ae448891459ece5f0c43d01a45b940721e96ed35892efc62a7e1124a5c34f036c091bbe3fe82a268cde3f69abcc095ef470ffccf5f25a400c7066600a352057eafa56d75c3a319e6e0fb16947a5b1a75526de4e686262a4"}, 0x0, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x3, 0x7}}, &(0x7f0000001840)=ANY=[@ANYBLOB="2000049e6900300004"], &(0x7f0000001880)={0x40, 0x7, 0x2, 0xb}, 0x0, &(0x7f0000001900)={0x40, 0xb, 0x2, "2fa4"}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0xa}, 0x0, &(0x7f00000019c0)={0x40, 0x17, 0x6}, 0x0, 0x0, &(0x7f0000001a80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0xac}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0x4}}) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xc2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xd, "fe4042c317ae82c6d1a51a1e45"}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) write$cgroup_devices(r3, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0xc, 0x1, @tid=r6}, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 6m24.849503987s ago: executing program 36 (id=5103): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x103100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000080)={0x2, 0x2, 0x8c86, 0x3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x1d, 0x2, 0x6) r2 = add_key$keyring(&(0x7f0000001080), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='Q', 0x1, r2) pipe2$watch_queue(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x10, 0xc, 0x7a, 0x2}, {0x9, 0x5, 0x0, 0x2, 0x3ff, 0x3, 0x3, 0x7}, {0x9, 0x5, 0x6, 0x3, 0x3ff, 0x7, 0xda, 0x1a}}}}}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000001640)={0x18, &(0x7f00000003c0)={0x10, 0xc, 0x82, {0x82, 0x22, "00126ae242478b3ec31d306a97ade4c67d9500e99842cfe5a37be02c513bf020f4d860a4e79e48c964763f7b173afec30ba02315590fc4c2f3c874d76a41d8f83c3b78f0a85744a10d8fdfc84099a8613e27a9d8308fa590418e502eddd9bcd3a07702fb7daa278868ea30c0031c5284b9f3156fd6d8a16ad1fc2d891d2baba3"}}, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000014c0)=ANY=[@ANYBLOB="000fed000000050fed00040a1003020a006304010014100a790200000000f00700f0ff0000003f00000b1001040400f882001002a5100a3374a67634db05e80162bd786332591af89089a289ea5ad2757ada9fc9beb80a269d4a7c3cd1aac6ea2e52ae8306c1df56b72a2c519d37f054d295c2a0739530c895ad023fb5c32dbc3384999446046bcd918ceaf3a8205d82295d48663d0a845bd769390b27300154f8ab75eeb71f3b08fcf0dd156a0098cb7ebb63225cf5f82f76aa6e027b4e216f8746feea463a4aa028d632431cbf35977063cc43d9430fb1ffb81aedcaadd4ea9b3dd81f4369ecc93a86f414b6b5059effdacf"], &(0x7f00000015c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x2, 0x81, "f20915e0", "b6ddc6e7"}}, &(0x7f0000001600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x10, 0x1, 0x9, 0xff, 0x4, 0x7}}}, &(0x7f0000001b40)={0x44, &(0x7f0000001680)={0x40, 0x16, 0xe2, "8a4b2b9f65a691a3b9a69c278b32934fe890ec087e7e57b2773139e8dc134ba41154383bc58243d35ff7f7235e578b3a7fad29bfe10afb15bb49e3395570ad15aa980575477147b7c4b09c19b257097ff492b8a0510e00c4476a5bc04cf85d116ccb189f9cc210ec2e33367507bffc7d397f59a89041af2c96335f3a076ee7aa7b6bf779b428538dca0f7ae448891459ece5f0c43d01a45b940721e96ed35892efc62a7e1124a5c34f036c091bbe3fe82a268cde3f69abcc095ef470ffccf5f25a400c7066600a352057eafa56d75c3a319e6e0fb16947a5b1a75526de4e686262a4"}, 0x0, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x3, 0x7}}, &(0x7f0000001840)=ANY=[@ANYBLOB="2000049e6900300004"], &(0x7f0000001880)={0x40, 0x7, 0x2, 0xb}, 0x0, &(0x7f0000001900)={0x40, 0xb, 0x2, "2fa4"}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0xa}, 0x0, &(0x7f00000019c0)={0x40, 0x17, 0x6}, 0x0, 0x0, &(0x7f0000001a80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0xac}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0x4}}) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xc2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xd, "fe4042c317ae82c6d1a51a1e45"}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) write$cgroup_devices(r3, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0xc, 0x1, @tid=r6}, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 5m0.440269877s ago: executing program 6 (id=5746): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x4000, &(0x7f00000000c0)={[{@dyn}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}]}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14008081}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x2, &(0x7f0000000280)=[{0xf0f, 0x0, 0x4, 0x9}, {0xe1, 0x3, 0xa, 0xffffffff}]}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 4m59.589127756s ago: executing program 6 (id=5749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = open_tree(r2, &(0x7f0000001000)='\x00', 0x89901) fstat(r3, &(0x7f0000002040)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r6, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000013c0)=""/4084, 0xff4}], 0x1}, 0x6ca}], 0x1, 0x40014102, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000940), 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) fcntl$setlease(r1, 0x403, 0x0) fstatat64(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24008810}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe1462eea704205c5}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 4m59.448793454s ago: executing program 6 (id=5754): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c) (async) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="3af375590dd768375d5ace47738350a6fc1ab49b54a12db0efe6b666b56fef524002d77db38e34029be387efe3328de314d852f23d04a61bb72232ae1bd69a9d1b2d196f6e0528f5428e8cd33a35a2e58232d5cc0fc6e87338e03d79da266f7bd9c18629a5538d81d9dfa2e225a677e10e52d219a020a2e67c0b48a649be0539ca105fcb19c16e4808f3fb72124d895b1bc1534c0c322e1a38513eeef157690457dcda33a2a1b5a31f488a0c437fe18f196418e968935472ff233d6f47e8d0c50906d12e9f55d43e5a430bc4acf0c2aa1fd1d7550786363942ada06814fee1428150", 0xe2}, {&(0x7f0000001140)="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", 0x42b}], 0x2, 0x0, 0x0, 0x2c}, 0x0) 4m59.332010759s ago: executing program 6 (id=5756): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006cc0)=@newtfilter={0x238, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20c, 0x2, [@TCA_BPF_NAME={0x205, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) llistxattr(&(0x7f0000000740)='./file1\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x8080) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r7 = openat$cgroup_ro(r5, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000180)=0x81, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x1000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x0, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x4c) 4m59.134631698s ago: executing program 6 (id=5758): socket$inet6_sctp(0xa, 0x1, 0x84) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='r\b\x00'/12, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400f308000008001b0000000000"], 0x30}}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r5}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r5, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) ioctl$sock_proto_private(r8, 0x89e9, &(0x7f00000004c0)="ae87349028fafb5b9258e27a47a2f87a95de6532b5e46275090a69da406e68b2ef3c49247c88e77ab5dd88728df575f3cee80ed87d04958bf3145f5a703a088c60e6723e5424cab2ac0e5b943f960e3f516d6e561b141c83147a9d3a4cc26b6b9d8b800e2f93ef0173fc6561bc998bf7507db0b8db56394a8c26fa121af9df") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x37) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r9, 0x4068aea3, &(0x7f0000000140)={0xcc, 0x0, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@initdev, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000280)=0xe4) 4m58.798150724s ago: executing program 6 (id=5759): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x20020, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3ff00000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_SEQ_ADJ_ORIG={0x4, 0x4}]}, 0x8c}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) rseq(0x0, 0x0, 0x0, 0x0) listen(r0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000040), 0x10) socket$pppl2tp(0x18, 0x1, 0x1) 4m58.564905923s ago: executing program 37 (id=5759): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x20020, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3ff00000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_SEQ_ADJ_ORIG={0x4, 0x4}]}, 0x8c}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) rseq(0x0, 0x0, 0x0, 0x0) listen(r0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000040), 0x10) socket$pppl2tp(0x18, 0x1, 0x1) 8.924023605s ago: executing program 8 (id=7332): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x7d, &(0x7f0000000080)={0x0, 0x8002}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000bc0)=@allocspi={0x120, 0x16, 0x401, 0x70bd29, 0x25dfdbff, {{{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in=@rand_addr=0x64010102, 0x104, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in=@local, {0x3c48bc8a, 0x1, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffc, 0x5, 0x1}, {0x800, 0x0, 0x96}, 0x70bd2b, 0x1, 0x2, 0x2, 0x0, 0x86}, 0x20000008, 0xdfffffff}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0x2, 0x2, 0x0, 0x7}}]}, 0x120}}, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f000000c940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e21}, 0x12, 0x0, 0x0, 0x0, 0x0, 0x28004044}}], 0x2, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007311320000000000166400000000010095007400000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000080)={r8}) 7.895291378s ago: executing program 8 (id=7338): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'pim6reg1\x00'}) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r1, 0x0, 0x10000) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000003c0)=[r2]) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = socket(0x0, 0xa, 0x6) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x1}) prlimit64(0x0, 0x6, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="96", 0x1}, {0x0}], 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000400)={0xa, 0x4e23, 0x401, @dev={0xfe, 0x80, '\x00', 0x1}, 0x400}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0xf5, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) close_range(r5, r5, 0x0) fanotify_init(0x200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 7.692838356s ago: executing program 8 (id=7343): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000044}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.610401506s ago: executing program 8 (id=7344): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000056f000/0x2000)=nil, 0x2000, &(0x7f0000000300)='@**$.\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x5, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x48801, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000580)=""/174, 0xff56) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000bb7f1a00c600feff0000a60a9500000020000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) 6.531482929s ago: executing program 8 (id=7348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0xffffffff, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x2004c050) 6.45489361s ago: executing program 8 (id=7350): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000680)={@remote, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0x80, 0x0, "e2fc"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x109, 0x86b, 0x254]}) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) setrlimit(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000280)=0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = add_key(0x0, 0x0, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33", 0x4b, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x35, 0x88) bind$rds(0xffffffffffffffff, 0x0, 0x0) keyctl$chown(0x4, r4, 0xffffffffffffffff, 0xee00) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x6b46, 0x80000000, 0x0, 0x0, 0x8, 0xc, "a2bba2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100", [0x3]}}) 4.812246129s ago: executing program 9 (id=7370): sched_setscheduler(0x0, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x6) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x201, 0x0, 0xfffff000, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 4.064757583s ago: executing program 7 (id=7374): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x200000002) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = dup(r4) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) 3.959453458s ago: executing program 9 (id=7375): uname(&(0x7f0000000000)=""/179) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) cachestat(r0, &(0x7f0000000100)={0x3, 0x30000000000}, &(0x7f0000000140), 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000180)=0x2, 0x4) r2 = openat$thread_pidfd(0xffffff9c, &(0x7f00000001c0), 0x245000, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000200)) r3 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x3, 0x0, [{0x40000001, 0x1, 0x3, 0x7, 0x5, 0x1000, 0xc14}, {0x7, 0x898, 0x2, 0x8, 0x2, 0x9, 0x2}, {0xd, 0x8, 0x2, 0x8000, 0x0, 0x9, 0x3}]}) uname(&(0x7f0000000300)=""/4) shutdown(r1, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000001580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x6081cb0}, 0xc, &(0x7f0000001540)={&(0x7f00000003c0)={0x112c, r4, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x25}}}}, [@NL80211_ATTR_SSID={0x10, 0x34, @random="37fc4a602ecdc369a2a01b78"}, @NL80211_ATTR_IE={0x10e6, 0x2a, [@dsss={0x3, 0x1, 0x2}, @perr={0x84, 0xc8, {0x2, 0xc, [{{0x0, 0x1}, @broadcast, 0x10001, @value=@device_b, 0x1b}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0xf}, {{}, @device_b, 0x8, @void, 0xc}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x32}, {{}, @broadcast, 0x8, @void, 0x3d}, {{}, @device_b, 0x3, @void, 0x10}, {{}, @broadcast, 0x2, @void, 0x15}, {{0x0, 0x1}, @broadcast, 0x400, @value=@device_b, 0x35}, {{0x0, 0x1}, @device_a, 0xfff, @value, 0x1b}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x11}, {{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x37}, {{}, @broadcast, 0x2, @void, 0x35}]}}, @measure_req={0x26, 0x1003, {0x28, 0x7, 0x0, "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"}}, @channel_switch={0x25, 0x3, {0x1, 0x5a041a34d66af341, 0x3}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_chsw={0x76, 0x6, {0x20, 0x5, 0x16, 0x9}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5e554a86d58b"}]}, 0x112c}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000080) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f00000015c0)={0x5, 0xb, 0x1, 0xfffffbff, 0x3, [0x80000000, 0xed08, 0x5, 0x37]}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000001600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb654, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x6, 0x82, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0xb97}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xcb, 0xe9}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x5, 0xc, 0x8}}]}}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x200, 0x5, 0x3, 0x3, 0x10, 0x2}, 0x3a, &(0x7f0000001680)={0x5, 0xf, 0x3a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1b, 0x8, 0x3, 0x28b7}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xb, 0x9, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0xd, 0x7}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x6, 0x0, 0x7ff, [0xff0030, 0xc0, 0x0, 0xff00f7, 0xc030]}]}, 0x1, [{0x41, &(0x7f00000016c0)=@string={0x41, 0x3, "80470700f30e4b8da0f8bc29e6d83f98fa8864f919985e5bff2c66e95c4f87685428e430110e0c09a8d256bb1ebf55c5ad8ed42d765ea348394598b9c12433"}}]}) r5 = socket$rxrpc(0x21, 0x2, 0x2) close_range(r5, r3, 0x0) ioctl$FIOCLEX(r2, 0x5451) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000001780)={{r3}, "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"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002780)={'veth1_virt_wifi\x00', 0x400}) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000027c0)={0xb6, 0x0, 0x1ff}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000002840)={0xfffffffe, 0x6, 0x3, 0x9, 0xc, "2c31959554b0f87a91099a8d90da37ecc7adf9"}) r6 = openat$vga_arbiter(0xffffff9c, &(0x7f0000002880), 0x40, 0x0) ppoll(&(0x7f00000028c0)=[{r6, 0x4221}, {r1, 0x420}, {r2, 0x400}, {0xffffffffffffffff, 0x1000}, {r3, 0x80c3}, {r3, 0x200}, {r2, 0x22c4}, {r3, 0x400}], 0x8, &(0x7f0000002900), &(0x7f0000002940)={[0x8000, 0x6]}, 0x8) syz_usb_connect$cdc_ncm(0x5, 0x7e, &(0x7f0000002980)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x4, 0xb0, 0xf2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "68ff9f"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0xd, 0xff7f, 0x3}, {0x6, 0x24, 0x1a, 0x3, 0xc}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x2}, @country_functional={0x6, 0x24, 0x7, 0x0, 0xfff7}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xef, 0x8, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x81, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9b, 0x1, 0x3}}}}}}}]}}, &(0x7f0000002e40)={0xa, &(0x7f0000002a00)={0xa, 0x6, 0x250, 0x3, 0x0, 0x9, 0x20, 0xe}, 0x136, &(0x7f0000002a40)={0x5, 0xf, 0x136, 0x3, [@generic={0x68, 0x10, 0x1, "22e3cc081ddd1d6454395ec1d6b3269e9b5103f7f41ead60fb6f7b0b3b3955e63b68116233894e500dc765a00d592570d61f0597a446aba1d1ff94f5442ca5de758ba1b76f9ff395a1ca2d942caa74cb77338d55ad549145cc8b552bb7d3b2e52a5b34c1a7"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x2, 0x5, 0xe}, @generic={0xbf, 0x10, 0xa, "a9a4f02af11acc13d5fd82b4cc1ac9d29df01cc998921160f2540f7bf568a3110bf75cfd32972033d56014649a452fd6da9a537a139c1bf75966f040da1e976adee13b1a7898c5127f789635efda663b1b414e037e5be9bdaacb159595e54636255ad477ca712cfa3c0744cb7762256255ad8d46f1a9bcd032ee78f97a90c70b4fcc46e3b9e9b669e06bcbbfca9bd7176648f59343029dd6884389efb0604cf28b6f6a7701053b805ffab4e68961609341307805749b97ebb2fbf61f"}]}, 0x6, [{0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x80a}}, {0x86, &(0x7f0000002bc0)=@string={0x86, 