last executing test programs: 4m59.724691598s ago: executing program 1 (id=442): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}, 0x1, 0x0, 0x0, 0x804}, 0x0) 4m59.724241405s ago: executing program 1 (id=444): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup2(r0, r1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pwritev(r2, 0x0, 0x0, 0xfffffff8, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) r6 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x0, 0x8002}) 4m59.64557472s ago: executing program 1 (id=445): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x3d, 0x0, 0x40, 0x1c}) 4m59.645463878s ago: executing program 1 (id=446): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000300)) socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x8002, 0x0, 0x8, 0x6) 4m59.580828331s ago: executing program 1 (id=447): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4m59.52563874s ago: executing program 1 (id=448): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f00000000c0)=""/33, 0x21}], 0x2}}], 0x2, 0x60, 0x0) 4m46.43235518s ago: executing program 0 (id=630): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x4}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xfc6, &(0x7f0000001700)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb8, 0x67, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) 4m46.375022529s ago: executing program 0 (id=631): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808c0ff00000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m46.374747689s ago: executing program 0 (id=632): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x7de8, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf000) 4m46.076000307s ago: executing program 0 (id=633): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 4m45.975557604s ago: executing program 0 (id=634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a010200000000000000000a000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) 4m45.975386439s ago: executing program 0 (id=635): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11000, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="280008d10306010200000000000000000500000005000100070000000900020073797a3100000000"], 0x28}}, 0x20000840) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xa0000000, @mcast1, 0x3}, 0x1c) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000440)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 4m44.538247871s ago: executing program 32 (id=448): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f00000000c0)=""/33, 0x21}], 0x2}}], 0x2, 0x60, 0x0) 4m30.80899248s ago: executing program 33 (id=635): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11000, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="280008d10306010200000000000000000500000005000100070000000900020073797a3100000000"], 0x28}}, 0x20000840) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xa0000000, @mcast1, 0x3}, 0x1c) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000440)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 4m20.553022633s ago: executing program 5 (id=849): sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="c0000000e8fe600318", 0x9, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r2]) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r2]) 4m20.384388177s ago: executing program 5 (id=850): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xb000000c}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x26, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffff23e}, @generic={0x4, 0x9, 0x1, 0x3, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}, @snprintf, @jmp={0x5, 0x0, 0x1, 0x5, 0xa, 0x100, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) close(r2) writev(r0, &(0x7f0000000280), 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x655f, &(0x7f0000000380)={0x0, 0xa69b, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = dup(r2) close(0xffffffffffffffff) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x9, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0xfffffbed) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0185649, &(0x7f0000000100)={0xf030000, 0x101, 0x1ff, 0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x98f90d, 0x0, '\x00', @value64=0x2fd2}}) 4m20.165097005s ago: executing program 5 (id=851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8020, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) r6 = socket(0x400000000010, 0x3, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x19) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x13) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x5, 0x7}, {0xf0}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8010) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800100010071756575650000400000000c0600014007ff00000900010073797a30000000000900020073797a32000000001400000011000100000000000000001c0000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 4m20.064684925s ago: executing program 5 (id=852): r0 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x7fffc}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a0514000000000000000001000000160a090014d716d0d30e0900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x40010) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x80}}], {0x14, 0x11, 0x1, 0xffffffff}}, 0x3c}, 0x1, 0x1200}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r3, 0x540a, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x60040, 0xa, 0xc}, 0x18) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m19.803592113s ago: executing program 5 (id=858): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32, @ANYBLOB="500800000000000014001a80100004800c00088008"], 0x34}}, 0x0) 4m19.714672734s ago: executing program 5 (id=859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11000, @void, @value}, 0x94) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sdr={0x38414261, 0xfff}}) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x22, 0xa, 0x0) connect$inet6(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000440)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4m4.704039484s ago: executing program 34 (id=859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11000, @void, @value}, 0x94) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sdr={0x38414261, 0xfff}}) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x22, 0xa, 0x0) connect$inet6(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000440)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2m29.803912372s ago: executing program 2 (id=1854): fsopen(0x0, 0x0) openat$dir(0xffffff9c, 0x0, 0x40d00, 0x15c) fcntl$getflags(0xffffffffffffffff, 0x401) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4041) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x3, 0x0, 0x4, 0x3, 0x3, 0x7fffffff}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {}, 0x37b4, [0xfeff, 0x4, 0x0, 0x1f000000, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x3, 0xfffffffd, 0x1f, 0x3, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0xffffac20, 0x81, 0x0, 0x20000000, 0x40000000, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000, 0x3, 0x0, 0x520, 0xffffffff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc, 0x10000, 0x0, 0x9, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x7fff, 0x71f9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x3, 0x4, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x80000000, 0x1000000]}, 0x45c) 2m29.683294273s ago: executing program 2 (id=1855): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4400000010000100000000000300000000000000", @ANYRES32=r1, @ANYBLOB="018500000000000024001a80080002800400018018000a80140007"], 