last executing test programs: 1m50.75879537s ago: executing program 1 (id=6421): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002fc0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (fail_nth: 2) 1m50.698809207s ago: executing program 1 (id=6422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x1000, 0x4000}) close(r4) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) r6 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffc9, 0x1c02, 0x2, 0x7f, "cc33101d3f0000002000"}) ioctl$TCSETS(r8, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r9 = syz_open_pts(r8, 0x42) r10 = dup3(r9, r8, 0x0) write$UHID_INPUT(r10, &(0x7f00000001c0)={0xd, {"08c39ee52f329f1698b1c4865f8b0a0a5eee9f496a0809c3d21c25867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76013256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r10, 0x8, '\x00', r11, r2, 0x3, 0x4}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_INFO={0x6, 0x3, "d67a"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) 1m48.932473732s ago: executing program 1 (id=6427): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) 1m48.880977453s ago: executing program 1 (id=6428): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000021c0)='syzkaller\x00'}, 0x90) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x4}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getnetconf={0x14, 0x52, 0x7dc1ef03f111e94f}, 0x14}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r1, 0x13, 0x1, 0x10, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r3, 0x0, 0x0, @val=@netkit={@void, @value=r3, @void, @void, r5}}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac140700000000000000183f2500000000000000000100007f0000017f000001"], 0x0) 1m48.790045029s ago: executing program 1 (id=6430): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000440)={0x0, @output={0x1000, 0x1, {0x5, 0x1}, 0x4, 0x80}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) setreuid(0xffffffffffffffff, 0xee00) keyctl$setperm(0x5, 0x0, 0x220c) sendto$inet6(r1, 0x0, 0x0, 0x38, 0x0, 0x0) 1m47.885425287s ago: executing program 1 (id=6435): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYBLOB="05002dbd7000fdffffff2100000008000300", @ANYBLOB="2090e23728681bd888a29222cf17b6d36f178519ad51b984e2bec4a5c7a720317c3c88f0cc78bc715b671b7b13bd8df36719b20a39d307c8b8a33e717335f22c13af237a7fa33a7b25f120af4cbbe8ffe2bafc5add660f1b1e36518e93fccb5fa2402d91700e1295d9849bd1376afbef005a97bd5f4e3925f25655d226d643a3072d23e4f108281575a7d51c2e63c02edff33371", @ANYBLOB="0600eb0009000000"], 0x24}, 0x1, 0x0, 0x0, 0x4060000}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x4c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1e}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2a}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4090) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1m45.554364741s ago: executing program 0 (id=6441): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=@newtclass={0x7c, 0x28, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0x9, 0xffff}, {0xffff, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x81}}, @TCA_RATE={0x6, 0x5, {0x5, 0xc}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3ff}}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x33}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r4, 0x29, 0xce, &(0x7f0000000180), &(0x7f0000000300)=0x4) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendmsg$rds(r8, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7fff, 0x80000000}, 0x0, 0x0, 0x9, 0x8, 0x3, 0x800, 0x47, 0x6}}], 0x58}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r5, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r9, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) 1m44.559686673s ago: executing program 0 (id=6445): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) ioperm(0x284, 0x7f, 0xe3) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x24, r6, 0x1, 0x70bd2d, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x24}}, 0x20004044) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) readv(r7, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) r11 = memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x1) fsetxattr$security_ima(r11, &(0x7f0000000080), 0x0, 0x0, 0x0) write$binfmt_script(r11, &(0x7f0000003b80)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fchmod(0xffffffffffffffff, 0x134) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) sysinfo(0x0) sysinfo(&(0x7f0000000240)=""/60) 1m43.141513001s ago: executing program 0 (id=6451): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$nbd(0xffffffffffffffff, &(0x7f0000000980)={0x67446698, 0x0, 0x0, 0x0, 0x4, "d46f63a3a872b765c4166dc0d406e120b4b39baffcac36"}, 0x27) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) write(r0, &(0x7f0000000040)="09000000010001", 0x7) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x12041) ptrace(0x10, r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000026000000000000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) ptrace$pokeuser(0x6, r2, 0x118, 0x40000089) r5 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) shmat(r5, &(0x7f0000ffc000/0x3000)=nil, 0x5000) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) syz_emit_ethernet(0x36, &(0x7f0000000680)={@dev, @random, @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @multicast2}, {{0xfffc, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) ioctl$VT_ACTIVATE(r7, 0x5606, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r8, &(0x7f0000003580)=[{{&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="793d6471b011710eb78e563014c6c657b5034d", 0x13}], 0x1, &(0x7f0000000340)=[{0x24, 0x109, 0x2, "6188b595efde00689f68f2b09201eedba551e1fc06"}, {0x54, 0x10e, 0x642, "a3f011b1032d8338599c05f3fedba0ee29bd252ef14466b51b56a2296551980cff60f74db213bfe6d176f81ea2082ce9cd6514ffb1373fa522c638a36ac6d7a6fd085fb392d4b1c5"}, {0x24, 0x111, 0x400, "c305815682116c2e37246a1c342d6e65a7ec82553f177311"}, {0x20, 0x103, 0x9, "54839afa43140a06dd1adb68ea3321ee0eca7b98"}, {0xd8, 0x10e, 0x2, "1c1e273f53577c5126dd73ded28eb47d0204586fd4645fed2636e0872e0a21ee6cc4924c3cbf3c84ee35046e3f3c400fffe04fb91475794ab1b3b9f5246c7198bce49ec23647cb9d36d8a122de0b8b1c75a36a8d289fefb00cb824d61cba9c248913db6441dd0372d9587466d0f9125be5197b99631f67977c0e5f542265a34c3ca2bb2817017d1165bdc7e08ee973c6a29b0509f0e73826cddf681c66e5a5bf4f56f318d3bdd753b773fb3b8ac06f4984265114d22f9c4155768801d5b8c1bcc03941b68367ff1563"}], 0x194}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="8de4aa4cf1e0747733c77e8384e021c4eeec261c346d908a54fb0d882fec0e6c64b1460173e2519aabdf23b7bc3ed4d0", 0x30}, {&(0x7f0000000600)="0426d06f1b8b5434e5d25c4b81d5932b6e4f54e205086709391755361cf068a5e74b95a6987af752b1b597c7aec828eef1cb0c6a3ad1a058acf5b9edb75b63cd42882ab1344622589bda0bad6da253d0ef76c77c83e038cdaca44ffa7d1559b7fbce2a7b42773da1042f5170942bb12c42f9b4665740d74b0986d7deb0a0b2162e4260bbd56ae52332065b2b2aa17bc0f10baa9155e51840add1646b13efc2696c20b930b04d885694fd0c44e60e5eb749a3abd5acb2", 0xb6}, {&(0x7f0000000540)="f8419028ff5d99f5feb2a95020dfd3be2cf2e769c5ea44719b52895afdf004d452aa7eb822d24b606747839edd85608b83e5d76f7602ac0dedaa66af2c5d27f65694010d1e9cf0ec23391bf50572b7c9b4c49d8763", 0x55}, {&(0x7f00000006c0)="56830ff2f6ca2f9cf8214a6444da1481f161c1103d2dd2256e45c49bc4ddebfb276208b81e38653e1e22ccd502dd7c728bc5507e45d77e72875da320d94a7297be2069814266fe4b2e1a7d768ac17a1043ce43cda9beabab7f3203788019b227d0328a6869ad1d29333a725f01ef44787fb9f1eb4576dcba49c217", 0x7b}], 0x4, &(0x7f0000000780)=[{0x7c, 0x10a, 0x2a1, "22391b8a81ae48860b6d6f25f254ec0e19d833591e1a40cc2e3f27e1919533a567a66c899dd09bc0bbb8e5633b1d445bbdd854504f80a96cbced7df1688a96becdf6c5e0ab81b966a058638117034a9244ee04be53d55c4b7bfbb89f6c865a489de443ffbe832555dcf31df58251d8"}], 0x7c}}, {{&(0x7f0000000840)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80, &(0x7f0000000f40)=[{&(0x7f00000008c0)="06d9802a0d39cea918cb0fbd211d688a936095ad73eff03caaaf655141264140c5880cad51a68ffa9326a1e452e428465d6fd58a37f2e4b9c81ed4fc5c0341", 0x3f}, {&(0x7f0000000900)="7074facb20d6e70c98800199bd7bd772d97f5e860705c7c54fe2d382f8cf7f223d48ef2d177405ba9e2d670d26231afdd995f01e0dea7151f6d789021467f77e948d29472fc62576fce32fb16fcbe0d3de612b159f06809e422fcf117ac23b770f8ee4f4f1", 0x65}, {&(0x7f0000000ac0)="372aed674a4a6e74263eef1c8bc7f355ef0a53aca22eca9251964c02d582b8b80c758d8947e1ba79f6907389dfa8152a908c889665bea34a4121df8cd5ed3282e667c5bc7a20fc4787f1714e72de0521c10c6cf699534219db71107ef52422a11b7b237cb2bd2e72bcff1e629b5c02dadd33a4e97ddfe2057affa8d643ee5cd0d0f8bbfc1a9ad76ed46de6b86bdf770b5b367e04cd06d62e18025d6480842a7b10199d1a0e1cbc776e76d72857fbc13eecb085e5235a76cf8562903038c048b9436c3bf86717f985f5", 0xc9}, {&(0x7f0000000bc0)="5c6c98bcd544e7966e5185e2168a075b206a9cba0c41e1aeba31f957e3f5a2b5be24a495b7d9e3d5e79f7bbde74465c98bdf46caa196e830baab46403098ee45155eb94022f7763ba6e79a20551d9c1ed078229e12fa44c0612dd6b4e4e3cdac7b0e278a11898b7052af00ee37f91e8187d4bc3ab657dab7c8ee4586fc0cfa03bc6ee0b638ba32bd83c23d6b601da24c0df644f5f0e5dfe241", 0x99}, {&(0x7f0000000c80)="828a6087752d1e6f14a30e15efa59182de6b7dc2143d0a6db5802c31b18a097a5f78e249bf101330e5ab6308fb545878f1f3e3379a5542c616", 0x39}, {&(0x7f0000000cc0)="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", 0xfb}, {&(0x7f0000000dc0)="9cd5566d335d9ab200502d33a984e0f244f27a042ecd82efd23e6600645751c43e19fd6b2b7eadb8a33b919c06cd163cdb942f247ff18e8775bd71c6c782869859713d380401581f64b54df8b7c02e2a43bfabbdf77b70ca7c1b22ac4a27697991659dfd1c07034052c4c24d0d", 0x6d}, {&(0x7f0000000e40)}, {&(0x7f0000000ec0)="2063737b85309fbe85a0caf080da15b3b20592ae6afa030e7348f6499d16e6f069caab2a1f9794d8947b3dff0d4671289969bfd4857d363db057e276476b847079fa5fd92ebe8f", 0x47}], 0x9}}, {{&(0x7f0000000fc0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001040)="6d8d1f399fde6970d134cd84f7ad2eeaa054c695b1f5f53b56ff0b8fbecd93102552c9559dcbd28ab4c9c24c8b52666514613419d0f7779be871ebad5ecf9ceed31c4b", 0x43}, {&(0x7f00000010c0)="ff9e13dced6e89dcd9885646f35b214ca8ccc8", 0x13}], 0x2, &(0x7f0000001140)=[{0xc, 0x0, 0x8}, {0xb8, 0x1, 0x2, "2a333c561515058a16a14f700e97634d72311d4823852aeaf92056bb9ccdcb5a6111ac3a606697579ec1d637497cc56c53340091b892a08b6eb57e1dea717f3439436a49bbe9299c82f4eac73ddf67320e041f46577ef5e46eb0c3fd332200c971f4fead9983f164a77fddb4a4d0351bc8c3cd042f20c599e4a232f8bd6a80b1dbe5ebb99d8aaa2f3f57d188047b5e58842de178fe0d359979e230d3317549c2b2ee4e2b1597759b244a18d7"}, {0xcc, 0x104, 0x1, "d703a056f8221fbaa4c81aca26a3dc17a57e12cc60987daf1bd7790ef17a740b78830241cb050a9b745b84a3b5f1107532f9937ff85d7a6c0d8215a0fea986f79007fd08c77ce1807e508e35ff1ca631bb99da54311c09cb686612bd1b5865c7aeec9d067f09c78929e01a2db5bbc92cdbe07d0ee8e12bd61c58d48e0488ab796190b00fb33256ef593d0a68968123fbea373a8af25d8c0ec94f38f8957a6e01d18c6a8ce7b490701f4b9c50b10b82c8619e17f30a3d77a920cc22d8ecac7c"}, {0x1c, 0x1, 0x6, "0ba18a7dddc14474697b02ef7ad2ce"}, {0x70, 0x103, 0x1, "0ae8e5284f546059492f230abe916de72fbe5f685f1c45eb568b9a8d6f88a703d2f55b4e7e5e955d80d694a87a0231ec349f3aa09e3bf1d33da2b96a82a82ad4501418adc7b77906a23be0aa6f7b6ca929089b6320fa1586bf2930ee52b5c20c8ea5"}, {0x78, 0x10a, 0x55, "344812dac052830b461ccdf4242994a4b3da51bf1bebf4539aca38b1839208659c06ce88b79295528221d3d830358af89fc59fbde5d0d5f3cbac5fb08069358b5be2f200a54eab5738404c4f8f7d742e5e395dd05be3eda01e19aff0b6d1adb0c6dbe8691c0c6d93759bff7d"}, {0x68, 0x10e, 0x2, "00b1bef41b691aea6dc8766f8512933fdbcde8267d2e9e06fdf6d94210ae287daac5eb460a910da101862866962de9af9a44530ef3cc2087b23e6f218c00f47b3022ea4a1a7750347111bb9fc03d760c2a63494efb0b80c3e7"}, {0x784, 0x116, 0xcfc313e, "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"}, {0x100c, 0x104, 0x8, "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"}], 0x1a8c}}], 0x4, 0x40) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x5, 0x7, 0xffff, 0x5}}) 1m42.948716554s ago: executing program 0 (id=6453): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1e8, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffc01a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40260f9b}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x800}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x567}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc31}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb5d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20000015}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getroute={0x14, 0x1a, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4810) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e20}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x400000000000000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) (async) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1e8, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffc01a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40260f9b}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x800}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x567}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc31}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb5d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20000015}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getroute={0x14, 0x1a, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4810) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e20}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x400000000000000}, 0x0) (async) 1m42.82915708s ago: executing program 0 (id=6456): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x1, 0x10, "0062ba7d8200000000f7ffffff00"}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x3) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000002200)=ANY=[@ANYBLOB="8d962ef7", @ANYRES16=r0, @ANYBLOB="000125bd7000fedbdf2506000000080006000400000008000500090000006c00038008000500ac1414bb06000400bb0000000800010000000000080005000a010100050008008700000005000800090000001400020076657468305f766972745f776966690008000100020000001400020076657468315f746f5f687372000000000800010002000000080004008100000008000600030000000c0001800600010002000000"], 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x410, 0x0, 0x320, 0x320, 0xdc, 0x320, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, 0xff, 0xffffffff, 'pimreg\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x21, 0x2, 0xc}, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@icmp={{0x24}, {0xe, "b16e"}}, @inet=@rpfilter={{0x20}, {0x1}}]}, @TTL={0x24, 'TTL\x00', 0x0, {0x2, 0xe2}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@empty, @local, 0xffffff00, 0xffffffff, 'wg1\x00', 'syzkaller1\x00', {0xff}, {}, 0x67, 0x3, 0x24}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x800, @loopback, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xa062, 0xb, [0x15, 0x2b, 0x37, 0x24, 0xc, 0x19, 0x5, 0x3c, 0x31, 0x3b, 0x2, 0x34, 0x2, 0x8, 0x24, 0x1e], 0x1, 0x7983, 0x8}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x8001, @broadcast, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x46c) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) read$FUSE(r6, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r7, 0x0, 0x40000000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getrusage(0x0, 0x0) 1m41.964549155s ago: executing program 0 (id=6458): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000040000000700000009000000000000005fcc050db1e9641bbfb73539731591c0d5f47dc2c08fc125536b63d5d8881e33cbd328b926c3311a3927622b19c24c45a85179e379d5118fe2d1d4a6339a6730494fa836b6d5fc7a197653558c969a6bf3a50fc844b971893d132eece82b52884681a24716a5953a4a868873a35da98513426a40e487394f7bccf65d21f26fffb5ec2861723b541ee9943a97208309ea89178d5cb49524fd709f9c25ee42199ecb522eecc1f16432d7b780b8c3bf1b0bb96455ff3bb9263f49f90c565405cac4e202a84a660864eddf5774272f0df9b7cb63a94a511c7ac0dbad1eab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = socket$inet(0xa, 0x2, 0x284) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3, 0x0, 0x8}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @rand_addr=' \x01\x00', 0x2}, 0x1c) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}, r6}, 0x14) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x15, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x2, 0x2, 0x7, 0xa, 0x6, 0xfffffffffffffffc}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xff}, @generic={0x7f, 0xd, 0x4, 0x1, 0x620}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x340, 0x21, &(0x7f00000002c0)=""/33, 0x40f00, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r8, r0, r0, r0, r0, r0], &(0x7f00000006c0)=[{0x5, 0x1, 0x10, 0x4}], 0x10, 0x200}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x8001, 0x7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000087313600000000224f06a97c4434b1b3"], &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x90) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m32.81447303s ago: executing program 32 (id=6435): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYBLOB="05002dbd7000fdffffff2100000008000300", @ANYBLOB="2090e23728681bd888a29222cf17b6d36f178519ad51b984e2bec4a5c7a720317c3c88f0cc78bc715b671b7b13bd8df36719b20a39d307c8b8a33e717335f22c13af237a7fa33a7b25f120af4cbbe8ffe2bafc5add660f1b1e36518e93fccb5fa2402d91700e1295d9849bd1376afbef005a97bd5f4e3925f25655d226d643a3072d23e4f108281575a7d51c2e63c02edff33371", @ANYBLOB="0600eb0009000000"], 0x24}, 0x1, 0x0, 0x0, 0x4060000}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x4c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1e}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2a}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4090) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1m26.681692956s ago: executing program 33 (id=6458): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000040000000700000009000000000000005fcc050db1e9641bbfb73539731591c0d5f47dc2c08fc125536b63d5d8881e33cbd328b926c3311a3927622b19c24c45a85179e379d5118fe2d1d4a6339a6730494fa836b6d5fc7a197653558c969a6bf3a50fc844b971893d132eece82b52884681a24716a5953a4a868873a35da98513426a40e487394f7bccf65d21f26fffb5ec2861723b541ee9943a97208309ea89178d5cb49524fd709f9c25ee42199ecb522eecc1f16432d7b780b8c3bf1b0bb96455ff3bb9263f49f90c565405cac4e202a84a660864eddf5774272f0df9b7cb63a94a511c7ac0dbad1eab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = socket$inet(0xa, 0x2, 0x284) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3, 0x0, 0x8}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @rand_addr=' \x01\x00', 0x2}, 0x1c) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}, r6}, 0x14) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x15, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x2, 0x2, 0x7, 0xa, 0x6, 0xfffffffffffffffc}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xff}, @generic={0x7f, 0xd, 0x4, 0x1, 0x620}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x340, 0x21, &(0x7f00000002c0)=""/33, 0x40f00, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r8, r0, r0, r0, r0, r0], &(0x7f00000006c0)=[{0x5, 0x1, 0x10, 0x4}], 0x10, 0x200}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x8001, 0x7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000087313600000000224f06a97c4434b1b3"], &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x90) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.318092764s ago: executing program 3 (id=6858): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, 0x0, 0x0, 0x700, 0x0) sendfile(r3, r1, 0x0, 0x578410eb) socket$kcm(0x10, 0x2, 0x0) getpid() r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x647f}, 0x8) socket$kcm(0x29, 0x5, 0x0) 3.964160691s ago: executing program 5 (id=6862): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_cancel(0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a00006c"], 0x14}}, 0x0) write$tun(r3, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) semget$private(0x0, 0x2, 0x662) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e041e0b20"], 0x7) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = epoll_create1(0x80000) epoll_pwait(r6, &(0x7f00000000c0)=[{}], 0x1, 0x9, &(0x7f0000000300), 0x8) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000010000d0400"/20, @ANYRES32=r8, @ANYBLOB="000000000021010044001280110001006272696467655f736c617665000000002c000580050020000100000005000a"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r9, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r9, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', r8, 0x29, 0xc, 0x8, 0x3, 0x14, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x10, 0x8, 0xf4800000, 0x9}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x8000, 0x0, 0x1, 0x8}, 0x33, [0xf, 0x1, 0x4, 0x2, 0x3, 0x3, 0x6, 0x39b, 0x2, 0x0, 0x1, 0x66a, 0x2, 0x81, 0x3, 0x7fff, 0x3, 0x7, 0xb, 0x2b6, 0xc76e, 0x3, 0xa0000000, 0x80000000, 0x2, 0x7, 0xaa, 0x8001, 0x2, 0x9, 0x5, 0x2, 0x9, 0xa9cc, 0x3, 0xffffff7d, 0x7, 0x2, 0x7, 0x5, 0x3, 0x6, 0x6, 0x7, 0x9, 0x7, 0x8000, 0x0, 0xfffffffa, 0x8, 0x600, 0x2da49a0c, 0x8, 0x517, 0x5, 0x639a, 0x53c8, 0xd2, 0x5, 0x4, 0x3, 0x5, 0xfffffff7, 0xffffff00], [0x0, 0x2, 0x1, 0x0, 0x1ff, 0x5, 0x3, 0x5, 0x1e, 0x5, 0x9, 0xa, 0x7, 0x92, 0xffffffff, 0x6, 0x8, 0x60000, 0x400, 0xd, 0xac, 0x6, 0xfffffff0, 0x5, 0x7, 0x63, 0xe8f6, 0x3ff, 0x9, 0x2, 0x2, 0x0, 0x99e2, 0x5, 0x50, 0x7, 0x544, 0x8, 0x8000, 0x1, 0x1ffc0000, 0x6, 0x8, 0x8000, 0x7, 0x80, 0x7ff, 0x80000000, 0x7, 0x4, 0x2981, 0x0, 0x7, 0x3, 0x9, 0x81, 0x6, 0xe, 0x7, 0xffff, 0x7, 0x0, 0x0, 0x10], [0xffffff81, 0x3, 0x3, 0x3027, 0x10000, 0x2b, 0x6, 0x0, 0xa, 0x4, 0xffff, 0x6, 0x0, 0x8000, 0x8, 0x4, 0x2, 0x7, 0x1, 0xe8, 0xb0, 0x5, 0x7, 0xa4a, 0x0, 0x4, 0x5, 0x5, 0xfffffff9, 0xfffffff8, 0x9fd, 0x2, 0x3, 0x5, 0x8, 0x3ff, 0x1, 0x6, 0x10001, 0xffffffff, 0x80, 0x6, 0xa, 0x3, 0x7ff, 0x80000001, 0xb, 0x2, 0x18, 0xc3, 0x101, 0x400, 0xc9, 0x9, 0x7f, 0x4, 0x0, 0x9, 0x7, 0x9, 0x4af, 0x2, 0xfffffffc, 0x101], [0x3, 0x0, 0x0, 0xc, 0x9, 0x1, 0x1820000, 0xb, 0x73, 0x1f, 0x6, 0x0, 0x5, 0x5, 0x1068bc08, 0x9, 0x8, 0x8, 0x80000000, 0x8, 0x10001, 0x3, 0x800, 0x5, 0x9, 0x1, 0x5, 0x800000, 0x8, 0x9, 0x7, 0x6e7, 0x5, 0x1, 0x3, 0x2, 0x6, 0xffffff20, 0x9, 0x0, 0x7, 0x5, 0x1, 0xfffffff9, 0x4, 0x10000, 0x9, 0x4c13b7e0, 0x10, 0x10000, 0x10001, 0x6, 0x2, 0x9, 0x7fffffff, 0x7, 0x7, 0xf4c, 0x7, 0x24, 0x4, 0x0, 0xa5, 0x4ee]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) 3.236441254s ago: executing program 3 (id=6865): syz_clone(0x91a0200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="24ab3f9fadf08a2bff49ec2208104e0c6339b39cda51a6b76683d93f1ad6a9b71cb8184fda55f020976ab9417b4afb12") r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00', r3}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) syz_io_uring_submit(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f00000005c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 3.216865502s ago: executing program 5 (id=6866): socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0x54a0, &(0x7f0000000280)={0x0, 0x70e6, 0x2, 0x0, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) add_key(&(0x7f0000000200)='ceph\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80804120, &(0x7f0000000300)) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x401070c9, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000000c0)={0x1, 0x4}) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') chroot(&(0x7f0000000040)='./file0\x00') umount2(0x0, 0x0) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) 2.552363751s ago: executing program 4 (id=6867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) close(0x3) msgrcv(0x0, 0x0, 0x0, 0x0, 0x2000) msgsnd(0x0, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x43, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000180)={0x1, "fa02c8098000", 0xffffffffffffffff}) openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x180, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') chdir(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40400, 0x0) read$FUSE(r8, &(0x7f0000000f00)={0x2020}, 0x2020) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r7, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r11, 0x200}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x1, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$qat_adf_ctl(0xffffff9c, &(0x7f00000000c0), 0x313002, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r12, 0x40046607, &(0x7f0000000100)=0xfff) 2.42221337s ago: executing program 3 (id=6869): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) close(0x3) msgrcv(0x0, 0x0, 0x0, 0x0, 0x2000) msgsnd(0x0, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x43, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000180)={0x1, "fa02c8098000", 0xffffffffffffffff}) openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x180, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000f00)={0x2020}, 0x2020) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r7, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r10, 0x200}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x1, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$qat_adf_ctl(0xffffff9c, &(0x7f00000000c0), 0x313002, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r11, 0x40046607, &(0x7f0000000100)=0xfff) 2.267752883s ago: executing program 5 (id=6871): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x1, 0x10, "0062ba7d8200000000f7ffffff00"}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x3) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000002200)=ANY=[@ANYBLOB="8d962ef7", @ANYRES16=r0, @ANYBLOB="000125bd7000fedbdf2506000000080006000400000008000500090000006c00038008000500ac1414bb06000400bb0000000800010000000000080005000a010100050008008700000005000800090000001400020076657468305f766972745f776966690008000100020000001400020076657468315f746f5f687372000000000800010002000000080004008100000008000600030000000c0001800600010002000000"], 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x410, 0x0, 0x320, 0x320, 0xdc, 0x320, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, 0xff, 0xffffffff, 'pimreg\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x21, 0x2, 0xc}, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@icmp={{0x24}, {0xe, "b16e"}}, @inet=@rpfilter={{0x20}, {0x1}}]}, @TTL={0x24, 'TTL\x00', 0x0, {0x2, 0xe2}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@empty, @local, 0xffffff00, 0xffffffff, 'wg1\x00', 'syzkaller1\x00', {0xff}, {}, 0x67, 0x3, 0x24}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x800, @loopback, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xa062, 0xb, [0x15, 0x2b, 0x37, 0x24, 0xc, 0x19, 0x5, 0x3c, 0x31, 0x3b, 0x2, 0x34, 0x2, 0x8, 0x24, 0x1e], 0x1, 0x7983, 0x8}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x8001, @broadcast, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x46c) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) read$FUSE(r5, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r6, 0x0, 0x40000000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000080)=0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getrusage(0x0, 0x0) 2.131085839s ago: executing program 5 (id=6872): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x481e) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) write(r1, &(0x7f0000000440), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0xfffffffffffffeeb}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) 1.596095704s ago: executing program 4 (id=6873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x84) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000440)={0x0, @output={0x1000, 0x1, {0x5, 0x1}, 0x4, 0x80}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) setreuid(0xffffffffffffffff, 0xee00) keyctl$setperm(0x5, 0x0, 0x220c) sendto$inet6(r1, 0x0, 0x0, 0x38, 0x0, 0x0) 1.502456795s ago: executing program 3 (id=6874): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/110) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0xc4, 0x30, 0x1, 0x0, 0x0, {}, [{0xb0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4a, 0x6, "f5b42818e1b254d0f8f4d6d0d45582c906113b22f6836fe686aea2383d41df8e11572e946c13333468aa1e2f181d741491fb553628b4b83aba02fb3d7086235ce87a8ea9b497"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x0, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x804}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0x5d}}}]}]}, 0x8c}}, 0x0) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.40829489s ago: executing program 2 (id=6876): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$nbd(0xffffffffffffffff, &(0x7f0000000980)={0x67446698, 0x0, 0x0, 0x0, 0x4, "d46f63a3a872b765c4166dc0d406e120b4b39baffcac36"}, 0x27) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) write(r0, &(0x7f0000000040)="09000000010001", 0x7) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x12041) ptrace(0x10, r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) ptrace$pokeuser(0x6, r2, 0x118, 0x40000089) r5 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) shmat(r5, &(0x7f0000ffc000/0x3000)=nil, 0x5000) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) syz_emit_ethernet(0x36, &(0x7f0000000680)={@dev, @random, @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @multicast2}, {{0xfffc, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) ioctl$VT_ACTIVATE(r7, 0x5606, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r8, &(0x7f0000003580)=[{{&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="793d6471b011710eb78e563014c6c657b5034d", 0x13}], 0x1, &(0x7f0000000340)=[{0x24, 0x109, 0x2, "6188b595efde00689f68f2b09201eedba551e1fc06"}, {0x54, 0x10e, 0x642, "a3f011b1032d8338599c05f3fedba0ee29bd252ef14466b51b56a2296551980cff60f74db213bfe6d176f81ea2082ce9cd6514ffb1373fa522c638a36ac6d7a6fd085fb392d4b1c5"}, {0x24, 0x111, 0x400, "c305815682116c2e37246a1c342d6e65a7ec82553f177311"}, {0x20, 0x103, 0x9, "54839afa43140a06dd1adb68ea3321ee0eca7b98"}, {0xd8, 0x10e, 0x2, "1c1e273f53577c5126dd73ded28eb47d0204586fd4645fed2636e0872e0a21ee6cc4924c3cbf3c84ee35046e3f3c400fffe04fb91475794ab1b3b9f5246c7198bce49ec23647cb9d36d8a122de0b8b1c75a36a8d289fefb00cb824d61cba9c248913db6441dd0372d9587466d0f9125be5197b99631f67977c0e5f542265a34c3ca2bb2817017d1165bdc7e08ee973c6a29b0509f0e73826cddf681c66e5a5bf4f56f318d3bdd753b773fb3b8ac06f4984265114d22f9c4155768801d5b8c1bcc03941b68367ff1563"}], 0x194}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="8de4aa4cf1e0747733c77e8384e021c4eeec261c346d908a54fb0d882fec0e6c64b1460173e2519aabdf23b7bc3ed4d0", 0x30}, {&(0x7f0000000600)="0426d06f1b8b5434e5d25c4b81d5932b6e4f54e205086709391755361cf068a5e74b95a6987af752b1b597c7aec828eef1cb0c6a3ad1a058acf5b9edb75b63cd42882ab1344622589bda0bad6da253d0ef76c77c83e038cdaca44ffa7d1559b7fbce2a7b42773da1042f5170942bb12c42f9b4665740d74b0986d7deb0a0b2162e4260bbd56ae52332065b2b2aa17bc0f10baa9155e51840add1646b13efc2696c20b930b04d885694fd0c44e60e5eb749a3abd5acb2", 0xb6}, {&(0x7f0000000540)="f8419028ff5d99f5feb2a95020dfd3be2cf2e769c5ea44719b52895afdf004d452aa7eb822d24b606747839edd85608b83e5d76f7602ac0dedaa66af2c5d27f65694010d1e9cf0ec23391bf50572b7c9b4c49d8763", 0x55}, {&(0x7f00000006c0)="56830ff2f6ca2f9cf8214a6444da1481f161c1103d2dd2256e45c49bc4ddebfb276208b81e38653e1e22ccd502dd7c728bc5507e45d77e72875da320d94a7297be2069814266fe4b2e1a7d768ac17a1043ce43cda9beabab7f3203788019b227d0328a6869ad1d29333a725f01ef44787fb9f1eb4576dcba49c217", 0x7b}], 0x4, &(0x7f0000000780)=[{0x7c, 0x10a, 0x2a1, "22391b8a81ae48860b6d6f25f254ec0e19d833591e1a40cc2e3f27e1919533a567a66c899dd09bc0bbb8e5633b1d445bbdd854504f80a96cbced7df1688a96becdf6c5e0ab81b966a058638117034a9244ee04be53d55c4b7bfbb89f6c865a489de443ffbe832555dcf31df58251d8"}], 0x7c}}, {{&(0x7f0000000840)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80, &(0x7f0000000f40)=[{&(0x7f00000008c0)="06d9802a0d39cea918cb0fbd211d688a936095ad73eff03caaaf655141264140c5880cad51a68ffa9326a1e452e428465d6fd58a37f2e4b9c81ed4fc5c0341", 0x3f}, {&(0x7f0000000900)="7074facb20d6e70c98800199bd7bd772d97f5e860705c7c54fe2d382f8cf7f223d48ef2d177405ba9e2d670d26231afdd995f01e0dea7151f6d789021467f77e948d29472fc62576fce32fb16fcbe0d3de612b159f06809e422fcf117ac23b770f8ee4f4f1", 0x65}, {&(0x7f0000000ac0)="372aed674a4a6e74263eef1c8bc7f355ef0a53aca22eca9251964c02d582b8b80c758d8947e1ba79f6907389dfa8152a908c889665bea34a4121df8cd5ed3282e667c5bc7a20fc4787f1714e72de0521c10c6cf699534219db71107ef52422a11b7b237cb2bd2e72bcff1e629b5c02dadd33a4e97ddfe2057affa8d643ee5cd0d0f8bbfc1a9ad76ed46de6b86bdf770b5b367e04cd06d62e18025d6480842a7b10199d1a0e1cbc776e76d72857fbc13eecb085e5235a76cf8562903038c048b9436c3bf86717f985f5", 0xc9}, {&(0x7f0000000bc0)="5c6c98bcd544e7966e5185e2168a075b206a9cba0c41e1aeba31f957e3f5a2b5be24a495b7d9e3d5e79f7bbde74465c98bdf46caa196e830baab46403098ee45155eb94022f7763ba6e79a20551d9c1ed078229e12fa44c0612dd6b4e4e3cdac7b0e278a11898b7052af00ee37f91e8187d4bc3ab657dab7c8ee4586fc0cfa03bc6ee0b638ba32bd83c23d6b601da24c0df644f5f0e5dfe241", 0x99}, {&(0x7f0000000c80)="828a6087752d1e6f14a30e15efa59182de6b7dc2143d0a6db5802c31b18a097a5f78e249bf101330e5ab6308fb545878f1f3e3379a5542c616", 0x39}, {&(0x7f0000000cc0)="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", 0xfb}, {&(0x7f0000000dc0)="9cd5566d335d9ab200502d33a984e0f244f27a042ecd82efd23e6600645751c43e19fd6b2b7eadb8a33b919c06cd163cdb942f247ff18e8775bd71c6c782869859713d380401581f64b54df8b7c02e2a43bfabbdf77b70ca7c1b22ac4a27697991659dfd1c07034052c4c24d0d", 0x6d}, {&(0x7f0000000e40)}, {&(0x7f0000000ec0)="2063737b85309fbe85a0caf080da15b3b20592ae6afa030e7348f6499d16e6f069caab2a1f9794d8947b3dff0d4671289969bfd4857d363db057e276476b847079fa5fd92ebe8f", 0x47}], 0x9}}, {{&(0x7f0000000fc0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001040)="6d8d1f399fde6970d134cd84f7ad2eeaa054c695b1f5f53b56ff0b8fbecd93102552c9559dcbd28ab4c9c24c8b52666514613419d0f7779be871ebad5ecf9ceed31c4b", 0x43}, {&(0x7f00000010c0)="ff9e13dced6e89dcd9885646f35b214ca8ccc8", 0x13}], 0x2, &(0x7f0000001140)=[{0xc, 0x0, 0x8}, {0xb8, 0x1, 0x2, "2a333c561515058a16a14f700e97634d72311d4823852aeaf92056bb9ccdcb5a6111ac3a606697579ec1d637497cc56c53340091b892a08b6eb57e1dea717f3439436a49bbe9299c82f4eac73ddf67320e041f46577ef5e46eb0c3fd332200c971f4fead9983f164a77fddb4a4d0351bc8c3cd042f20c599e4a232f8bd6a80b1dbe5ebb99d8aaa2f3f57d188047b5e58842de178fe0d359979e230d3317549c2b2ee4e2b1597759b244a18d7"}, {0xcc, 0x104, 0x1, "d703a056f8221fbaa4c81aca26a3dc17a57e12cc60987daf1bd7790ef17a740b78830241cb050a9b745b84a3b5f1107532f9937ff85d7a6c0d8215a0fea986f79007fd08c77ce1807e508e35ff1ca631bb99da54311c09cb686612bd1b5865c7aeec9d067f09c78929e01a2db5bbc92cdbe07d0ee8e12bd61c58d48e0488ab796190b00fb33256ef593d0a68968123fbea373a8af25d8c0ec94f38f8957a6e01d18c6a8ce7b490701f4b9c50b10b82c8619e17f30a3d77a920cc22d8ecac7c"}, {0x1c, 0x1, 0x6, "0ba18a7dddc14474697b02ef7ad2ce"}, {0x70, 0x103, 0x1, "0ae8e5284f546059492f230abe916de72fbe5f685f1c45eb568b9a8d6f88a703d2f55b4e7e5e955d80d694a87a0231ec349f3aa09e3bf1d33da2b96a82a82ad4501418adc7b77906a23be0aa6f7b6ca929089b6320fa1586bf2930ee52b5c20c8ea5"}, {0x78, 0x10a, 0x55, "344812dac052830b461ccdf4242994a4b3da51bf1bebf4539aca38b1839208659c06ce88b79295528221d3d830358af89fc59fbde5d0d5f3cbac5fb08069358b5be2f200a54eab5738404c4f8f7d742e5e395dd05be3eda01e19aff0b6d1adb0c6dbe8691c0c6d93759bff7d"}, {0x68, 0x10e, 0x2, "00b1bef41b691aea6dc8766f8512933fdbcde8267d2e9e06fdf6d94210ae287daac5eb460a910da101862866962de9af9a44530ef3cc2087b23e6f218c00f47b3022ea4a1a7750347111bb9fc03d760c2a63494efb0b80c3e7"}, {0x784, 0x116, 0xcfc313e, "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"}, {0x100c, 0x104, 0x8, "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"}], 0x1a8c}}], 0x4, 0x40) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x5, 0x7, 0xffff, 0x5}}) 1.328517207s ago: executing program 2 (id=6877): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}], 0xb4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x441, 0x6, 0x0, 0x0, 0x2004cb, 0x8000000, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x1fe], 0x80a1000, 0x200306}) socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.197298097s ago: executing program 2 (id=6878): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x68) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x93) (fail_nth: 3) 1.091425888s ago: executing program 2 (id=6879): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 959.466194ms ago: executing program 2 (id=6880): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x1, 0x10, "0062ba7d8200000000f7ffffff00"}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x3) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000002200)=ANY=[@ANYBLOB="8d962ef7", @ANYRES16=r0, @ANYBLOB="000125bd7000fedbdf2506000000080006000400000008000500090000006c00038008000500ac1414bb06000400bb0000000800010000000000080005000a010100050008008700000005000800090000001400020076657468305f766972745f776966690008000100020000001400020076657468315f746f5f687372000000000800010002000000080004008100000008000600030000000c0001800600010002000000"], 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x410, 0x0, 0x320, 0x320, 0xdc, 0x320, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, 0xff, 0xffffffff, 'pimreg\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x21, 0x2, 0xc}, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@icmp={{0x24}, {0xe, "b16e"}}, @inet=@rpfilter={{0x20}, {0x1}}]}, @TTL={0x24, 'TTL\x00', 0x0, {0x2, 0xe2}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@empty, @local, 0xffffff00, 0xffffffff, 'wg1\x00', 'syzkaller1\x00', {0xff}, {}, 0x67, 0x3, 0x24}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x800, @loopback, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xa062, 0xb, [0x15, 0x2b, 0x37, 0x24, 0xc, 0x19, 0x5, 0x3c, 0x31, 0x3b, 0x2, 0x34, 0x2, 0x8, 0x24, 0x1e], 0x1, 0x7983, 0x8}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x8001, @broadcast, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x46c) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) read$FUSE(r6, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r7, 0x0, 0x40000000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000080)=0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getrusage(0x0, 0x0) 908.960547ms ago: executing program 5 (id=6881): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/224, 0xe0}], 0x1, 0x0, 0x10000ac1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) 246.157746ms ago: executing program 4 (id=6882): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x68) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000001e9000000000000056080000000000008500000007000000b7d2bd000000000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x93) 151.802814ms ago: executing program 4 (id=6883): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1fc, 0xd8, 0x11, 0x148, 0x0, 0x10, 0x168, 0x2a8, 0x2a8, 0x168, 0x2a8, 0xac, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'bridge0\x00', 'team0\x00'}, 0x10, 0xb8, 0xd8, 0x1c, {}, [@common=@unspec=@connlabel={{0x24}, {0xab}}, @inet=@rpfilter={{0x24}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x258) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r1, r2, 0x0) 151.415413ms ago: executing program 2 (id=6884): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/110) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0xc4, 0x30, 0x1, 0x0, 0x0, {}, [{0xb0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4a, 0x6, "f5b42818e1b254d0f8f4d6d0d45582c906113b22f6836fe686aea2383d41df8e11572e946c13333468aa1e2f181d741491fb553628b4b83aba02fb3d7086235ce87a8ea9b497"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x0, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x804}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0x5d}}}]}]}, 0x8c}}, 0x0) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) 138.801334ms ago: executing program 3 (id=6885): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$nbd(0xffffffffffffffff, &(0x7f0000000980)={0x67446698, 0x0, 0x0, 0x0, 0x4, "d46f63a3a872b765c4166dc0d406e120b4b39baffcac36"}, 0x27) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) write(r0, &(0x7f0000000040)="09000000010001", 0x7) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x12041) ptrace(0x10, r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) ptrace$pokeuser(0x6, r2, 0x118, 0x40000089) r5 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) shmat(r5, &(0x7f0000ffc000/0x3000)=nil, 0x5000) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) syz_emit_ethernet(0x36, &(0x7f0000000680)={@dev, @random, @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @multicast2}, {{0xfffc, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) ioctl$VT_ACTIVATE(r7, 0x5606, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r8, &(0x7f0000003580)=[{{&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="793d6471b011710eb78e563014c6c657b5034d", 0x13}], 0x1, &(0x7f0000000340)=[{0x24, 0x109, 0x2, "6188b595efde00689f68f2b09201eedba551e1fc06"}, {0x54, 0x10e, 0x642, "a3f011b1032d8338599c05f3fedba0ee29bd252ef14466b51b56a2296551980cff60f74db213bfe6d176f81ea2082ce9cd6514ffb1373fa522c638a36ac6d7a6fd085fb392d4b1c5"}, {0x24, 0x111, 0x400, "c305815682116c2e37246a1c342d6e65a7ec82553f177311"}, {0x20, 0x103, 0x9, "54839afa43140a06dd1adb68ea3321ee0eca7b98"}, {0xd8, 0x10e, 0x2, "1c1e273f53577c5126dd73ded28eb47d0204586fd4645fed2636e0872e0a21ee6cc4924c3cbf3c84ee35046e3f3c400fffe04fb91475794ab1b3b9f5246c7198bce49ec23647cb9d36d8a122de0b8b1c75a36a8d289fefb00cb824d61cba9c248913db6441dd0372d9587466d0f9125be5197b99631f67977c0e5f542265a34c3ca2bb2817017d1165bdc7e08ee973c6a29b0509f0e73826cddf681c66e5a5bf4f56f318d3bdd753b773fb3b8ac06f4984265114d22f9c4155768801d5b8c1bcc03941b68367ff1563"}], 0x194}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="8de4aa4cf1e0747733c77e8384e021c4eeec261c346d908a54fb0d882fec0e6c64b1460173e2519aabdf23b7bc3ed4d0", 0x30}, {&(0x7f0000000600)="0426d06f1b8b5434e5d25c4b81d5932b6e4f54e205086709391755361cf068a5e74b95a6987af752b1b597c7aec828eef1cb0c6a3ad1a058acf5b9edb75b63cd42882ab1344622589bda0bad6da253d0ef76c77c83e038cdaca44ffa7d1559b7fbce2a7b42773da1042f5170942bb12c42f9b4665740d74b0986d7deb0a0b2162e4260bbd56ae52332065b2b2aa17bc0f10baa9155e51840add1646b13efc2696c20b930b04d885694fd0c44e60e5eb749a3abd5acb2", 0xb6}, {&(0x7f0000000540)="f8419028ff5d99f5feb2a95020dfd3be2cf2e769c5ea44719b52895afdf004d452aa7eb822d24b606747839edd85608b83e5d76f7602ac0dedaa66af2c5d27f65694010d1e9cf0ec23391bf50572b7c9b4c49d8763", 0x55}, {&(0x7f00000006c0)="56830ff2f6ca2f9cf8214a6444da1481f161c1103d2dd2256e45c49bc4ddebfb276208b81e38653e1e22ccd502dd7c728bc5507e45d77e72875da320d94a7297be2069814266fe4b2e1a7d768ac17a1043ce43cda9beabab7f3203788019b227d0328a6869ad1d29333a725f01ef44787fb9f1eb4576dcba49c217", 0x7b}], 0x4, &(0x7f0000000780)=[{0x7c, 0x10a, 0x2a1, "22391b8a81ae48860b6d6f25f254ec0e19d833591e1a40cc2e3f27e1919533a567a66c899dd09bc0bbb8e5633b1d445bbdd854504f80a96cbced7df1688a96becdf6c5e0ab81b966a058638117034a9244ee04be53d55c4b7bfbb89f6c865a489de443ffbe832555dcf31df58251d8"}], 0x7c}}, {{&(0x7f0000000840)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80, &(0x7f0000000f40)=[{&(0x7f00000008c0)="06d9802a0d39cea918cb0fbd211d688a936095ad73eff03caaaf655141264140c5880cad51a68ffa9326a1e452e428465d6fd58a37f2e4b9c81ed4fc5c0341", 0x3f}, {&(0x7f0000000900)="7074facb20d6e70c98800199bd7bd772d97f5e860705c7c54fe2d382f8cf7f223d48ef2d177405ba9e2d670d26231afdd995f01e0dea7151f6d789021467f77e948d29472fc62576fce32fb16fcbe0d3de612b159f06809e422fcf117ac23b770f8ee4f4f1", 0x65}, {&(0x7f0000000ac0)="372aed674a4a6e74263eef1c8bc7f355ef0a53aca22eca9251964c02d582b8b80c758d8947e1ba79f6907389dfa8152a908c889665bea34a4121df8cd5ed3282e667c5bc7a20fc4787f1714e72de0521c10c6cf699534219db71107ef52422a11b7b237cb2bd2e72bcff1e629b5c02dadd33a4e97ddfe2057affa8d643ee5cd0d0f8bbfc1a9ad76ed46de6b86bdf770b5b367e04cd06d62e18025d6480842a7b10199d1a0e1cbc776e76d72857fbc13eecb085e5235a76cf8562903038c048b9436c3bf86717f985f5", 0xc9}, {&(0x7f0000000bc0)="5c6c98bcd544e7966e5185e2168a075b206a9cba0c41e1aeba31f957e3f5a2b5be24a495b7d9e3d5e79f7bbde74465c98bdf46caa196e830baab46403098ee45155eb94022f7763ba6e79a20551d9c1ed078229e12fa44c0612dd6b4e4e3cdac7b0e278a11898b7052af00ee37f91e8187d4bc3ab657dab7c8ee4586fc0cfa03bc6ee0b638ba32bd83c23d6b601da24c0df644f5f0e5dfe241", 0x99}, {&(0x7f0000000c80)="828a6087752d1e6f14a30e15efa59182de6b7dc2143d0a6db5802c31b18a097a5f78e249bf101330e5ab6308fb545878f1f3e3379a5542c616", 0x39}, {&(0x7f0000000cc0)="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", 0xfb}, {&(0x7f0000000dc0)="9cd5566d335d9ab200502d33a984e0f244f27a042ecd82efd23e6600645751c43e19fd6b2b7eadb8a33b919c06cd163cdb942f247ff18e8775bd71c6c782869859713d380401581f64b54df8b7c02e2a43bfabbdf77b70ca7c1b22ac4a27697991659dfd1c07034052c4c24d0d", 