0x3, "96f98e6d167d20741da1d95d96a3caea1df6c3870a7e63c7b033ae42e1ca973672c7976f9791d471b4f412f4f7787639ef9e8647aa6a3b0afb04eb24ac8dee1d03232d1587d8660b4812a490ce5f568433190859c26ece182ab28957ed35cf48133b86c58ccd21fb99fb254273d68ebc50081bc7447ab4908e3228ca158895ae07e3c1f2"}}, {0x62, &(0x7f0000002c80)=@string={0x62, 0x3, "a9aec64203767029cdeae5eaf30c6d6a9ffa69418eb37e64c42ca3ebcdc138ecc62594ef4ed01fec1b707ace1ca72b621fc8afcfdf6895319990aac93774679c649e02dc45ef9e5d7c543fb57f744a57d9c9ac3c9725982d0baa206aff12828a"}}, {0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000002d40)=@lang_id={0x4, 0x3, 0x458}}, {0x86, &(0x7f0000002d80)=@string={0x86, 0x3, "cd4f3e567c299abc18d3fe9d047a40e233ce846e40fc3b7417f3c150dbe24ad0c877f9e7a7c2df3ba424827afa6f02e988947e49dbfa6afc16e77c5ef7757f0d1982ca167e0ddd36492718aafe314f28a9c99a372ea68da316c3b65206fa37f386700701edac3288aa4d254ec4f9d0fe646f82486991ef42e33d53b63920c28a334c0522"}}]}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000002ec0)) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) r7 = syz_open_dev$amidi(&(0x7f0000002f00), 0x400, 0x440000) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000002f40)) 3.23250451s ago: executing program 1 (id=7376): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000006c0)={0x0, 0x300, &(0x7f0000000680)={&(0x7f0000000600)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.06553231s ago: executing program 7 (id=7377): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.013777901s ago: executing program 1 (id=7378): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b153672e1e6924fddc5f747e8013"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100070000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 2.841492573s ago: executing program 7 (id=7379): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}], 0x1, 0xfe80}, 0x0) 2.839911041s ago: executing program 7 (id=7380): socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x0, 0x5, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x401, 0xfffffffffffffffe], 0xeeee8000, 0x202}) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0x2b, 0xe6, 0x40, 0xff, 0x0, 0x81, 0x80}, {0x5000, 0xf000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x16, 0x0, 0x2, 0x7}, {0x0, 0xdddd0000, 0x688172a80a7877d1, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa3, 0x5, 0x5}, {0x1, 0xeeef0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x0, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x0, 0xa0, 0xb1, 0x48, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x7, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x3d, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x0, 0x9, 0x42, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) r9 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) (async) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000100), 0xfffffe56, 0x0, 0x0, 0x0, r8}) 2.736617697s ago: executing program 7 (id=7381): socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) move_pages(0x0, 0x0, &(0x7f0000002340), 0x0, &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mkdirat(0xffffffffffffff9c, 0x0, 0x15) r4 = syz_open_procfs(r1, &(0x7f0000000280)='net/if_inet6\x00') r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) write$uinput_user_dev(r5, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) write$uinput_user_dev(r5, &(0x7f0000000500)={'syz1\x00', {0xae47, 0x2, 0x1, 0x8}, 0x26, [0x8, 0x3ff, 0x9, 0x6, 0xbadc, 0x2, 0x80000001, 0x7, 0x1, 0x8, 0x4, 0xffff, 0x5, 0x7ff, 0x53, 0xf4f7, 0x77, 0x9, 0xfffffff9, 0x636a, 0xffff, 0x8, 0x255b, 0x81, 0x8, 0x7, 0xffffffff, 0x2, 0xfffffffd, 0x7, 0x5, 0x3, 0xfffffff7, 0x62dbf2cf, 0x9, 0x7, 0x4, 0xe72, 0x3acf, 0xa49, 0x0, 0xfff, 0x8, 0x3, 0x0, 0x7, 0x40, 0x6, 0x5, 0xfffffffd, 0x8, 0x8, 0x7f5, 0x400, 0xfffffff3, 0xf, 0x3, 0x1, 0x81, 0xb1a, 0x7, 0x3, 0x8001, 0x265b21d6], [0x7, 0x5, 0x7, 0x9, 0x8, 0xc, 0x7, 0x2, 0x0, 0x9371, 0x3ff, 0x9, 0x8, 0x5, 0x8, 0x1, 0x5, 0x6, 0x5, 0x5, 0x365, 0x3, 0x7, 0xff, 0x0, 0x42, 0x7, 0x0, 0x0, 0x101, 0xfffffff7, 0x2, 0x81, 0x3, 0x2, 0xf7, 0x80000000, 0x5, 0xaa3, 0x40, 0x8, 0x7, 0x80000001, 0x2, 0xf84e, 0xfffffffe, 0x1107, 0x5, 0x3, 0x5, 0x9, 0x501b, 0x4, 0x8, 0x0, 0x8, 0x5, 0x10000, 0x7, 0x8, 0x2, 0x800000, 0x1, 0xa840], [0xd, 0x1e9, 0x7, 0x8, 0xfff, 0xf, 0x7, 0x9, 0x62, 0x8, 0x6, 0x400000d3, 0x598b, 0x1, 0x3, 0x56d3, 0x9, 0x5, 0x2, 0x1, 0x3, 0x2, 0x8, 0x7, 0x40, 0x9, 0x200, 0xff, 0x7, 0x8001, 0xc, 0x3, 0x5, 0x4, 0x6, 0x0, 0xd3, 0x955b, 0x8001, 0x5, 0x1, 0x800, 0xc1e59a3d, 0x9, 0x1, 0xa76, 0x1, 0xfffffffd, 0x80, 0x3, 0x44, 0x2, 0x59, 0x5, 0xd91, 0x1, 0x8, 0xef, 0x7, 0x1c, 0xfffffff9, 0x3, 0x5], [0xc25, 0x40, 0x0, 0x2, 0xeb2d, 0x0, 0x9, 0x0, 0x4, 0x9, 0x558c, 0x4, 0x4, 0xffffffff, 0x0, 0x1, 0xb94, 0x3, 0x800, 0x8, 0x9, 0x7, 0x1, 0x3, 0x9, 0x910, 0x2, 0x9, 0x0, 0xfffffffa, 0x101, 0x3000, 0x35, 0x5, 0x1000, 0x9, 0x2, 0x6, 0x9, 0x6f5a506b, 0x8, 0x1, 0x5, 0x9, 0x41cc, 0x800, 0x101, 0xfff, 0x5, 0x0, 0x5, 0x34, 0x9, 0x8, 0x4, 0x7f, 0x3, 0xe29, 0x1, 0x4, 0x6, 0x0, 0xe, 0x1400000]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz1\x00', {0x1, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x7, 0x5, 0x3, 0x3, 0x1, 0x70, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x3, 0x6, 0xb, 0x7, 0xfffffff2, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fff001f, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x2, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf1a], [0x27, 0x0, 0x6, 0x9, 0x9, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7220, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x18, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0xde42, 0x0, 0x0, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfd, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x3, 0x2, 0x4, 0x4e, 0x8000, 0x6, 0x4, 0x4, 0x0, 0x64, 0x80000000, 0x5, 0xa48, 0x5, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0x0, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x3, 0xffff, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x1, 0x0, 0x34, 0x6, 0xfffffffe, 0x6, 0x3, 0x1, 0x9]}, 0x45c) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="71756f74612c67727071756f74615f626c6f636b5f686172646c696d69743d332c00dc412ceec6103c22fc42cdae982fc2c93cd209cd526f84c51407ed372fba096c4f314ec62e24a4698a757ae1b5759cd6ca220dab1668253d634b65"]) add_key$fscrypt_v1(&(0x7f0000001500), &(0x7f0000001540)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) 876.80981ms ago: executing program 9 (id=7382): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x800002, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x400}, 0xf) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbf5, 0x80000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000010100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 854.202466ms ago: executing program 9 (id=7383): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000100)={r1, 0x0, 0x1, 0x6, 0x2, [], [0xf3e, 0xe, 0xd8, 0x9], [0x3, 0x3, 0x100, 0xd5], [0x7, 0x2, 0x0, 0xb3c]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000180)={r1, 0x9, 0x1b0a, 0x9875, 0x0, [0x0, 0x0, 0x0], [0x9, 0x9, 0xc50, 0x4], [0x3, 0x4, 0x401, 0x6], [0x8000000, 0x80000000, 0x100000000, 0xbbdf]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r0}) r4 = request_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0xfffffffffffffff8) keyctl$read(0xb, r4, &(0x7f0000000300)=""/13, 0xd) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0xcdaa) r5 = syz_open_dev$dri(&(0x7f0000000380), 0x6, 0x488800) syz_open_dev$sndctrl(&(0x7f00000003c0), 0x7, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000400)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000440)={r1, 0x9, 0x9, 0x0, 0x1, [0x0, r2, r6, r3], [0xad50, 0xffff8221, 0xb, 0x3], [0x9, 0xc, 0x100, 0x2], [0x7, 0x3, 0x10, 0x8000]}) r7 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x7f, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r7, 0x80045519, &(0x7f0000000500)=0x1000) r8 = openat$comedi(0xffffff9c, &(0x7f0000000540)='/dev/comedi5\x00', 0x400400, 0x0) ioctl$COMEDI_SETRSUBD(r8, 0x6410) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r9) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r8, 0x80047210, &(0x7f00000005c0)) r10 = syz_open_dev$dri(&(0x7f0000000600), 0xfffffff5, 0x1000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000640)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000680)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r10, 0xc02864c3, &(0x7f0000000700)={&(0x7f00000006c0)=[r11, r12], 0x8, 0x2}) openat$fb1(0xffffff9c, &(0x7f0000000740), 0x430602, 0x0) r13 = openat$vimc2(0xffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r13, 0x402c5639, &(0x7f00000007c0)={0x8001, 0x4, 0x1ff}) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000880)={0x9, &(0x7f0000000800)=[{0xf, 0x1, 0x1, 0x40}, {0x6, 0x8d, 0x3, 0x5f7}, {0x0, 0x7, 0x7, 0xb76}, {0x9, 0x7, 0x5, 0x30}, {0x5, 0x5, 0x47, 0x1}, {0x9, 0x3, 0x7, 0x4}, {0x100, 0xac, 0x1}, {0x6, 0x5, 0x8d, 0xf59}, {0x6, 0x9, 0x4, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r14, 0x40082102, &(0x7f0000000940)=r15) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x807c6406, &(0x7f0000000980)=""/51) 431.837309ms ago: executing program 9 (id=7384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b80)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="b8", 0x1}], 0xef}}], 0x2, 0x4001802) 322.121884ms ago: executing program 7 (id=7385): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x200000002) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = dup(r4) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) 320.869309ms ago: executing program 9 (id=7386): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101182) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000004c0)={&(0x7f0000000c00)=[{0x67, 0x2010, 0x0, 0x0}, {0x0, 0x4a01, 0x0, 0x0}], 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 6.077798ms ago: executing program 1 (id=7387): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=7388): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount$afs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB='dyn,fsaff_u,dont_cppraise,\x00'/37]) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14008081}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x3, &(0x7f0000000280)=[{0x5, 0x4, 0x9, 0x8001}, {0xf0f, 0x0, 0x4, 0x9}, {0xe1, 0x3, 0xa, 0xffffffff}]}) r1 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, 0x0, 0x20040040) kernel console output (not intermixed with test programs): [ 245.035037][ T9992] ? kernel_text_address+0x8d/0x100 [ 245.035060][ T9992] ? __kernel_text_address+0xd/0x40 [ 245.035078][ T9992] ? unwind_get_return_address+0x59/0xa0 [ 245.035105][ T9992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 245.035132][ T9992] ? policy_nodemask+0xea/0x4e0 [ 245.035160][ T9992] alloc_pages_mpol+0x1fb/0x550 [ 245.035181][ T9992] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 245.035200][ T9992] ? kasan_save_stack+0x33/0x60 [ 245.035216][ T9992] ? kasan_save_track+0x14/0x30 [ 245.035232][ T9992] ? __kasan_kmalloc+0xaa/0xb0 [ 245.035247][ T9992] ? __get_vm_area_node+0x101/0x330 [ 245.035271][ T9992] alloc_pages_noprof+0x131/0x390 [ 245.035292][ T9992] get_free_pages_noprof+0x10/0xb0 [ 245.035310][ T9992] kasan_populate_vmalloc+0x9f/0x2d0 [ 245.035327][ T9992] ? alloc_vmap_area+0x8b5/0x29e0 [ 245.035350][ T9992] alloc_vmap_area+0x960/0x29e0 [ 245.035381][ T9992] ? __pfx_alloc_vmap_area+0x10/0x10 [ 245.035408][ T9992] __get_vm_area_node+0x1ca/0x330 [ 245.035433][ T9992] __vmalloc_node_range_noprof+0x271/0x1480 [ 245.035455][ T9992] ? kernel_clone+0xfc/0x930 [ 245.035480][ T9992] ? find_held_lock+0x2b/0x80 [ 245.035495][ T9992] ? kernel_clone+0xfc/0x930 [ 245.035519][ T9992] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 245.035546][ T9992] ? rcu_is_watching+0x12/0xc0 [ 245.035565][ T9992] ? kernel_clone+0xfc/0x930 [ 245.035581][ T9992] __vmalloc_node_noprof+0xad/0xf0 [ 245.035602][ T9992] ? kernel_clone+0xfc/0x930 [ 245.035623][ T9992] copy_process+0x2c77/0x76a0 [ 245.035653][ T9992] ? __pfx_copy_process+0x10/0x10 [ 245.035678][ T9992] ? _copy_from_user+0x59/0xd0 [ 245.035706][ T9992] kernel_clone+0xfc/0x930 [ 245.035724][ T9992] ? get_pid_task+0xfc/0x250 [ 245.035745][ T9992] ? __pfx_kernel_clone+0x10/0x10 [ 245.035779][ T9992] __do_sys_clone3+0x212/0x290 [ 245.035820][ T9992] ? __pfx___do_sys_clone3+0x10/0x10 [ 245.035851][ T9992] ? __fget_files+0x20e/0x3c0 [ 245.035865][ T9992] ? handle_mm_fault+0x1e0/0xd10 [ 245.035899][ T9992] ? rcu_is_watching+0x12/0xc0 [ 245.035919][ T9992] __do_fast_syscall_32+0x7c/0x300 [ 245.035939][ T9992] do_fast_syscall_32+0x32/0x80 [ 245.035957][ T9992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.035976][ T9992] RIP: 0023:0xf7fc5579 [ 245.035988][ T9992] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 245.036003][ T9992] RSP: 002b:00000000f54b642c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 245.036019][ T9992] RAX: ffffffffffffffda RBX: 00000000f54b6460 RCX: 0000000000000058 [ 245.036029][ T9992] RDX: 0000000000000000 RSI: 0000000085200280 RDI: 0000000000000003 [ 245.036038][ T9992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.036046][ T9992] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 245.036055][ T9992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.036079][ T9992] [ 245.179491][ T9992] syz.1.1088: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 245.184221][ T9992] CPU: 3 UID: 0 PID: 9992 Comm: syz.1.1088 Not tainted syzkaller #0 PREEMPT(full) [ 245.184235][ T9992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.184242][ T9992] Call Trace: [ 245.184246][ T9992] [ 245.184250][ T9992] dump_stack_lvl+0x16c/0x1f0 [ 245.184266][ T9992] warn_alloc+0x248/0x3a0 [ 245.184278][ T9992] ? __pfx_warn_alloc+0x10/0x10 [ 245.184289][ T9992] ? __get_vm_area_node+0x2cd/0x330 [ 245.184306][ T9992] ? __get_vm_area_node+0x2cd/0x330 [ 245.184318][ T9992] ? __get_vm_area_node+0x1dc/0x330 [ 245.184331][ T9992] ? __get_vm_area_node+0x208/0x330 [ 245.184348][ T9992] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 245.184366][ T9992] ? find_held_lock+0x2b/0x80 [ 245.184377][ T9992] ? kernel_clone+0xfc/0x930 [ 245.184393][ T9992] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 245.184411][ T9992] ? rcu_is_watching+0x12/0xc0 [ 245.184423][ T9992] ? kernel_clone+0xfc/0x930 [ 245.184435][ T9992] __vmalloc_node_noprof+0xad/0xf0 [ 245.184449][ T9992] ? kernel_clone+0xfc/0x930 [ 245.184462][ T9992] copy_process+0x2c77/0x76a0 [ 245.184480][ T9992] ? __pfx_copy_process+0x10/0x10 [ 245.184496][ T9992] ? _copy_from_user+0x59/0xd0 [ 245.184515][ T9992] kernel_clone+0xfc/0x930 [ 245.184527][ T9992] ? get_pid_task+0xfc/0x250 [ 245.184542][ T9992] ? __pfx_kernel_clone+0x10/0x10 [ 245.184561][ T9992] __do_sys_clone3+0x212/0x290 [ 245.184588][ T9992] ? __pfx___do_sys_clone3+0x10/0x10 [ 245.184607][ T9992] ? __fget_files+0x20e/0x3c0 [ 245.184617][ T9992] ? handle_mm_fault+0x1e0/0xd10 [ 245.184639][ T9992] ? rcu_is_watching+0x12/0xc0 [ 245.184652][ T9992] __do_fast_syscall_32+0x7c/0x300 [ 245.184666][ T9992] do_fast_syscall_32+0x32/0x80 [ 245.184679][ T9992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.184692][ T9992] RIP: 0023:0xf7fc5579 [ 245.184701][ T9992] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 245.184711][ T9992] RSP: 002b:00000000f54b642c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 245.184721][ T9992] RAX: ffffffffffffffda RBX: 00000000f54b6460 RCX: 0000000000000058 [ 245.184727][ T9992] RDX: 0000000000000000 RSI: 0000000085200280 RDI: 0000000000000003 [ 245.184733][ T9992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.184738][ T9992] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 245.184744][ T9992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.184757][ T9992] [ 245.185159][ T9992] Mem-Info: [ 245.267398][ T9992] active_anon:9536 inactive_anon:100 isolated_anon:0 [ 245.267398][ T9992] active_file:5113 inactive_file:35413 isolated_file:0 [ 245.267398][ T9992] unevictable:1779 dirty:495 writeback:0 [ 245.267398][ T9992] slab_reclaimable:7607 slab_unreclaimable:58090 [ 245.267398][ T9992] mapped:26275 shmem:6067 pagetables:1288 [ 245.267398][ T9992] sec_pagetables:320 bounce:0 [ 245.267398][ T9992] kernel_misc_reclaimable:0 [ 245.267398][ T9992] free:40682 free_pcp:13484 free_cma:0 [ 245.283954][ T9992] Node 0 active_anon:120kB inactive_anon:100kB active_file:8kB inactive_file:28kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8836kB pagetables:1784kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB [ 245.293563][ T9992] Node 1 active_anon:39824kB inactive_anon:300kB active_file:20444kB inactive_file:141624kB unevictable:3580kB isolated(anon):0kB isolated(file):0kB mapped:106976kB dirty:1976kB writeback:0kB shmem:22732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5000kB pagetables:3368kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB [ 245.307785][ T9992] Node 0 DMA free:2020kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:612kB local_pcp:180kB free_cma:0kB [ 245.320764][ T9992] lowmem_reserve[]: 0 294 294 294 294 [ 245.323165][ T9992] Node 0 DMA32 free:22160kB boost:4096kB min:17544kB low:20904kB high:24264kB reserved_highatomic:2048KB free_highatomic:1280KB active_anon:108kB inactive_anon:100kB active_file:8kB inactive_file:28kB unevictable:3536kB writepending:4kB zspages:0kB present:1032196kB managed:301156kB mlocked:0kB bounce:0kB free_pcp:7876kB local_pcp:1176kB free_cma:0kB [ 245.337116][ T9992] lowmem_reserve[]: 0 0 0 0 0 [ 245.339143][ T9992] Node 1 DMA32 free:139152kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43324kB inactive_anon:300kB active_file:20444kB inactive_file:141624kB unevictable:3580kB writepending:1984kB zspages:2672kB present:1048432kB managed:948220kB mlocked:44kB bounce:0kB