0x44}}, 0x0) 2m29.683072269s ago: executing program 2 (id=1856): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$unix(0x1, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) preadv(r1, &(0x7f0000001680)=[{&(0x7f0000001dc0)=""/4096, 0x1000}], 0x1, 0x6, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x181c82, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfffffffffffffdbe, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x60}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @private1, 0x1}, 0x1c) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x4000010, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r8, 0x25, &(0x7f00000000c0)) 2m28.792187499s ago: executing program 2 (id=1863): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x105, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x3, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x8356, 0x30, 0xfff6, 0x0}) 2m28.653895118s ago: executing program 2 (id=1866): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=':', 0x1}, {&(0x7f00000017c0)="d323", 0x2}], 0x2, 0x0, 0x0, 0x40001}, 0x20000890) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x408, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_open_dev$video4linux(&(0x7f0000000540), 0xfc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x2013, 0x221e, 0x80000000, 0x1}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000000c0)='cifs\x00', 0x5044e4, 0x0) mount(0x0, &(0x7f0000000680)='./file1\x00', &(0x7f0000000700)='binder\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 2m28.593751507s ago: executing program 2 (id=1867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"10628c1965c61e00", r4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) iopl(0x3) init_module(0x0, 0xbe, 0x0) unshare(0x68040200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x2, 0x1}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@setneightbl={0x14, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40080) r7 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x10d901, 0x0) ioctl$DVD_AUTH(r7, 0x5390, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000140)={0x24, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0xfc, r10, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xc7, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaa\xc5Ql\x7f\tKt\fc\x1f\x17]\xdd\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0xfc}}, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0x40045b0a, &(0x7f0000000040)) socket(0x2b, 0x80801, 0x1) 2m24.053590249s ago: executing program 3 (id=1901): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000780)="1d", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sendmmsg$inet(r0, &(0x7f0000005d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x2, 0x4040002) 2m23.983890831s ago: executing program 3 (id=1902): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r7, 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x880, 0x1ff, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008280)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b0", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x1, 0x41a, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x40a004fc, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0xc000, 0x6, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x25dfdbff, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x854) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x4004010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) getpid() ioctl$SIOCX25SENDCALLACCPT(r8, 0x89e9) 2m23.083952539s ago: executing program 3 (id=1908): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0xffff, 0x0, 0x642da, 0xb5c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xfffffffffffffeec}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000779000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000}) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1d) syz_emit_ethernet(0x11dc0, 0x0, 0x0) 2m23.083593128s ago: executing program 3 (id=1909): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x1, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0xc3, 0x5]}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x1, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0xc3, 0x5]}]}}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x43, 0x0, 0x11, 0x4, 0xffffffff}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x43, 0x0, 0x11, 0x4, 0xffffffff}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mount$bind(0x0, &(0x7f0000000040)='\x00', 0x0, 0x988045, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) 2m23.003964123s ago: executing program 3 (id=1910): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(&(0x7f0000000000)='./file0\x00') sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000400)=""/229, 0xe5) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff002000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f187928", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) syz_io_uring_setup(0x779b, &(0x7f0000000380)={0x0, 0xf5a5, 0x0, 0xffffffff, 0x2028a}, &(0x7f0000000280), &(0x7f0000000200)) 2m22.923580099s ago: executing program 3 (id=1911): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000fa0314e500"], 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x810) readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000240)=""/235, 0xeb}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b5, 0x10100, 0x0, 0x12e}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0x36, &(0x7f0000000a40)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) userfaultfd(0x80801) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f0000000600)={{0xdb, 0x2}, 'port1\x00', 0x0, 0x30000, 0x9, 0x9, 0xa, 0xd6f7, 0x81, 0x0, 0x4, 0x73}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r8}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r9, 0xae78, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r11, @ANYBLOB="0c009d00400017000b00000065ee02000000"], 0x34}, 0x1, 0x0, 0x0, 0x28040}, 0x0) 2m22.875503933s ago: executing program 35 (id=1911): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000fa0314e500"], 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x810) readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000240)=""/235, 0xeb}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b5, 0x10100, 0x0, 0x12e}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0x36, &(0x7f0000000a40)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) userfaultfd(0x80801) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f0000000600)={{0xdb, 0x2}, 'port1\x00', 0x0, 0x30000, 0x9, 0x9, 0xa, 0xd6f7, 0x81, 0x0, 0x4, 0x73}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r8}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r9, 0xae78, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r11, @ANYBLOB="0c009d00400017000b00000065ee02000000"], 0x34}, 0x1, 0x0, 0x0, 0x28040}, 0x0) 2m13.603660535s ago: executing program 36 (id=1867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"10628c1965c61e00", r4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) iopl(0x3) init_module(0x0, 0xbe, 0x0) unshare(0x68040200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x2, 0x1}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@setneightbl={0x14, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40080) r7 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x10d901, 0x0) ioctl$DVD_AUTH(r7, 