0x6d}, {&(0x7f0000000e40)}, {&(0x7f0000000ec0)="2063737b85309fbe85a0caf080da15b3b20592ae6afa030e7348f6499d16e6f069caab2a1f9794d8947b3dff0d4671289969bfd4857d363db057e276476b847079fa5fd92ebe8f", 0x47}], 0x9}}, {{&(0x7f0000000fc0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001040)="6d8d1f399fde6970d134cd84f7ad2eeaa054c695b1f5f53b56ff0b8fbecd93102552c9559dcbd28ab4c9c24c8b52666514613419d0f7779be871ebad5ecf9ceed31c4b", 0x43}, {&(0x7f00000010c0)="ff9e13dced6e89dcd9885646f35b214ca8ccc8", 0x13}], 0x2, &(0x7f0000001140)=[{0xc, 0x0, 0x8}, {0xb8, 0x1, 0x2, "2a333c561515058a16a14f700e97634d72311d4823852aeaf92056bb9ccdcb5a6111ac3a606697579ec1d637497cc56c53340091b892a08b6eb57e1dea717f3439436a49bbe9299c82f4eac73ddf67320e041f46577ef5e46eb0c3fd332200c971f4fead9983f164a77fddb4a4d0351bc8c3cd042f20c599e4a232f8bd6a80b1dbe5ebb99d8aaa2f3f57d188047b5e58842de178fe0d359979e230d3317549c2b2ee4e2b1597759b244a18d7"}, {0xcc, 0x104, 0x1, "d703a056f8221fbaa4c81aca26a3dc17a57e12cc60987daf1bd7790ef17a740b78830241cb050a9b745b84a3b5f1107532f9937ff85d7a6c0d8215a0fea986f79007fd08c77ce1807e508e35ff1ca631bb99da54311c09cb686612bd1b5865c7aeec9d067f09c78929e01a2db5bbc92cdbe07d0ee8e12bd61c58d48e0488ab796190b00fb33256ef593d0a68968123fbea373a8af25d8c0ec94f38f8957a6e01d18c6a8ce7b490701f4b9c50b10b82c8619e17f30a3d77a920cc22d8ecac7c"}, {0x1c, 0x1, 0x6, "0ba18a7dddc14474697b02ef7ad2ce"}, {0x70, 0x103, 0x1, "0ae8e5284f546059492f230abe916de72fbe5f685f1c45eb568b9a8d6f88a703d2f55b4e7e5e955d80d694a87a0231ec349f3aa09e3bf1d33da2b96a82a82ad4501418adc7b77906a23be0aa6f7b6ca929089b6320fa1586bf2930ee52b5c20c8ea5"}, {0x78, 0x10a, 0x55, "344812dac052830b461ccdf4242994a4b3da51bf1bebf4539aca38b1839208659c06ce88b79295528221d3d830358af89fc59fbde5d0d5f3cbac5fb08069358b5be2f200a54eab5738404c4f8f7d742e5e395dd05be3eda01e19aff0b6d1adb0c6dbe8691c0c6d93759bff7d"}, {0x68, 0x10e, 0x2, "00b1bef41b691aea6dc8766f8512933fdbcde8267d2e9e06fdf6d94210ae287daac5eb460a910da101862866962de9af9a44530ef3cc2087b23e6f218c00f47b3022ea4a1a7750347111bb9fc03d760c2a63494efb0b80c3e7"}, {0x784, 0x116, 0xcfc313e, "01fd0a9830d30a92f978ad70399386c1c47877642cc4ac5cb4cbdf008a07258dc3648683b362a4a27a3b4cbf5f257f2f818eddaeb74cc7e4e5eaefad2fc00f4fd43e456f0d3ba1c3027790fc28c3d61098e3478c043e4b143c9b91385b21701b93cd72f0c87fe069ee4dda1cd85afbc7fba2980f4a0384cb4100f0014770747ad9ecae26089a27ea2945e79bc11c4e0b3fd1ba876064a4085ac46ba202e449cd1d5bb97dce1efbeec5d743a058c583be07b9a7013dfcb7e52f12641d144565c66da3c102e2f6dd5f69bf30b938ba6a47cbda1de9afd7be3112cceafd3c9e0ea11f8439d1fc35aaf8817d6a400e7407517241ed00587300a3e3968915379d95014789c3f34ed8fcbb2ed354a5ffed96e2e88c5fe7d1b02b1f3197d2ad21f787a22bde63e52da334326e470bbacd722ea3bc616a84798ca4b551a3b9f7844b6b8ac18f2fde34dfb35d11cf9989f282ce021cf5c6f7ad7c5c2dc4f6f3c01f120ef088e917b89dbfde0b51b3a7bb9ca5706b26149159c29d38d01aece1ffe9f5c4cd12d2f57b7424008a929fda4fb74d168fb48a687ce09cde4012c65165867c2997c55c4d51d0a2abe34b15c2f7b69da1829793210771036d0e284474adc8e21e6cec945b80b2b828a02869a25b8bece371ca2431ef80a31787e4e487378184d00b130085bf80298d24cf7837b2643868c3c84ce62385d820c2ea9ec9eaa7ff879ccfdfda36ddece4f71b0c5734b0c559b63040061ecbdfb9045953b98ced73e040ca474297e06205113a59e0a50f63658b71c74f3dac33240c4e03fe4780d194df13488b7f4bbf9fde5c793a3873d6a23e7c062d41ff07a46aa6493b1184d5edcfff278df6cab70e56a671662c53a5d3d269004d447d4a1b92d730b331c3c23333d0ad9744bb6740b30c67ab41246825465bef81acc83c08e675814d0910c79deacef9f975b78160e0b8a2c379295c8dc27a0ce8518f1bb6e87edd4e1d1927b8354f0984ea86516d5b5c02614c07c3aa190e84a3a68437846aa0186ae9ccff66bc5e784b3a89a78e40cccb7f4954d08f10ddcd88e5232432e8e93a1b3a97ad05851e82c9b54180c7e5992e3e21af2abd8f5577e1173294d1130a7f2a6c7a168bc75af243e914a93f22c4890df14658baac1ae830f16f9f9317de24571d441d048410ab994b72572ba589b9430cbb882307200048e4f34c628275e58e72d609d8e9c740fa7b1afcc2d23efaef3aff1ab8d65c5f0e5ea7f5d740ed781f8823db47feb0cce57ae8b27c8ad9e2eb80a4f165ef943b3211d1601d9157c65e308d90f3e6d58bceb58c7c9a19b60f0a408cdec9b9df94f1a6f214af24d7ab62e28c374d15ac92c586116e27089b2699eac38a93df49e0634787be2287473d014a41cc91bcec030018ca85c2170a7b682237e28f1a46c6f42cd767e7a0071e3005c57e68556c2a1e5887cf087efdab32d2d7382f9d1940893bb8ae8fef290edb0604ce97a923b1f793d05b35fa7dacdbb5585d8856ec8be1c38d2b3023074bc18e751763ceada0a7b11bfcc3628f16d7bb55ace1cdd1f7ce1f249219164353a3ea0b4324f2e6fb3625d0d7447e8ecc1a3f3830c0082ace5ec55ad3011c25f786ddaee05b831d9ef7efc0ac071199ce1d2feb8866b9c6ff0a92ad0dbecb8ed7296c5239d1783720bb7dd1703f790a92fed2062fcf70ed02cdcebd30e74063f1208f157aaec9e16d8bbb5e016a55963dd7b6885f09b615fad742d12d00fe384f585cadf6bd648ce0251eafc8722eeef37e26b36712edac6db0c854d36b3798578578e9d4cc5e143f3cacae37489f43ca975a625241e361557cae743eb8865b4bc94cf9906e7fa69e2a0f8c250aebf18a5ae3caaee8a52dc6587ccb55c5d612e796a7b5be19e6ce38c56a6b1b6cfdee8694155f0527419c3685cbd64de4ac9dab506e685b32ff4f9bac0f9feb78b24481745315c9d27969c71268baa2eb4efeb8389456c4f71afa6eb7736e9af6c5a532e8cd35698c766b4e90668e54c3e536f0eb624cf00d7764604b7ce9d9b24884d1e4e5f47540f2797f04afca33f3b45f9904d5dbde1997b0e77ee7ca8003253a522c20aace500a28efcc32b1354158cdb6c6fa91cf5eba83fb75bff54eb8dae124d0fc4e12e5529fbff2f67fcc59c9f44d230cb6a64de8797b233d45eeec2146a3971257b38eacf205e62ec05d5c1f4ba5ac2391b068ed7627dc8e1c9b4654acf5368cd68d6fb76009e5b2ceafad5229f3d49caf5b6bd5a92ede23018d6ccf517a0acd8945d95fadc3649cd253bc731b1f8c5993c75a946cba8e0d9adecce257cf7d28a697f84c3fd8d665be2edaa2c11f887822ac72f52b615be3c4ef9c68fbd96e90f1df1ae3a5db31449f9fbdfd1167c15de499373a1612ffac6351b653fc0dab410e2ebedf6e327f6f0f02eff69b27bcf028186826edafa4d5860eb2828079d93c059be744650fadd9bbcc9c291cc030da0105516ea91fde8ddfb947db26ebe5b183f88925ba8d8d23ccb31946b20a9023351f8b1c735b3dc367be45645bf31f2a3b85173beb464ae16e2c2e50136732ad8c057c6f1a7ec1442f2bb2f35d225c35839b667de74d6aadbc1d9a7fa30551e38294f1fc988528957a40dd9b45a8198703c14818435af733f66dc40527d7f3f3a256a3ed9ee96f13d41af3ff3db379eeabd4abbce9e969034b536428"}, {0x100c, 0x104, 0x8, "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"}], 0x1a8c}}], 0x4, 0x40) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x5, 0x7, 0xffff, 0x5}}) 130.027732ms ago: executing program 4 (id=6886): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf, 0xf}, {0xe, 0xd}}, [@qdisc_kind_options=@q_prio={{}, {0x0, 0x2, {0xb5, "b812879c47450dd8960ec069340682e5"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x1}}, {0xfffffffffffffc61, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r4, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0xfffffffffffffdb0, &(0x7f0000000480)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7800, 0x40, 0x3, 0x8, {{0x17, 0x4, 0x1, 0x0, 0x5c, 0x67, 0x0, 0xbe, 0x29, 0x0, @remote, @multicast1, {[@rr={0x7, 0x13, 0x62, [@remote, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0x71, 0x3, 0x5, [{@loopback, 0x9}, {@multicast1, 0x8}, {@empty, 0x8}, {@broadcast, 0x3491}, {@empty, 0xb}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xfff}]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x23}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000408001d00", @ANYRES32=0x0], 0x24}}, 0x0) socket(0x11, 0x800000003, 0x0) socket(0x2c, 0x3, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000840)=[@request_death={0x400c6313, 0x1}], 0x0, 0x1000000, 0x0}) r10 = socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 12.065261ms ago: executing program 5 (id=6887): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}], 0xb4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x441, 0x6, 0x0, 0x0, 0x2004cb, 0x8000000, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x1fe], 0x80a1000, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.467639ms ago: executing program 3 (id=6888): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x3, @vbi={0x9, 0x6, 0x3fe, 0x384c4150, [0x5, 0x5], [0x3, 0x2], 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x2, 0x7, 0x4, 0x2030, r2, 0x7fff, '\x00', 0x0, r2, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x700, 0x0) sendfile(r4, r2, 0x0, 0x578410eb) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x5c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xffe0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xd846}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r6 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) finit_module(r6, 0x0, 0x3) socket(0x10, 0x803, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 0s ago: executing program 4 (id=6889): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4f, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newtaction={0x50, 0x30, 0x48b, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_simple={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x50}}, 0x0) dup(r0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000300)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r5, 0x627, 0x4c1, 0x9, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) kernel console output (not intermixed with test programs): fs_reclaim_acquire+0xae/0x150 [ 1983.363286][ T3159] ? tomoyo_encode2+0x100/0x3e0 [ 1983.363301][ T3159] should_failslab+0xc2/0x120 [ 1983.363313][ T3159] __kmalloc_noprof+0xd2/0x510 [ 1983.363344][ T3159] tomoyo_encode2+0x100/0x3e0 [ 1983.363374][ T3159] tomoyo_encode+0x29/0x50 [ 1983.363411][ T3159] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1983.363431][ T3159] ? tomoyo_profile+0x47/0x60 [ 1983.363443][ T3159] tomoyo_path_number_perm+0x245/0x580 [ 1983.363457][ T3159] ? tomoyo_path_number_perm+0x237/0x580 [ 1983.363476][ T3159] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1983.363504][ T3159] ? find_held_lock+0x2b/0x80 [ 1983.363517][ T3159] ? hook_file_ioctl_common+0x145/0x410 [ 1983.363533][ T3159] ? __fget_files+0x20e/0x3c0 [ 1983.363548][ T3159] ? fput+0x20/0xf0 [ 1983.363563][ T3159] security_file_ioctl_compat+0x9b/0x240 [ 1983.363579][ T3159] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1983.363596][ T3159] __do_fast_syscall_32+0x7c/0x3a0 [ 1983.363615][ T3159] do_fast_syscall_32+0x32/0x80 [ 1983.363633][ T3159] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1983.363647][ T3159] RIP: 0023:0xf704e579 [ 1983.363656][ T3159] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1983.363667][ T3159] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1983.363678][ T3159] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800448d5 [ 1983.363685][ T3159] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1983.363692][ T3159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1983.363698][ T3159] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1983.363704][ T3159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1983.363718][ T3159] [ 1983.436199][ T3159] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1984.224576][ T3153] bridge_slave_1: left allmulticast mode [ 1984.226436][ T3153] bridge_slave_1: left promiscuous mode [ 1984.228276][ T3153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1984.268311][ T3153] bond0: (slave bond_slave_0): Releasing backup interface [ 1984.306988][ T3153] bond0: (slave bond_slave_1): Releasing backup interface [ 1984.720383][ T3145] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 1984.722462][ T3145] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1984.748811][ T3145] vhci_hcd vhci_hcd.0: Device attached [ 1984.778928][ T3153] team0: Port device team_slave_0 removed [ 1984.789617][ T3153] team0: Port device team_slave_1 removed [ 1984.794049][ T3153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1984.799740][ T3153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1984.803619][ T3153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1984.806034][ T3153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1984.863939][ T3178] netlink: 'syz.3.6336': attribute type 11 has an invalid length. [ 1984.866507][ T3178] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6336'. [ 1984.993564][T24763] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 1985.116438][ T3184] syz.0.6344: attempt to access beyond end of device [ 1985.116438][ T3184] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1985.120399][ T3184] qnx6: unable to read the first superblock [ 1985.123977][ T3175] vhci_hcd: connection reset by peer [ 1985.124222][ T3184] syz.0.6344: attempt to access beyond end of device [ 1985.124222][ T3184] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1985.126062][ T1228] vhci_hcd: stop threads [ 1985.129910][ T3184] qnx6: unable to read the first superblock [ 1985.131347][ T1228] vhci_hcd: release socket [ 1985.133221][ T3184] qnx6: unable to read the first superblock [ 1985.137779][ T1228] vhci_hcd: disconnect device [ 1985.153582][T17582] Bluetooth: hci4: command 0x0406 tx timeout [ 1985.233817][T17582] Bluetooth: hci2: command 0x0406 tx timeout [ 1985.235816][T17582] Bluetooth: hci1: command 0x0406 tx timeout [ 1985.302028][ T3190] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6346'. [ 1985.353760][ T3192] Invalid logical block size (1048576) [ 1985.525983][ T3192] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1985.531246][ T3192] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1985.536511][ T3192] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1986.339115][ T3211] syz.0.6353: attempt to access beyond end of device [ 1986.339115][ T3211] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1986.343130][ T3211] qnx6: unable to read the first superblock [ 1986.349750][ T3211] syz.0.6353: attempt to access beyond end of device [ 1986.349750][ T3211] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1986.355010][ T3211] qnx6: unable to read the first superblock [ 1986.356953][ T3211] qnx6: unable to read the first superblock [ 1986.477520][ T3221] comedi comedi0: multiq3: I/O port conflict (0x3f,16) [ 1986.481212][ T3221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6357'. [ 1986.808775][ T3228] netlink: 'syz.2.6354': attribute type 11 has an invalid length. [ 1986.811388][ T3228] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6354'. [ 1987.463623][ T5961] Bluetooth: hci4: command 0x0406 tx timeout [ 1987.543650][ T5961] Bluetooth: hci2: command 0x0406 tx timeout [ 1987.546130][T17582] Bluetooth: hci1: command 0x0406 tx timeout [ 1987.878713][ T3246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6362'. [ 1988.022842][ T3252] FAULT_INJECTION: forcing a failure. [ 1988.022842][ T3252] name failslab, interval 1, probability 0, space 0, times 0 [ 1988.027658][ T3252] CPU: 0 UID: 0 PID: 3252 Comm: syz.3.6365 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1988.027674][ T3252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1988.027681][ T3252] Call Trace: [ 1988.027685][ T3252] [ 1988.027690][ T3252] dump_stack_lvl+0x16c/0x1f0 [ 1988.027711][ T3252] should_fail_ex+0x512/0x640 [ 1988.027729][ T3252] ? __kmalloc_noprof+0xbf/0x510 [ 1988.027747][ T3252] ? bpf_test_init.isra.0+0x9e/0x140 [ 1988.027764][ T3252] should_failslab+0xc2/0x120 [ 1988.027777][ T3252] __kmalloc_noprof+0xd2/0x510 [ 1988.027798][ T3252] bpf_test_init.isra.0+0x9e/0x140 [ 1988.027816][ T3252] bpf_prog_test_run_skb+0x245/0x2280 [ 1988.027828][ T3252] ? __fget_files+0x204/0x3c0 [ 1988.027847][ T3252] ? __fget_files+0x20e/0x3c0 [ 1988.027862][ T3252] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1988.027901][ T3252] ? fput+0x70/0xf0 [ 1988.027914][ T3252] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1988.027926][ T3252] __sys_bpf+0x1488/0x4d80 [ 1988.027940][ T3252] ? __pfx___sys_bpf+0x10/0x10 [ 1988.027951][ T3252] ? ksys_write+0x190/0x250 [ 1988.027969][ T3252] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1988.027995][ T3252] ? fput+0x70/0xf0 [ 1988.028005][ T3252] ? ksys_write+0x1ac/0x250 [ 1988.028021][ T3252] ? __pfx_ksys_write+0x10/0x10 [ 1988.028040][ T3252] __ia32_sys_bpf+0x76/0xe0 [ 1988.028052][ T3252] __do_fast_syscall_32+0x7c/0x3a0 [ 1988.028071][ T3252] do_fast_syscall_32+0x32/0x80 [ 1988.028089][ T3252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1988.028108][ T3252] RIP: 0023:0xf702e579 [ 1988.028117][ T3252] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1988.028128][ T3252] RSP: 002b:00000000f501e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1988.028139][ T3252] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 1988.028146][ T3252] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1988.028152][ T3252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1988.028158][ T3252] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1988.028165][ T3252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1988.028178][ T3252] [ 1988.334559][ T3261] syz.0.6368: attempt to access beyond end of device [ 1988.334559][ T3261] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1988.338830][ T3261] qnx6: unable to read the first superblock [ 1988.340878][ T3261] syz.0.6368: attempt to access beyond end of device [ 1988.340878][ T3261] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1988.345393][ T3261] qnx6: unable to read the first superblock [ 1988.347237][ T3261] qnx6: unable to read the first superblock [ 1988.644350][ T3268] FAULT_INJECTION: forcing a failure. [ 1988.644350][ T3268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1988.648429][ T3268] CPU: 0 UID: 0 PID: 3268 Comm: syz.0.6369 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1988.648457][ T3268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1988.648465][ T3268] Call Trace: [ 1988.648471][ T3268] [ 1988.648476][ T3268] dump_stack_lvl+0x16c/0x1f0 [ 1988.648497][ T3268] should_fail_ex+0x512/0x640 [ 1988.648517][ T3268] _copy_from_user+0x2e/0xd0 [ 1988.648529][ T3268] move_addr_to_kernel+0x65/0x170 [ 1988.648544][ T3268] __get_compat_msghdr+0x3f1/0x4d0 [ 1988.648563][ T3268] get_compat_msghdr+0xd2/0x170 [ 1988.648581][ T3268] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1988.648604][ T3268] ___sys_sendmsg+0x1ae/0x1d0 [ 1988.648622][ T3268] ? __pfx____sys_sendmsg+0x10/0x10 [ 1988.648646][ T3268] ? find_held_lock+0x2b/0x80 [ 1988.648667][ T3268] __sys_sendmsg+0x16d/0x220 [ 1988.648684][ T3268] ? __pfx___sys_sendmsg+0x10/0x10 [ 1988.648708][ T3268] ? rcu_is_watching+0x12/0xc0 [ 1988.648722][ T3268] __do_fast_syscall_32+0x7c/0x3a0 [ 1988.648741][ T3268] do_fast_syscall_32+0x32/0x80 [ 1988.648759][ T3268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1988.648774][ T3268] RIP: 0023:0xf704e579 [ 1988.648783][ T3268] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1988.648795][ T3268] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1988.648806][ T3268] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 1988.648813][ T3268] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1988.648819][ T3268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1988.648826][ T3268] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1988.648832][ T3268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1988.648846][ T3268] [ 1989.116394][ T3277] Invalid logical block size (1048576) [ 1989.272177][ T3288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6374'. [ 1989.354486][ T3277] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1989.432693][ T3277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1989.447230][ T3277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1990.108576][T24763] vhci_hcd: vhci_device speed not set [ 1990.176376][ T46] Bluetooth: hci3: Frame reassembly failed (-84) [ 1990.178510][ T3310] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1990.215666][ T3312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6380'. [ 1990.383548][ T59] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1990.535906][ T59] usb 8-1: Using ep0 maxpacket: 32 [ 1990.539522][ T59] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 1990.541912][ T59] usb 8-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1990.545058][ T59] usb 8-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 8 [ 1990.548068][ T59] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1990.552001][ T59] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1990.556041][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.558533][ T59] usb 8-1: Product: Љ [ 1990.559823][ T59] usb 8-1: Manufacturer: 倊 [ 1990.560293][ T3322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6381'. [ 1990.561414][ T59] usb 8-1: SerialNumber: Е [ 1990.565112][ T3322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6381'. [ 1990.569017][ T3306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1990.572513][ T3306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1991.025094][ T3304] overlayfs: missing 'lowerdir' [ 1991.069970][ T59] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 1991.074860][ T59] usb 8-1: USB disconnect, device number 28 [ 1991.082172][ T59] usblp0: removed [ 1991.225191][T17582] Bluetooth: hci4: command 0x0406 tx timeout [ 1991.476145][T17582] Bluetooth: hci2: command 0x0406 tx timeout [ 1991.476180][ T1534] Bluetooth: hci1: command 0x0406 tx timeout [ 1991.973631][ T3341] comedi comedi0: multiq3: I/O port conflict (0x3f,16) [ 1991.993830][ T3341] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6387'. [ 1992.184295][ T5961] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1992.184708][ T1534] Bluetooth: hci3: command 0x1003 tx timeout [ 1992.354302][ T1534] Bluetooth: hci1: unexpected event 0x14 length: 20 > 6 [ 1992.625070][ T3341] tipc: Enabling of bearer rejected, failed to enable media [ 1993.341242][ T3369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6394'. [ 1993.411293][ T3369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6394'. [ 1993.547084][ T3374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6393'. [ 1993.551351][ T3374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6393'. [ 1993.676166][ T3377] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6394'. [ 1995.143617][ T3406] 9pnet: Could not find request transport: òdma [ 1995.618899][ T3416] 9pnet: Could not find request transport: òdma [ 1996.376585][ T3429] comedi comedi0: multiq3: I/O port conflict (0x3f,16) [ 1996.379472][ T3429] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6406'. [ 1996.576398][ T3433] FAULT_INJECTION: forcing a failure. [ 1996.576398][ T3433] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.580221][ T3433] CPU: 2 UID: 0 PID: 3433 Comm: syz.3.6408 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1996.580236][ T3433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1996.580243][ T3433] Call Trace: [ 1996.580247][ T3433] [ 1996.580252][ T3433] dump_stack_lvl+0x16c/0x1f0 [ 1996.580272][ T3433] should_fail_ex+0x512/0x640 [ 1996.580290][ T3433] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1996.580310][ T3433] should_failslab+0xc2/0x120 [ 1996.580325][ T3433] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1996.580343][ T3433] ? __alloc_skb+0x2b2/0x380 [ 1996.580362][ T3433] __alloc_skb+0x2b2/0x380 [ 1996.580379][ T3433] ? __pfx___alloc_skb+0x10/0x10 [ 1996.580396][ T3433] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1996.580411][ T3433] netlink_alloc_large_skb+0x69/0x130 [ 1996.580425][ T3433] netlink_sendmsg+0x6a1/0xdd0 [ 1996.580439][ T3433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1996.580452][ T3433] ? __import_iovec+0x1dd/0x650 [ 1996.580467][ T3433] ____sys_sendmsg+0xa98/0xc70 [ 1996.580481][ T3433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1996.580494][ T3433] ? get_compat_msghdr+0x11a/0x170 [ 1996.580518][ T3433] ___sys_sendmsg+0x134/0x1d0 [ 1996.580536][ T3433] ? __pfx____sys_sendmsg+0x10/0x10 [ 1996.580560][ T3433] ? find_held_lock+0x2b/0x80 [ 1996.580580][ T3433] __sys_sendmsg+0x16d/0x220 [ 1996.580598][ T3433] ? __pfx___sys_sendmsg+0x10/0x10 [ 1996.580621][ T3433] ? rcu_is_watching+0x12/0xc0 [ 1996.580635][ T3433] __do_fast_syscall_32+0x7c/0x3a0 [ 1996.580654][ T3433] do_fast_syscall_32+0x32/0x80 [ 1996.580672][ T3433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1996.580686][ T3433] RIP: 0023:0xf702e579 [ 1996.580695][ T3433] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1996.580707][ T3433] RSP: 002b:00000000f501e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1996.580717][ T3433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1996.580725][ T3433] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1996.580731][ T3433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1996.580737][ T3433] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1996.580744][ T3433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1996.580757][ T3433] [ 1996.592025][ T1534] Bluetooth: hci4: unexpected event 0x14 length: 20 > 6 [ 1997.890218][ T3429] tipc: Enabling of bearer rejected, failed to enable media [ 1998.482984][ T3460] comedi comedi0: multiq3: I/O port conflict (0x3f,16) [ 1998.513637][ T3460] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6415'. [ 1999.107266][ T3460] tipc: Enabling of bearer rejected, failed to enable media [ 1999.252162][ T3452] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6414'. [ 1999.255196][ T3452] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6414'. [ 1999.443582][T27647] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1999.484576][ T3473] FAULT_INJECTION: forcing a failure. [ 1999.484576][ T3473] name failslab, interval 1, probability 0, space 0, times 0 [ 1999.489897][ T3473] CPU: 3 UID: 0 PID: 3473 Comm: syz.1.6421 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1999.489920][ T3473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1999.489931][ T3473] Call Trace: [ 1999.489937][ T3473] [ 1999.489944][ T3473] dump_stack_lvl+0x16c/0x1f0 [ 1999.489973][ T3473] should_fail_ex+0x512/0x640 [ 1999.489997][ T3473] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1999.490032][ T3473] should_failslab+0xc2/0x120 [ 1999.490049][ T3473] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1999.490075][ T3473] ? __alloc_skb+0x2b2/0x380 [ 1999.490103][ T3473] __alloc_skb+0x2b2/0x380 [ 1999.490126][ T3473] ? __pfx___alloc_skb+0x10/0x10 [ 1999.490152][ T3473] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1999.490176][ T3473] netlink_alloc_large_skb+0x69/0x130 [ 1999.490195][ T3473] netlink_sendmsg+0x6a1/0xdd0 [ 1999.490217][ T3473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1999.490237][ T3473] ? __import_iovec+0x1dd/0x650 [ 1999.490260][ T3473] ____sys_sendmsg+0xa98/0xc70 [ 1999.490282][ T3473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1999.490300][ T3473] ? get_compat_msghdr+0x11a/0x170 [ 1999.490336][ T3473] ___sys_sendmsg+0x134/0x1d0 [ 1999.490363][ T3473] ? __pfx____sys_sendmsg+0x10/0x10 [ 1999.490398][ T3473] ? find_held_lock+0x2b/0x80 [ 1999.490430][ T3473] __sys_sendmsg+0x16d/0x220 [ 1999.490455][ T3473] ? __pfx___sys_sendmsg+0x10/0x10 [ 1999.490489][ T3473] ? rcu_is_watching+0x12/0xc0 [ 1999.490509][ T3473] __do_fast_syscall_32+0x7c/0x3a0 [ 1999.490537][ T3473] do_fast_syscall_32+0x32/0x80 [ 1999.490562][ T3473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1999.490583][ T3473] RIP: 0023:0xf7f37579 [ 1999.490595][ T3473] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1999.490611][ T3473] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1999.490626][ T3473] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1999.490637][ T3473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1999.490646][ T3473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1999.490655][ T3473] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1999.490665][ T3473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1999.490686][ T3473] [ 1999.594008][T27647] usb 7-1: Using ep0 maxpacket: 8 [ 1999.617060][T27647] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1999.620097][T27647] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1999.623260][T27647] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1999.628284][T27647] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1999.632498][T27647] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1999.637191][T27647] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.242454][T27647] usb 7-1: usb_control_msg returned -32 [ 2000.244363][T27647] usbtmc 7-1:16.0: can't read capabilities [ 2000.266304][T27647] usb 7-1: USB disconnect, device number 28 [ 2000.374513][ T3481] 9pnet: Could not find request transport: òdma [ 2001.008321][ T3494] binder: 3493:3494 ioctl c0306201 80000300 returned -14 [ 2001.516942][ T3504] comedi comedi0: multiq3: I/O port conflict (0x3f,16) [ 2001.520445][ T3504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6429'. [ 2002.048567][ T3499] tipc: Enabling of bearer rejected, failed to enable media [ 2002.176089][ T3515] syz.0.6432: attempt to access beyond end of device [ 2002.176089][ T3515] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2002.182537][ T3515] qnx6: unable to read the first superblock [ 2002.186125][ T3515] syz.0.6432: attempt to access beyond end of device [ 2002.186125][ T3515] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2002.191320][ T3515] qnx6: unable to read the first superblock [ 2002.194314][ T3515] qnx6: unable to read the first superblock [ 2002.688177][ T3532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6433'. [ 2002.691028][ T3532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6433'. [ 2003.518305][ T3547] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2004.801914][ T3558] syz.2.6442: attempt to access beyond end of device [ 2004.801914][ T3558] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2004.808484][ T3558] qnx6: unable to read the first superblock [ 2004.811098][ T3558] syz.2.6442: attempt to access beyond end of device [ 2004.811098][ T3558] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2004.816764][ T3558] qnx6: unable to read the first superblock [ 2004.819217][ T3558] qnx6: unable to read the first superblock [ 2004.938214][ T3563] atomic_op ffff888013711998 conn xmit_atomic 0000000000000000 [ 2005.225860][ T3567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6443'. [ 2005.228677][ T3567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6443'. [ 2005.543592][ T5961] Bluetooth: hci3: command 0x1003 tx timeout [ 2005.543613][ T1534] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2006.414153][ T3586] binder: binder_mmap: 3585 80001000-8000b000 bad vm_flags failed -1 [ 2006.817346][ T3592] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6449'. [ 2006.833731][ T3592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6449'. [ 2007.075279][ T3595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6450'. [ 2007.129461][ T3597] syz.0.6451: attempt to access beyond end of device [ 2007.129461][ T3597] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2007.137075][ T3597] qnx6: unable to read the first superblock [ 2007.139061][ T3597] syz.0.6451: attempt to access beyond end of device [ 2007.139061][ T3597] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2007.143086][ T3597] qnx6: unable to read the first superblock [ 2007.145395][ T3597] qnx6: unable to read the first superblock [ 2007.292486][ T3603] veth1_to_batadv: entered promiscuous mode [ 2007.295337][ T3603] macsec1: entered promiscuous mode [ 2008.613507][ T839] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2008.743572][ T839] usb 5-1: device descriptor read/64, error -71 [ 2008.983654][ T839] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2009.114028][ T839] usb 5-1: device descriptor read/64, error -71 [ 2009.223770][ T839] usb usb5-port1: attempt power cycle [ 2009.400660][ T3632] syz.2.6461: attempt to access beyond end of device [ 2009.400660][ T3632] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2009.406433][ T3632] qnx6: unable to read the first superblock [ 2009.409345][ T3632] syz.2.6461: attempt to access beyond end of device [ 2009.409345][ T3632] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2009.414579][ T3632] qnx6: unable to read the first superblock [ 2009.416886][ T3632] qnx6: unable to read the first superblock [ 2009.573489][ T839] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2009.738060][ T839] usb 5-1: device descriptor read/8, error -71 [ 2009.804286][ T3637] comedi comedi0: multiq3: I/O port conflict (0x3f,16) [ 2009.809222][ T3637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6462'. [ 2009.983528][ T839] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2010.003944][ T839] usb 5-1: device descriptor read/8, error -71 [ 2010.072955][ T3636] tipc: Enabling of bearer rejected, failed to enable media [ 2010.140017][ T839] usb usb5-port1: unable to enumerate USB device [ 2010.383841][ T3645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6464'. [ 2010.460307][ T3647] netlink: 'syz.3.6465': attribute type 11 has an invalid length. [ 2010.462945][ T3647] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6465'. [ 2012.525439][ T3651] Set syz1 is full, maxelem 65536 reached [ 2012.660181][ T3660] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2012.666921][ T3660] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2012.670783][ T3660] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2012.820062][ T3664] comedi comedi0: multiq3: I/O port conflict (0x3f,16) [ 2012.823461][ T3664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6469'. [ 2013.584187][ T3664] tipc: Enabling of bearer rejected, failed to enable media [ 2014.339118][ T3671] random: crng reseeded on system resumption [ 2014.583582][ T1534] Bluetooth: hci4: command 0x0406 tx timeout [ 2014.743596][ T5961] Bluetooth: hci1: command 0x0406 tx timeout [ 2014.746123][ T1534] Bluetooth: hci2: command 0x0406 tx timeout [ 2015.122757][ T3685] netlink: 'syz.2.6473': attribute type 11 has an invalid length. [ 2015.126049][ T3685] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6473'. [ 2015.349552][ T3688] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2017.383683][ T1534] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2017.385703][ T5961] Bluetooth: hci3: command 0x1003 tx timeout [ 2017.601885][ T5961] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2017.607484][ T5961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2017.610540][ T5961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2017.618282][ T5961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2017.621658][ T5961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2017.738240][ T3707] chnl_net:caif_netlink_parms(): no params data found [ 2017.821320][ T3707] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.824502][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state [ 2017.826753][ T3707] bridge_slave_0: entered allmulticast mode [ 2017.829385][ T3707] bridge_slave_0: entered promiscuous mode [ 2017.832522][ T3707] bridge0: port 2(bridge_slave_1) entered blocking state [ 2017.834921][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state [ 2017.837186][ T3707] bridge_slave_1: entered allmulticast mode [ 2017.839824][ T3707] bridge_slave_1: entered promiscuous mode [ 2017.872235][ T3707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2017.876716][ T3707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2017.912292][ T3707] team0: Port device team_slave_0 added [ 2017.916964][ T3707] team0: Port device team_slave_1 added [ 2017.919107][ T3712] FAULT_INJECTION: forcing a failure. [ 2017.919107][ T3712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2017.923183][ T3712] CPU: 1 UID: 0 PID: 3712 Comm: syz.3.6480 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2017.923210][ T3712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2017.923218][ T3712] Call Trace: [ 2017.923223][ T3712] [ 2017.923228][ T3712] dump_stack_lvl+0x16c/0x1f0 [ 2017.923251][ T3712] should_fail_ex+0x512/0x640 [ 2017.923271][ T3712] _copy_to_user+0x32/0xd0 [ 2017.923283][ T3712] syslog_print_all+0x1cb/0x400 [ 2017.923302][ T3712] ? __pfx_syslog_print_all+0x10/0x10 [ 2017.923320][ T3712] ? trace_sched_exit_tp+0xde/0x130 [ 2017.923343][ T3712] do_syslog+0x32c/0x6c0 [ 2017.923353][ T3712] ? __pfx_do_syslog+0x10/0x10 [ 2017.923363][ T3712] ? __fget_files+0x20e/0x3c0 [ 2017.923383][ T3712] ? ksys_write+0x1ac/0x250 [ 2017.923416][ T3712] __ia32_sys_syslog+0x73/0xb0 [ 2017.923427][ T3712] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2017.923445][ T3712] __do_fast_syscall_32+0x7c/0x3a0 [ 2017.923464][ T3712] do_fast_syscall_32+0x32/0x80 [ 2017.923482][ T3712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2017.923497][ T3712] RIP: 0023:0xf702e579 [ 2017.923506][ T3712] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2017.923517][ T3712] RSP: 002b:00000000f4fdc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000067 [ 2017.923528][ T3712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 2017.923535][ T3712] RDX: 00000000000000e7 RSI: 0000000000000000 RDI: 0000000000000000 [ 2017.923541][ T3712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2017.923548][ T3712] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2017.923554][ T3712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2017.923568][ T3712] [ 2017.997048][ T3707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2017.999244][ T3707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2018.007246][ T3707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2018.012219][ T3707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2018.017864][ T3707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2018.027117][ T3707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2018.070431][ T3707] hsr_slave_0: entered promiscuous mode [ 2018.072692][ T3707] hsr_slave_1: entered promiscuous mode [ 2018.075933][ T3707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2018.078261][ T3707] Cannot create hsr debugfs directory [ 2018.192628][ T3707] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2018.196878][ T3707] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2018.200674][ T3707] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2018.205763][ T3707] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2018.221145][ T3707] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.223502][ T3707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2018.225873][ T3707] bridge0: port 1(bridge_slave_0) entered blocking state [ 2018.228123][ T3707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2018.259445][ T3707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2018.268688][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.271987][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.287111][ T3707] 8021q: adding VLAN 0 to HW filter on device team0 [ 2018.294826][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 2018.297059][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2018.302478][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.304819][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2018.691328][ T3707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2018.718208][ T3734] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6482'. [ 2018.837626][ T3707] veth0_vlan: entered promiscuous mode [ 2018.842623][ T3707] veth1_vlan: entered promiscuous mode [ 2018.864110][ T3707] veth0_macvtap: entered promiscuous mode [ 2018.867810][ T3707] veth1_macvtap: entered promiscuous mode [ 2018.876901][ T3707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2018.883971][ T3707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2018.888802][ T3707] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.891923][ T3707] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.894911][ T3707] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.898069][ T3707] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.966321][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2018.969590][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2019.003125][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2019.006872][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2019.703895][ T1534] Bluetooth: hci3: command tx timeout [ 2019.805557][ T3752] tmpfs: Bad value for 'mpol' [ 2020.226437][ T3759] netlink: 'syz.4.6485': attribute type 11 has an invalid length. [ 2020.229032][ T3759] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6485'. [ 2021.119874][ T3769] syz.3.6489: attempt to access beyond end of device [ 2021.119874][ T3769] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2021.127256][ T3769] qnx6: unable to read the first superblock [ 2021.129951][ T3769] syz.3.6489: attempt to access beyond end of device [ 2021.129951][ T3769] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2021.135222][ T3769] qnx6: unable to read the first superblock [ 2021.137747][ T3769] qnx6: unable to read the first superblock [ 2021.331926][ T3773] syz.3.6490: attempt to access beyond end of device [ 2021.331926][ T3773] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2021.336787][ T3773] qnx6: unable to read the first superblock [ 2021.339136][ T3773] syz.3.6490: attempt to access beyond end of device [ 2021.339136][ T3773] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2021.343041][ T3773] qnx6: unable to read the first superblock [ 2021.345004][ T3773] qnx6: unable to read the first superblock [ 2021.783829][ T1534] Bluetooth: hci3: command tx timeout [ 2022.683515][ T839] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2022.842753][ T3794] Invalid logical block size (1048576) [ 2022.846444][ T839] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2022.850027][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2022.854723][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2022.858266][ T839] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2022.862302][ T839] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2022.866303][ T839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.870051][ T839] usb 8-1: config 0 descriptor?? [ 2022.872162][ T3790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2023.075751][ T3794] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2023.081252][ T3794] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2023.086814][ T3794] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2023.091970][ T3794] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2023.097510][ T3794] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2023.109314][ T3794] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2023.450179][ T3802] syz.4.6498: attempt to access beyond end of device [ 2023.450179][ T3802] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2023.456195][ T3802] qnx6: unable to read the first superblock [ 2023.459052][ T3802] syz.4.6498: attempt to access beyond end of device [ 2023.459052][ T3802] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2023.464265][ T3802] qnx6: unable to read the first superblock [ 2023.466441][ T3802] qnx6: unable to read the first superblock [ 2023.819214][ T5961] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2023.822757][ T5961] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2023.830007][ T5961] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2023.833955][ T5961] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2023.836631][ T5961] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2024.123079][ T3821] 9pnet: Could not find request transport: òdma [ 2024.162970][ T3807] chnl_net:caif_netlink_parms(): no params data found [ 2024.182640][ T3820] 9pnet: Could not find request transport: òdma [ 2024.224905][ T839] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 2024.239491][ T839] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2024.874854][ T7795] usb 8-1: USB disconnect, device number 29 [ 2024.958764][ T3807] bridge0: port 1(bridge_slave_0) entered blocking state [ 2024.962118][ T3807] bridge0: port 1(bridge_slave_0) entered disabled state [ 2024.966317][ T3807] bridge_slave_0: entered allmulticast mode [ 2024.982609][ T3807] bridge_slave_0: entered promiscuous mode [ 2025.029714][ T3807] bridge0: port 2(bridge_slave_1) entered blocking state [ 2025.031994][ T3807] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.034369][ T3807] bridge_slave_1: entered allmulticast mode [ 2025.037315][ T3807] bridge_slave_1: entered promiscuous mode [ 2025.063684][ T1534] Bluetooth: hci4: command 0x0406 tx timeout [ 2025.087848][ T3807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2025.096708][ T3807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2025.153575][ T1534] Bluetooth: hci3: command 0x0419 tx timeout [ 2025.153619][ T5961] Bluetooth: hci2: command 0x0406 tx timeout [ 2025.153668][T17582] Bluetooth: hci1: command 0x0406 tx timeout [ 2025.169838][ T3807] team0: Port device