free_pcp:39716kB local_pcp:7712kB free_cma:0kB [ 245.351864][ T9992] lowmem_reserve[]: 0 0 0 0 0 [ 245.353946][ T9992] Node 0 DMA: 43*4kB (UM) 25*8kB (UM) 5*16kB (U) 7*32kB (UM) 1*64kB (M) 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2020kB [ 245.360444][ T9992] Node 0 DMA32: 146*4kB (UMH) 115*8kB (UMEH) 51*16kB (UMEH) 100*32kB (UMEH) 56*64kB (UMEH) 40*128kB (UMEH) 15*256kB (UMEH) 4*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 22160kB [ 245.366819][ T9992] Node 1 DMA32: 489*4kB (UME) 942*8kB (UME) 438*16kB (UME) 151*32kB (UME) 140*64kB (UME) 14*128kB (UME) 29*256kB (UME) 28*512kB (UME) 19*1024kB (UME) 18*2048kB (U) 7*4096kB (UM) = 138836kB [ 245.372818][ T9992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.376540][ T9992] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 245.379633][ T9992] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.382861][ T9992] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 245.387091][ T9992] 49432 total pagecache pages [ 245.389086][ T9992] 1068 pages in swap cache [ 245.390992][ T9992] Free swap = 113844kB [ 245.392575][ T9992] Total swap = 124996kB [ 245.394200][ T9992] 524155 pages RAM [ 245.395523][ T9992] 0 pages HighMem/MovableOnly [ 245.397869][ T9992] 207971 pages reserved [ 245.399668][ T9992] 0 pages cma reserved [ 245.539007][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1089'. [ 245.552274][ T9999] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1089'. [ 245.818352][T10000] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1090'. [ 245.905237][T10004] syzkaller0: entered promiscuous mode [ 245.910433][T10004] syzkaller0: entered allmulticast mode [ 246.009753][T10007] overlayfs: workdir and upperdir must be separate subtrees [ 246.996057][ T6025] usb 46-1: device descriptor read/8, error -110 [ 247.478149][ T6025] usb usb46-port1: attempt power cycle [ 247.496132][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1107'. [ 247.502011][T10057] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1107'. [ 247.771427][T10062] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 247.876192][ T6202] usb 40-1: device descriptor read/8, error -110 [ 247.904886][T10063] team0: No ports can be present during mode change [ 248.106985][ T6025] usb usb46-port1: unable to enumerate USB device [ 248.131571][T10074] netlink: 'syz.1.1111': attribute type 23 has an invalid length. [ 248.277702][ T6202] usb usb40-port1: attempt power cycle [ 248.499219][T10076] fuse: Unknown parameter 'gr %4Mqou_id' [ 248.842659][ T6202] usb usb40-port1: unable to enumerate USB device [ 249.272932][T10071] lo speed is unknown, defaulting to 1000 [ 249.277996][T10071] lo speed is unknown, defaulting to 1000 [ 249.281186][T10071] lo speed is unknown, defaulting to 1000 [ 249.292153][T10071] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 249.312543][T10071] lo speed is unknown, defaulting to 1000 [ 249.320388][T10071] lo speed is unknown, defaulting to 1000 [ 249.324387][T10071] lo speed is unknown, defaulting to 1000 [ 249.328477][T10071] lo speed is unknown, defaulting to 1000 [ 249.344834][T10083] overlayfs: upper fs does not support file handles, falling back to index=off. [ 249.352220][T10083] random: crng reseeded on system resumption [ 249.484687][T10085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1115'. [ 249.646005][ T40] audit: type=1326 audit(1762079595.911:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 249.655130][ T40] audit: type=1326 audit(1762079595.911:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 249.664593][ T40] audit: type=1326 audit(1762079595.921:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 249.674246][ T40] audit: type=1326 audit(1762079595.921:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 249.683655][ T40] audit: type=1326 audit(1762079595.921:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 249.695020][ T40] audit: type=1326 audit(1762079595.921:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 249.707003][ T40] audit: type=1326 audit(1762079595.931:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 249.715464][ T40] audit: type=1326 audit(1762079595.931:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 249.725165][ T40] audit: type=1326 audit(1762079595.931:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 249.734623][ T40] audit: type=1326 audit(1762079595.931:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 249.839696][T10101] input: syz1 as /devices/virtual/input/input54 [ 249.919046][T10105] 8021q: VLANs not supported on gre0 [ 249.976988][T10106] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1119'. [ 249.994277][T10108] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.058633][T10108] bond0: (slave bond2): Enslaving as an active interface with an up link [ 250.268930][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 250.306217][T10125] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1124'. [ 250.486085][ T59] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 250.567383][T10137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1130'. [ 250.571418][T10137] netlink: 'syz.1.1130': attribute type 7 has an invalid length. [ 250.574877][T10137] netlink: 'syz.1.1130': attribute type 8 has an invalid length. [ 250.581129][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 250.647698][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.652172][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.656949][ T59] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.662110][ T59] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.665529][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.672876][ T59] usb 9-1: config 0 descriptor?? [ 251.103718][ T59] hid_parser_main: 28 callbacks suppressed [ 251.103738][ T59] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 251.112370][ T59] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 251.115496][ T59] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 251.122276][ T59] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 251.125398][ T59] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 251.128957][ T59] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 251.136065][ T59] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 251.142090][ T59] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 251.145189][ T59] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 251.150643][ T59] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 251.166538][ T59] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 251.442694][T10149] netlink: 'syz.1.1134': attribute type 10 has an invalid length. [ 251.949841][T10173] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1143'. [ 252.505944][ T5994] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 252.665976][ T5994] usb 8-1: Using ep0 maxpacket: 16 [ 252.669070][ T5994] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 252.671704][ T5994] usb 8-1: config 0 has no interface number 0 [ 252.675226][ T5994] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 252.678212][ T5994] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.680822][ T5994] usb 8-1: Product: syz [ 252.682201][ T5994] usb 8-1: Manufacturer: syz [ 252.683669][ T5994] usb 8-1: SerialNumber: syz [ 252.688174][ T5994] usb 8-1: config 0 descriptor?? [ 252.692135][ T5994] hub 8-1:0.132: bad descriptor, ignoring hub [ 252.695038][ T5994] hub 8-1:0.132: probe with driver hub failed with error -5 [ 252.703014][ T5994] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.132/input/input55 [ 253.191789][T10188] batadv_slave_1: entered promiscuous mode [ 253.218408][T10188] veth0: entered promiscuous mode [ 253.345597][T10193] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1148'. [ 253.352033][T10191] Cannot find add_set index 0 as target [ 253.459811][T10183] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1145'. [ 254.036870][ T6007] usb 9-1: USB disconnect, device number 10 [ 254.215715][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 254.522190][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1155'. [ 255.170676][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.381999][T10188] veth0: left promiscuous mode [ 255.384116][T10188] batadv_slave_1: left promiscuous mode [ 255.607070][ T6025] usb 8-1: USB disconnect, device number 12 [ 256.254511][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 256.254522][ T40] audit: type=1326 audit(1762079602.561:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz.3.1159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 256.264985][ T40] audit: type=1326 audit(1762079602.571:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz.3.1159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 256.503336][T10287] syzkaller0: entered promiscuous mode [ 256.506434][T10287] syzkaller0: entered allmulticast mode [ 256.595146][ T40] audit: type=1326 audit(1762079602.901:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.3.1171" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad579 code=0x0 [ 257.411617][T10322] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 257.414349][T10322] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 257.417283][T10322] vhci_hcd vhci_hcd.0: Device attached [ 257.676088][ T6007] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 257.999266][ T40] audit: type=1326 audit(1762079604.311:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 258.008739][T10333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1182'. [ 258.022930][ T40] audit: type=1326 audit(1762079604.321:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 258.048197][ T40] audit: type=1326 audit(1762079604.321:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 258.059185][ T40] audit: type=1326 audit(1762079604.321:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 258.080116][ T40] audit: type=1326 audit(1762079604.321:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 258.090518][ T40] audit: type=1326 audit(1762079604.321:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 258.099007][ T40] audit: type=1326 audit(1762079604.321:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 258.184215][T10323] vhci_hcd: connection reset by peer [ 258.188153][ T1144] vhci_hcd: stop threads [ 258.191131][ T1144] vhci_hcd: release socket [ 258.197928][ T1144] vhci_hcd: disconnect device [ 258.327024][T10336] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1183'. [ 259.508861][T10357] binder: 10356:10357 ioctl 0 80000040 returned -22 [ 259.964527][T10373] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1192'. [ 260.283442][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 260.864987][T10389] binder: 10384:10389 ioctl 0 80000040 returned -22 [ 260.868554][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'. [ 261.646575][T10392] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 262.180445][ T1150] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.190572][ T1150] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.206195][ T1150] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.227294][ T1150] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.415159][T10420] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 262.417233][T10420] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 262.423089][T10420] vhci_hcd vhci_hcd.0: Device attached [ 262.517015][T10424] input: syz1 as /devices/virtual/input/input56 [ 263.116472][T10428] fuse: Bad value for 'fd' [ 263.498854][T10435] bond3 (unregistering): Released all slaves [ 263.619006][T10422] vhci_hcd: connection reset by peer [ 263.624620][T10437] virtio-fs: tag not found [ 263.642787][ T79] vhci_hcd: stop threads [ 263.644482][ T79] vhci_hcd: release socket [ 263.648291][ T79] vhci_hcd: disconnect device [ 263.653875][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 263.664828][T10437] IPv6: sit2: Disabled Multicast RS [ 263.717153][ T6007] vhci_hcd: vhci_device speed not set [ 264.711248][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 264.735411][T10451] IPv6: sit1: Disabled Multicast RS [ 265.134261][T10462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1220'. [ 265.138495][T10462] openvswitch: netlink: Flow key attr not present in new flow. [ 265.142311][T10462] fuse: Bad value for 'fd' [ 265.450632][T10477] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 265.450676][T10477] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.453579][T10477] vhci_hcd vhci_hcd.0: Device attached [ 265.959557][ T6025] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 266.515049][T10478] vhci_hcd: connection reset by peer [ 266.515360][ T79] vhci_hcd: stop threads [ 266.515372][ T79] vhci_hcd: release socket [ 266.515419][ T79] vhci_hcd: disconnect device [ 266.642158][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dff1400: rx timeout, send abort [ 266.646722][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dff1400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 267.186973][T10490] comedi comedi3: comedi_config --init_data is deprecated [ 267.190541][T10490] comedi comedi3: comedi_config --init_data is deprecated [ 267.440723][T10494] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1226'. [ 267.769369][T10513] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1233'. [ 268.275571][T10541] netlink: 'syz.4.1241': attribute type 1 has an invalid length. [ 268.304445][T10541] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 268.309626][T10541] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 268.314187][T10543] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 268.316307][T10543] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 268.319602][T10543] vhci_hcd vhci_hcd.0: Device attached [ 268.353948][T10546] gretap1: entered promiscuous mode [ 268.361521][T10546] bond3: (slave gretap1): making interface the new active one [ 268.364229][T10546] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 268.387804][T10541] macvlan3: entered promiscuous mode [ 268.389653][T10541] macvlan3: entered allmulticast mode [ 268.392037][T10541] bond3: entered promiscuous mode [ 268.394291][T10541] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 268.399555][T10541] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 268.408035][T10541] bond3: left promiscuous mode [ 268.654483][ T5945] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 268.682586][ T842] usb 38-1: SetAddress Request (18) to port 0 [ 268.684757][ T842] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 268.903132][T10565] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1244'. [ 268.916153][T10567] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1248'. [ 269.095183][T10564] ceph: No mds server is up or the cluster is laggy [ 269.309017][T10544] vhci_hcd: connection reset by peer [ 269.311293][ T88] vhci_hcd: stop threads [ 269.312892][ T88] vhci_hcd: release socket [ 269.315404][ T88] vhci_hcd: disconnect device [ 269.480257][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 269.484222][T10574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1249'. [ 269.711128][T10576] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 269.990255][T10589] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1254'. [ 270.542532][T10599] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 270.892193][T10602] bridge7: entered promiscuous mode [ 270.892215][T10602] bridge7: entered allmulticast mode [ 271.065998][ T6025] vhci_hcd: vhci_device speed not set [ 271.925615][T10611] netlink: 'syz.1.1260': attribute type 1 has an invalid length. [ 272.739313][T10620] mmap: syz.3.1264 (10620): VmData 37490688 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 273.182239][T10631] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 273.184732][T10631] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 273.190386][T10631] vhci_hcd vhci_hcd.0: Device attached [ 273.495936][ T6025] usb 44-1: SetAddress Request (15) to port 0 [ 273.498481][ T6025] usb 44-1: new SuperSpeed USB device number 15 using vhci_hcd [ 273.716003][ T842] usb 38-1: device descriptor read/8, error -110 [ 273.889676][T10632] vhci_hcd: connection reset by peer [ 273.893752][ T88] vhci_hcd: stop threads [ 273.895660][ T88] vhci_hcd: release socket [ 273.906861][ T88] vhci_hcd: disconnect device [ 273.996146][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 274.156716][ T842] usb usb38-port1: attempt power cycle [ 274.719116][T10662] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1275'. [ 274.797877][ T842] usb usb38-port1: unable to enumerate USB device [ 275.332494][T10671] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 275.334886][T10671] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 275.339107][T10671] vhci_hcd vhci_hcd.0: Device attached [ 275.526759][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 275.575917][ T6202] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 275.605932][ T61] usb 46-1: SetAddress Request (15) to port 0 [ 275.609035][ T61] usb 46-1: new SuperSpeed USB device number 15 using vhci_hcd [ 275.692702][T10690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1286'. [ 275.699552][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.716404][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.720033][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.724205][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.727985][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.733599][ T10] usb 6-1: config 0 descriptor?? [ 275.738784][ T6202] usb 9-1: not running at top speed; connect to a high speed hub [ 275.742168][ T6202] usb 9-1: config 1 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 275.745681][ T6202] usb 9-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 275.749158][ T6202] usb 9-1: config 1 interface 0 has no