0x5390, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000140)={0x24, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0xfc, r10, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xc7, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaa\xc5Ql\x7f\tKt\fc\x1f\x17]\xdd\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0xfc}}, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0x40045b0a, &(0x7f0000000040)) socket(0x2b, 0x80801, 0x1) 44.262042847s ago: executing program 4 (id=2665): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff000f000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0x58}], 0x1) ftruncate(0xffffffffffffffff, 0x51a9497) 44.191578541s ago: executing program 4 (id=2666): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000001cc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd601927f2001c2c00fe8000000060000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) 44.191417427s ago: executing program 4 (id=2667): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0x7c}}, 0x0) 44.122584198s ago: executing program 4 (id=2668): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ba) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000000)='./file1\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x3, 0x0, 0x0, 0xb, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 44.042576663s ago: executing program 4 (id=2669): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) ioctl(r0, 0x8b36, &(0x7f0000000040)) 43.82330594s ago: executing program 4 (id=2670): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000000}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 43.759512278s ago: executing program 37 (id=2670): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000000}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 4.286942101s ago: executing program 8 (id=3032): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x4b, &(0x7f0000000000), 0x8) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x8864}, @val={0x7, 0x0, 0x2, 0x1000, 0xfff}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x6, 0x14, 0x66, 0x0, 0xb, 0x6c, 0x0, @broadcast, @multicast2}}}, 0x22) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYRES32=0x0], 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101600) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67a", 0x2a, 0x11, 0x0, 0x0) 2.928867428s ago: executing program 7 (id=3039): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) io_uring_setup(0x46cb, &(0x7f0000000100)={0x0, 0xcbde, 0x2, 0x2, 0x42}) syz_io_uring_setup(0x175d, &(0x7f0000000340)={0x0, 0x9c21, 0x80, 0x3, 0x2000001, 0x0, r0}, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x181802) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2040400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0x0, 0x4, 0x3, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff, 0x400000}, 0x0, 0x0) 2.480181394s ago: executing program 6 (id=3041): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000200)=[{&(0x7f0000000000)='U', 0x1}], 0x1, 0x19, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf257900000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x57, 0x2000, 0x200, {0x0, 0xa}, {0x1}, @const={0xffff, {0x0, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000db050000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) r11 = syz_io_uring_setup(0x6d86, &(0x7f0000000300)={0x0, 0x37b5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r11, 0x2def, 0x4000, 0x0, 0x0, 0x0) 2.105850426s ago: executing program 9 (id=3043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2749baca85309be96d5a45bbb29ea06f9cbc7eea15bc1ee369d2707231280f0415df341ab76de90db5ff7ffffffd075b373f51be98db7efbbe8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c1f870adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eacb4389adbb47efb7b3f19046c7f1bd1bf56e58555d96137f95b3aacd74ed1c8a8676468cf2405e48723c6b1ff3698422f88ffed8617dd64330f4c38ba86e3b50da03f4b1e4808aa5c9e9546d7190747c6abc5beab28cec4ff7faa3fab48cdb3d64cfd5d698416752a16f32a54ccef577832e4cf684fce2cb0bab7f6a5821b26483322000000000000596c6e1ac996b8a0924948750b6e52c09d53950e5c8143db8669f8a5bf6511df822532e3c78d019149651255048aab0399e5d6e317b6f3fbc2600ffc3c66c7244b7bcf6b78b5e8c0ee04ce344ceb084b4f2ef09b59a36a92b3874edc559e5bf58a567d385ba92df9121dfa257e60655dcbff581c75107b01b5baaf29ebaf24861c538fefcaecb52a6b69fc450e10645df60a9d50131466113c6aac5abbcf9e9f2f0384da3f9892af413bd87f51f7f0cf61096fd79327fa66effe89a72d7a75d40f0c1ad299f55eafcd52a39649ab6021e30f901933f11092"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="8d00"]) read$FUSE(r7, 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x880, 0x1ff, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x1, 0x41a, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x40a004fc, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0xc000, 0x6, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x854) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x4004010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) getpid() ioctl$SIOCX25SENDCALLACCPT(r8, 0x89e9) 2.008757435s ago: executing program 7 (id=3044): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001400000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x32}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x22, 0x0, [{0x0, 0xfffffeac, &(0x7f0000000180)=""/137}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) capset(&(0x7f0000000380)={0x20080522}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) 1.560819369s ago: executing program 6 (id=3045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000b00000000000000100000050000000d0000004879676f"]) 1.475180642s ago: executing program 6 (id=3046): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, @none={0x0, 0xfffe}}, 0x14, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) ftruncate(r2, 0x8800000) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r3, r2, 0x0, 0x558410e9) io_uring_setup(0x4fae, 0x0) syz_io_uring_setup(0x3910, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc1105511, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x200cd4, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bind$inet6(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(r4, 0x30, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x810) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000001840)) 1.314989486s ago: executing program 6 (id=3047): madvise(&(0x7f0000be1000/0x4000)=nil, 0x4000, 0xa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008504"]) syz_clone(0x54a4c700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x80082080, 0x0, 0x28, 0x0, 0x0, 0x0) (async) mremap(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000bde000/0x4000)=nil) 1.218658431s ago: executing program 6 (id=3048): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='hfsplus\x00', 0x410, &(0x7f0000000100)='barrier') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x8000000, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@addrtype={{0x2c}, {0x0, 0x280}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x2, 0x7}, {0x4, 0x2, 0x4}, 0xff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x340) 1.077855206s ago: executing program 7 (id=3049): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 1.077125118s ago: executing program 9 (id=3050): socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = userfaultfd(0x80001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xfd7f0000}) 1.076589961s ago: executing program 7 (id=3051): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f0000000000)="b7", 0x1, 0x4000014, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x80000008, 