team_slave_0 added [ 2025.174061][ T3807] team0: Port device team_slave_1 added [ 2025.211175][ T3807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2025.215226][ T3807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2025.223596][ T3807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2025.227827][ T3807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2025.229997][ T3807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2025.238954][ T3807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2025.291435][ T3807] hsr_slave_0: entered promiscuous mode [ 2025.294494][ T3807] hsr_slave_1: entered promiscuous mode [ 2025.296843][ T3807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2025.299170][ T3807] Cannot create hsr debugfs directory [ 2025.476533][ T3807] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2025.483103][ T3807] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2025.506471][ T3807] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2025.524319][ T3807] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2025.610769][ T3807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2025.699582][ T3807] 8021q: adding VLAN 0 to HW filter on device team0 [ 2025.736966][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2025.739140][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2025.745789][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 2025.747987][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2025.873936][ T5961] Bluetooth: hci5: command tx timeout [ 2025.969683][ T3807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2026.114930][ T3807] veth0_vlan: entered promiscuous mode [ 2026.119736][ T3807] veth1_vlan: entered promiscuous mode [ 2026.137535][ T3807] veth0_macvtap: entered promiscuous mode [ 2026.143020][ T3807] veth1_macvtap: entered promiscuous mode [ 2026.152235][ T3807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2026.158525][ T3807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2026.163127][ T3807] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.169660][ T3807] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.172404][ T3807] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.175248][ T3807] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.214660][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2026.217157][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2026.242434][ T1641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2026.245811][ T1641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2026.357867][ T3850] netlink: 'syz.3.6502': attribute type 11 has an invalid length. [ 2026.360351][ T3850] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6502'. [ 2026.614484][ T3869] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6505'. [ 2026.617501][ T3869] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6505'. [ 2027.232714][ T5961] Bluetooth: hci3: command 0x0419 tx timeout [ 2027.281233][ T3883] 9pnet: Could not find request transport: òdma [ 2027.846216][ T3899] Invalid logical block size (1048576) [ 2027.918595][ T3903] netlink: 'syz.3.6510': attribute type 11 has an invalid length. [ 2027.921142][ T3903] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6510'. [ 2027.943742][ T5961] Bluetooth: hci5: command tx timeout [ 2029.303850][ T5961] Bluetooth: hci3: command 0x0419 tx timeout [ 2030.043605][ T5961] Bluetooth: hci5: command tx timeout [ 2030.618552][ T3946] netlink: 'syz.5.6521': attribute type 10 has an invalid length. [ 2030.621812][ T3946] bridge0: port 2(bridge_slave_1) entered disabled state [ 2030.624415][ T3946] bridge0: port 1(bridge_slave_0) entered disabled state [ 2030.916607][ T3946] bridge0: port 2(bridge_slave_1) entered blocking state [ 2030.918864][ T3946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2030.921256][ T3946] bridge0: port 1(bridge_slave_0) entered blocking state [ 2030.923519][ T3946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2030.927314][ T3946] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2031.393572][ T5961] Bluetooth: hci3: command 0x0419 tx timeout [ 2031.580267][ T3961] netlink: 'syz.4.6523': attribute type 11 has an invalid length. [ 2031.582743][ T3961] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6523'. [ 2032.005756][ T3966] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6525'. [ 2032.130664][ T5961] Bluetooth: hci5: command tx timeout [ 2032.466620][ T3966] tipc: Started in network mode [ 2032.468240][ T3966] tipc: Node identity e0000001, cluster identity 4711 [ 2032.470462][ T3966] tipc: Enabling of bearer rejected, failed to enable media [ 2033.023030][ T3978] syz.5.6529: attempt to access beyond end of device [ 2033.023030][ T3978] nbd5: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2033.027110][ T3978] qnx6: unable to read the first superblock [ 2033.029152][ T3978] syz.5.6529: attempt to access beyond end of device [ 2033.029152][ T3978] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2033.033026][ T3978] qnx6: unable to read the first superblock [ 2033.035324][ T3978] qnx6: unable to read the first superblock [ 2033.707793][ T3991] FAULT_INJECTION: forcing a failure. [ 2033.707793][ T3991] name failslab, interval 1, probability 0, space 0, times 0 [ 2033.711774][ T3991] CPU: 1 UID: 0 PID: 3991 Comm: syz.2.6531 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2033.711800][ T3991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2033.711808][ T3991] Call Trace: [ 2033.711812][ T3991] [ 2033.711817][ T3991] dump_stack_lvl+0x16c/0x1f0 [ 2033.711839][ T3991] should_fail_ex+0x512/0x640 [ 2033.711856][ T3991] ? __kmalloc_node_noprof+0xc5/0x500 [ 2033.711877][ T3991] should_failslab+0xc2/0x120 [ 2033.711888][ T3991] __kmalloc_node_noprof+0xd8/0x500 [ 2033.711905][ T3991] ? crypto_alg_lookup+0x113/0x1e0 [ 2033.711919][ T3991] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 2033.711934][ T3991] ? __pfx_crypto_skcipher_extsize+0x10/0x10 [ 2033.711950][ T3991] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 2033.711964][ T3991] crypto_create_tfm_node+0x85/0x350 [ 2033.711979][ T3991] crypto_alloc_tfm_node+0x102/0x260 [ 2033.711995][ T3991] ? __pfx_skcipher_bind+0x10/0x10 [ 2033.712006][ T3991] alg_bind+0x267/0x510 [ 2033.712024][ T3991] __sys_bind+0x1a7/0x260 [ 2033.712039][ T3991] ? __pfx___sys_bind+0x10/0x10 [ 2033.712052][ T3991] ? __fget_files+0x20e/0x3c0 [ 2033.712077][ T3991] __ia32_sys_bind+0x71/0xb0 [ 2033.712090][ T3991] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2033.712109][ T3991] __do_fast_syscall_32+0x7c/0x3a0 [ 2033.712129][ T3991] do_fast_syscall_32+0x32/0x80 [ 2033.712147][ T3991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2033.712162][ T3991] RIP: 0023:0xf7f75579 [ 2033.712171][ T3991] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2033.712182][ T3991] RSP: 002b:00000000f505455c EFLAGS: 00000296 ORIG_RAX: 0000000000000169 [ 2033.712193][ T3991] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000540 [ 2033.712200][ T3991] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000000 [ 2033.712207][ T3991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2033.712213][ T3991] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2033.712219][ T3991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2033.712233][ T3991] [ 2034.458575][ T4003] netlink: 21 bytes leftover after parsing attributes in process `syz.4.6535'. [ 2034.461417][ T4003] macvtap0: entered allmulticast mode [ 2034.463099][ T4003] veth0_macvtap: entered allmulticast mode [ 2034.853462][ T61] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2035.053460][ T61] usb 9-1: Using ep0 maxpacket: 32 [ 2035.063770][ T61] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2035.069139][ T61] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2035.071990][ T61] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2035.079426][ T61] usb 9-1: Product: syz [ 2035.080826][ T61] usb 9-1: Manufacturer: syz [ 2035.085093][ T61] usb 9-1: SerialNumber: syz [ 2035.094221][ T61] usb 9-1: config 0 descriptor?? [ 2035.096776][ T4003] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2035.102057][ T61] hub 9-1:0.0: bad descriptor, ignoring hub [ 2035.113542][ T61] hub 9-1:0.0: probe with driver hub failed with error -5 [ 2035.193637][ T4015] netlink: 'syz.3.6536': attribute type 11 has an invalid length. [ 2035.196441][ T4015] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6536'. [ 2035.371742][ T4014] syz.2.6538: attempt to access beyond end of device [ 2035.371742][ T4014] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2035.437000][ T4014] qnx6: unable to read the first superblock [ 2035.448918][ T4014] syz.2.6538: attempt to access beyond end of device [ 2035.448918][ T4014] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2035.460935][ T4014] qnx6: unable to read the first superblock [ 2035.478351][ T4014] qnx6: unable to read the first superblock [ 2035.661968][ T80] Bluetooth: hci6: Frame reassembly failed (-84) [ 2035.667683][ T4021] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2035.783518][ T4003] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 2035.812243][ T4003] usb 9-1: device reset changed ep0 maxpacket size! [ 2035.872858][ T61] usb 9-1: USB disconnect, device number 2 [ 2035.972274][ T4028] syz.3.6541: attempt to access beyond end of device [ 2035.972274][ T4028] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2035.977343][ T4028] qnx6: unable to read the first superblock [ 2035.979635][ T4028] syz.3.6541: attempt to access beyond end of device [ 2035.979635][ T4028] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2035.984368][ T4028] qnx6: unable to read the first superblock [ 2035.986293][ T4028] qnx6: unable to read the first superblock [ 2036.023656][ T61] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2036.279279][ T61] usb 9-1: Using ep0 maxpacket: 16 [ 2036.313496][ T61] usb 9-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 2036.317457][ T61] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2036.368306][ T61] usb 9-1: New USB device found, idVendor=0b05, idProduct=18f0, bcdDevice=99.2f [ 2036.372095][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.381160][ T61] usb 9-1: Product: syz [ 2036.387791][ T61] usb 9-1: Manufacturer: syz [ 2036.389782][ T61] usb 9-1: SerialNumber: syz [ 2036.399374][ T61] usb 9-1: config 0 descriptor?? [ 2036.519491][ T4033] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6542'. [ 2036.906623][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 2036.910310][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.691315][ T4051] syz.3.6548: attempt to access beyond end of device [ 2037.691315][ T4051] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2037.697587][ T4051] qnx6: unable to read the first superblock [ 2037.699685][ T4051] syz.3.6548: attempt to access beyond end of device [ 2037.699685][ T4051] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2037.703559][ T5961] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2037.703636][ T1534] Bluetooth: hci6: command 0x1003 tx timeout [ 2037.705914][ T4051] qnx6: unable to read the first superblock [ 2037.710765][ T4051] qnx6: unable to read the first superblock [ 2037.870819][ T61] usb 9-1: USB disconnect, device number 3 [ 2039.170187][ T4089] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2039.214297][ T60] Bluetooth: hci6: Frame reassembly failed (-84) [ 2039.618857][ T61] libceph: connect (1)[c::]:6789 error -101 [ 2039.621448][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 2039.743995][ T4098] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 2039.746832][ T4098] overlayfs: missing 'lowerdir' [ 2039.884093][ T61] libceph: connect (1)[c::]:6789 error -101 [ 2039.886699][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 2040.062951][ T4104] 9pnet: Could not find request transport: òdma [ 2040.352449][ T4112] 9pnet: Could not find request transport: òdma [ 2040.393915][ T61] libceph: connect (1)[c::]:6789 error -101 [ 2040.396023][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 2040.443830][ T4094] ceph: No mds server is up or the cluster is laggy [ 2041.211822][ T4127] netlink: 'syz.2.6562': attribute type 11 has an invalid length. [ 2041.214501][ T4127] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6562'. [ 2041.223543][ T5961] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2041.223591][ T1534] Bluetooth: hci6: command 0x1003 tx timeout [ 2041.836250][ T4143] loop6: detected capacity change from 0 to 524287999 [ 2043.526827][ T4167] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.6574'. [ 2044.235954][ T4184] netlink: 'syz.5.6576': attribute type 11 has an invalid length. [ 2044.248353][ T4184] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6576'. [ 2045.841165][ T4204] 9pnet: Could not find request transport: òdma [ 2047.118899][ T4232] netlink: 'syz.5.6590': attribute type 10 has an invalid length. [ 2047.154308][ T4232] macvlan0: entered promiscuous mode [ 2047.235728][ T4230] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6589'. [ 2047.282326][ T4232] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 2047.728858][ T4237] comedi comedi0: Cannot bond this driver to itself! [ 2048.358747][ T4250] netlink: 'syz.3.6588': attribute type 11 has an invalid length. [ 2048.361027][ T4250] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6588'. [ 2048.649571][ T4260] xt_limit: Overflow, try lower: 324382443/3881449858 [ 2048.703722][ T61] IPVS: starting estimator thread 0... [ 2048.714422][ T4266] FAULT_INJECTION: forcing a failure. [ 2048.714422][ T4266] name failslab, interval 1, probability 0, space 0, times 0 [ 2048.719539][ T4266] CPU: 2 UID: 0 PID: 4266 Comm: syz.4.6597 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2048.719568][ T4266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2048.719580][ T4266] Call Trace: [ 2048.719586][ T4266] [ 2048.719594][ T4266] dump_stack_lvl+0x16c/0x1f0 [ 2048.719625][ T4266] should_fail_ex+0x512/0x640 [ 2048.719650][ T4266] ? fs_reclaim_acquire+0xae/0x150 [ 2048.719673][ T4266] ? tomoyo_encode2+0x100/0x3e0 [ 2048.719696][ T4266] should_failslab+0xc2/0x120 [ 2048.719714][ T4266] __kmalloc_noprof+0xd2/0x510 [ 2048.719745][ T4266] tomoyo_encode2+0x100/0x3e0 [ 2048.719772][ T4266] tomoyo_encode+0x29/0x50 [ 2048.719794][ T4266] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2048.719820][ T4266] ? tomoyo_profile+0x47/0x60 [ 2048.719839][ T4266] tomoyo_path_number_perm+0x245/0x580 [ 2048.719858][ T4266] ? tomoyo_path_number_perm+0x237/0x580 [ 2048.719881][ T4266] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2048.719928][ T4266] ? find_held_lock+0x2b/0x80 [ 2048.719946][ T4266] ? hook_file_ioctl_common+0x145/0x410 [ 2048.719971][ T4266] ? __fget_files+0x20e/0x3c0 [ 2048.719994][ T4266] ? fput+0x20/0xf0 [ 2048.720015][ T4266] security_file_ioctl_compat+0x9b/0x240 [ 2048.720039][ T4266] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2048.720064][ T4266] __do_fast_syscall_32+0x7c/0x3a0 [ 2048.720094][ T4266] do_fast_syscall_32+0x32/0x80 [ 2048.720120][ T4266] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2048.720141][ T4266] RIP: 0023:0xf704e579 [ 2048.720154][ T4266] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2048.720169][ T4266] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2048.720186][ T4266] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 2048.720197][ T4266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2048.720207][ T4266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2048.720217][ T4266] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2048.720227][ T4266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2048.720251][ T4266] [ 2048.720267][ T4266] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2048.813677][ T4268] IPVS: using max 41 ests per chain, 98400 per kthread [ 2048.970353][ T4276] syz.3.6599: attempt to access beyond end of device [ 2048.970353][ T4276] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2048.974972][ T4276] qnx6: unable to read the first superblock [ 2048.977016][ T4276] syz.3.6599: attempt to access beyond end of device [ 2048.977016][ T4276] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2048.981707][ T4276] qnx6: unable to read the first superblock [ 2048.984122][ T4276] qnx6: unable to read the first superblock [ 2049.991656][ T4294] [U]  [ 2050.137292][ T4302] netlink: 'syz.4.6603': attribute type 11 has an invalid length. [ 2050.140458][ T4302] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6603'. [ 2050.273581][ T839] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2050.371215][ T4312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6609'. [ 2050.375320][ T4312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6609'. [ 2050.425205][ T839] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2050.428967][ T839] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2050.432439][ T839] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2050.443560][ T839] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2050.447644][ T839] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2050.450506][ T839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.459155][ T839] usb 10-1: config 0 descriptor?? [ 2050.461267][ T4298] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2050.868476][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.878109][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.890662][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.913612][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.918340][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.921458][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.927432][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.930715][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.939577][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.942827][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.945509][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.948254][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.950571][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.953045][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.955633][ T839] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2050.964411][ T839] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2051.125937][ T4298] FAULT_INJECTION: forcing a failure. [ 2051.125937][ T4298] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.131751][ T4298] CPU: 3 UID: 0 PID: 4298 Comm: syz.5.6606 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2051.131768][ T4298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2051.131775][ T4298] Call Trace: [ 2051.131779][ T4298] [ 2051.131784][ T4298] dump_stack_lvl+0x16c/0x1f0 [ 2051.131805][ T4298] should_fail_ex+0x512/0x640 [ 2051.131822][ T4298] ? fs_reclaim_acquire+0xae/0x150 [ 2051.131838][ T4298] ? tomoyo_encode2+0x100/0x3e0 [ 2051.131853][ T4298] should_failslab+0xc2/0x120 [ 2051.131865][ T4298] __kmalloc_noprof+0xd2/0x510 [ 2051.131882][ T4298] ? d_absolute_path+0x136/0x1a0 [ 2051.131898][ T4298] tomoyo_encode2+0x100/0x3e0 [ 2051.131915][ T4298] tomoyo_encode+0x29/0x50 [ 2051.131931][ T4298] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2051.131951][ T4298] tomoyo_path_number_perm+0x245/0x580 [ 2051.131965][ T4298] ? tomoyo_path_number_perm+0x237/0x580 [ 2051.131980][ T4298] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2051.132009][ T4298] ? find_held_lock+0x2b/0x80 [ 2051.132021][ T4298] ? hook_file_ioctl_common+0x145/0x410 [ 2051.132038][ T4298] ? __fget_files+0x20e/0x3c0 [ 2051.132053][ T4298] ? fput+0x20/0xf0 [ 2051.132066][ T4298] security_file_ioctl_compat+0x9b/0x240 [ 2051.132082][ T4298] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2051.132099][ T4298] __do_fast_syscall_32+0x7c/0x3a0 [ 2051.132118][ T4298] do_fast_syscall_32+0x32/0x80 [ 2051.132136][ T4298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2051.132151][ T4298] RIP: 0023:0xf70fe579 [ 2051.132160][ T4298] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2051.132171][ T4298] RSP: 002b:00000000f50ee55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2051.132182][ T4298] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004018480c [ 2051.132190][ T4298] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2051.132196][ T4298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2051.132203][ T4298] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2051.132209][ T4298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2051.132223][ T4298] [ 2051.132233][ T4298] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2051.214403][ T6010] usb 10-1: USB disconnect, device number 2 [ 2052.037794][ T4333] 9pnet: Could not find request transport: òdma [ 2052.368621][ T4339] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 2052.371051][ T4339] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2052.394529][ T4339] vhci_hcd vhci_hcd.0: Device attached [ 2052.682428][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6613'. [ 2052.685456][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6613'. [ 2052.788246][ T29] usb 42-1: SetAddress Request (127) to port 0 [ 2052.790808][ T29] usb 42-1: new SuperSpeed USB device number 127 using vhci_hcd [ 2053.158011][ T4340] vhci_hcd: connection reset by peer [ 2053.261342][ T60] vhci_hcd: stop threads [ 2053.262793][ T60] vhci_hcd: release socket [ 2053.267779][ T60] vhci_hcd: disconnect device [ 2053.719398][ T4357] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6617'. [ 2053.747182][ T4357] FAULT_INJECTION: forcing a failure. [ 2053.747182][ T4357] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.752289][ T4357] CPU: 0 UID: 0 PID: 4357 Comm: syz.2.6617 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2053.752305][ T4357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2053.752313][ T4357] Call Trace: [ 2053.752317][ T4357] [ 2053.752322][ T4357] dump_stack_lvl+0x16c/0x1f0 [ 2053.752344][ T4357] should_fail_ex+0x512/0x640 [ 2053.752361][ T4357] ? fs_reclaim_acquire+0xae/0x150 [ 2053.752376][ T4357] ? tomoyo_encode2+0x100/0x3e0 [ 2053.752392][ T4357] should_failslab+0xc2/0x120 [ 2053.752405][ T4357] __kmalloc_noprof+0xd2/0x510 [ 2053.752423][ T4357] ? d_absolute_path+0x136/0x1a0 [ 2053.752438][ T4357] tomoyo_encode2+0x100/0x3e0 [ 2053.752456][ T4357] tomoyo_encode+0x29/0x50 [ 2053.752471][ T4357] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2053.752492][ T4357] tomoyo_path_number_perm+0x245/0x580 [ 2053.752506][ T4357] ? tomoyo_path_number_perm+0x237/0x580 [ 2053.752521][ T4357] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2053.752549][ T4357] ? find_held_lock+0x2b/0x80 [ 2053.752561][ T4357] ? hook_file_ioctl_common+0x145/0x410 [ 2053.752577][ T4357] ? __fget_files+0x20e/0x3c0 [ 2053.752592][ T4357] ? fput+0x20/0xf0 [ 2053.752605][ T4357] security_file_ioctl_compat+0x9b/0x240 [ 2053.752623][ T4357] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2053.752639][ T4357] __do_fast_syscall_32+0x7c/0x3a0 [ 2053.752659][ T4357] do_fast_syscall_32+0x32/0x80 [ 2053.752676][ T4357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2053.752691][ T4357] RIP: 0023:0xf7f75579 [ 2053.752700][ T4357] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2053.752711][ T4357] RSP: 002b:00000000f507555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2053.752722][ T4357] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000005001 [ 2053.752729][ T4357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2053.752735][ T4357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2053.752742][ T4357] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2053.752748][ T4357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2053.752762][ T4357] [ 2053.752775][ T4357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2053.978107][ T4360] netlink: 'syz.4.6618': attribute type 11 has an invalid length. [ 2053.981129][ T4360] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6618'. [ 2054.385671][ T4367] 9pnet: Could not find request transport: òdma [ 2054.649425][ T4384] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6622'. [ 2055.063942][ T60] Bluetooth: hci6: Frame reassembly failed (-84) [ 2055.087059][ T60] Bluetooth: hci6: Frame reassembly failed (-84) [ 2055.518156][ T4396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6625'. [ 2055.801285][ T4401] tmpfs: Unknown parameter 'gr' [ 2056.601868][ T4402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6626'. [ 2056.607214][ T4402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6626'. [ 2057.063582][ T5961] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2057.873604][ T29] usb 42-1: device descriptor read/8, error -110 [ 2058.295892][ T29] usb usb42-port1: attempt power cycle [ 2058.823507][T24763] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 2058.879527][ T29] usb usb42-port1: unable to enumerate USB device [ 2058.895192][ T4459] syz.2.6642: attempt to access beyond end of device [ 2058.895192][ T4459] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2058.899168][ T4459] qnx6: unable to read the first superblock [ 2058.901310][ T4459] syz.2.6642: attempt to access beyond end of device [ 2058.901310][ T4459] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2058.905476][ T4459] qnx6: unable to read the first superblock [ 2058.907307][ T4459] qnx6: unable to read the first superblock [ 2059.005696][T24763] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2059.010029][T24763] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 2059.014564][T24763] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2059.089940][ T4473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6641'. [ 2059.093831][ T4473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6641'. [ 2059.409576][T24763] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.417273][T24763] usb 10-1: config 0 descriptor?? [ 2059.439122][ T4469] 9pnet: Could not find request transport: òdma [ 2059.581722][ T4479] 9pnet: Could not find request transport: òdma [ 2060.813896][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6646'. [ 2060.816932][ T4493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6646'. [ 2060.862715][ T4493] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2060.866443][ T4493] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2060.869573][ T4493] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2060.872328][ T4493] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2061.172502][ T4501] FAULT_INJECTION: forcing a failure. [ 2061.172502][ T4501] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.202543][ T4501] CPU: 2 UID: 0 PID: 4501 Comm: syz.5.6637 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2061.202563][ T4501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2061.202570][ T4501] Call Trace: [ 2061.202574][ T4501] [ 2061.202578][ T4501] dump_stack_lvl+0x16c/0x1f0 [ 2061.202600][ T4501] should_fail_ex+0x512/0x640 [ 2061.202618][ T4501] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2061.202636][ T4501] should_failslab+0xc2/0x120 [ 2061.202647][ T4501] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2061.202664][ T4501] ? xdp_umem_create+0x4f/0x1270 [ 2061.202681][ T4501] xdp_umem_create+0x4f/0x1270 [ 2061.202696][ T4501] ? __pfx___might_resched+0x10/0x10 [ 2061.202713][ T4501] xsk_setsockopt+0x5b2/0x840 [ 2061.202728][ T4501] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2061.202742][ T4501] ? __pfx_aa_sk_perm+0x10/0x10 [ 2061.202760][ T4501] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2061.202775][ T4501] do_sock_setsockopt+0x221/0x470 [ 2061.202788][ T4501] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2061.202808][ T4501] __sys_setsockopt+0x120/0x1a0 [ 2061.202827][ T4501] __ia32_sys_setsockopt+0xbc/0x160 [ 2061.202843][ T4501] ? lockdep_hardirqs_on+0x7c/0x110 [ 2061.202860][ T4501] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2061.202878][ T4501] __do_fast_syscall_32+0x7c/0x3a0 [ 2061.202897][ T4501] do_fast_syscall_32+0x32/0x80 [ 2061.202915][ T4501] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2061.202930][ T4501] RIP: 0023:0xf70fe579 [ 2061.202939][ T4501] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2061.202950][ T4501] RSP: 002b:00000000f50ac55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 2061.202962][ T4501] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000011b [ 2061.202969][ T4501] RDX: 0000000000000004 RSI: 0000000080000340 RDI: 000000000000001c [ 2061.202976][ T4501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2061.202982][ T4501] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2061.202989][ T4501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2061.203002][ T4501] [ 2061.224532][ T61] usb 10-1: USB disconnect, device number 3 [ 2061.329046][ T4511] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6652'. [ 2061.697782][ T4511] tipc: Enabling of bearer rejected, failed to enable media [ 2062.195889][ T4518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6653'. [ 2062.198810][ T4518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6653'. [ 2062.371226][ T4522] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6654'. [ 2062.727045][ T4521] tipc: Enabling of bearer rejected, failed to enable media [ 2062.903480][ T1534] Bluetooth: hci5: command 0x0405 tx timeout [ 2063.635482][ T4550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6663'. [ 2063.655852][T24763] libceph: connect (1)[c::]:6789 error -101 [ 2063.657918][T24763] libceph: mon0 (1)[c::]:6789 connect error [ 2063.675626][ T4548] ceph: No mds server is up or the cluster is laggy [ 2063.908364][ T4550] tipc: Started in network mode [ 2063.910606][ T4550] tipc: Node identity e0000001, cluster identity 4711 [ 2063.914924][ T4550] tipc: Enabling of bearer rejected, failed to enable media [ 2064.352859][ T4560] sd 0:0:0:0: PR command failed: 1026 [ 2064.358209][ T4560] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 2064.361014][ T4560] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 2064.476876][ T4565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6665'. [ 2064.503886][ T4569] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2064.507170][T26654] Bluetooth: hci6: Frame reassembly failed (-84) [ 2064.986558][ T4571] wireguard0: entered promiscuous mode [ 2064.988979][ T4571] wireguard0: entered allmulticast mode [ 2065.495203][ T4576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6667'. [ 2065.498330][ T4576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6667'. [ 2065.642032][ T4583] libceph: resolve '400' (ret=-3): failed [ 2065.877449][ T4594] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6672'. [ 2066.120579][ T4594] tipc: Enabling of bearer rejected, failed to enable media [ 2066.423554][ T4603] FAULT_INJECTION: forcing a failure. [ 2066.423554][ T4603] name failslab, interval 1, probability 0, space 0, times 0 [ 2066.428006][ T4603] CPU: 1 UID: 0 PID: 4603 Comm: syz.4.6674 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2066.428032][ T4603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2066.428040][ T4603] Call Trace: [ 2066.428044][ T4603] [ 2066.428049][ T4603] dump_stack_lvl+0x16c/0x1f0 [ 2066.428070][ T4603] should_fail_ex+0x512/0x640 [ 2066.428088][ T4603] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2066.428106][ T4603] should_failslab+0xc2/0x120 [ 2066.428117][ T4603] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2066.428133][ T4603] ? resv_map_alloc+0x7e/0x400 [ 2066.428145][ T4603] ? kasan_save_track+0x14/0x30 [ 2066.428164][ T4603] resv_map_alloc+0x7e/0x400 [ 2066.428176][ T4603] hugetlbfs_get_inode+0x33f/0x730 [ 2066.428191][ T4603] hugetlb_file_setup+0x15b/0x620 [ 2066.428206][ T4603] ksys_mmap_pgoff+0x189/0x5c0 [ 2066.428235][ T4603] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2066.428249][ T4603] __do_fast_syscall_32+0x7c/0x3a0 [ 2066.428268][ T4603] do_fast_syscall_32+0x32/0x80 [ 2066.428286][ T4603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2066.428300][ T4603] RIP: 0023:0xf704e579 [ 2066.428310][ T4603] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2066.428321][ T4603] RSP: 002b:00000000f4ffc55c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2066.428332][ T4603] RAX: ffffffffffffffda RBX: 0000000080800000 RCX: 0000000000800000 [ 2066.428339][ T4603] RDX: 0000000000000002 RSI: 0000000000042031 RDI: 00000000ffffffff [ 2066.428346][ T4603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2066.428352][ T4603] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2066.428358][ T4603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2066.428372][ T4603] [ 2066.506523][ T5961] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2067.460854][ T4606] netlink: 'syz.2.6675': attribute type 11 has an invalid length. [ 2067.486753][ T4606] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6675'. [ 2069.049486][ T4637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6682'. [ 2069.245521][ T4637] tipc: Enabling of bearer rejected, failed to enable media [ 2070.054619][ T4651] tipc: Enabling of bearer rejected, failed to enable media [ 2070.266709][ T4645] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6685'. [ 2070.273599][ T4645] netlink: 'syz.3.6685': attribute type 6 has an invalid length. [ 2070.382219][ T4645] netlink: 'syz.3.6685': attribute type 5 has an invalid length. [ 2070.386147][ T4645] netlink: 'syz.3.6685': attribute type 4 has an invalid length. [ 2071.318975][ T4667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6690'. [ 2071.321840][ T4667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6690'. [ 2071.339968][ T4667] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2071.342719][ T4667] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2071.345519][ T4667] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2071.348225][ T4667] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2072.033509][ T4678] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6693'. [ 2072.174552][ T4678] tipc: Enabling of bearer rejected, failed to enable media [ 2072.284476][ T839] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2072.474345][ T839] usb 10-1: Using ep0 maxpacket: 32 [ 2072.484202][ T839] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2072.528389][ T839] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2072.537491][ T839] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2072.540107][ T839] usb 10-1: Product: syz [ 2072.541437][ T839] usb 10-1: Manufacturer: syz [ 2072.542903][ T839] usb 10-1: SerialNumber: syz [ 2072.552038][ T839] usb 10-1: config 0 descriptor?? [ 2072.558188][ T4680] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2072.601048][ T839] hub 10-1:0.0: bad descriptor, ignoring hub [ 2072.618570][ T839] hub 10-1:0.0: probe with driver hub failed with error -5 [ 2073.135304][ T4703] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2073.207728][ T4703] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2073.632420][ T4716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6701'. [ 2074.153516][ T4726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6703'. [ 2074.435772][ T4731] FAULT_INJECTION: forcing a failure. [ 2074.435772][ T4731] name failslab, interval 1, probability 0, space 0, times 0 [ 2074.441079][ T4731] CPU: 1 UID: 0 PID: 4731 Comm: syz.4.6704 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2074.441117][ T4731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2074.441128][ T4731] Call Trace: [ 2074.441135][ T4731] [ 2074.441142][ T4731] dump_stack_lvl+0x16c/0x1f0 [ 2074.441174][ T4731] should_fail_ex+0x512/0x640 [ 2074.441201][ T4731] ? fs_reclaim_acquire+0xae/0x150 [ 2074.441225][ T4731] ? tomoyo_encode2+0x100/0x3e0 [ 2074.441248][ T4731] should_failslab+0xc2/0x120 [ 2074.441273][ T4731] __kmalloc_noprof+0xd2/0x510 [ 2074.441300][ T4731] ? d_absolute_path+0x136/0x1a0 [ 2074.441325][ T4731] tomoyo_encode2+0x100/0x3e0 [ 2074.441366][ T4731] tomoyo_encode+0x29/0x50 [ 2074.441390][ T4731] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2074.441422][ T4731] tomoyo_path_number_perm+0x245/0x580 [ 2074.441443][ T4731] ? tomoyo_path_number_perm+0x237/0x580 [ 2074.441468][ T4731] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2074.441515][ T4731] ? find_held_lock+0x2b/0x80 [ 2074.441535][ T4731] ? hook_file_ioctl_common+0x145/0x410 [ 2074.441561][ T4731] ? __fget_files+0x20e/0x3c0 [ 2074.441584][ T4731] ? fput+0x20/0xf0 [ 2074.441605][ T4731] security_file_ioctl_compat+0x9b/0x240 [ 2074.441630][ T4731] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2074.441657][ T4731] __do_fast_syscall_32+0x7c/0x3a0 [ 2074.441685][ T4731] do_fast_syscall_32+0x32/0x80 [ 2074.441712][ T4731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2074.441734][ T4731] RIP: 0023:0xf704e579 [ 2074.441751][ T4731] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2074.441767][ T4731] RSP: 002b:00000000f4ffc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2074.441785][ T4731] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000560a [ 2074.441796][ T4731] RDX: 00000000800006c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2074.441808][ T4731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2074.441819][ T4731] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2074.441831][ T4731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2074.441855][ T4731] [ 2074.442125][ T4731] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2075.313689][T22657] usb 10-1: USB disconnect, device number 4 [ 2075.462991][ T4753] 9pnet: Could not find request transport: òdma [ 2075.833670][ T4764] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6711'. [ 2076.171137][ T4772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2076.235393][ T4773] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2076.237487][ T4773] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2076.240365][ T4773] vhci_hcd vhci_hcd.0: Device attached [ 2076.248518][ T4777] FAULT_INJECTION: forcing a failure. [ 2076.248518][ T4777] name failslab, interval 1, probability 0, space 0, times 0 [ 2076.248922][ T4773] netdevsim netdevsim4: Direct firmware load for @ failed with error -2 [ 2076.254171][ T4777] CPU: 3 UID: 0 PID: 4777 Comm: syz.2.6715 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2076.254196][ T4777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2076.254206][ T4777] Call Trace: [ 2076.254213][ T4777] [ 2076.254221][ T4777] dump_stack_lvl+0x16c/0x1f0 [ 2076.254252][ T4777] should_fail_ex+0x512/0x640 [ 2076.254279][ T4777] ? fs_reclaim_acquire+0xae/0x150 [ 2076.254309][ T4777] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2076.254334][ T4777] should_failslab+0xc2/0x120 [ 2076.254352][ T4777] __kmalloc_noprof+0xd2/0x510 [ 2076.254385][ T4777] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2076.254412][ T4777] ? tomoyo_profile+0x47/0x60 [ 2076.254432][ T4777] tomoyo_path_number_perm+0x245/0x580 [ 2076.254453][ T4777] ? tomoyo_path_number_perm+0x237/0x580 [ 2076.254477][ T4777] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2076.254500][ T4777] ? register_lock_class+0x41/0x4c0 [ 2076.254532][ T4777] ? __lock_acquire+0xb8a/0x1c90 [ 2076.254570][ T4777] ? __pfx___might_resched+0x10/0x10 [ 2076.254595][ T4777] ? down_write_killable+0x154/0x250 [ 2076.254613][ T4777] ? __pfx_down_write_killable+0x10/0x10 [ 2076.254630][ T4777] ? mnt_get_write_access+0x20c/0x300 [ 2076.254654][ T4777] security_path_chmod+0x121/0x2c0 [ 2076.254677][ T4777] chmod_common+0x179/0x480 [ 2076.254700][ T4777] ? __pfx_chmod_common+0x10/0x10 [ 2076.254731][ T4777] ? putname+0x154/0x1a0 [ 2076.254754][ T4777] __ia32_sys_fchmodat+0x12b/0x1f0 [ 2076.254774][ T4777] ? __pfx___ia32_sys_fchmodat+0x10/0x10 [ 2076.254796][ T4777] ? rcu_is_watching+0x12/0xc0 [ 2076.254820][ T4777] __do_fast_syscall_32+0x7c/0x3a0 [ 2076.254851][ T4777] do_fast_syscall_32+0x32/0x80 [ 2076.254877][ T4777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2076.254900][ T4777] RIP: 0023:0xf7f75579 [ 2076.254915][ T4777] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2076.254932][ T4777] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000132 [ 2076.254951][ T4777] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 2076.254962][ T4777] RDX: 00000000fffffed3 RSI: 0000000000000000 RDI: 0000000000000000 [ 2076.254973][ T4777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2076.254984][ T4777] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2076.254996][ T4777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2076.255018][ T4777] [ 2076.255027][ T4777] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2076.256932][ T4773] netdevsim netdevsim4: Falling back to sysfs fallback for: @ [ 2076.301074][ T4778] fuse: Bad value for 'fd' [ 2076.388282][ T4780] syz.2.6716: attempt to access beyond end of device [ 2076.388282][ T4780] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2076.392356][ T4780] qnx6: unable to read the first superblock [ 2076.395949][ T4780] syz.2.6716: attempt to access beyond end of device [ 2076.395949][ T4780] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2076.400421][ T4780] qnx6: unable to read the first superblock [ 2076.402354][ T4780] qnx6: unable to read the first superblock [ 2076.533571][T22657] usb 46-1: SetAddress Request (2) to port 0 [ 2076.537847][T22657] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2076.646269][ T4794] FAULT_INJECTION: forcing a failure. [ 2076.646269][ T4794] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2076.650781][ T4794] CPU: 1 UID: 0 PID: 4794 Comm: syz.3.6719 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2076.650798][ T4794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2076.650805][ T4794] Call Trace: [ 2076.650810][ T4794] [ 2076.650814][ T4794] dump_stack_lvl+0x16c/0x1f0 [ 2076.650836][ T4794] should_fail_ex+0x512/0x640 [ 2076.650856][ T4794] should_fail_alloc_page+0xe7/0x130 [ 2076.650869][ T4794] prepare_alloc_pages+0x3c2/0x610 [ 2076.650886][ T4794] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 2076.650907][ T4794] ? find_held_lock+0x2b/0x80 [ 2076.650920][ T4794] ? is_bpf_text_address+0x8a/0x1a0 [ 2076.650937][ T4794] ? bpf_ksym_find+0x124/0x1c0 [ 2076.650950][ T4794] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2076.650967][ T4794] ? is_bpf_text_address+0x94/0x1a0 [ 2076.650984][ T4794] ? __kernel_text_address+0xd/0x40 [ 2076.650996][ T4794] ? unwind_get_return_address+0x59/0xa0 [ 2076.651019][ T4794] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2076.651039][ T4794] ? policy_nodemask+0xea/0x4e0 [ 2076.651051][ T4794] alloc_pages_mpol+0x1fb/0x550 [ 2076.651084][ T4794] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2076.651100][ T4794] ? kasan_save_stack+0x33/0x60 [ 2076.651118][ T4794] ? __kasan_kmalloc+0xaa/0xb0 [ 2076.651134][ T4794] ? __get_vm_area_node+0x101/0x330 [ 2076.651151][ T4794] alloc_pages_noprof+0x131/0x390 [ 2076.651163][ T4794] get_free_pages_noprof+0x10/0xb0 [ 2076.651175][ T4794] kasan_populate_vmalloc+0x89/0x1f0 [ 2076.651195][ T4794] alloc_vmap_area+0x959/0x29c0 [ 2076.651214][ T4794] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2076.651230][ T4794] __get_vm_area_node+0x1ca/0x330 [ 2076.651247][ T4794] __vmalloc_node_range_noprof+0x271/0x14b0 [ 2076.651263][ T4794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2076.651282][ T4794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2076.651300][ T4794] ? __kernel_text_address+0xd/0x40 [ 2076.651310][ T4794] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2076.651326][ T4794] ? aa_get_newest_label+0x375/0x680 [ 2076.651339][ T4794] ? __pfx_aa_get_newest_label+0x10/0x10 [ 2076.651353][ T4794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2076.651368][ T4794] __vmalloc_node_noprof+0xad/0xf0 [ 2076.651383][ T4794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2076.651400][ T4794] bpf_prog_alloc_no_stats+0x54/0x630 [ 2076.651416][ T4794] ? security_capable+0x7e/0x260 [ 2076.651429][ T4794] bpf_prog_alloc+0x3b/0x230 [ 2076.651443][ T4794] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2076.651461][ T4794] bpf_prog_load+0x1a04/0x2490 [ 2076.651475][ T4794] ? __pfx_bpf_prog_load+0x10/0x10 [ 2076.651497][ T4794] __sys_bpf+0x433c/0x4d80 [ 2076.651510][ T4794] ? __pfx___sys_bpf+0x10/0x10 [ 2076.651521][ T4794] ? ksys_write+0x190/0x250 [ 2076.651540][ T4794] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2076.651565][ T4794] ? fput+0x70/0xf0 [ 2076.651576][ T4794] ? ksys_write+0x1ac/0x250 [ 2076.651596][ T4794] ? __pfx_ksys_write+0x10/0x10 [ 2076.651615][ T4794] __ia32_sys_bpf+0x76/0xe0 [ 2076.651632][ T4794] __do_fast_syscall_32+0x7c/0x3a0 [ 2076.651651][ T4794] do_fast_syscall_32+0x32/0x80 [ 2076.651669][ T4794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2076.651684][ T4794] RIP: 0023:0xf702e579 [ 2076.651693][ T4794] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2076.651704][ T4794] RSP: 002b:00000000f501e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2076.651715][ T4794] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 2076.651722][ T4794] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 2076.651729][ T4794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2076.651735][ T4794] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2076.651742][ T4794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2076.651754][ T4794] [ 2076.652011][ T4794] syz.3.6719: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2076.786984][ T4794] CPU: 0 UID: 0 PID: 4794 Comm: syz.3.6719 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2076.787003][ T4794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2076.787011][ T4794] Call Trace: [ 2076.787015][ T4794] [ 2076.787020][ T4794] dump_stack_lvl+0x16c/0x1f0 [ 2076.787043][ T4794] warn_alloc+0x248/0x3a0 [ 2076.787087][ T4794] ? __pfx_warn_alloc+0x10/0x10 [ 2076.787113][ T4794] ? kfree+0x2b4/0x4d0 [ 2076.787132][ T4794] ? __get_vm_area_node+0x208/0x330 [ 2076.787150][ T4794] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 2076.787171][ T4794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2076.787190][ T4794] ? __kernel_text_address+0xd/0x40 [ 2076.787203][ T4794] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2076.787219][ T4794] ? aa_get_newest_label+0x375/0x680 [ 2076.787233][ T4794] ? __pfx_aa_get_newest_label+0x10/0x10 [ 2076.787248][ T4794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2076.787272][ T4794] __vmalloc_node_noprof+0xad/0xf0 [ 2076.787288][ T4794] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2076.787306][ T4794] bpf_prog_alloc_no_stats+0x54/0x630 [ 2076.787322][ T4794] ? security_capable+0x7e/0x260 [ 2076.787336][ T4794] bpf_prog_alloc+0x3b/0x230 [ 2076.787351][ T4794] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2076.787371][ T4794] bpf_prog_load+0x1a04/0x2490 [ 2076.787385][ T4794] ? __pfx_bpf_prog_load+0x10/0x10 [ 2076.787409][ T4794] __sys_bpf+0x433c/0x4d80 [ 2076.787423][ T4794] ? __pfx___sys_bpf+0x10/0x10 [ 2076.787434][ T4794] ? ksys_write+0x190/0x250 [ 2076.787455][ T4794] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2076.787482][ T4794] ? fput+0x70/0xf0 [ 2076.787494][ T4794] ? ksys_write+0x1ac/0x250 [ 2076.787515][ T4794] ? __pfx_ksys_write+0x10/0x10 [ 2076.787536][ T4794] __ia32_sys_bpf+0x76/0xe0 [ 2076.787548][ T4794] __do_fast_syscall_32+0x7c/0x3a0 [ 2076.787569][ T4794] do_fast_syscall_32+0x32/0x80 [ 2076.787588][ T4794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2076.787603][ T4794] RIP: 0023:0xf702e579 [ 2076.787612][ T4794] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2076.787625][ T4794] RSP: 002b:00000000f501e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2076.787636][ T4794] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 2076.787644][ T4794] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 2076.787650][ T4794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2076.787657][ T4794] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2076.787686][ T4794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2076.787700][ T4794] [ 2076.789657][ T4794] Mem-Info: [ 2076.865846][ T4774] vhci_hcd: connection reset by peer [ 2076.873031][ T4794] active_anon:6343 inactive_anon:1821 isolated_anon:0 [ 2076.873031][ T4794] active_file:3174 inactive_file:10690 isolated_file:0 [ 2076.873031][ T4794] unevictable:1768 dirty:847 writeback:0 [ 2076.873031][ T4794] slab_reclaimable:7359 slab_unreclaimable:79544 [ 2076.873031][ T4794] mapped:31358 shmem:7622 pagetables:1842 [ 2076.873031][ T4794] sec_pagetables:334 bounce:0 [ 2076.873031][ T4794] kernel_misc_reclaimable:0 [ 2076.873031][ T4794] free:47519 free_pcp:11905 free_cma:0 [ 2076.894174][ T4794] Node 0 active_anon:16kB inactive_anon:80kB active_file:4kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:4kB writeback:0kB shmem:4532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9420kB pagetables:2508kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB [ 2076.894463][T26654] vhci_hcd: stop threads [ 2076.905161][ T4794] Node 1 active_anon:25356kB inactive_anon:7204kB active_file:12692kB inactive_file:42760kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:125416kB dirty:3384kB writeback:0kB shmem:25956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9160kB pagetables:4860kB sec_pagetables:200kB all_unreclaimable? no Balloon:0kB [ 2076.916581][T26654] vhci_hcd: release socket [ 2076.916614][T26654] vhci_hcd: disconnect device [ 2076.921531][ T4794] Node 0 DMA free:2376kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:196kB local_pcp:148kB free_cma:0kB [ 2076.931177][ T4794] lowmem_reserve[]: 0 288 288 288 288 [ 2076.932910][ T4794] Node 0 DMA32 free:19548kB boost:29740kB min:42960kB low:46264kB high:49568kB reserved_highatomic:2048KB free_highatomic:132KB active_anon:16kB inactive_anon:80kB active_file:4kB inactive_file:0kB unevictable:3536kB writepending:4kB present:1032196kB managed:295888kB mlocked:0kB bounce:0kB free_pcp:9156kB local_pcp:1732kB free_cma:0kB [ 2076.947857][ T4794] lowmem_reserve[]: 0 0 0 0 0 [ 2076.949777][ T4794] Node 1 DMA32 free:168152kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:4096KB free_highatomic:2020KB active_anon:25376kB inactive_anon:7204kB active_file:12692kB inactive_file:42760kB unevictable:3536kB writepending:3384kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:38308kB local_pcp:3596kB free_cma:0kB [ 2076.961143][ T4794] lowmem_reserve[]: 0 0 0 0 0 [ 2076.963033][ T4794] Node 0 DMA: 36*4kB (UM) 17*8kB (UM) 9*16kB (UM) 7*32kB (UM) 3*64kB (UM) 2*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2376kB [ 2076.970688][ T4794] Node 0 DMA32: 131*4kB (UMH) 158*8kB (UH) 86*16kB (UM) 186*32kB (UMH) 71*64kB (UM) 30*128kB (UME) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19548kB [ 2076.977007][ T4794] Node 1 DMA32: 1589*4kB (UEH) 1520*8kB (UMEH) 903*16kB (UMEH) 791*32kB (UMEH) 443*64kB (UMEH) 116*128kB (UMEH) 92*256kB (UMEH) 26*512kB (UMH) 21*1024kB (UM) 4*2048kB (U) 0*4096kB = 168036kB [ 2076.982820][ T4794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2076.988361][ T4794] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2076.991263][ T4794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2076.995905][ T4794] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2076.998878][ T4794] 22026 total pagecache pages [ 2077.000378][ T4794] 542 pages in swap cache [ 2077.001745][ T4794] Free swap = 92892kB [ 2077.003041][ T4794] Total swap = 124996kB [ 2077.004782][ T4794] 524155 pages RAM [ 2077.005986][ T4794] 0 pages HighMem/MovableOnly [ 2077.007485][ T4794] 209272 pages reserved [ 2077.009252][ T4794] 0 pages cma reserved [ 2077.058618][ T4800] syz.3.6721: attempt to access beyond end of device [ 2077.058618][ T4800] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2077.062741][ T4800] qnx6: unable to read the first superblock [ 2077.070248][ T4800] syz.3.6721: attempt to access beyond end of device [ 2077.070248][ T4800] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2077.075654][ T4800] qnx6: unable to read the first superblock [ 2077.077522][ T4800] qnx6: unable to read the first superblock [ 2077.341696][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6722'. [ 2077.344854][ T4806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6722'. [ 2077.364813][ T4806] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2077.367616][ T4806] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2077.370363][ T4806] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2077.373118][ T4806] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2077.425987][ T4809] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6723'. [ 2078.000420][ T4823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6725'. [ 2078.003319][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6725'. [ 2078.814257][ T4840] syz.4.6730: attempt to access beyond end of device [ 2078.814257][ T4840] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2078.818496][ T4840] qnx6: unable to read the first superblock [ 2078.820783][ T4840] syz.4.6730: attempt to access beyond end of device [ 2078.820783][ T4840] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2078.824979][ T4840] qnx6: unable to read the first superblock [ 2078.826851][ T4840] qnx6: unable to read the first superblock [ 2079.034420][ T4852] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6734'. [ 2079.311495][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6731'. [ 2079.314794][ T4857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2079.419530][ T4856] netlink: 'syz.3.6733': attribute type 11 has an invalid length. [ 2079.422099][ T4856] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6733'. [ 2079.790928][ T4865] QAT: Device 253 not found [ 2079.936168][ T3890] Bluetooth: hci0: Frame reassembly failed (-84) [ 2079.945925][ T4869] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2080.230752][ T4885] 9pnet: Could not find request transport: òdma [ 2080.764985][ T4898] 9pnet: Could not find request transport: òdma [ 2081.432862][ T4908] random: crng reseeded on system resumption [ 2081.623873][T22657] usb 46-1: device descriptor read/8, error -110 [ 2081.953568][ T1534] Bluetooth: hci0: command 0x1003 tx timeout [ 2081.953584][ T5961] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2082.015421][T22657] usb usb46-port1: attempt power cycle [ 2082.464336][ T4935] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 2082.664133][T22657] usb usb46-port1: unable to enumerate USB device [ 2083.030789][ T4951] FAULT_INJECTION: forcing a failure. [ 2083.030789][ T4951] name failslab, interval 1, probability 0, space 0, times 0 [ 2083.035340][ T4951] CPU: 3 UID: 0 PID: 4951 Comm: syz.2.6760 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2083.035357][ T4951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2083.035365][ T4951] Call Trace: [ 2083.035369][ T4951] [ 2083.035374][ T4951] dump_stack_lvl+0x16c/0x1f0 [ 2083.035395][ T4951] should_fail_ex+0x512/0x640 [ 2083.035414][ T4951] ? __kmalloc_noprof+0xbf/0x510 [ 2083.035432][ T4951] ? copy_splice_read+0x1a8/0xba0 [ 2083.035446][ T4951] should_failslab+0xc2/0x120 [ 2083.035457][ T4951] __kmalloc_noprof+0xd2/0x510 [ 2083.035477][ T4951] copy_splice_read+0x1a8/0xba0 [ 2083.035495][ T4951] ? __pfx_copy_splice_read+0x10/0x10 [ 2083.035511][ T4951] ? look_up_lock_class+0x59/0x150 [ 2083.035530][ T4951] ? lockdep_init_map_type+0x5c/0x280 [ 2083.035547][ T4951] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 2083.035565][ T4951] ? __pfx_copy_splice_read+0x10/0x10 [ 2083.035579][ T4951] do_splice_read+0x282/0x370 [ 2083.035595][ T4951] splice_direct_to_actor+0x2a1/0xa30 [ 2083.035612][ T4951] ? __pfx_direct_splice_actor+0x10/0x10 [ 2083.035629][ T4951] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2083.035644][ T4951] ? get_pid_task+0xfc/0x250 [ 2083.035663][ T4951] do_splice_direct+0x174/0x240 [ 2083.035679][ T4951] ? __pfx_do_splice_direct+0x10/0x10 [ 2083.035694][ T4951] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2083.035711][ T4951] ? rw_verify_area+0xcf/0x680 [ 2083.035728][ T4951] do_sendfile+0xb06/0xe50 [ 2083.035745][ T4951] ? __pfx_do_sendfile+0x10/0x10 [ 2083.035761][ T4951] ? __might_fault+0xe3/0x190 [ 2083.035778][ T4951] ? __might_fault+0x13b/0x190 [ 2083.035798][ T4951] __ia32_compat_sys_sendfile+0x162/0x220 [ 2083.035811][ T4951] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 2083.035824][ T4951] ? rcu_is_watching+0x12/0xc0 [ 2083.035838][ T4951] __do_fast_syscall_32+0x7c/0x3a0 [ 2083.035857][ T4951] do_fast_syscall_32+0x32/0x80 [ 2083.035875][ T4951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2083.035889][ T4951] RIP: 0023:0xf7f75579 [ 2083.035898][ T4951] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2083.035909][ T4951] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2083.035919][ T4951] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 2083.035926][ T4951] RDX: 0000000080002700 RSI: 000000000000001c RDI: 0000000000000000 [ 2083.035933][ T4951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2083.035939][ T4951] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2083.035945][ T4951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2083.035958][ T4951] [ 2083.297257][ T4956] syz.5.6762: attempt to access beyond end of device [ 2083.297257][ T4956] nbd5: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2083.301557][ T4956] qnx6: unable to read the first superblock [ 2083.304083][ T4956] syz.5.6762: attempt to access beyond end of device [ 2083.304083][ T4956] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2083.309060][ T4956] qnx6: unable to read the first superblock [ 2083.311420][ T4956] qnx6: unable to read the first superblock [ 2083.350996][ T4964] netlink: 'syz.4.6759': attribute type 11 has an invalid length. [ 2083.354424][ T4964] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6759'. [ 2083.414265][ T4962] syz.3.6763: attempt to access beyond end of device [ 2083.414265][ T4962] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2083.418315][ T4962] qnx6: unable to read the first superblock [ 2083.420274][ T4962] syz.3.6763: attempt to access beyond end of device [ 2083.420274][ T4962] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2083.424359][ T4962] qnx6: unable to read the first superblock [ 2083.426219][ T4962] qnx6: unable to read the first superblock [ 2083.531306][ T4969] 9pnet: Could not find request transport: òdma [ 2084.547230][ T4988] vxfs: WRONG superblock magic 00000000 at 1 [ 2084.551245][ T4988] vxfs: WRONG superblock magic 00000000 at 8 [ 2084.553567][ T4988] vxfs: can't find superblock. [ 2084.789499][ T4990] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2086.824258][ T1534] Bluetooth: hci0: command 0x1003 tx timeout [ 2086.824669][ T5961] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2089.090072][ T5049] ptrace attach of "/syz-executor exec"[3807] was attempted by "/syz-executor exec"[5049] [ 2089.303569][ T61] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 2089.472628][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2089.476775][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.480718][ T61] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2089.485426][ T61] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2089.488231][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.520635][ T61] usb 8-1: config 0 descriptor?? [ 2089.623147][ T5063] netlink: 'syz.5.6789': attribute type 11 has an invalid length. [ 2089.626032][ T5063] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6789'. [ 2089.713614][T31228] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 2089.881619][T31228] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2089.890576][T31228] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.894893][T31228] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2089.900057][T31228] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2089.904120][T31228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.909680][T31228] usb 7-1: config 0 descriptor?? [ 2089.927296][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.933223][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.936337][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.940637][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.943937][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.946921][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.949922][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.952971][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.956046][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.959092][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.962104][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.965261][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.968233][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.970661][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.973350][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.976024][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.978364][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.980720][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.983065][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.985973][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.993098][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.996027][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2089.998351][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.000673][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.003000][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.005449][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.007806][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.010105][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.012520][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.015568][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.017880][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.020182][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.022494][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.025089][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.027468][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.029783][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.032135][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.035127][ T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2090.040912][ T61] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2090.126654][ T5047] FAULT_INJECTION: forcing a failure. [ 2090.126654][ T5047] name failslab, interval 1, probability 0, space 0, times 0 [ 2090.130853][ T5047] CPU: 0 UID: 0 PID: 5047 Comm: syz.3.6787 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2090.130870][ T5047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2090.130877][ T5047] Call Trace: [ 2090.130881][ T5047] [ 2090.130886][ T5047] dump_stack_lvl+0x16c/0x1f0 [ 2090.130917][ T5047] should_fail_ex+0x512/0x640 [ 2090.130936][ T5047] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2090.130973][ T5047] should_failslab+0xc2/0x120 [ 2090.130986][ T5047] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2090.131003][ T5047] ? alloc_empty_file+0x55/0x1e0 [ 2090.131020][ T5047] alloc_empty_file+0x55/0x1e0 [ 2090.131033][ T5047] path_openat+0xda/0x2cb0 [ 2090.131048][ T5047] ? do_fast_syscall_32+0x32/0x80 [ 2090.131066][ T5047] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2090.131085][ T5047] ? __pfx_path_openat+0x10/0x10 [ 2090.131105][ T5047] do_filp_open+0x20b/0x470 [ 2090.131123][ T5047] ? __pfx_do_filp_open+0x10/0x10 [ 2090.131149][ T5047] ? _raw_spin_unlock+0x28/0x50 [ 2090.131169][ T5047] ? alloc_fd+0x471/0x7d0 [ 2090.131188][ T5047] do_sys_openat2+0x11b/0x1d0 [ 2090.131202][ T5047] ? __pfx_do_sys_openat2+0x10/0x10 [ 2090.131217][ T5047] ? __fget_files+0x20e/0x3c0 [ 2090.131236][ T5047] __ia32_compat_sys_openat+0x16d/0x210 [ 2090.131250][ T5047] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2090.131264][ T5047] ? ksys_write+0x1ac/0x250 [ 2090.131283][ T5047] ? rcu_is_watching+0x12/0xc0 [ 2090.131297][ T5047] __do_fast_syscall_32+0x7c/0x3a0 [ 2090.131316][ T5047] do_fast_syscall_32+0x32/0x80 [ 2090.131334][ T5047] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2090.131348][ T5047] RIP: 0023:0xf702e579 [ 2090.131358][ T5047] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2090.131369][ T5047] RSP: 002b:00000000f501e100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 2090.131380][ T5047] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f501e150 [ 2090.131387][ T5047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7393ff4 [ 2090.131394][ T5047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2090.131400][ T5047] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2090.131406][ T5047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2090.131420][ T5047] [ 2090.132184][ T7795] usb 8-1: USB disconnect, device number 30 [ 2090.487693][ T5072] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6792'. [ 2090.949359][ T5082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6794'. [ 2091.127071][ T5082] tipc: Enabling of bearer rejected, failed to enable media [ 2091.317477][ T80] Bluetooth: hci0: Frame reassembly failed (-84) [ 2091.319851][ T5090] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2092.536409][T31228] usbhid 7-1:0.0: can't add hid device: -71 [ 2092.538361][T31228] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2092.546676][T31228] usb 7-1: USB disconnect, device number 29 [ 2093.383599][ T1534] Bluetooth: hci0: command 0x1003 tx timeout [ 2093.383919][ T5961] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2093.696630][ T5121] FAULT_INJECTION: forcing a failure. [ 2093.696630][ T5121] name failslab, interval 1, probability 0, space 0, times 0 [ 2093.700933][ T5121] CPU: 1 UID: 0 PID: 5121 Comm: syz.4.6804 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2093.700961][ T5121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2093.700969][ T5121] Call Trace: [ 2093.700974][ T5121] [ 2093.700978][ T5121] dump_stack_lvl+0x16c/0x1f0 [ 2093.701000][ T5121] should_fail_ex+0x512/0x640 [ 2093.701017][ T5121] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2093.701035][ T5121] should_failslab+0xc2/0x120 [ 2093.701047][ T5121] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2093.701064][ T5121] ? copy_mount_options+0x55/0x190 [ 2093.701078][ T5121] copy_mount_options+0x55/0x190 [ 2093.701091][ T5121] __ia32_sys_mount+0x1ac/0x310 [ 2093.701103][ T5121] ? __pfx___ia32_sys_mount+0x10/0x10 [ 2093.701115][ T5121] ? rcu_is_watching+0x12/0xc0 [ 2093.701132][ T5121] __do_fast_syscall_32+0x7c/0x3a0 [ 2093.701151][ T5121] do_fast_syscall_32+0x32/0x80 [ 2093.701169][ T5121] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2093.701183][ T5121] RIP: 0023:0xf704e579 [ 2093.701193][ T5121] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2093.701204][ T5121] RSP: 002b:00000000f4ffc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 2093.701215][ T5121] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080002880 [ 2093.701222][ T5121] RDX: 00000000800028c0 RSI: 0000000000000000 RDI: 0000000080000180 [ 2093.701229][ T5121] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2093.701235][ T5121] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2093.701242][ T5121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2093.701255][ T5121] [ 2094.008336][ T5125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6803'. [ 2094.012409][ T5125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6803'. [ 2095.839999][ T5151] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6812'. [ 2095.986829][ T5151] tipc: Enabling of bearer rejected, failed to enable media [ 2096.096746][ T5162] fuse: Unknown parameter 'rootqode' [ 2096.429322][ T5145] syz.4.6809 (5145) used greatest stack depth: 19784 bytes left [ 2097.601183][ T5180] fuse: Unknown parameter '' [ 2097.603237][ T5180] fuse: Unknown parameter 'grnëüËõvÌ*¸ô"(ºup_00000000000000000000' [ 2097.649620][ T5187] fuse: Bad value for 'fd' [ 2098.347726][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.349850][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.591838][ T5210] netlink: 'syz.4.6826': attribute type 11 has an invalid length. [ 2098.594630][ T5210] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6826'. [ 2099.474548][ T5215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6827'. [ 2099.478412][ T5215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6827'. [ 2100.525025][ T5230] fuse: Unknown parameter 'gRoup_id' [ 2100.545485][ T5235] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 2100.590036][ T5237] FAULT_INJECTION: forcing a failure. [ 2100.590036][ T5237] name failslab, interval 1, probability 0, space 0, times 0 [ 2100.595407][ T5237] CPU: 3 UID: 0 PID: 5237 Comm: syz.4.6834 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2100.595424][ T5237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2100.595431][ T5237] Call Trace: [ 2100.595436][ T5237] [ 2100.595440][ T5237] dump_stack_lvl+0x16c/0x1f0 [ 2100.595462][ T5237] should_fail_ex+0x512/0x640 [ 2100.595480][ T5237] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2100.595498][ T5237] should_failslab+0xc2/0x120 [ 2100.595509][ T5237] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2100.595525][ T5237] ? binder_get_thread+0x1eb/0x8c0 [ 2100.595536][ T5237] ? binder_get_thread+0x225/0x8c0 [ 2100.595547][ T5237] ? __pfx_binder_ioctl+0x10/0x10 [ 2100.595559][ T5237] binder_get_thread+0x225/0x8c0 [ 2100.595571][ T5237] ? rcu_is_watching+0x12/0xc0 [ 2100.595585][ T5237] ? __pfx_binder_ioctl+0x10/0x10 [ 2100.595598][ T5237] binder_ioctl+0x20f/0x72c0 [ 2100.595612][ T5237] ? find_held_lock+0x2b/0x80 [ 2100.595625][ T5237] ? tomoyo_path_number_perm+0x295/0x580 [ 2100.595642][ T5237] ? tomoyo_path_number_perm+0x18d/0x580 [ 2100.595657][ T5237] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2100.595672][ T5237] ? __pfx_binder_ioctl+0x10/0x10 [ 2100.595684][ T5237] ? do_vfs_ioctl+0x523/0x1a60 [ 2100.595698][ T5237] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2100.595720][ T5237] ? find_held_lock+0x2b/0x80 [ 2100.595731][ T5237] ? hook_file_ioctl_common+0x145/0x410 [ 2100.595747][ T5237] ? __fget_files+0x20e/0x3c0 [ 2100.595762][ T5237] ? fput+0x20/0xf0 [ 2100.595775][ T5237] ? __pfx_binder_ioctl+0x10/0x10 [ 2100.595786][ T5237] compat_ptr_ioctl+0x6b/0xa0 [ 2100.595799][ T5237] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 2100.595812][ T5237] __ia32_compat_sys_ioctl+0x242/0x370 [ 2100.595828][ T5237] __do_fast_syscall_32+0x7c/0x3a0 [ 2100.595848][ T5237] do_fast_syscall_32+0x32/0x80 [ 2100.595865][ T5237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2100.595880][ T5237] RIP: 0023:0xf704e579 [ 2100.595889][ T5237] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2100.595900][ T5237] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2100.595911][ T5237] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 2100.595919][ T5237] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 2100.595925][ T5237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2100.595932][ T5237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2100.595938][ T5237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2100.595952][ T5237] [ 2100.595957][ T5237] binder: 5236:5237 ioctl c0306201 80000180 returned -12 [ 2100.933813][ T5244] netlink: 'syz.4.6835': attribute type 11 has an invalid length. [ 2100.936446][ T5244] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6835'. [ 2103.261412][ T5297] 9pnet: Could not find request transport: òdma [ 2103.651523][ T5304] syzkaller1: entered promiscuous mode [ 2103.653296][ T5304] syzkaller1: entered allmulticast mode [ 2103.658664][ T5304] program syz.2.6850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2103.683165][ T5308] FAULT_INJECTION: forcing a failure. [ 2103.683165][ T5308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2103.689065][ T5308] CPU: 1 UID: 0 PID: 5308 Comm: syz.4.6851 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2103.689082][ T5308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2103.689089][ T5308] Call Trace: [ 2103.689093][ T5308] [ 2103.689098][ T5308] dump_stack_lvl+0x16c/0x1f0 [ 2103.689119][ T5308] should_fail_ex+0x512/0x640 [ 2103.689139][ T5308] strncpy_from_user+0x3b/0x2e0 [ 2103.689157][ T5308] getname_flags.part.0+0x8f/0x550 [ 2103.689170][ T5308] ? build_open_how+0x6a/0xb0 [ 2103.689185][ T5308] getname_flags+0x93/0xf0 [ 2103.689201][ T5308] __io_openat_prep+0x16d/0x420 [ 2103.689219][ T5308] io_submit_sqes+0x835/0x2580 [ 2103.689242][ T5308] __do_sys_io_uring_enter+0xd6a/0x1630 [ 2103.689259][ T5308] ? __fget_files+0x20e/0x3c0 [ 2103.689275][ T5308] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 2103.689292][ T5308] ? fput+0x70/0xf0 [ 2103.689303][ T5308] ? ksys_write+0x1ac/0x250 [ 2103.689320][ T5308] ? __pfx_ksys_write+0x10/0x10 [ 2103.689337][ T5308] ? rcu_is_watching+0x12/0xc0 [ 2103.689352][ T5308] __do_fast_syscall_32+0x7c/0x3a0 [ 2103.689371][ T5308] do_fast_syscall_32+0x32/0x80 [ 2103.689389][ T5308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2103.689403][ T5308] RIP: 0023:0xf704e579 [ 2103.689412][ T5308] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2103.689423][ T5308] RSP: 002b:00000000f501d55c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 2103.689434][ T5308] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000003516 [ 2103.689441][ T5308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2103.689448][ T5308] RBP: 00000000fffffdcf R08: 0000000000000000 R09: 0000000000000000 [ 2103.689454][ T5308] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2103.689461][ T5308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2103.689474][ T5308] [ 2103.763822][ T1109] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 2103.766292][ T1109] ata1.00: irq_stat 0x40000000 [ 2103.767862][ T1109] ata1.00: failed command: ZAC MANAGEMENT OUT [ 2103.769987][ T1109] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 9 nodata 0 out [ 2103.769987][ T1109] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 2103.777115][ T1109] ata1.00: status: { DRDY ERR } [ 2103.778738][ T1109] ata1.00: error: { ABRT } [ 2103.780282][ T1109] ata1.00: device reported invalid CHS sector 0 [ 2104.078531][ C3] ata1: illegal qc_active transition (00000000->00000400) [ 2104.406390][ T1109] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 2104.438731][ T1109] ata1.00: configured for UDMA/100 [ 2105.460828][ T5341] 9pnet: Could not find request transport: òdma [ 2105.691458][ T5345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6859'. [ 2105.694671][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6859'. [ 2106.357372][ T5359] syzkaller1: entered promiscuous mode [ 2106.359191][ T5359] syzkaller1: entered allmulticast mode [ 2106.367405][ T5961] Bluetooth: hci5: unexpected event for opcode 0x200b [ 2106.405901][ T5359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6862'. [ 2107.074087][ T5383] overlayfs: missing 'lowerdir' [ 2107.901229][ T5383] kexec: Could not allocate control_code_buffer [ 2107.918807][ T5383] Process accounting resumed [ 2108.231808][ T5407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2108.817499][ T5417] syz.2.6876: attempt to access beyond end of device [ 2108.817499][ T5417] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2108.821658][ T5417] qnx6: unable to read the first superblock [ 2108.823862][ T5417] syz.2.6876: attempt to access beyond end of device [ 2108.823862][ T5417] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2108.829024][ T5417] qnx6: unable to read the first superblock [ 2108.831375][ T5417] qnx6: unable to read the first superblock [ 2108.880330][ T5420] ptrace attach of "/syz-executor exec"[29114] was attempted by "/syz-executor exec"[5420] [ 2109.021190][ T5423] FAULT_INJECTION: forcing a failure. [ 2109.021190][ T5423] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.026317][ T5423] CPU: 2 UID: 0 PID: 5423 Comm: syz.2.6878 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2109.026341][ T5423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2109.026352][ T5423] Call Trace: [ 2109.026358][ T5423] [ 2109.026365][ T5423] dump_stack_lvl+0x16c/0x1f0 [ 2109.026395][ T5423] should_fail_ex+0x512/0x640 [ 2109.026421][ T5423] ? __kmalloc_noprof+0xbf/0x510 [ 2109.026448][ T5423] ? copy_splice_read+0x1a8/0xba0 [ 2109.026469][ T5423] should_failslab+0xc2/0x120 [ 2109.026486][ T5423] __kmalloc_noprof+0xd2/0x510 [ 2109.026514][ T5423] copy_splice_read+0x1a8/0xba0 [ 2109.026538][ T5423] ? __pfx_copy_splice_read+0x10/0x10 [ 2109.026560][ T5423] ? look_up_lock_class+0x59/0x150 [ 2109.026590][ T5423] ? lockdep_init_map_type+0x5c/0x280 [ 2109.026616][ T5423] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 2109.026643][ T5423] ? __pfx_copy_splice_read+0x10/0x10 [ 2109.026665][ T5423] do_splice_read+0x282/0x370 [ 2109.026689][ T5423] splice_direct_to_actor+0x2a1/0xa30 [ 2109.026714][ T5423] ? __pfx_direct_splice_actor+0x10/0x10 [ 2109.026742][ T5423] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2109.026764][ T5423] ? get_pid_task+0xfc/0x250 [ 2109.026817][ T5423] do_splice_direct+0x174/0x240 [ 2109.026841][ T5423] ? __pfx_do_splice_direct+0x10/0x10 [ 2109.026865][ T5423] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2109.026892][ T5423] ? rw_verify_area+0xcf/0x680 [ 2109.026917][ T5423] do_sendfile+0xb06/0xe50 [ 2109.026946][ T5423] ? __pfx_do_sendfile+0x10/0x10 [ 2109.026971][ T5423] ? __fget_files+0x20e/0x3c0 [ 2109.027002][ T5423] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 2109.027021][ T5423] ? ksys_write+0x1ac/0x250 [ 2109.027044][ T5423] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 2109.027066][ T5423] ? rcu_is_watching+0x12/0xc0 [ 2109.027089][ T5423] __do_fast_syscall_32+0x7c/0x3a0 [ 2109.027119][ T5423] do_fast_syscall_32+0x32/0x80 [ 2109.027146][ T5423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2109.027168][ T5423] RIP: 0023:0xf7f75579 [ 2109.027181][ T5423] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2109.027198][ T5423] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2109.027216][ T5423] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004 [ 2109.027227][ T5423] RDX: 0000000000000000 RSI: 0000000000000093 RDI: 0000000000000000 [ 2109.027238][ T5423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2109.027249][ T5423] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2109.027259][ T5423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2109.027282][ T5423] [ 2109.235073][ T5425] batman_adv: batadv0: Adding interface: ipvlan3 [ 2109.237330][ T5425] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2109.247139][ T5425] batman_adv: batadv0: Interface activated: ipvlan3 [ 2109.565153][ T5439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6874'. [ 2109.575521][ T5439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6874'. [ 2110.137718][ T5449] syz.3.6885: attempt to access beyond end of device [ 2110.137718][ T5449] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 2110.141949][ T5449] qnx6: unable to read the first superblock [ 2110.145398][ T5449] syz.3.6885: attempt to access beyond end of device [ 2110.145398][ T5449] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2110.149692][ T5449] qnx6: unable to read the first superblock [ 2110.149693][ T5452] IPv6: Can't replace route, no match found [ 2110.151906][ T5449] qnx6: unable to read the first superblock [ 2110.177211][ T5452] netlink: 'syz.4.6886': attribute type 13 has an invalid length. [ 2110.179597][ T5452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6886'. [ 2110.190899][ T5454] ptrace attach of "/syz-executor exec"[3807] was attempted by "/syz-executor exec"[5454] [ 2110.196139][ T5452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6886'. [ 2110.203160][ T5452] binder: 5451:5452 ioctl c0306201 80000540 returned -22 [ 2110.286172][ T12] ------------[ cut here ]------------ [ 2110.289115][ T12] WARNING: CPU: 3 PID: 12 at io_uring/io_uring.c:2922 io_ring_exit_work+0x417/0x1120 [ 2110.293493][ T12] Modules linked in: [ 2110.295293][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2110.300858][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2110.304394][ T12] Workqueue: iou_exit io_ring_exit_work [ 2110.306149][ T12] RIP: 0010:io_ring_exit_work+0x417/0x1120 [ 2110.308150][ T12] Code: 0c 0b 00 00 48 8b 05 58 67 53 09 4c 8b bd a8 fe ff ff 31 ff 49 29 c7 4c 89 fe e8 b4 dd ed fc 4d 85 ff 79 14 e8 3a e2 ed fc 90 <0f> 0b 90 48 c7 85 a0 fe ff ff 70 17 00 00 e8 26 e2 ed fc 48 8b b5 [ 2110.314570][ T12] RSP: 0000:ffffc900001e7a80 EFLAGS: 00010293 [ 2110.317709][ T12] RAX: 0000000000000000 RBX: ffff888041b506c8 RCX: ffffffff84cdaabc [ 2110.321043][ T12] RDX: ffff88801dabc880 RSI: ffffffff84cdaac6 RDI: 0000000000000007 [ 2110.324899][ T12] RBP: ffffc900001e7c40 R08: 0000000000000007 R09: 0000000000000000 [ 2110.328248][ T12] R10: fffffffffffffffe R11: 0000000000000001 R12: ffff888041b50040 [ 2110.331562][ T12] R13: dffffc0000000000 R14: ffff888041b50000 R15: fffffffffffffffe [ 2110.334612][ T12] FS: 0000000000000000(0000) GS:ffff888097822000(0000) knlGS:0000000000000000 [ 2110.337489][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2110.340330][ T12] CR2: 000000000c26c8b8 CR3: 000000005ee87000 CR4: 0000000000352ef0 [ 2110.343822][ T12] Call Trace: [ 2110.345284][ T12] [ 2110.346579][ T12] ? look_up_lock_class+0x6b/0x150 [ 2110.348831][ T12] ? register_lock_class+0x41/0x4c0 [ 2110.351027][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 2110.352961][ T12] ? __lock_acquire+0xb8a/0x1c90 [ 2110.354704][ T12] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2110.356586][ T12] ? process_one_work+0x9cf/0x1b70 [ 2110.358185][ T12] process_one_work+0x9cf/0x1b70 [ 2110.359776][ T12] ? __pfx_process_one_work+0x10/0x10 [ 2110.361498][ T12] ? assign_work+0x1a0/0x250 [ 2110.362975][ T12] worker_thread+0x6c8/0xf10 [ 2110.364941][ T12] ? __pfx_worker_thread+0x10/0x10 [ 2110.367156][ T12] kthread+0x3c5/0x780 [ 2110.368927][ T12] ? __pfx_kthread+0x10/0x10 [ 2110.370950][ T12] ? rcu_is_watching+0x12/0xc0 [ 2110.373003][ T12] ? __pfx_kthread+0x10/0x10 [ 2110.375034][ T12] ret_from_fork+0x5d4/0x6f0 [ 2110.376976][ T12] ? __pfx_kthread+0x10/0x10 [ 2110.378984][ T12] ret_from_fork_asm+0x1a/0x30 [ 2110.381037][ T12] [ 2110.382382][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2110.385435][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2110.390371][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2110.394845][ T12] Workqueue: iou_exit io_ring_exit_work [ 2110.397149][ T12] Call Trace: [ 2110.398583][ T12] [ 2110.399869][ T12] dump_stack_lvl+0x3d/0x1f0 [ 2110.401875][ T12] panic+0x71c/0x800 [ 2110.403578][ T12] ? __pfx_panic+0x10/0x10 [ 2110.405486][ T12] ? show_trace_log_lvl+0x29b/0x3e0 [ 2110.407697][ T12] ? check_panic_on_warn+0x1f/0xb0 [ 2110.409855][ T12] ? io_ring_exit_work+0x417/0x1120 [ 2110.412028][ T12] check_panic_on_warn+0xab/0xb0 [ 2110.414085][ T12] __warn+0xf6/0x3c0 [ 2110.415794][ T12] ? io_ring_exit_work+0x417/0x1120 [ 2110.417995][ T12] report_bug+0x3c3/0x580 [ 2110.419857][ T12] ? io_ring_exit_work+0x417/0x1120 [ 2110.422072][ T12] handle_bug+0x184/0x210 [ 2110.423929][ T12] exc_invalid_op+0x17/0x50 [ 2110.425835][ T12] asm_exc_invalid_op+0x1a/0x20 [ 2110.427885][ T12] RIP: 0010:io_ring_exit_work+0x417/0x1120 [ 2110.430367][ T12] Code: 0c 0b 00 00 48 8b 05 58 67 53 09 4c 8b bd a8 fe ff ff 31 ff 49 29 c7 4c 89 fe e8 b4 dd ed fc 4d 85 ff 79 14 e8 3a e2 ed fc 90 <0f> 0b 90 48 c7 85 a0 fe ff ff 70 17 00 00 e8 26 e2 ed fc 48 8b b5 [ 2110.438306][ T12] RSP: 0000:ffffc900001e7a80 EFLAGS: 00010293 [ 2110.440860][ T12] RAX: 0000000000000000 RBX: ffff888041b506c8 RCX: ffffffff84cdaabc [ 2110.444126][ T12] RDX: ffff88801dabc880 RSI: ffffffff84cdaac6 RDI: 0000000000000007 [ 2110.447341][ T12] RBP: ffffc900001e7c40 R08: 0000000000000007 R09: 0000000000000000 [ 2110.450444][ T12] R10: fffffffffffffffe R11: 0000000000000001 R12: ffff888041b50040 [ 2110.453742][ T12] R13: dffffc0000000000 R14: ffff888041b50000 R15: fffffffffffffffe [ 2110.457057][ T12] ? io_ring_exit_work+0x40c/0x1120 [ 2110.459270][ T12] ? io_ring_exit_work+0x416/0x1120 [ 2110.461464][ T12] ? look_up_lock_class+0x6b/0x150 [ 2110.463633][ T12] ? register_lock_class+0x41/0x4c0 [ 2110.465863][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 2110.468201][ T12] ? __lock_acquire+0xb8a/0x1c90 [ 2110.470341][ T12] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2110.472807][ T12] ? process_one_work+0x9cf/0x1b70 [ 2110.474991][ T12] process_one_work+0x9cf/0x1b70 [ 2110.477114][ T12] ? __pfx_process_one_work+0x10/0x10 [ 2110.479410][ T12] ? assign_work+0x1a0/0x250 [ 2110.481374][ T12] worker_thread+0x6c8/0xf10 [ 2110.483348][ T12] ? __pfx_worker_thread+0x10/0x10 [ 2110.485525][ T12] kthread+0x3c5/0x780 [ 2110.487302][ T12] ? __pfx_kthread+0x10/0x10 [ 2110.489311][ T12] ? rcu_is_watching+0x12/0xc0 [ 2110.491383][ T12] ? __pfx_kthread+0x10/0x10 [ 2110.493354][ T12] ret_from_fork+0x5d4/0x6f0 [ 2110.495340][ T12] ? __pfx_kthread+0x10/0x10 [ 2110.497316][ T12] ret_from_fork_asm+0x1a/0x30 [ 2110.499404][ T12] [ 2110.501466][ T12] Kernel Offset: disabled [ 2110.503307][ T12] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:40:27 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81af96a3 RDX=ffffffff8e297780 RSI=ffffffff81af96ad RDI=0000000000000007 RBP=0000000000000000 RSP=ffffffff8e207e10 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a99150 R15=0000000000000000 RIP=ffffffff81af96af RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097522000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f6c48000 CR3=000000005ee87000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=ffffc90007eefb20 RSP=ffffc90007eefa00 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=1ffff92000fddf43 R14=1ffff92000fddf01 R15=0000000000000000 RIP=ffffffff81692f08 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097622000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008001b000 CR3=0000000075e26000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000008 RBX=ffffc90003c3f330 RCX=ffffffff84df96a2 RDX=ffff88802814a440 RSI=ffffffff8c15c060 RDI=0000000000000004 RBP=ffffffff8c15c060 RSP=ffffc90003c3f0f8 R8 =0000000000000006 R9 =0000000000000c78 R10=0000000000000c78 R11=0000000000000001 R12=0000000000000004 R13=0000000000000004 R14=0000000000000c74 R15=0000000000000c78 RIP=ffffffff81bb88be RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdcaab4a300 ffffffff 00c00000 GS =0000 ffff888097722000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562e1fc37000 CR3=000000004aef4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001af1 0000001800000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003020800060800 3e0800060073b03a 00002dde00000005 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0880040390030608 0003880322080003 80030c08000d8002 0100000008060601 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ae0604000d8803 07fffe04000d8403 3e04000d80034e08 0026800201080006 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 017cbe36acfcaf9b b3b420e106d4c06d 16c465b772a8a363 6fd42e0826a00308 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800269803000400 2694030004002690 030008002688030c f4a39ab004880026 ZMM24=8de418008de41800 8de418008de41800 8de418008de41800 8de418008de41800 8de418008de41800 8de418008de41800 8de418008de41800 8de418008de41800 ZMM25=5df8d19f5df8d19f 5df8d19f5df8d19f 5df8d19f5df8d19f 5df8d19f5df8d19f 5df8d19f5df8d19f 5df8d19f5df8d19f 5df8d19f5df8d19f 5df8d19f5df8d19f ZMM26=ce8ccac2ce8ccac2 ce8ccac2ce8ccac2 ce8ccac2ce8ccac2 ce8ccac2ce8ccac2 ce8ccac2ce8ccac2 ce8ccac2ce8ccac2 ce8ccac2ce8ccac2 ce8ccac2ce8ccac2 ZMM27=89ba067589ba0675 89ba067589ba0675 89ba067589ba0675 89ba067589ba0675 89ba067589ba0675 89ba067589ba0675 89ba067589ba0675 89ba067589ba0675 ZMM28=000001800000017f 0000017e0000017d 0000017c0000017b 0000017a00000179 0000017800000177 0000017600000175 0000017400000173 0000017200000171 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3983000039830000 3983000039830000 3983000039830000 3983000039830000 3983000039830000 3983000039830000 3983000039830000 3983000039830000 info registers vcpu 3 CPU#3 RAX=0000000000000077 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85586715 RDI=ffffffff9b0aa9c0 RBP=ffffffff9b0aa980 RSP=ffffc900001e73f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000077 R14=ffffffff9b0aa980 R15=ffffffff855866b0 RIP=ffffffff8558673f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097822000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c26c8b8 CR3=000000005ee87000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000