altsetting 0 [ 275.757294][ T6202] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 275.760985][ T6202] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.765992][ T6202] usb 9-1: Product: syz [ 275.767704][ T6202] usb 9-1: Manufacturer: syz [ 275.769593][ T6202] usb 9-1: SerialNumber: syz [ 275.776141][T10671] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 275.779667][T10671] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 275.951012][T10699] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 276.046589][T10672] vhci_hcd: connection reset by peer [ 276.049457][ T1150] vhci_hcd: stop threads [ 276.051302][ T1150] vhci_hcd: release socket [ 276.052177][ T6202] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 2 proto 1 vid 0x0525 pid 0xA4A8 [ 276.053380][ T1150] vhci_hcd: disconnect device [ 276.064061][ T6202] usb 9-1: USB disconnect, device number 11 [ 276.067524][ T6202] usblp0: removed [ 276.144352][ T10] hid_parser_main: 28 callbacks suppressed [ 276.144364][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 276.150801][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 276.156918][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 276.159484][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 276.162110][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 276.164517][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 276.167478][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 276.169968][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 276.172503][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 276.174920][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 276.187307][ T10] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 276.467108][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.471757][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.526379][T10710] netlink: 'syz.0.1289': attribute type 1 has an invalid length. [ 276.547472][T10710] bond4: entered promiscuous mode [ 276.550053][T10710] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.570709][T10710] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.574886][T10710] bond4: (slave bond5): making interface the new active one [ 276.578253][T10710] bond5: entered promiscuous mode [ 276.581304][T10710] bond4: (slave bond5): Enslaving as an active interface with an up link [ 276.631751][T10715] (syz.3.1290,10715,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 277.682724][ T10] usb 6-1: USB disconnect, device number 12 [ 278.188921][T10739] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1300'. [ 278.200348][T10739] tipc: Resetting bearer [ 278.262436][T10739] tipc: Resetting bearer [ 278.293716][T10747] FAULT_INJECTION: forcing a failure. [ 278.293716][T10747] name failslab, interval 1, probability 0, space 0, times 0 [ 278.306737][T10747] CPU: 3 UID: 0 PID: 10747 Comm: syz.0.1303 Not tainted syzkaller #0 PREEMPT(full) [ 278.306754][T10747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 278.306760][T10747] Call Trace: [ 278.306764][T10747] [ 278.306768][T10747] dump_stack_lvl+0x16c/0x1f0 [ 278.306784][T10747] should_fail_ex+0x512/0x640 [ 278.306800][T10747] ? fs_reclaim_acquire+0xae/0x150 [ 278.306816][T10747] should_failslab+0xc2/0x120 [ 278.306830][T10747] __kmalloc_noprof+0xdd/0x880 [ 278.306846][T10747] ? tomoyo_encode2+0x100/0x3e0 [ 278.306860][T10747] ? tomoyo_encode2+0x100/0x3e0 [ 278.306871][T10747] tomoyo_encode2+0x100/0x3e0 [ 278.306884][T10747] tomoyo_encode+0x29/0x50 [ 278.306894][T10747] tomoyo_realpath_from_path+0x18f/0x6e0 [ 278.306911][T10747] tomoyo_check_open_permission+0x2ab/0x3c0 [ 278.306936][T10747] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 278.306967][T10747] ? do_raw_spin_lock+0x12c/0x2b0 [ 278.306988][T10747] tomoyo_file_open+0x6b/0x90 [ 278.307002][T10747] security_file_open+0x84/0x1e0 [ 278.307014][T10747] do_dentry_open+0x596/0x1530 [ 278.307031][T10747] vfs_open+0x82/0x3f0 [ 278.307047][T10747] path_openat+0x1de4/0x2cb0 [ 278.307063][T10747] ? __pfx_path_openat+0x10/0x10 [ 278.307078][T10747] do_filp_open+0x20b/0x470 [ 278.307090][T10747] ? __pfx_do_filp_open+0x10/0x10 [ 278.307111][T10747] ? _raw_spin_unlock+0x28/0x50 [ 278.307121][T10747] ? alloc_fd+0x471/0x7d0 [ 278.307135][T10747] do_sys_openat2+0x11b/0x1d0 [ 278.307150][T10747] ? __pfx_do_sys_openat2+0x10/0x10 [ 278.307166][T10747] ? __fget_files+0x20e/0x3c0 [ 278.307175][T10747] ? handle_mm_fault+0x1e0/0xd10 [ 278.307194][T10747] __ia32_compat_sys_openat+0x16d/0x210 [ 278.307210][T10747] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 278.307225][T10747] ? ksys_write+0x1ac/0x250 [ 278.307239][T10747] ? rcu_is_watching+0x12/0xc0 [ 278.307252][T10747] __do_fast_syscall_32+0x7c/0x300 [ 278.307266][T10747] do_fast_syscall_32+0x32/0x80 [ 278.307279][T10747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.307292][T10747] RIP: 0023:0xf7f43579 [ 278.307301][T10747] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 278.307311][T10747] RSP: 002b:00000000f5436100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 278.307322][T10747] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5436150 [ 278.307328][T10747] RDX: 000000000014a042 RSI: 0000000000000000 RDI: 00000000f73d5ff4 [ 278.307334][T10747] RBP: 000000000014a042 R08: 0000000000000000 R09: 0000000000000000 [ 278.307340][T10747] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 278.307346][T10747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.307360][T10747] [ 278.307371][T10747] ERROR: Out of memory at tomoyo_realpath_from_path. [ 278.496617][T10752] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 278.499346][T10752] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 278.503492][T10752] vhci_hcd vhci_hcd.0: Device attached [ 278.595938][ T6025] usb 44-1: device descriptor read/8, error -110 [ 278.714082][T10739] bridge1: left promiscuous mode [ 278.716547][T10739] bridge1: left allmulticast mode [ 278.745160][T10739] veth1_vlan: left allmulticast mode [ 278.747885][T10739] macvlan2: left allmulticast mode [ 278.755495][T10739] gretap1: left promiscuous mode [ 278.803529][T10739] bridge3: left promiscuous mode [ 278.805632][T10739] bridge3: left allmulticast mode [ 278.839517][T10739] bridge7: left promiscuous mode [ 278.841521][T10739] bridge7: left allmulticast mode [ 278.846346][ T842] usb 40-1: SetAddress Request (20) to port 0 [ 278.847008][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.848311][ T842] usb 40-1: new SuperSpeed USB device number 20 using vhci_hcd [ 278.855247][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.862818][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.867737][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.945087][T10762] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 278.947812][T10762] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.951692][T10762] vhci_hcd vhci_hcd.0: Device attached [ 278.989592][T10765] vhci_hcd: connection closed [ 278.993743][ T1150] vhci_hcd: stop threads [ 278.997650][ T1150] vhci_hcd: release socket [ 278.999121][ T1150] vhci_hcd: disconnect device [ 279.006837][ T6025] usb usb44-port1: attempt power cycle [ 279.086354][T10753] vhci_hcd: connection reset by peer [ 279.095441][ T13] vhci_hcd: stop threads [ 279.097438][ T13] vhci_hcd: release socket [ 279.099650][ T13] vhci_hcd: disconnect device [ 279.214789][T10771] veth1_to_bond: entered allmulticast mode [ 279.220348][T10770] veth1_to_bond: left allmulticast mode [ 279.487739][T10779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1311'. [ 279.576736][ T6025] usb usb44-port1: unable to enumerate USB device [ 279.822474][T10796] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1317'. [ 279.904281][T10803] binder_alloc: 10802: binder_alloc_buf, no vma [ 279.931444][T10803] tipc: Enabling of bearer rejected, failed to enable media [ 279.985954][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 280.004151][T10806] i2c i2c-1: Invalid block write size 34 [ 280.145966][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 280.149852][ T10] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 280.153932][ T10] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 280.160316][ T10] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.164547][ T10] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 280.176158][ T10] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 280.181853][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.185051][ T10] usb 8-1: Product: syz [ 280.191751][ T10] usb 8-1: Manufacturer: syz [ 280.193311][ T10] usb 8-1: SerialNumber: syz [ 280.199020][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 280.204565][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input57 [ 280.229794][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 280.233108][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 280.236199][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 280.238965][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 280.241733][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 280.244391][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 280.247535][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 280.250426][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 280.415987][ T10] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 280.419143][ T10] (id 0x00) [ 280.475924][ T10] rc_core: IR keymap rc-imon-pad not found [ 280.480757][ T10] Registered IR keymap rc-empty [ 280.484589][ T10] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 280.490046][ T10] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 280.628132][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 280.633949][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input58 [ 280.674639][ T10] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:13> initialized [ 280.676064][ T61] usb 46-1: device descriptor read/8, error -110 [ 280.814196][T10784] imon:display_open: display port is already open [ 280.820390][ T6007] usb 8-1: USB disconnect, device number 13 [ 281.088017][ T61] usb usb46-port1: attempt power cycle [ 281.196248][T10824] binder: 10821:10824 ioctl 0 80000040 returned -22 [ 281.487842][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 281.487858][ T40] audit: type=1800 audit(1762079627.801:1195): pid=10832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1326" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 281.634319][T10840] tipc: Invalid UDP bearer configuration [ 281.634364][T10840] tipc: Enabling of bearer rejected, failed to enable media [ 281.743279][ T61] usb usb46-port1: unable to enumerate USB device [ 281.851591][T10847] hsr0: entered promiscuous mode [ 281.859975][T10847] hsr_slave_0: left promiscuous mode [ 281.863258][T10847] hsr_slave_1: left promiscuous mode [ 281.874363][T10847] hsr0 (unregistering): left promiscuous mode [ 283.714775][T10888] team0 (unregistering): Port device team_slave_0 removed [ 283.758042][T10888] team0 (unregistering): Port device team_slave_1 removed [ 284.029077][ T842] usb 40-1: device descriptor read/8, error -110 [ 284.331097][T10903] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 284.726350][ T842] usb usb40-port1: attempt power cycle [ 285.296602][ T842] usb usb40-port1: unable to enumerate USB device [ 286.079116][T10920] __nla_validate_parse: 86 callbacks suppressed [ 286.079133][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 286.095965][T10920] wireguard0: entered promiscuous mode [ 286.095986][T10920] wireguard0: entered allmulticast mode [ 287.307371][T10938] virtio-fs: tag not found [ 287.320231][T10938] IPv6: sit1: Disabled Multicast RS [ 288.170526][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1357'. [ 288.311196][T10958] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1360'. [ 288.385121][T10962] netlink: 'syz.4.1362': attribute type 2 has an invalid length. [ 288.389372][T10962] netlink: 'syz.4.1362': attribute type 1 has an invalid length. [ 288.428205][T10966] loop6: detected capacity change from 0 to 524287999 [ 288.498335][T10973] 8021q: VLANs not supported on gre0 [ 288.639971][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'. [ 288.653657][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'. [ 289.072822][T10993] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 289.128726][T10993] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 289.136885][T10993] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 289.166433][T10996] bond4: (slave gretap2): making interface the new active one [ 289.169772][T10996] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 289.424032][T11007] netlink: 'syz.3.1375': attribute type 23 has an invalid length. [ 289.510304][T11009] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1376'. [ 290.088582][T11027] rtc_cmos 00:05: Alarms can be up to one day in the future [ 291.058687][T11037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1386'. [ 291.834571][T11046] siw: device registration error -23 [ 291.838835][T11045] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 291.841224][T11045] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 291.844920][T11045] vhci_hcd vhci_hcd.0: Device attached [ 291.909106][ T40] audit: type=1800 audit(1762079638.221:1196): pid=11045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1387" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 292.046335][T11050] bdev: Unknown parameter '&' [ 292.048364][T11050] bdev: Unknown parameter '&' [ 292.049876][T11050] bdev: Unknown parameter '&' [ 292.051945][T11050] bdev: Unknown parameter '&' [ 292.052172][T11054] ./cgroup: Can't lookup blockdev [ 292.053783][T11050] bdev: Unknown parameter '&' [ 292.053898][T11050] bdev: Unknown parameter '&' [ 292.054020][T11050] bdev: Unknown parameter '&' [ 292.054127][T11050] bdev: Unknown parameter '&' [ 292.054559][T11050] bdev: Unknown parameter '&' [ 292.064724][T11050] bdev: Unknown parameter '&' [ 292.068079][T11050] bdev: Unknown parameter '&' [ 292.070355][T11050] bdev: Unknown parameter '&' [ 292.072460][T11050] bdev: Unknown parameter '&' [ 292.074085][T11050] bdev: Unknown parameter '&' [ 292.075747][T11050] bdev: Unknown parameter '&' [ 292.078202][T11050] bdev: Unknown parameter '&' [ 292.080483][T11050] bdev: Unknown parameter '&' [ 292.082709][T11050] bdev: Unknown parameter '&' [ 292.084975][T11050] bdev: Unknown parameter '&' [ 292.087554][T11050] bdev: Unknown parameter '&' [ 292.089574][T11050] bdev: Unknown parameter '&' [ 292.091165][T11050] bdev: Unknown parameter '&' [ 292.092777][T11050] bdev: Unknown parameter '&' [ 292.094383][T11050] bdev: Unknown parameter '&' [ 292.096527][T11050] bdev: Unknown parameter '&' [ 292.098156][T11050] bdev: Unknown parameter '&' [ 292.099809][T11050] bdev: Unknown parameter '&' [ 292.101412][T11050] bdev: Unknown parameter '&' [ 292.103101][T11050] bdev: Unknown parameter '&' [ 292.104706][T11050] bdev: Unknown parameter '&' [ 292.106697][T11050] bdev: Unknown parameter '&' [ 292.108313][T11050] bdev: Unknown parameter '&' [ 292.109933][T11050] bdev: Unknown parameter '&' [ 292.125944][ T10] usb 46-1: SetAddress Request (19) to port 0 [ 292.129148][ T10] usb 46-1: new SuperSpeed USB device number 19 using vhci_hcd [ 292.154419][T11047] vhci_hcd: connection closed [ 292.155228][ T1150] vhci_hcd: stop threads [ 292.159396][ T1150] vhci_hcd: release socket [ 292.161504][ T1150] vhci_hcd: disconnect device [ 293.028398][T11068] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1393'. [ 296.042519][T11099] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1401'. [ 296.775578][T11108] binder: 11107:11108 ioctl 40086602 80000180 returned -22 [ 296.779771][T11108] binder: 11107:11108 ioctl 40086602 80000180 returned -22 [ 297.153770][T11123] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1405'. [ 297.430966][ T10] usb 46-1: device descriptor read/8, error -110 [ 297.723012][T11133] x_tables: duplicate underflow at hook 2 [ 297.827424][ T10] usb usb46-port1: attempt power cycle [ 298.002601][T11139] FAULT_INJECTION: forcing a failure. [ 298.002601][T11139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.007309][T11139] CPU: 3 UID: 0 PID: 11139 Comm: syz.4.1412 Not tainted syzkaller #0 PREEMPT(full) [ 298.007324][T11139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.007330][T11139] Call Trace: [ 298.007334][T11139] [ 298.007338][T11139] dump_stack_lvl+0x16c/0x1f0 [ 298.007354][T11139] should_fail_ex+0x512/0x640 [ 298.007373][T11139] _copy_to_iter+0x29f/0x1710 [ 298.007390][T11139] ? __asan_memcpy+0x3c/0x60 [ 298.007401][T11139] ? seq_write+0xd6/0x150 [ 298.007416][T11139] ? __pfx__copy_to_iter+0x10/0x10 [ 298.007425][T11139] ? __up_read+0x1f8/0x750 [ 298.007442][T11139] ? __pfx___up_read+0x10/0x10 [ 298.007458][T11139] ? seq_read_iter+0xc8a/0x12d0 [ 298.007476][T11139] seq_read_iter+0xd02/0x12d0 [ 298.007502][T11139] vfs_read+0x8bf/0xcf0 [ 298.007517][T11139] ? __pfx_vfs_read+0x10/0x10 [ 298.007526][T11139] ? find_held_lock+0x2b/0x80 [ 298.007545][T11139] ksys_read+0x12a/0x250 [ 298.007556][T11139] ? __pfx_ksys_read+0x10/0x10 [ 298.007568][T11139] ? rcu_is_watching+0x12/0xc0 [ 298.007581][T11139] __do_fast_syscall_32+0x7c/0x300 [ 298.007595][T11139] do_fast_syscall_32+0x32/0x80 [ 298.007607][T11139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.007623][T11139] RIP: 0023:0xf7f52579 [ 298.007632][T11139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.007642][T11139] RSP: 002b:00000000f542555c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 298.007652][T11139] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000980 [ 298.007658][T11139] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.007666][T11139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.007673][T11139] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.007679][T11139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.007694][T11139] [ 