0xbd, &(0x7f0000000740)=""/189, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r3, 0x8953, &(0x7f0000000040)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xf3, 0x79, &(0x7f0000000480)="82c9c1c5eca1099c4c31b89c3e230ac05b17c49ef0a2aa5abc886045899eaaed2d5f05b7ba0a791c61f6c17069844fe0baabbde6d1ea1a2bd689901caa587d532a2b6e26e4c7b7b315dcf2a66dd45c1a1f9bd1d349731ba9bff8f56e062d0737e6a0880047bcd892fb8600ae4fa6229382f825496402ad3f4db273a4febbc924ab0fe46198318d84ad38264396f569cdb407c1ad4257ff828764191ad8728c94eb369ed076931193a25f3623dee5f6f3ff9f4d5fd4960479a0d0bb77e5a7221b37495f5ef14e7280507d02615fe7d9f28259d8e8f28fc1040f38f3cbd50bafdce12d0762b5763e060095245bccbee086cb09ad", &(0x7f0000000080)=""/121, 0x3, 0x0, 0x83, 0x84, &(0x7f0000000580)="de2ae9beb04f4e406eb2c2fed72cb1b8e49669d3110065053cb0a503073b8273b38351c85f737b87b87863d37c11867e232f884d5fb22969c958927792f136e625b0173cfba83370118e24f504bc7a9346461dbb690f95ea17449500872adcaefd7b9b7efa4707d246692e466de83a56b8ff0669e2126194b15665b4099aac122d11fc", &(0x7f0000000680)="72aa3c26655b7b712b8f9c92e60fda130e9d4bcb65ca88af60cc521a84a3e21c0ab05e9453267b7c31629d735a3d982068a18e82a8532ce1f75514e5c01a83c5e298a599ccdfff8b70944a30d5286afd3058004eb10871ccf22e928a1e4790c9ee9476272617725d8197d9169eb6ceed96793ec1d2df8d8c648f77eb27b79fd55df5583e", 0x2, 0x0, 0x4d}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x120, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x106f) 967.370794ms ago: executing program 8 (id=3052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0xc000000, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x206, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x2}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xa0, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x44, 0x6, "13b09305f011e93726f322ebab9ee0976f480cff24c5d9f334b230abcdbbd33ab340bb00f248d11ab48d6327c30ce39d28bc53619ac508080b6711da64575c12"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xe, 0x6, "26289d5011d097541fa7"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x180}, 0x1, 0x0, 0x0, 0x40090}, 0x20000000) 967.174616ms ago: executing program 8 (id=3053): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newnexthop={0x7c, 0x68, 0x0, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_GROUP={0x2c, 0x2, [{0x2, 0x7}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x7}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5e1c}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xf5}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040005) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x4000000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 727.060666ms ago: executing program 9 (id=3054): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 726.92115ms ago: executing program 9 (id=3055): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="e3262e90", 0x4, 0x20000890, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000001000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 726.719987ms ago: executing program 8 (id=3056): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc02, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000140)) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000401b00000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff80850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000009c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r8, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x3c}}, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r8, @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRESDEC=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0x1b, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="020026bd7000fedbdf251e00000008000300", @ANYRES32=r10, @ANYBLOB="4c002f80080001000900020008000100080000000c0002000203aaaaaaaaaaaa0800010005000000240003800400038000000100ffff00000000020003000000000001000000000000000300030000000000020000000000000004000202aaaaaaaaaaaa0000020002000000000004000201aaaaaaaaaaaa00000300a3aa00000c00050003000000000000000500020002000000080001000300000008000300", @ANYRES32=r13, @ANYBLOB="0c00060002000000000000000c000600010000000100000008000300", @ANYRES32=r14, @ANYBLOB], 0x90}}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') socket$unix(0x1, 0x1, 0x0) 673.127198ms ago: executing program 9 (id=3057): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={0x0}) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x200, 0xd}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x5, 0x5, 0x1, 0x0]}, @sack={0x5, 0x1e, [0x5, 0x9, 0x7723, 0x5, 0x1, 0x5, 0xbf]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x700}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 672.784218ms ago: executing program 8 (id=3058): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0x3ee5}, {0x6, 0x0, 0x0, 0x4}]}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x0, 0x368}, &(0x7f0000000000), &(0x7f0000000480)) exit(0x100000000) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000040)=[0x0, 0xcc6f], 0x2) io_uring_enter(r3, 0x4334, 0xd15c, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x13, &(0x7f0000000180)=0x1, 0x4) socket$inet6(0xa, 0x3, 0x0) sendmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x300, 0x0) socket$kcm(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0x3ee5}, {0x6, 0x0, 0x0, 0x4}]}, 0x8) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r2, 0x0) (async) syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x0, 0x368}, &(0x7f0000000000), &(0x7f0000000480)) (async) exit(0x100000000) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000040)=[0x0, 0xcc6f], 0x2) (async) io_uring_enter(r3, 0x4334, 0xd15c, 0xa, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x13, &(0x7f0000000180)=0x1, 0x4) (async) socket$inet6(0xa, 0x3, 0x0) (async) sendmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x300, 0x0) (async) socket$kcm(0xa, 0x3, 0x3a) (async) 672.498606ms ago: executing program 9 (id=3059): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2749baca85309be96d5a45bbb29ea06f9cbc7eea15bc1ee369d2707231280f0415df341ab76de90db5ff7ffffffd075b373f51be98db7efbbe8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c1f870adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eacb4389adbb47efb7b3f19046c7f1bd1bf56e58555d96137f95b3aacd74ed1c8a8676468cf2405e48723c6b1ff3698422f88ffed8617dd64330f4c38ba86e3b50da03f4b1e4808aa5c9e9546d7190747c6abc5beab28cec4ff7faa3fab48cdb3d64cfd5d698416752a16f32a54ccef577832e4cf684fce2cb0bab7f6a5821b26483322000000000000596c6e1ac996b8a0924948750b6e52c09d53950e5c8143db8669f8a5bf6511df822532e3c78d019149651255048aab0399e5d6e317b6f3fbc2600ffc3c66c7244b7bcf6b78b5e8c0ee04ce344ceb084b4f2ef09b59a36a92b3874edc559e5bf58a567d385ba92df9121dfa257e60655dcbff581c75107b01b5baaf29ebaf24861c538fefcaecb52a6b69fc450e10645df60a9d50131466113c6aac5abbcf9e9f2f0384da3f9892af413bd87f51f7f0cf61096fd79327fa66effe89a72d7a75d40f0c1ad299f55eafcd52a39649ab6021e30f901933f11092"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="8d00"]) read$FUSE(r7, 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x880, 0x1ff, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x1, 0x41a, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x40a004fc, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0xc000, 0x6, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x854) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x4004010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) getpid() ioctl$SIOCX25SENDCALLACCPT(r8, 0x89e9) 502.628234ms ago: executing program 8 (id=3060): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 