298.008810][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 298.086443][T11142] macvlan3: entered allmulticast mode [ 298.102154][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1413'. [ 298.119634][T11141] macvlan3: entered allmulticast mode [ 298.121823][T11141] veth1_vlan: entered allmulticast mode [ 298.556865][ T10] usb usb46-port1: unable to enumerate USB device [ 298.731646][T11157] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1417'. [ 299.717929][T11172] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1422'. [ 299.798380][T11174] futex_wake_op: syz.0.1423 tries to shift op by 32; fix this program [ 300.282121][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 300.337352][T11187] tipc: Enabling of bearer rejected, already enabled [ 300.502893][T11195] syzkaller0: entered promiscuous mode [ 300.505450][T11195] syzkaller0: entered allmulticast mode [ 301.170697][T11201] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1431'. [ 301.243072][T11200] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1430'. [ 301.528266][T11216] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1434'. [ 302.064329][T11220] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1437'. [ 302.513309][T11230] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 302.515523][T11230] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 302.519697][T11230] vhci_hcd vhci_hcd.0: Device attached [ 302.535975][T11232] bond6 (unregistering): Released all slaves [ 302.756041][ T6025] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 303.024042][T11242] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 303.483178][T11231] vhci_hcd: connection reset by peer [ 303.488237][ T1150] vhci_hcd: stop threads [ 303.490856][ T1150] vhci_hcd: release socket [ 303.492978][ T1150] vhci_hcd: disconnect device [ 304.976335][T11262] binder: 11246:11262 ioctl 0 80000040 returned -22 [ 304.990874][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'. [ 305.255483][T11266] overlayfs: conflicting lowerdir path [ 306.590030][T10696] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 306.855921][T10696] usb 6-1: Using ep0 maxpacket: 16 [ 306.862852][T10696] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 306.869370][T11291] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1458'. [ 306.871506][T10696] usb 6-1: config 0 has no interface number 0 [ 306.877473][T10696] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 306.880290][T10696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.901874][T10696] usb 6-1: Product: syz [ 306.903354][T10696] usb 6-1: Manufacturer: syz [ 306.904969][T10696] usb 6-1: SerialNumber: syz [ 306.911413][T10696] usb 6-1: config 0 descriptor?? [ 306.917693][T10696] hub 6-1:0.132: bad descriptor, ignoring hub [ 306.923890][T10696] hub 6-1:0.132: probe with driver hub failed with error -5 [ 306.946114][T10696] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.132/input/input59 [ 307.186332][T11302] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 307.190265][T11302] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 307.319002][T11302] overlayfs: failed to set uuid (255/file0, err=-13); falling back to uuid=null. [ 307.628983][T11303] veth0: entered promiscuous mode [ 307.985941][ T6025] vhci_hcd: vhci_device speed not set [ 309.052734][T11327] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1467'. [ 309.366007][T11309] veth0: left promiscuous mode [ 309.465172][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 309.645170][ T842] usb 6-1: USB disconnect, device number 13 [ 309.905914][ T5994] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 310.068973][ T5994] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 310.070521][T11350] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1475'. [ 310.071836][ T5994] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.077271][ T5994] usb 9-1: Product: syz [ 310.078653][ T5994] usb 9-1: Manufacturer: syz [ 310.080142][ T5994] usb 9-1: SerialNumber: syz [ 310.294907][ T5994] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 310.303009][ T5994] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 310.306483][ T5994] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 310.311614][ T5994] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 310.319794][ T5994] usb 9-1: USB disconnect, device number 12 [ 310.963071][T11368] loop6: detected capacity change from 0 to 524287999 [ 310.968578][T11368] buffer_io_error: 23 callbacks suppressed [ 310.968591][T11368] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.973876][T11368] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.976948][T11368] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.979988][T11368] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.982976][T11368] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.986050][T11368] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.989087][T11368] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.992084][T11368] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.995055][T11368] ldm_validate_partition_table(): Disk read failed. [ 310.997767][T11368] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.000938][T11368] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.004078][T11368] Dev loop6: unable to read RDB block 0 [ 311.006680][T11368] loop6: unable to read partition table [ 311.009009][T11368] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 311.013982][T11368] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 311.127005][T11376] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1483'. [ 311.244190][T11379] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1484'. [ 311.534953][T11383] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 312.278863][T11397] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 313.151520][T11403] bond4: entered promiscuous mode [ 313.151542][T11403] bond4: entered allmulticast mode [ 313.151828][T11403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.937180][T11413] overlayfs: upper fs does not support tmpfile. [ 314.059435][T11416] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 315.658287][T11438] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1499'. [ 316.172995][T11441] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1501'. [ 316.609968][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.709793][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'. [ 316.714887][T11445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 317.683064][T11469] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1509'. [ 318.198129][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'. [ 318.355904][ T61] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 318.525904][ T61] usb 9-1: Using ep0 maxpacket: 8 [ 318.541461][ T61] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 318.544123][ T61] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 318.549003][ T61] usb 9-1: config 179 has no interface number 0 [ 318.551750][ T61] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 318.558591][ T61] usb 9-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 318.564097][ T61] usb 9-1: config 179 interface 65 has no altsetting 0 [ 318.567202][ T61] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 318.571104][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.510954][ T6007] usb 9-1: USB disconnect, device number 13 [ 320.203214][T11509] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 320.205305][T11509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 320.207974][T11509] vhci_hcd vhci_hcd.0: Device attached [ 320.259757][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 320.308642][T11530] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 320.625963][ T842] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 320.915653][T11524] vhci_hcd: connection reset by peer [ 320.936068][ T1144] vhci_hcd: stop threads [ 320.952530][ T1144] vhci_hcd: release socket [ 320.954675][ T1144] vhci_hcd: disconnect device [ 320.979655][T11534] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1529'. [ 321.311132][T11544] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1533'. [ 321.719188][T11529] wireguard0: entered promiscuous mode [ 321.721225][T11529] wireguard0: entered allmulticast mode [ 321.843933][T11556] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 321.846133][T11556] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 321.849591][T11556] vhci_hcd vhci_hcd.0: Device attached [ 321.856706][T11556] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 321.858817][T11556] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 321.861181][T11556] vhci_hcd vhci_hcd.0: Device attached [ 321.922189][T11557] vhci_hcd: connection closed [ 321.922526][T11559] vhci_hcd: connection closed [ 321.922538][ T1144] vhci_hcd: stop threads [ 321.928348][ T1144] vhci_hcd: release socket [ 321.930276][ T1144] vhci_hcd: disconnect device [ 321.932468][ T1144] vhci_hcd: stop threads [ 321.934311][ T1144] vhci_hcd: release socket [ 321.936359][ T1144] vhci_hcd: disconnect device [ 323.324857][T11593] tipc: Enabled bearer , priority 0 [ 323.351671][T11592] tipc: Disabling bearer [ 323.448371][T11596] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 323.663030][T11600] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.795228][T11602] netlink: 'syz.1.1549': attribute type 1 has an invalid length. [ 323.854156][T11602] gretap1: entered allmulticast mode [ 323.904263][T11602] bond5: (slave gretap1): making interface the new active one [ 323.907097][ T5945] Bluetooth: hci1: Malformed LE Event: 0x1b [ 323.913967][T11602] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 324.016847][T11609] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 324.329623][T11620] x_tables: duplicate underflow at hook 1 [ 324.356111][T11619] FAULT_INJECTION: forcing a failure. [ 324.356111][T11619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.361083][T11619] CPU: 3 UID: 0 PID: 11619 Comm: syz.4.1555 Not tainted syzkaller #0 PREEMPT(full) [ 324.361098][T11619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 324.361105][T11619] Call Trace: [ 324.361108][T11619] [ 324.361113][T11619] dump_stack_lvl+0x16c/0x1f0 [ 324.361129][T11619] should_fail_ex+0x512/0x640 [ 324.361148][T11619] _copy_to_user+0x32/0xd0 [ 324.361165][T11619] simple_read_from_buffer+0xcb/0x170 [ 324.361183][T11619] proc_fail_nth_read+0x197/0x240 [ 324.361196][T11619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.361208][T11619] ? rw_verify_area+0xcf/0x6c0 [ 324.361217][T11619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.361230][T11619] vfs_read+0x1e4/0xcf0 [ 324.361271][T11619] ? __pfx_vfs_read+0x10/0x10 [ 324.361281][T11619] ? find_held_lock+0x2b/0x80 [ 324.361295][T11619] ? __fget_files+0x20e/0x3c0 [ 324.361305][T11619] ? handle_mm_fault+0x1e0/0xd10 [ 324.361325][T11619] ksys_read+0x12a/0x250 [ 324.361335][T11619] ? __pfx_ksys_read+0x10/0x10 [ 324.361347][T11619] ? rcu_is_watching+0x12/0xc0 [ 324.361360][T11619] __do_fast_syscall_32+0x7c/0x300 [ 324.361375][T11619] do_fast_syscall_32+0x32/0x80 [ 324.361387][T11619] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.361400][T11619] RIP: 0023:0xf7f52579 [ 324.361408][T11619] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 324.361419][T11619] RSP: 002b:00000000f5446590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 324.361429][T11619] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5446620 [ 324.361435][T11619] RDX: 000000000000000f RSI: 00000000f73e5ff4 RDI: 0000000000000000 [ 324.361441][T11619] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 324.361447][T11619] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 324.361453][T11619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.361467][T11619] [ 324.431832][ C3] vkms_vblank_simulate: vblank timer overrun [ 324.539421][T11623] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1557'. [ 324.798837][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1558'. [ 324.803912][T11625] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1558'. [ 324.808644][T11625] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1558'. [ 324.842067][T11627] tipc: Enabling of bearer rejected, already enabled [ 324.868660][T11629] syzkaller0: entered promiscuous mode [ 324.870979][T11629] syzkaller0: entered allmulticast mode [ 324.923424][T11631] netlink: 'syz.3.1561': attribute type 2 has an invalid length. [ 324.929405][T11631] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1561'. [ 325.582576][T11650] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1567'. [ 325.707311][ T842] vhci_hcd: vhci_device speed not set [ 326.041643][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'. [ 326.341080][ T40] audit: type=1326 audit(1762079672.651:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.3.1572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 326.354642][ T40] audit: type=1326 audit(1762079672.651:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.3.1572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 326.363451][ T40] audit: type=1326 audit(1762079672.661:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.3.1572" exe="/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 326.372441][ T40] audit: type=1326 audit(1762079672.661:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.3.1572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 326.381558][ T40] audit: type=1326 audit(1762079672.661:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.3.1572" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 326.390440][ T40] audit: type=1326 audit(1762079672.661:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.3.1572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 326.410185][ T40] audit: type=1326 audit(1762079672.661:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.3.1572" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 326.419361][ T40] audit: type=1326 audit(1762079672.661:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.3.1572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 326.428353][ T40] audit: type=1326 audit(1762079672.661:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.3.1572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 326.437292][ T40] audit: type=1326 audit(1762079672.661:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.3.1572" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 326.576202][T11669] netlink: 'syz.3.1574': attribute type 21 has an invalid length. [ 326.579034][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'. [ 326.626044][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 326.793713][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.798398][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.802517][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 326.808467][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.817089][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.831862][ T10] usb 9-1: config 0 descriptor?? [ 327.153534][T11682] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 327.156062][T11682] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 327.159507][T11682] vhci_hcd vhci_hcd.0: Device attached [ 327.266641][ T10] hid_parser_main: 28 callbacks suppressed [ 327.266654][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.270596][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.275374][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.277730][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.279918][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.282078][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.284362][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.289954][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.294027][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.297967][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 327.316630][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 327.516046][ T842] usb 44-1: SetAddress Request (19) to port 0 [ 328.418642][ T842] usb 44-1: new SuperSpeed USB device number 19 using vhci_hcd [ 328.757987][T11683] vhci_hcd: connection reset by peer [ 328.764672][ T88] vhci_hcd: stop threads [ 328.768143][ T6007] usb 9-1: USB disconnect, device number 14 [ 328.777913][ T88] vhci_hcd: release socket [ 328.780107][ T88] vhci_hcd: disconnect device [ 329.580280][T11718] 9pnet_virtio: no channels available for device syz [ 329.808515][T11737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1586'. [ 329.825066][T11730] team0: Mode changed to "loadbalance" [ 329.835332][T11730] netlink: 'syz.3.1586': attribute type 10 has an invalid length. [ 329.843046][T11730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.848732][T11730] team0: Port device bond0 added [ 329.859956][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1586'. [ 329.943292][T11730] tipc: Disabling bearer [ 329.951051][T11730] team0 (unregistering): Port device bond0 removed [ 331.501046][T11762] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1596'. [ 332.407660][T11780] comedi comedi3: comedi_parport: I/O port conflict (0x6,3) [ 332.476773][T11790] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.542679][T11790] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.639438][T11790] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.836643][T11790] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.999551][T11820] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1614'. [ 333.047919][T11816] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1610'. [ 333.190877][ T88] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.214014][ T88] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.228780][ T88] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.246375][ T1152] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.575941][T10696] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 333.758231][T10696] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 333.761069][T10696] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.764759][T10696] usb 9-1: config 0 descriptor?? [ 333.796178][ T842] usb 44-1: device descriptor read/8, error -110 [ 333.888605][T11833] bridge7: entered promiscuous mode [ 333.890434][T11833] bridge7: entered allmulticast mode [ 334.174219][T11823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.179493][T11823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.186895][ T842] usb usb44-port1: attempt power cycle [ 334.390952][T10696] usb 9-1: Cannot set MAC address [ 334.746011][T10696] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 334.756580][T10696] usb 9-1: USB disconnect, device number 15 [ 334.766857][ T842] usb usb44-port1: unable to enumerate USB device [ 335.027041][T11854] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 335.029104][T11854] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 335.033536][T11854] vhci_hcd vhci_hcd.0: Device attached [ 335.043177][T11854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1624'. [ 335.316078][ T24] usb 40-1: SetAddress Request (24) to port 0 [ 335.318658][ T24] usb 40-1: new SuperSpeed USB device number 24 using vhci_hcd [ 335.392953][T11863] bond4: Unable to set up delay as MII monitoring is disabled [ 335.403681][T11863] bond4 (unregistering): Released all slaves [ 336.012598][T11882] lo speed is unknown, defaulting to 1000 [ 336.159023][T11882] lo speed is unknown, defaulting to 1000 [ 337.295526][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 337.626312][T11898] wireguard0: entered promiscuous mode [ 337.628475][T11898] wireguard0: entered allmulticast mode [ 337.950487][T11857] vhci_hcd: connection reset by peer [ 337.952503][ T1152] vhci_hcd: stop threads [ 337.969308][ T1152] vhci_hcd: release socket [ 337.977435][ T1152] vhci_hcd: disconnect device [ 338.316890][T11911] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1639'. [ 339.160662][T11924] fuse: Bad value for 'fd' [ 339.219801][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 340.198290][T11949] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 340.356226][ T24] usb 40-1: device descriptor read/8, error -110 [ 340.373751][T11948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1648'. [ 340.376865][T11948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1648'. [ 340.388684][T11948] syz_tun: entered promiscuous mode [ 342.264907][T11948] syz_tun: left promiscuous mode [ 342.477928][ T24] usb usb40-port1: attempt power cycle [ 342.481563][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 342.481573][ T40] audit: type=1326 audit(1762079688.791:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11964 comm="syz.0.1658" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43579 code=0x0 [ 342.787025][T11973] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 342.989511][T11980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1662'. [ 343.054514][ T24] usb usb40-port1: unable to enumerate USB device [ 343.109905][T11987] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 344.950856][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'. [ 345.362086][T11997] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1667'. [ 345.752243][ T40] audit: type=1800 audit(1762079692.061:1223): pid=12003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1669" name="bus" dev="overlay" ino=2473 res=0 errno=0 [ 345.904943][T12005] bridge10: entered promiscuous mode [ 346.233023][T12009] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 346.653676][T12015] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1672'. [ 347.386633][T12022] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1673'. [ 348.439470][T12042] netlink: 'syz.1.1680': attribute type 1 has an invalid length. [ 348.452526][T12042] 8021q: adding VLAN 0 to HW filter on device bond6 [ 348.496819][T12042] 8021q: adding VLAN 0 to HW filter on device bond6 [ 348.499315][T12042] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 348.502853][T12042] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 348.527261][T12045] bond6: entered promiscuous mode [ 348.529132][T12045] A link change request failed with some changes committed already. Interface bond6 may have been left with an inconsistent configuration, please check. [ 348.591712][T12047] overlayfs: failed to resolve './bus/file0': -2 [ 348.598537][T12047] bpf: Bad value for 'mode' [ 348.786339][T12048] wireguard0: entered promiscuous mode [ 348.792511][T12048] wireguard0: entered allmulticast mode [ 349.536139][T12052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1679'. [ 349.540665][T12063] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 349.543334][T12063] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 349.547159][T12063] vhci_hcd vhci_hcd.0: Device attached [ 349.566302][T12062] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 349.568853][T12062] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 349.572000][T12062] vhci_hcd vhci_hcd.0: Device attached [ 349.655954][ T40] audit: type=1800 audit(1762079695.961:1224): pid=12052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1679" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 349.672358][T12071] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 349.678539][T12071] comedi comedi3: comedi_config --init_data is deprecated [ 349.835932][ T24] usb 45-1: new low-speed USB device number 5 using vhci_hcd [ 349.837486][T12066] vhci_hcd: connection closed [ 349.841070][ T842] usb 38-1: SetAddress Request (22) to port 0 [ 349.845043][ T842] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 349.848540][ T79] vhci_hcd: stop threads [ 349.850043][ T79] vhci_hcd: release socket [ 349.851683][ T79] vhci_hcd: disconnect device [ 349.876189][ T842] usb 38-1: enqueue for inactive port 0 [ 349.909936][T12078] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1687'. [ 350.267823][ T842] usb usb38-port1: attempt power cycle [ 350.329155][T12064] vhci_hcd: connection reset by peer [ 350.338875][ T1152] vhci_hcd: stop threads [ 350.340646][ T1152] vhci_hcd: release socket [ 350.342263][ T1152] vhci_hcd: disconnect device [ 350.578120][T12084] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 350.906749][ T842] usb usb38-port1: unable to enumerate USB device [ 351.001658][T12093] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 353.646408][T12113] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 353.649512][T12113] block device autoloading is deprecated and will be removed. [ 353.737768][T12117] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1697'. [ 353.874109][T12123] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 354.236676][T12129] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 354.970801][T12147] binder: 12144:12147 ioctl 0 80000040 returned -22 [ 354.976787][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1706'. [ 354.997008][ T24] vhci_hcd: vhci_device speed not set [ 357.470061][T12164] binder: 12163:12164 ioctl 0 80000040 returned -22 [ 357.869052][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1715'. [ 358.151864][T12180] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1714'. [ 359.274592][T12194] 9pnet_virtio: no channels available for device syz [ 359.291448][T12194] autofs: Bad value for 'fd' [ 360.102004][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'. [ 360.301691][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'. [ 360.668361][T12205] xt_connbytes: Forcing CT accounting to be enabled [ 360.670667][T12205] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 361.751916][T12232] tipc: Enabled bearer , priority 29 [ 361.795439][T12226] 9pnet_virtio: no channels available for device syz [ 361.863434][T12237] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1730'. [ 362.619507][T12252] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1736'. [ 362.978396][T12263] netlink: 'syz.0.1739': attribute type 1 has an invalid length. [ 363.050611][T12263] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 363.054094][T12263] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 363.369411][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 363.373011][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1740'. [ 363.466064][T12274] overlayfs: missing 'lowerdir' [ 363.520332][T12277] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1741'. [ 363.736330][T12286] 9pnet_virtio: no channels available for device syz [ 364.125925][ T6202] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 364.333243][ T6202] usb 8-1: Using ep0 maxpacket: 16 [ 364.336922][ T6202] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 364.339516][ T6202] usb 8-1: config 0 has no interface number 0 [ 364.343159][ T6202] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 364.346463][ T6202] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.348970][ T6202] usb 8-1: Product: syz [ 364.350314][ T6202] usb 8-1: Manufacturer: syz [ 364.356208][ T6202] usb 8-1: SerialNumber: syz [ 364.376278][ T6202] usb 8-1: config 0 descriptor?? [ 364.380653][ T6202] hub 8-1:0.132: bad descriptor, ignoring hub [ 364.383521][ T6202] hub 8-1:0.132: probe with driver hub failed with error -5 [ 364.395401][T12297] netlink: 'syz.0.1749': attribute type 1 has an invalid length. [ 364.412322][ T6202] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.132/input/input60 [ 364.470923][T12303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1752'. [ 364.474324][T12303] netlink: 'syz.4.1752': attribute type 7 has an invalid length. [ 364.477880][T12303] netlink: 'syz.4.1752': attribute type 8 has an invalid length. [ 364.481046][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1752'. [ 364.712770][T12304] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1751'. [ 364.828854][T12314] batadv_slave_1: entered promiscuous mode [ 364.843897][T12314] veth0: entered promiscuous mode [ 365.901938][T12327] __nla_validate_parse: 1 callbacks suppressed [ 365.901950][T12327] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1757'. [ 366.580805][T12334] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 366.590715][T12334] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 366.594179][T12334] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 366.755955][T12341] fuse: Bad value for 'fd' [ 366.867925][T12344] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1762'. [ 366.917274][T12314] veth0: left promiscuous mode [ 366.919490][T12314] batadv_slave_1: left promiscuous mode [ 367.037295][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1764'. [ 367.086175][ T6025] usb 8-1: USB disconnect, device number 14 [ 367.375948][ T5994] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 367.538113][T12363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1768'. [ 367.542767][T12363] openvswitch: netlink: Flow key attr not present in new flow. [ 367.551957][ T5994] usb 6-1: Using ep0 maxpacket: 16 [ 367.566920][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.570711][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.574144][ T5994] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 367.586553][ T5994] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 367.589930][T12360] vivid-007: disconnect [ 367.592287][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.596293][ T5994] usb 6-1: config 0 descriptor?? [ 367.656301][T12360] kAFS: unparsable volume name [ 367.753103][T12359] vivid-007: reconnect [ 367.858326][T12380] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1771'. [ 367.909843][T12381] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 367.912488][T12381] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 367.915508][T12381] vhci_hcd vhci_hcd.0: Device attached [ 368.196378][ T6025] usb 46-1: SetAddress Request (23) to port 0 [ 368.198582][ T6025] usb 46-1: new SuperSpeed USB device number 23 using vhci_hcd [ 368.313368][T12340] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1763'. [ 368.519236][T12382] vhci_hcd: connection reset by peer [ 368.521240][ T1150] vhci_hcd: stop threads [ 368.523565][ T1150] vhci_hcd: release socket [ 368.526053][ T1150] vhci_hcd: disconnect device [ 368.667217][T12390] netlink: 'syz.3.1773': attribute type 1 has an invalid length. [ 368.698260][T12390] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 368.701802][T12390] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 368.749955][T12392] macvlan4: entered promiscuous mode [ 368.751655][T12392] macvlan4: entered allmulticast mode [ 368.753819][T12392] bond4: entered promiscuous mode [ 368.755700][T12392] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 368.760288][T12392] bond4: left promiscuous mode [ 368.919347][T12394] lo speed is unknown, defaulting to 1000 [ 368.970462][T12395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1774'. [ 369.040066][T12394] lo speed is unknown, defaulting to 1000 [ 370.016331][T12413] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1779'. [ 370.756716][ T5994] usbhid 6-1:0.0: can't add hid device: -71 [ 370.756769][ T5994] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 370.758787][ T5994] usb 6-1: USB disconnect, device number 14 [ 370.814468][T12422] 9pnet_virtio: no channels available for device syz [ 371.730524][T12433] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 371.732579][T12433] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 371.735728][T12433] vhci_hcd vhci_hcd.0: Device attached [ 371.830190][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1783'. [ 372.305439][T12441] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1784'. [ 372.338640][T12434] vhci_hcd: connection closed [ 372.339020][ T1144] vhci_hcd: stop threads [ 372.342820][ T1144] vhci_hcd: release socket [ 372.346432][ T1144] vhci_hcd: disconnect device [ 372.543615][T12450] rtc_cmos 00:05: Alarms can be up to one day in the future [ 373.223957][T12454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1789'. [ 373.239271][ T6025] usb 46-1: device descriptor read/8, error -110 [ 373.587499][T12474] tipc: Enabled bearer , priority 10 [ 373.597601][T12473] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1791'. [ 373.704949][ T6025] usb usb46-port1: attempt power cycle [ 373.832757][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 373.911244][T12487] erspan0: entered promiscuous mode [ 373.958416][T12489] tipc: Enabled bearer , priority 0 [ 373.975903][T12489] syzkaller0: entered promiscuous mode [ 373.977973][T12489] syzkaller0: entered allmulticast mode [ 374.160245][T12488] tipc: Resetting bearer [ 374.178534][T12488] tipc: Disabling bearer [ 374.346053][T12495] syz.3.1802: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 374.350860][T12495] CPU: 3 UID: 0 PID: 12495 Comm: syz.3.1802 Not tainted syzkaller #0 PREEMPT(full) [ 374.350875][T12495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 374.350882][T12495] Call Trace: [ 374.350886][T12495] [ 374.350891][T12495] dump_stack_lvl+0x16c/0x1f0 [ 374.350907][T12495] warn_alloc+0x248/0x3a0 [ 374.350921][T12495] ? __pfx_warn_alloc+0x10/0x10 [ 374.350931][T12495] ? __pfx_stack_trace_save+0x10/0x10 [ 374.350950][T12495] ? kasan_save_stack+0x42/0x60 [ 374.350963][T12495] ? kasan_save_stack+0x33/0x60 [ 374.350974][T12495] ? kasan_save_track+0x14/0x30 [ 374.350986][T12495] ? xskq_create+0x52/0x1d0 [ 374.351002][T12495] ? xsk_setsockopt+0x74e/0x9a0 [ 374.351017][T12495] ? do_sock_setsockopt+0xf3/0x1d0 [ 374.351030][T12495] ? xskq_create+0xfb/0x1d0 [ 374.351046][T12495] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 374.351065][T12495] ? xskq_create+0xfb/0x1d0 [ 374.351084][T12495] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 374.351103][T12495] ? xskq_create+0xfb/0x1d0 [ 374.351118][T12495] vmalloc_user_noprof+0x9e/0xe0 [ 374.351133][T12495] ? xskq_create+0xfb/0x1d0 [ 374.351149][T12495] xskq_create+0xfb/0x1d0 [ 374.351166][T12495] xsk_setsockopt+0x74e/0x9a0 [ 374.351180][T12495] ? __pfx_aa_sk_perm+0x10/0x10 [ 374.351191][T12495] ? __pfx_xsk_setsockopt+0x10/0x10 [ 374.351205][T12495] ? find_held_lock+0x2b/0x80 [ 374.351218][T12495] ? aa_sock_opt_perm+0xfd/0x1c0 [ 374.351232][T12495] ? __pfx_xsk_setsockopt+0x10/0x10 [ 374.351247][T12495] do_sock_setsockopt+0xf3/0x1d0 [ 374.351261][T12495] __sys_setsockopt+0x120/0x1a0 [ 374.351280][T12495] __ia32_sys_setsockopt+0xbc/0x160 [ 374.351295][T12495] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.351306][T12495] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 374.351318][T12495] __do_fast_syscall_32+0x7c/0x300 [ 374.351332][T12495] do_fast_syscall_32+0x32/0x80 [ 374.351344][T12495] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.351357][T12495] RIP: 0023:0xf70ad579 [ 374.351365][T12495] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 374.351375][T12495] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 374.351400][T12495] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 374.351407][T12495] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 374.351414][T12495] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.351420][T12495] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 374.351426][T12495] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.351441][T12495] [ 374.351461][T12495] Mem-Info: [ 374.396398][ T6025] usb usb46-port1: unable to enumerate USB device [ 374.396794][T12495] active_anon:15584 inactive_anon:72 isolated_anon:0 [ 374.396794][T12495] active_file:7677 inactive_file:23057 isolated_file:0 [ 374.396794][T12495] unevictable:1768 dirty:829 writeback:0 [ 374.396794][T12495] slab_reclaimable:7781 slab_unreclaimable:59626 [ 374.396794][T12495] mapped:33244 shmem:11824 pagetables:1436 [ 374.396794][T12495] sec_pagetables:325 bounce:0 [ 374.396794][T12495] kernel_misc_reclaimable:0 [ 374.396794][T12495] free:37951 free_pcp:15845 free_cma:0 [ 374.454344][T12495] Node 0 active_anon:464kB inactive_anon:4kB active_file:16kB inactive_file:12kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:4kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8696kB pagetables:1832kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB [ 374.463680][T12495] Node 1 active_anon:64272kB inactive_anon:284kB active_file:30692kB inactive_file:92216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:119756kB dirty:3312kB writeback:0kB shmem:45956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5444kB pagetables:3912kB sec_pagetables:160kB all_unreclaimable? no Balloon:0kB [ 374.473451][T12495] Node 0 DMA free:2100kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:508kB local_pcp:124kB free_cma:0kB [ 374.482670][T12495] lowmem_reserve[]: 0 294 294 294 294 [ 374.484422][T12495] Node 0 DMA32 free:18052kB boost:0kB min:13448kB low:16808kB high:20168kB reserved_highatomic:2048KB free_highatomic:1400KB active_anon:464kB inactive_anon:4kB active_file:16kB inactive_file:12kB unevictable:3536kB writepending:4kB zspages:0kB present:1032196kB managed:301156kB mlocked:0kB bounce:0kB free_pcp:11872kB local_pcp:3832kB free_cma:0kB [ 374.495227][T12495] lowmem_reserve[]: 0 0 0 0 0 [ 374.497187][T12495] Node 1 DMA32 free:131460kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64272kB inactive_anon:284kB active_file:30692kB inactive_file:92216kB unevictable:3536kB writepending:3312kB zspages:2656kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:48852kB local_pcp:12396kB free_cma:0kB [ 374.508100][T12495] lowmem_reserve[]: 0 0 0 0 0 [ 374.509647][T12495] Node 0 DMA: 25*4kB (UM) 12*8kB (U) 9*16kB (UM) 9*32kB (UM) 3*64kB (M) 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2100kB [ 374.514083][T12495] Node 0 DMA32: 163*4kB (UMEH) 55*8kB (UMEH) 32*16kB (MEH) 86*32kB (UMEH) 66*64kB (UMEH) 24*128kB (UMEH) 15*256kB (UMEH) 1*512kB (U) 2*1024kB (UM) 0*2048kB 0*4096kB = 18052kB [ 374.519956][T12495] Node 1 DMA32: 399*4kB (UM) 309*8kB (UME) 231*16kB (UME) 134*32kB (UME) 126*64kB (UE) 91*128kB (UME) 89*256kB (UME) 44*512kB (UME) 23*1024kB (UME) 13*2048kB (UME) 1*4096kB (M) = 131348kB [ 374.525657][T12495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.529583][T12495] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 374.531105][T12498] wireguard0: entered promiscuous mode [ 374.532573][T12495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.534275][T12498] wireguard0: entered allmulticast mode [ 374.541191][T12495] Node 1 hugepages_total=6 hugepages_free=3 hugepages_surp=4 hugepages_size=2048kB [ 374.544957][T12495] 43273 total pagecache pages [ 374.546718][T12495] 1169 pages in swap cache [ 374.548110][T12495] Free swap = 113792kB [ 374.549459][T12495] Total swap = 124996kB [ 374.550794][T12495] 524155 pages RAM [ 374.551999][T12495] 0 pages HighMem/MovableOnly [ 374.553559][T12495] 207971 pages reserved [ 374.554931][T12495] 0 pages cma reserved [ 374.585877][ T6025] tipc: Node number set to 202486242 [ 375.699165][T12513] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.703101][T12513] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.707460][T12513] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.668352][T12538] syz_tun: left allmulticast mode [ 376.670619][T12538] syz_tun: left promiscuous mode [ 376.673014][T12538] bridge0: port 3(syz_tun) entered disabled state [ 376.677568][T12538] bridge_slave_0: left allmulticast mode [ 376.679726][T12538] bridge_slave_0: left promiscuous mode [ 376.681951][T12538] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.701929][T12538] bridge_slave_1: left allmulticast mode [ 376.703786][T12538] bridge_slave_1: left promiscuous mode [ 376.707355][T12538] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.715649][T12538] bond0: (slave bond_slave_0): Releasing backup interface [ 376.720457][T12541] netlink: 'syz.1.1813': attribute type 10 has an invalid length. [ 376.724176][T12538] bond0: (slave bond_slave_1): Releasing backup interface [ 376.731688][T12538] team0: Port device team_slave_0 removed [ 376.734868][T12538] team0: Port device team_slave_1 removed [ 376.737480][T12538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.741393][T12538] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.814806][T12543] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 376.817667][T12543] syzkaller1: group set to 0 [ 376.899274][T12551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.903417][T12551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.996653][ T5945] Bluetooth: hci1: command 0x0406 tx timeout [ 377.136735][ T6025] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 377.267307][ T6025] usb 8-1: device descriptor read/64, error -71 [ 377.321020][T12575] tipc: Enabled bearer , priority 0 [ 377.346771][T12576] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1820'. [ 377.409048][T12580] lo speed is unknown, defaulting to 1000 [ 377.505911][ T6025] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 377.556977][T12580] lo speed is unknown, defaulting to 1000 [ 377.636188][ T6025] usb 8-1: device descriptor read/64, error -71 [ 377.715982][ T5945] Bluetooth: hci2: command 0x0406 tx timeout [ 377.725934][ T5945] Bluetooth: hci3: command 0x0406 tx timeout [ 377.746159][ T6025] usb usb8-port1: attempt power cycle [ 378.038989][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.079564][T12590] syzkaller0: entered promiscuous mode [ 378.081399][T12590] syzkaller0: entered allmulticast mode [ 378.086068][ T6025] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 378.106740][ T6025] usb 8-1: device descriptor read/8, error -71 [ 378.346042][ T6025] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 378.366839][ T6025] usb 8-1: device descriptor read/8, error -71 [ 378.487385][ T6025] usb usb8-port1: unable to enumerate USB device [ 378.745889][ T6202] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 378.749889][T12603] binder_alloc: 12602: binder_alloc_buf, no vma [ 378.754718][T12603] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 378.874920][T12606] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1833'. [ 378.915868][ T6202] usb 9-1: Using ep0 maxpacket: 16 [ 378.920130][ T6202] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 378.925654][ T6202] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 378.930144][ T6202] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 378.933565][ T6202] usb 9-1: Product: syz [ 378.934912][ T6202] usb 9-1: Manufacturer: syz [ 378.936702][ T6202] usb 9-1: SerialNumber: syz [ 378.939565][ T6202] usb 9-1: config 0 descriptor?? [ 381.069474][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'. [ 381.482214][T12653] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1847'. [ 381.491056][ T40] audit: type=1326 audit(1762079728.804:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.1.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 381.499188][ T40] audit: type=1326 audit(1762079728.804:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.1.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 381.506338][ T40] audit: type=1326 audit(1762079728.804:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.1.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 381.512945][ T40] audit: type=1326 audit(1762079728.804:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.1.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 381.519653][ T40] audit: type=1326 audit(1762079728.804:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.1.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 381.526328][ T40] audit: type=1326 audit(1762079728.804:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.1.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 381.533671][ T40] audit: type=1326 audit(1762079728.804:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.1.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 381.534271][ T6025] usb 9-1: USB disconnect, device number 16 [ 381.540795][ T40] audit: type=1326 audit(1762079728.804:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.1.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 381.549104][ T40] audit: type=1326 audit(1762079728.804:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.1.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 381.555409][ T40] audit: type=1326 audit(1762079728.804:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.1.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 381.713601][T12666] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 381.716240][T12666] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.719449][T12666] vhci_hcd vhci_hcd.0: Device attached [ 381.770165][T12667] vhci_hcd: connection closed [ 381.771531][ T1152] vhci_hcd: stop threads [ 381.779844][ T1152] vhci_hcd: release socket [ 381.784019][ T1152] vhci_hcd: disconnect device [ 382.958459][T12681] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 382.961443][T12681] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 382.963461][T12681] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 383.270187][ T5994] IPVS: starting estimator thread 0... [ 383.354885][T12697] infiniband syz1: set down [ 383.356185][T12699] IPVS: using max 43 ests per chain, 103200 per kthread [ 383.360096][T12697] infiniband syz1: added syz_tun [ 383.392371][T12697] RDS/IB: syz1: added [ 383.396187][T12697] smc: adding ib device syz1 with port count 1 [ 383.398216][T12697] smc: ib device syz1 port 1 has no pnetid [ 383.402908][T12700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1861'. [ 383.434982][T12708] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 383.769652][T12714] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1865'. [ 384.375194][ T5945] Bluetooth: hci1: command 0x0406 tx timeout [ 384.390289][T12722] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 384.393310][T12722] block device autoloading is deprecated and will be removed. [ 384.452418][T12726] veth1_to_bond: entered allmulticast mode [ 384.455741][T12725] veth1_to_bond: left allmulticast mode [ 385.007642][ T5945] Bluetooth: hci3: command 0x0406 tx timeout [ 385.010451][ T5945] Bluetooth: hci2: command 0x0406 tx timeout [ 385.445925][ T6202] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 385.614748][T12755] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1878'. [ 385.645101][ T6202] usb 8-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 385.648906][ T6202] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 385.653780][ T6202] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.657374][ T6202] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.662055][ T6202] usb 8-1: config 0 descriptor?? [ 386.129777][T12771] sit0: entered promiscuous mode [ 386.135992][T12771] netlink: 'syz.4.1886': attribute type 1 has an invalid length. [ 386.140255][T12771] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1886'. [ 386.291000][ T6202] usb 8-1: string descriptor 0 read error: -71 [ 386.342405][T12778] binder: 12775:12778 ioctl 0 80000040 returned -22 [ 386.355624][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1888'. [ 387.148805][ T6202] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 387.154549][ T6202] usb 8-1: USB disconnect, device number 19 [ 387.165090][T12791] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 387.216588][T12793] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.283198][T12793] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.340835][T12793] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.410351][T12793] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.498975][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.507418][ T1144] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.520502][ T1144] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.528518][ T1144] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.990255][T12804] bridge5: entered promiscuous mode [ 387.992100][T12804] bridge5: entered allmulticast mode [ 388.094098][ T6025] libceph: connect (1)[c::]:6789 error -22 [ 388.096234][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 388.099411][ T6025] libceph: connect (1)[c::]:6789 error -22 [ 388.101332][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 388.147566][T12805] ceph: No mds server is up or the cluster is laggy [ 388.290905][T12814] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1897'. [ 388.405144][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1898'. [ 388.414206][T12817] devtmpfs: Cannot change global quota limit on remount [ 388.422384][T12817] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 388.849428][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 388.849444][ T40] audit: type=1800 audit(1762079736.164:1265): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1900" name="bus" dev="overlay" ino=1890 res=0 errno=0 [ 388.959724][T12827] bridge2: entered promiscuous mode [ 389.247980][T12832] /dev/nullb0: Can't open blockdev [ 389.564276][T12829] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1902'. [ 389.988291][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1904'. [ 390.108824][T12841] binder: 12840:12841 ioctl c0306201 80000080 returned -14 [ 390.114971][T12841] binder: 12840:12841 ioctl c0306201 80000180 returned -14 [ 390.575875][ T6202] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 390.746552][ T6202] usb 8-1: Using ep0 maxpacket: 16 [ 390.763638][ T6202] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.785323][ T6202] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 390.803590][ T6202] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 390.813480][ T6202] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.817808][ T6202] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.820905][ T6202] usb 8-1: Product: ᧸鄬⛣춵ﯶࢢℚ술ﻌꍯ쓤❦ᬹ⅒櫦⨹飑쵬✊䧽峐㎗൐ꅻ쇪꠰섩Ӱ忣쯦騜䱡܅텎㝴ꉝ䀃ﲉ௹ᴬ踎溊蒸⣉ט龂␑ฟܙ볈͕룿䇿岽눑ᣬ穿ᴞ첃壧㇓逌츝덋䃉㯀杵牞棍藍烬䬛懶귌췐㉫都䶬夔⪵ [ 390.833434][ T6202] usb 8-1: Manufacturer: ъ [ 390.836675][ T6202] usb 8-1: SerialNumber: ည [ 391.472281][T12862] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1912'. [ 391.989886][ T40] audit: type=1326 audit(1762079739.304:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.1.1919" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x0 [ 392.430138][T12893] virtio-fs: tag not found [ 392.436537][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'. [ 392.449757][T12893] IPv6: sit2: Disabled Multicast RS [ 393.011746][T12903] netlink: 'syz.0.1927': attribute type 2 has an invalid length. [ 393.358911][ T6202] cdc_ncm 8-1:1.0: bind() failure [ 393.368539][ T6202] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 393.371508][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1933'. [ 393.372641][ T6202] cdc_ncm 8-1:1.1: bind() failure [ 393.377059][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1933'. [ 393.385893][ T6202] usb 8-1: USB disconnect, device number 20 [ 393.569664][T12924] siw: device registration error -23 [ 394.093875][T12938] netlink: 'syz.4.1940': attribute type 1 has an invalid length. [ 394.116866][T12938] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 394.120946][T12938] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 394.177399][T12938] macvlan4: entered promiscuous mode [ 394.179521][T12938] macvlan4: entered allmulticast mode [ 394.182092][T12938] bond5: entered promiscuous mode [ 394.184493][T12938] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 394.190296][T12938] bond5: left promiscuous mode [ 394.818831][T12963] virtio-fs: tag not found [ 394.830763][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 394.860274][T12963] IPv6: sit2: Disabled Multicast RS [ 395.322370][T12971] 8021q: adding VLAN 0 to HW filter on device bond7 [ 395.327041][T12971] bond0: (slave bond7): Enslaving as an active interface with an up link [ 395.368016][T12978] netlink: 'syz.0.1952': attribute type 1 has an invalid length. [ 395.395160][T12978] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 395.400916][T12978] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 395.498895][T12983] 8021q: VLANs not supported on gre0 [ 395.544795][T12989] netlink: 'syz.3.1956': attribute type 23 has an invalid length. [ 395.646961][T12990] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1954'. [ 395.955959][ T59] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 395.987762][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 396.117634][ T59] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 396.120771][ T59] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 396.124849][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 396.129637][ T59] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 396.133287][ T59] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 396.137165][ T59] usb 8-1: Product: syz [ 396.138598][ T59] usb 8-1: Manufacturer: syz [ 396.140559][ T59] usb 8-1: SerialNumber: syz [ 396.146412][ T59] usb 8-1: config 0 descriptor?? [ 396.149974][ T59] hub 8-1:0.0: bad descriptor, ignoring hub [ 396.152831][ T59] hub 8-1:0.0: probe with driver hub failed with error -5 [ 396.160860][ T59] usb 8-1: selecting invalid altsetting 0 [ 396.376104][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 396.379880][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 396.424262][T13004] netlink: 'syz.0.1960': attribute type 1 has an invalid length. [ 396.427003][T13004] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1960'. [ 396.526237][ T59] usb 8-1: USB disconnect, device number 21 [ 396.622987][ T5946] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 396.712766][T13013] wireguard0: entered promiscuous mode [ 396.714456][T13013] wireguard0: entered allmulticast mode [ 396.974531][T13023] netlink: 'syz.3.1965': attribute type 10 has an invalid length. [ 396.977572][T13023] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1965'. [ 396.997666][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 397.098278][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 397.102913][ T40] audit: type=1326 audit(1762079744.404:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.4.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 397.182827][ T40] audit: type=1326 audit(1762079744.404:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.4.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 397.214108][ T40] audit: type=1326 audit(1762079744.404:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.4.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 397.225180][ T40] audit: type=1326 audit(1762079744.404:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.4.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 397.232410][ T40] audit: type=1326 audit(1762079744.404:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.4.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 397.240480][ T40] audit: type=1326 audit(1762079744.414:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.4.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 397.248281][T13034] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1968'. [ 397.259861][ T40] audit: type=1326 audit(1762079744.414:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.4.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 397.275990][ T40] audit: type=1326 audit(1762079744.414:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.4.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 397.289428][ T40] audit: type=1326 audit(1762079744.414:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.4.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 397.298438][ T40] audit: type=1326 audit(1762079744.414:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.4.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 397.977472][T13049] netlink: 'syz.3.1972': attribute type 7 has an invalid length. [ 397.979921][T13049] netlink: 'syz.3.1972': attribute type 8 has an invalid length. [ 398.047095][T13055] mkiss: ax0: crc mode is auto. [ 398.116400][T13055] Falling back ldisc for ttyS3. [ 398.244137][T13067] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 398.300057][T13067] fuseblk: Unknown parameter 'g1;>}00000000000000000000' [ 399.416288][T13089] lo speed is unknown, defaulting to 1000 [ 399.505550][T13089] lo speed is unknown, defaulting to 1000 [ 400.121666][T13105] __nla_validate_parse: 8 callbacks suppressed [ 400.121678][T13105] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1991'. [ 400.279093][T13111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1993'. [ 400.282545][T13111] openvswitch: netlink: Flow key attr not present in new flow. [ 400.474228][T13112] 9pnet_virtio: no channels available for device syz [ 400.478453][T13112] loop6: detected capacity change from 0 to 524287999 [ 400.480914][T13112] buffer_io_error: 7 callbacks suppressed [ 400.480921][T13112] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.485162][T13112] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.487742][T13112] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.490551][T13112] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.493101][T13112] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.496104][T13112] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.498633][T13112] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.501173][T13112] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.503651][T13112] ldm_validate_partition_table(): Disk read failed. [ 400.505741][T13112] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.508338][T13112] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.510872][T13112] Dev loop6: unable to read RDB block 0 [ 400.512961][T13112] loop6: unable to read partition table [ 400.514827][T13112] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 400.558211][T13112] loop6: unable to read partition table [ 400.560842][T13112] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 401.155902][ T5945] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 401.165912][ T5945] Bluetooth: hci2: command 0x0406 tx timeout [ 401.407463][ T59] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 401.493091][T13139] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 401.495165][T13139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 401.498178][T13139] vhci_hcd vhci_hcd.0: Device attached [ 401.775953][ T6025] usb 38-1: SetAddress Request (26) to port 0 [ 401.778347][ T6025] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 402.179058][T13140] vhci_hcd: connection reset by peer [ 402.189779][ T88] vhci_hcd: stop threads [ 402.199114][ T88] vhci_hcd: release socket [ 402.213622][ T88] vhci_hcd: disconnect device [ 402.608967][T13146] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2003'. [ 402.681591][T13147] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2002'. [ 402.814055][T13150] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2004'. [ 403.602813][T13165] rtc_cmos 00:05: Alarms can be up to one day in the future [ 403.800871][T13176] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.856532][T13178] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2014'. [ 403.886870][T13176] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.970914][T13176] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.044700][T13176] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.159203][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.169962][ T1152] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.181616][ T1152] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.194004][ T1152] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.506445][T13186] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2015'. [ 405.070668][T13202] netlink: 'syz.3.2020': attribute type 10 has an invalid length. [ 405.311162][T13217] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.2027'. [ 405.563588][T13223] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 405.566398][T13223] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 405.588397][T13223] vhci_hcd vhci_hcd.0: Device attached [ 406.189129][T13224] vhci_hcd: connection closed [ 406.189685][ T1144] vhci_hcd: stop threads [ 406.194819][ T1144] vhci_hcd: release socket [ 406.198621][ T1144] vhci_hcd: disconnect device [ 406.847130][T13246] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.2033'. [ 406.891671][ T6025] usb 38-1: device descriptor read/8, error -110 [ 406.962890][T13251] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2035'. [ 407.020565][T13253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2036'. [ 407.025646][T13253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2036'. [ 407.287927][ T6025] usb usb38-port1: attempt power cycle [ 407.294789][T13267] openvswitch: netlink: Missing key (keys=40, expected=80) [ 407.317851][T13265] vxfs: unable to read disk superblock at 1 [ 407.320726][T13265] vxfs: unable to read disk superblock at 8 [ 407.322800][T13265] vxfs: can't find superblock. [ 407.356078][ T842] vhci_hcd: vhci_device speed not set [ 407.814204][T13275] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 407.817127][T13275] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 407.880114][T13275] vhci_hcd vhci_hcd.0: Device attached [ 408.043596][T13276] vhci_hcd: connection closed [ 408.043909][ T1152] vhci_hcd: stop threads [ 408.047486][ T1152] vhci_hcd: release socket [ 408.049114][ T1152] vhci_hcd: disconnect device [ 408.626765][ T6025] usb usb38-port1: unable to enumerate USB device [ 409.335911][ T6202] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 409.495732][ T6202] usb 9-1: config 6 has an invalid interface number: 224 but max is 2 [ 409.504621][ T6202] usb 9-1: config 6 has an invalid interface number: 23 but max is 2 [ 409.508110][ T6202] usb 9-1: config 6 has an invalid interface number: 144 but max is 2 [ 409.511618][ T6202] usb 9-1: config 6 has an invalid interface number: 198 but max is 2 [ 409.515670][ T6202] usb 9-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 409.521126][ T6202] usb 9-1: config 6 has 4 interfaces, different from the descriptor's value: 3 [ 409.524996][ T6202] usb 9-1: config 6 has no interface number 0 [ 409.527924][ T6202] usb 9-1: config 6 has no interface number 1 [ 409.530596][ T6202] usb 9-1: config 6 has no interface number 2 [ 409.535581][ T6202] usb 9-1: config 6 has no interface number 3 [ 409.540290][ T6202] usb 9-1: config 6 interface 224 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 409.546103][ T6202] usb 9-1: config 6 interface 224 altsetting 8 has an endpoint descriptor with address 0x3F, changing to 0xF [ 409.550964][ T6202] usb 9-1: config 6 interface 224 altsetting 8 endpoint 0xF has invalid maxpacket 1076, setting to 64 [ 409.561723][ T6202] usb 9-1: config 6 interface 224 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 409.566497][ T6202] usb 9-1: config 6 interface 224 altsetting 8 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 409.571925][ T6202] usb 9-1: too many endpoints for config 6 interface 23 altsetting 157: 219, using maximum allowed: 30 [ 409.582073][ T6202] usb 9-1: config 6 interface 23 altsetting 157 has an invalid descriptor for endpoint zero, skipping [ 409.586770][ T6202] usb 9-1: config 6 interface 23 altsetting 157 endpoint 0x7 has invalid maxpacket 520, setting to 64 [ 409.591486][ T6202] usb 9-1: config 6 interface 23 altsetting 157 has 2 endpoint descriptors, different from the interface descriptor's value: 219 [ 409.602774][ T6202] usb 9-1: config 6 interface 144 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 409.607602][ T6202] usb 9-1: config 6 interface 144 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 409.612409][ T6202] usb 9-1: config 6 interface 144 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 409.622535][ T6202] usb 9-1: config 6 interface 144 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 409.631683][ T6202] usb 9-1: config 6 interface 198 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 409.641822][ T6202] usb 9-1: config 6 interface 198 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 409.652001][ T6202] usb 9-1: config 6 interface 198 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 409.662147][ T6202] usb 9-1: config 6 interface 198 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 409.672275][ T6202] usb 9-1: config 6 interface 198 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 409.682457][ T6202] usb 9-1: config 6 interface 198 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 409.692586][ T6202] usb 9-1: config 6 interface 198 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 409.702742][ T6202] usb 9-1: config 6 interface 198 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 409.712905][ T6202] usb 9-1: config 6 interface 198 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 409.723076][ T6202] usb 9-1: config 6 interface 198 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 409.733217][ T6202] usb 9-1: config 6 interface 224 has no altsetting 0 [ 409.746042][ T6202] usb 9-1: config 6 interface 23 has no altsetting 0 [ 409.748938][ T6202] usb 9-1: config 6 interface 144 has no altsetting 0 [ 409.751994][ T6202] usb 9-1: config 6 interface 198 has no altsetting 0 [ 409.757617][ T6202] usb 9-1: Dual-Role OTG device on HNP port [ 409.760407][ T6202] usb 9-1: New USB device found, idVendor=2040, idProduct=b111, bcdDevice=d1.e8 [ 409.764197][ T6202] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.774445][ T6202] usb 9-1: Product: 泥瀤梇腍粣肞셣廩鯟餂䰻ラꤱࡳ짲묹봙穕覄䤜䃡飀✐慠䇒먡栔ⷫ焹裚풖ࢮ䃿竄彟嶁圯黱㷙黲䶡涗턚띾잠哢㨟襗쫹릏妜堅⑛诞๸⤌癆숸ￖ࠹楠ﰿ炓Ꙋ㚣鮿ᨐ庶矀戚親䝖⬾뉷⡈헽ڀ힭ྊ¶ᾸÒ㒮雸ג燛걏Ț䑖ʌ讻뇻聇⅝끒⒏ݠ儾뙪氄贈 [ 409.787357][ T6202] usb 9-1: Manufacturer: ї [ 409.789229][ T6202] usb 9-1: SerialNumber: О [ 409.794026][T13306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 409.796653][T13306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 410.966424][ T59] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 412.123843][ T6202] usb 9-1: USB disconnect, device number 17 [ 412.245615][T13395] lo speed is unknown, defaulting to 1000 [ 412.333642][T13395] lo speed is unknown, defaulting to 1000 [ 412.552179][T13399] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.2070'. [ 1434.920245][T29512] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1434.922535][T29512] CPU: 2 UID: 0 PID: 29512 Comm: kworker/u32:19 Not tainted syzkaller #0 PREEMPT(full) [ 1434.927477][T29512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1434.930738][T29512] Workqueue: netns cleanup_net [ 1434.932508][T29512] Call Trace: [ 1434.933768][T29512] [ 1434.934828][T29512] dump_stack_lvl+0x3d/0x1f0 [ 1434.936399][T29512] vpanic+0x640/0x6f0 [ 1434.937841][T29512] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 1434.939673][T29512] panic+0xca/0xd0 [ 1434.941021][T29512] ? __pfx_panic+0x10/0x10 [ 1434.942632][T29512] ? check_panic_on_warn+0x1f/0xb0 [ 1434.944196][T29512] check_panic_on_warn+0xab/0xb0 [ 1434.945736][T29512] __warn+0xf6/0x3c0 [ 1434.947174][T29512] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 1434.949097][T29512] report_bug+0x3c3/0x580 [ 1434.950648][T29512] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 1434.952191][T29512] handle_bug+0x184/0x210 [ 1434.953450][T29512] exc_invalid_op+0x17/0x50 [ 1434.954744][T29512] asm_exc_invalid_op+0x1a/0x20 [ 1434.956107][T29512] RIP: 0010:xfrm6_tunnel_net_exit+0x9f/0x160 [ 1434.957731][T29512] Code: 00 00 00 49 8d 3c dc 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 bd 00 00 00 89 e8 49 8b 04 c4 48 85 c0 74 ab e8 c2 94 9e f7 90 <0f> 0b 90 eb a0 4d 8d ac 24 00 08 00 00 31 db 49 be 00 00 00 00 00 [ 1434.963063][T29512] RSP: 0018:ffffc90002e5fa90 EFLAGS: 00010293 [ 1434.964775][T29512] RAX: 0000000000000000 RBX: 0000000000000000 RCX: fffff520005cbf23 [ 1434.966991][T29512] RDX: ffff8880639f8000 RSI: ffffffff8a1dd88e RDI: ffff888044310000 [ 1434.969244][T29512] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 1434.971472][T29512] R10: ffffffff908239d7 R11: 0000000000000001 R12: ffff888044310000 [ 1434.973689][T29512] R13: dffffc0000000000 R14: fffffbfff205e598 R15: ffffffff902f2ca0 [ 1434.975917][T29512] ? xfrm6_tunnel_net_exit+0x9e/0x160 [ 1434.977435][T29512] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 1434.979114][T29512] ops_undo_list+0x2ee/0xab0 [ 1434.980438][T29512] ? __pfx_ops_undo_list+0x10/0x10 [ 1434.981883][T29512] ? cleanup_net+0x347/0x8b0 [ 1434.983210][T29512] ? idr_destroy+0x62/0x2e0 [ 1434.984510][T29512] cleanup_net+0x41b/0x8b0 [ 1434.985790][T29512] ? __pfx_cleanup_net+0x10/0x10 [ 1434.987297][T29512] ? rcu_is_watching+0x12/0xc0 [ 1434.988685][T29512] process_one_work+0x9cf/0x1b70 [ 1434.990093][T29512] ? __pfx_process_one_work+0x10/0x10 [ 1434.991613][T29512] ? assign_work+0x1a0/0x250 [ 1434.992887][T29512] worker_thread+0x6c8/0xf10 [ 1434.994203][T29512] ? __pfx_worker_thread+0x10/0x10 [ 1434.995670][T29512] kthread+0x3c5/0x780 [ 1434.996838][T29512] ? __pfx_kthread+0x10/0x10 [ 1434.998173][T29512] ? rcu_is_watching+0x12/0xc0 [ 1434.999543][T29512] ? __pfx_kthread+0x10/0x10 [ 1435.000857][T29512] ret_from_fork+0x675/0x7d0 [ 1435.002177][T29512] ? __pfx_kthread+0x10/0x10 [ 1435.003524][T29512] ret_from_fork_asm+0x1a/0x30 [ 1435.004913][T29512] [ 1435.006495][T29512] Kernel Offset: disabled [ 1435.007840][T29512] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:45:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000000080000 RBX=0000000000000001 RCX=ffffc90027cfc000 RDX=0000000000080000 RSI=ffffffff817ecde9 RDI=0000000000000001 RBP=ffffc90006f4fe40 RSP=ffffc90006f4fc98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000011 R13=0000000000000011 R14=0000000000000010 R15=ffff88801bf6a500 RIP=ffffffff81a153fd RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097810000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f6553353 CR3=0000000072026000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000003d9dbeb RBX=0000000000000001 RCX=ffffffff8b5d42a9 RDX=ffffed1005666656 RSI=ffffffff8da27d51 RDI=ffffffff8bf075c0 RBP=ffffed1003b5f490 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801dafa480 R14=ffffffff908239d0 R15=0000000000000000 RIP=ffffffff8b5d2d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097910000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000031d0bff8 CR3=0000000072026000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000023 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85267d75 RDI=ffffffff9adc2de0 RBP=ffffffff9adc2da0 RSP=ffffc90002e5f2d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000023 R14=ffffffff9adc2da0 R15=ffffffff85267d10 RIP=ffffffff85267d9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a10000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53d4d80 CR3=0000000072026000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000000 RBX=0000000000000003 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8da0240a RDI=ffffffff8bf075c0 RBP=ffff88802aecc260 RSP=ffffc9000cdd7270 R8 =0000000000000005 R9 =0000000000000300 R10=0000000000000300 R11=0000000000000001 R12=ffff888013510000 R13=0000000000000001 R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff8b5d4a5c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b10000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe624ad4000 CR3=000000004b182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 63696d6f74616269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000248 0000000000007db8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000