192.084604ms ago: executing program 6 (id=3061): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='fsi_master_gpio_crc_rsp_error\x00', r0}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, 0x0, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x22, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xdec}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6d9}}, @call={0x85, 0x0, 0x0, 0x1c}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x81, 0x5a, &(0x7f0000000500)=""/90, 0x0, 0x21, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x5, 0xfffffffc, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2, r3, r4, r0, 0x1], &(0x7f0000000840)=[{0x5, 0x4, 0x5}, {0x1, 0x5, 0x5}, {0x2, 0x1, 0x5, 0xb}, {0x1, 0x4, 0x4, 0x4}, {0x5, 0x5, 0x6, 0x1}, {0x3, 0x3, 0xc}], 0x10, 0x5, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x80) ioctl$CEC_RECEIVE(r8, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) 52.265691ms ago: executing program 7 (id=3062): prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) 0s ago: executing program 7 (id=3063): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000020000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) kernel console output (not intermixed with test programs): 4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 318.853996][T12348] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 318.861640][T12348] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.865865][T12348] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.868862][T12348] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.874475][T12348] usb 12-1: config 0 descriptor?? [ 318.876704][T13985] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 318.915584][T13992] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 318.918813][T13992] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.004816][T13992] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 319.007952][T13992] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.068399][T13992] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 319.071185][T13992] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 319.078864][T13992] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 319.081652][T13992] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 319.089634][T13992] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 319.092806][T13992] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 319.099342][T13992] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 319.102087][T13992] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 319.133174][T13996] syz.4.2385: attempt to access beyond end of device [ 319.133174][T13996] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 319.138375][T13996] hfsplus: unable to find HFS+ superblock [ 319.285365][T12348] usbhid 12-1:0.0: can't add hid device: -71 [ 319.288105][T12348] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 319.292881][T12348] usb 12-1: USB disconnect, device number 13 [ 319.391967][T14004] netlink: 'syz.4.2385': attribute type 5 has an invalid length. [ 320.003298][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 320.005417][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 320.261508][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 320.263686][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 320.319994][T14030] netlink: 'syz.4.2394': attribute type 10 has an invalid length. [ 320.727315][T14013] ceph: No mds server is up or the cluster is laggy [ 320.791175][ T1468] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 320.961432][ T1468] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 320.965450][ T1468] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 320.968959][ T1468] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 320.974284][T14051] FAULT_INJECTION: forcing a failure. [ 320.974284][T14051] name failslab, interval 1, probability 0, space 0, times 0 [ 320.974495][ T1468] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 320.978448][T14051] CPU: 2 UID: 0 PID: 14051 Comm: syz.7.2403 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 320.978464][T14051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.978470][T14051] Call Trace: [ 320.978475][T14051] [ 320.978480][T14051] dump_stack_lvl+0x16c/0x1f0 [ 320.978499][T14051] should_fail_ex+0x512/0x640 [ 320.978513][T14051] ? __kmalloc_noprof+0xbf/0x510 [ 320.978525][T14051] ? ioctl_standard_iw_point+0x414/0xca0 [ 320.978539][T14051] should_failslab+0xc2/0x120 [ 320.978552][T14051] __kmalloc_noprof+0xd2/0x510 [ 320.978566][T14051] ioctl_standard_iw_point+0x414/0xca0 [ 320.978582][T14051] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 320.978596][T14051] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 320.978610][T14051] ? __pfx___might_resched+0x10/0x10 [ 320.978622][T14051] ? rcu_is_watching+0x12/0xc0 [ 320.978631][T14051] ? trace_contention_end+0xdd/0x130 [ 320.978645][T14051] ? __mutex_lock+0x1ca/0xb90 [ 320.978662][T14051] compat_standard_call+0x20d/0x350 [ 320.978676][T14051] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 320.978690][T14051] ? __pfx_compat_standard_call+0x10/0x10 [ 320.978703][T14051] ? full_name_hash+0xbc/0x110 [ 320.978715][T14051] ? netdev_name_node_lookup+0x127/0x180 [ 320.978727][T14051] ? __pfx_compat_standard_call+0x10/0x10 [ 320.978740][T14051] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 320.978752][T14051] wireless_process_ioctl.constprop.0+0x28e/0x3d0 [ 320.978769][T14051] compat_wext_handle_ioctl+0x284/0x310 [ 320.978785][T14051] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 320.978807][T14051] compat_sock_ioctl+0x320/0x730 [ 320.978823][T14051] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 320.978840][T14051] ? __fget_files+0x20e/0x3c0 [ 320.978854][T14051] ? fput+0x20/0xf0 [ 320.978869][T14051] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 320.978882][T14051] __ia32_compat_sys_ioctl+0x24c/0x360 [ 320.978898][T14051] __do_fast_syscall_32+0x73/0x120 [ 320.978913][T14051] do_fast_syscall_32+0x32/0x80 [ 320.978926][T14051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.978939][T14051] RIP: 0023:0xf7f87579 [ 320.978947][T14051] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 320.978956][T14051] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 320.978966][T14051] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b2a [ 320.978972][T14051] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.978978][T14051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.978983][T14051] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 320.978988][T14051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.979001][T14051] [ 321.080817][ T1468] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.080831][ T1468] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.086571][ T1468] usb 13-1: config 0 descriptor?? [ 321.087836][T14036] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 321.419196][T14075] __nla_validate_parse: 5 callbacks suppressed [ 321.419207][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2412'. [ 321.425788][T14075] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2412'. [ 321.430786][T14075] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2412'. [ 321.435282][T14075] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2412'. [ 321.502589][ T1468] usbhid 13-1:0.0: can't add hid device: -71 [ 321.504687][ T1468] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 321.512253][ T1468] usb 13-1: USB disconnect, device number 6 [ 321.618156][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2417'. [ 321.707433][T14094] netlink: 'syz.7.2418': attribute type 25 has an invalid length. [ 321.710034][T14094] netlink: 'syz.7.2418': attribute type 8 has an invalid length. [ 321.714553][T14094] netlink: 'syz.7.2418': attribute type 1 has an invalid length. [ 321.717044][T14094] netlink: 'syz.7.2418': attribute type 40 has an invalid length. [ 321.763356][T14097] netlink: 'syz.7.2419': attribute type 3 has an invalid length. [ 321.766594][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2419'. [ 321.901603][T14100] ata1.00: invalid cdb length 6 [ 322.111898][T14105] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.2422'. [ 322.115659][T14105] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2422'. [ 322.276077][T14108] input: syz0 as /devices/virtual/input/input27 [ 323.161162][ T5999] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 323.334079][ T5999] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 323.337594][ T5999] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 323.345579][ T5999] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 323.348844][ T5999] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.354198][T14126] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 323.362794][ T5999] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.471187][ T7615] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 323.635660][ T7615] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.639485][ T7615] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 323.643115][ T7615] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 323.646640][ T7615] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.650782][ T7615] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.653830][ T7615] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.658512][ T7615] usb 9-1: config 0 descriptor?? [ 323.660736][T14128] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 323.673541][T14144] netlink: 'syz.8.2429': attribute type 4 has an invalid length. [ 323.770367][ T5950] usb 13-1: USB disconnect, device number 7 [ 323.825010][T14152] syz.7.2436: attempt to access beyond end of device [ 323.825010][T14152] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 323.829183][T14152] hfsplus: unable to find HFS+ superblock [ 324.076553][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2436'. [ 324.079923][T14158] netlink: 'syz.7.2436': attribute type 5 has an invalid length. [ 324.083036][T14158] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2436'. [ 324.111440][ C3] raw-gadget.1 gadget.4: ignoring, device is not running [ 324.114325][ C3] raw-gadget.1 gadget.4: ignoring, device is not running [ 324.118292][ C3] raw-gadget.1 gadget.4: ignoring, device is not running [ 324.120666][ T7615] usbhid 9-1:0.0: can't add hid device: -32 [ 324.123980][ T7615] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 324.137859][ T7615] usb 9-1: USB disconnect, device number 40 [ 325.205892][T14194] netlink: 'syz.7.2449': attribute type 1 has an invalid length. [ 325.263862][T14194] bond1: entered promiscuous mode [ 325.266384][T14194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.378920][T14196] bond1: (slave veth3): making interface the new active one [ 325.381369][T14196] veth3: entered promiscuous mode [ 325.385915][T14196] bond1: (slave veth3): Enslaving as an active interface with an up link [ 325.395743][T14197] bridge_slave_0: left allmulticast mode [ 325.397740][T14197] bridge_slave_0: left promiscuous mode [ 325.399908][T14197] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.406845][T14197] bridge_slave_1: left allmulticast mode [ 325.408773][T14197] bridge_slave_1: left promiscuous mode [ 325.410865][T14197] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.427185][T14197] bond0: (slave bond_slave_0): Releasing backup interface [ 325.436626][T14197] bond0: (slave bond_slave_1): Releasing backup interface [ 325.450878][T14197] team0: Port device team_slave_0 removed [ 325.466467][T14197] team0: Port device team_slave_1 removed [ 325.476488][T14197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.488340][T14197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.507785][T14197] bond1: (slave veth3): Releasing backup interface [ 325.509973][T14197] veth3: left promiscuous mode [ 325.725240][T14212] netlink: 'syz.8.2453': attribute type 6 has an invalid length. [ 325.860084][T14218] syz.4.2455: attempt to access beyond end of device [ 325.860084][T14218] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 325.864467][T14218] hfsplus: unable to find HFS+ superblock [ 325.947666][ T5950] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 326.067107][T14222] netlink: 'syz.4.2455': attribute type 5 has an invalid length. [ 326.139339][T14224] binder: 14220:14224 ioctl 4018620d 0 returned -22 [ 326.145303][ T5950] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.150284][ T5950] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 326.154491][ T5950] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 326.158639][ T5950] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 326.163627][ T5950] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.167598][ T5950] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.179310][ T5950] usb 11-1: config 0 descriptor?? [ 326.183038][T14210] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 326.401233][ T58] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 326.561300][ T58] usb 12-1: Using ep0 maxpacket: 8 [ 326.569065][ T58] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.574121][ T58] usb 12-1: config 0 has no interfaces? [ 326.576626][ T58] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 326.579504][ T58] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.602332][ T5950] usbhid 11-1:0.0: can't add hid device: -71 [ 326.604661][ T5950] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 326.609765][ T5950] usb 11-1: USB disconnect, device number 22 [ 326.652227][ T58] usb 12-1: config 0 descriptor?? [ 326.973814][T14232] ata1.00: invalid cdb length 6 [ 327.057403][T14236] __nla_validate_parse: 2 callbacks suppressed [ 327.057413][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2461'. [ 327.413049][ T40] audit: type=1326 audit(1746604172.054:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14241 comm="syz.6.2462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 327.422668][ T40] audit: type=1326 audit(1746604172.054:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14241 comm="syz.6.2462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 327.429617][ T40] audit: type=1326 audit(1746604172.054:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14241 comm="syz.6.2462" exe="/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 327.446783][ T40] audit: type=1326 audit(1746604172.054:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14241 comm="syz.6.2462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 327.453772][T14242] FAULT_INJECTION: forcing a failure. [ 327.453772][T14242] name failslab, interval 1, probability 0, space 0, times 0 [ 327.463176][T14242] CPU: 1 UID: 0 PID: 14242 Comm: syz.6.2462 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 327.463192][T14242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.463198][T14242] Call Trace: [ 327.463201][T14242] [ 327.463205][T14242] dump_stack_lvl+0x16c/0x1f0 [ 327.463224][T14242] should_fail_ex+0x512/0x640 [ 327.463237][T14242] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 327.463250][T14242] should_failslab+0xc2/0x120 [ 327.463262][T14242] __kmalloc_cache_node_noprof+0x6d/0x420 [ 327.463273][T14242] ? __alloc_workqueue+0x506/0x1810 [ 327.463288][T14242] __alloc_workqueue+0x506/0x1810 [ 327.463306][T14242] alloc_workqueue+0xd2/0x200 [ 327.463318][T14242] ? __pfx_alloc_workqueue+0x10/0x10 [ 327.463332][T14242] ? rcu_is_watching+0x12/0xc0 [ 327.463341][T14242] ? trace_kmalloc+0x2b/0xd0 [ 327.463354][T14242] ? do_raw_spin_lock+0x12c/0x2b0 [ 327.463368][T14242] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 327.463384][T14242] ieee80211_register_hw+0x1e18/0x4020 [ 327.463403][T14242] ? __pfx__raw_spin_unlock_bh+0x1/0x10 [ 327.463415][T14242] ? __debug_object_init+0x2a1/0x3d0 [ 327.463427][T14242] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 327.463442][T14242] ? __pfx_schedule_timeout+0x10/0x10 [ 327.463456][T14242] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 327.463469][T14242] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 327.463480][T14242] ? __hrtimer_setup+0x176/0x280 [ 327.463496][T14242] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 327.463520][T14242] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 327.463540][T14242] hwsim_new_radio_nl+0xb51/0x12c0 [ 327.463556][T14242] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 327.463575][T14242] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 327.463590][T14242] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 327.463607][T14242] genl_family_rcv_msg_doit+0x206/0x2f0 [ 327.463622][T14242] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 327.463636][T14242] ? trace_cap_capable+0x18d/0x200 [ 327.463650][T14242] ? bpf_lsm_capable+0x9/0x10 [ 327.463659][T14242] ? security_capable+0x7e/0x260 [ 327.463669][T14242] ? ns_capable+0xd7/0x110 [ 327.463681][T14242] genl_rcv_msg+0x55c/0x800 [ 327.463696][T14242] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.463709][T14242] ? __pfx___dev_queue_xmit+0x10/0x10 [ 327.463724][T14242] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 327.463739][T14242] ? __lock_acquire+0xaa4/0x1ba0 [ 327.463758][T14242] netlink_rcv_skb+0x16a/0x440 [ 327.463770][T14242] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.463784][T14242] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.463803][T14242] ? __pfx_down_read+0x10/0x10 [ 327.463817][T14242] ? netlink_deliver_tap+0x1ae/0xd30 [ 327.463831][T14242] genl_rcv+0x28/0x40 [ 327.463843][T14242] netlink_unicast+0x53a/0x7f0 [ 327.463856][T14242] ? __pfx_netlink_unicast+0x10/0x10 [ 327.463872][T14242] netlink_sendmsg+0x8d1/0xdd0 [ 327.463887][T14242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.463900][T14242] ? __import_iovec+0x1c8/0x660 [ 327.463919][T14242] ____sys_sendmsg+0xa95/0xc70 [ 327.463934][T14242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.463947][T14242] ? get_compat_msghdr+0x11a/0x170 [ 327.463964][T14242] ___sys_sendmsg+0x134/0x1d0 [ 327.463977][T14242] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.464006][T14242] __sys_sendmsg+0x16d/0x220 [ 327.464017][T14242] ? __pfx___sys_sendmsg+0x10/0x10 [ 327.464034][T14242] ? __secure_computing+0x21c/0x320 [ 327.464046][T14242] __do_fast_syscall_32+0x73/0x120 [ 327.464061][T14242] do_fast_syscall_32+0x32/0x80 [ 327.464075][T14242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.464087][T14242] RIP: 0023:0xf706e579 [ 327.464096][T14242] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 327.464105][T14242] RSP: 002b:00000000f505e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 327.464115][T14242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 327.464121][T14242] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.464126][T14242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.464132][T14242] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 327.464137][T14242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.464150][T14242] [ 327.467766][ T40] audit: type=1326 audit(1746604172.054:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14241 comm="syz.6.2462" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 327.669860][ T40] audit: type=1326 audit(1746604172.054:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14241 comm="syz.6.2462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 327.677506][ T40] audit: type=1326 audit(1746604172.054:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14241 comm="syz.6.2462" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 327.684894][ T40] audit: type=1326 audit(1746604172.054:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14241 comm="syz.6.2462" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 327.693457][ T40] audit: type=1326 audit(1746604172.064:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14241 comm="syz.6.2462" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 327.702288][ T40] audit: type=1326 audit(1746604172.174:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14241 comm="syz.6.2462" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 328.025102][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2467'. [ 328.029724][T14260] netlink: 'syz.6.2467': attribute type 5 has an invalid length. [ 328.034648][T14260] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2467'. [ 328.811712][T14270] futex_wake_op: syz.6.2473 tries to shift op by -33; fix this program [ 328.851680][T12348] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 328.873947][T14272] afs: Unknown parameter 'dynv/cdrom' [ 328.874411][T14267] overlayfs: missing 'lowerdir' [ 329.022886][T12348] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 329.026757][T12348] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 329.030451][T12348] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 329.034503][T12348] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.038691][T12348] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.041897][T12348] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.042288][ T6006] usb 12-1: USB disconnect, device number 14 [ 329.046730][T12348] usb 13-1: config 0 descriptor?? [ 329.048882][T14262] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 329.054888][T14279] geneve3: entered promiscuous mode [ 329.062563][T14279] geneve3: entered allmulticast mode [ 329.112812][T14285] netlink: 'syz.7.2475': attribute type 1 has an invalid length. [ 329.148993][T14285] bond0: entered promiscuous mode [ 329.151782][T14285] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 329.155396][T14285] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 329.228416][T14299] syz.4.2479: attempt to access beyond end of device [ 329.228416][T14299] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 329.235709][T14299] hfsplus: unable to find HFS+ superblock [ 329.454657][T14304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2479'. [ 329.457803][T14304] netlink: 'syz.4.2479': attribute type 5 has an invalid length. [ 329.460402][T14304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2479'. [ 329.501618][T12348] plantronics 0003:047F:FFFF.0027: reserved main item tag 0xd [ 329.505783][T12348] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 329.510700][T12348] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 330.205094][T14312] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 330.422467][T14322] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 330.574617][ T5945] Bluetooth: hci2: Malformed LE Event: 0x1b [ 330.868424][T14334] overlayfs: missing 'lowerdir' [ 331.346270][T14344] netlink: 'syz.8.2495': attribute type 13 has an invalid length. [ 331.358361][T14344] gretap0: refused to change device tx_queue_len [ 331.360412][T14344] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 331.535237][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2494'. [ 331.538397][T14352] netlink: 'syz.6.2494': attribute type 5 has an invalid length. [ 331.541459][T14352] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2494'. [ 331.588612][T14353] siw: device registration error -23 [ 331.729575][ T6006] usb 13-1: USB disconnect, device number 8 [ 331.871818][T14357] netlink: 'syz.7.2498': attribute type 1 has an invalid length. [ 331.874407][T14357] netlink: 'syz.7.2498': attribute type 3 has an invalid length. [ 331.876887][T14357] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2498'. [ 332.017531][T14361] tipc: Started in network mode [ 332.019189][T14361] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 332.022710][T14361] tipc: Enabled bearer , priority 27 [ 332.186326][T14369] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 332.341250][T12348] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 332.449317][T14373] team0: Device ipvlan2 failed to register rx_handler [ 332.492436][T12348] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.496228][T12348] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 332.499828][T12348] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 332.503857][T12348] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.508035][T12348] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.511441][T12348] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.515673][T12348] usb 12-1: config 0 descriptor?? [ 332.518105][T14368] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 332.628161][T14386] netlink: 'syz.8.2509': attribute type 1 has an invalid length. [ 332.658825][T14386] bond2: entered promiscuous mode [ 332.664802][T14386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 332.743431][T14386] bond2: (slave veth5): making interface the new active one [ 332.746443][T14386] veth5: entered promiscuous mode [ 332.755863][T14386] bond2: (slave veth5): Enslaving as an active interface with an up link [ 332.823839][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2511'. [ 332.927343][T12348] plantronics 0003:047F:FFFF.0028: reserved main item tag 0xd [ 332.930656][T12348] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 332.939909][T12348] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 332.965668][T14386] bond2: (slave veth5): Releasing backup interface [ 332.967880][T14386] veth5: left promiscuous mode [ 333.132288][ T65] usb 12-1: USB disconnect, device number 15 [ 333.151137][ T7615] tipc: Node number set to 8432298 [ 333.159658][T14397] lo speed is unknown, defaulting to 1000 [ 333.163864][T14397] lo speed is unknown, defaulting to 1000 [ 333.181256][T14399] syz.4.2515: attempt to access beyond end of device [ 333.181256][T14399] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 333.185563][T14399] hfsplus: unable to find HFS+ superblock [ 333.423760][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'. [ 333.427579][T14403] netlink: 'syz.4.2515': attribute type 5 has an invalid length. [ 333.429636][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 333.429647][ T40] audit: type=1326 audit(1746604178.064:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz.6.2516" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 333.430870][T14403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2515'. [ 333.436640][ T40] audit: type=1326 audit(1746604178.074:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz.6.2516" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 333.451023][ T40] audit: type=1326 audit(1746604178.074:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz.6.2516" exe="/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 333.472423][T14409] wg1: entered promiscuous mode [ 333.474091][T14409] wg1: entered allmulticast mode [ 333.485791][T14410] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2516'. [ 333.583728][ C3] ata1: illegal qc_active transition (00000000->00004000) [ 333.901637][ T1105] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 333.905954][ T1105] ata1.00: configured for UDMA/100 [ 333.906311][T14428] netlink: 4388 bytes leftover after parsing attributes in process `syz.7.2525'. [ 334.421189][ T6006] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 334.441134][ T7615] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 334.586069][ T6006] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 334.591181][ T6006] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 334.594901][ T6006] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.600760][ T6006] usb 9-1: config 0 descriptor?? [ 334.609589][ T7615] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.620106][ T7615] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 334.621518][T14441] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 334.625327][ T7615] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 334.630149][ T7615] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 334.636754][ T7615] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.639725][ T7615] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.649888][ T7615] usb 12-1: config 0 descriptor?? [ 334.653509][T14439] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 334.822491][ T5999] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 334.981675][ T5999] usb 13-1: Using ep0 maxpacket: 32 [ 334.986499][ T5999] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 334.997085][ T5999] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 335.001173][ T5999] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 335.004595][ T5999] usb 13-1: Product: syz [ 335.006408][ T5999] usb 13-1: Manufacturer: syz [ 335.008425][ T5999] usb 13-1: SerialNumber: syz [ 335.023479][ T5999] usb 13-1: config 0 descriptor?? [ 335.034140][T14449] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 335.044201][ T5999] hub 13-1:0.0: bad descriptor, ignoring hub [ 335.050929][ T6006] elan 0003:04F3:0755.0029: item fetching failed at offset 3/5 [ 335.054282][ T5999] hub 13-1:0.0: probe with driver hub failed with error -5 [ 335.059385][ T6006] elan 0003:04F3:0755.0029: Hid Parse failed [ 335.064962][ T6006] elan 0003:04F3:0755.0029: probe with driver elan failed with error -22 [ 335.066138][ T7615] plantronics 0003:047F:FFFF.002A: reserved main item tag 0xd [ 335.078752][ T7615] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 335.096886][ T7615] plantronics 0003:047F:FFFF.002A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 335.267357][ T58] usb 12-1: USB disconnect, device number 16 [ 335.309116][T12348] usb 9-1: USB disconnect, device number 41 [ 335.361452][ T7615] usb 13-1: USB disconnect, device number 9 [ 335.497726][T14480] lo speed is unknown, defaulting to 1000 [ 335.500295][T14480] lo speed is unknown, defaulting to 1000 [ 335.809583][T14484] input: syz1 as /devices/virtual/input/input31 [ 335.852854][T14486] syz.4.2536: attempt to access beyond end of device [ 335.852854][T14486] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 335.858238][T14486] hfsplus: unable to find HFS+ superblock [ 335.926141][T14491] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2538'. [ 336.104640][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 336.133695][T14498] netlink: 'syz.4.2536': attribute type 5 has an invalid length. [ 336.164104][T14498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2536'. [ 336.319316][T14503] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2541'. [ 336.460776][T14507] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\ [ 336.463230][T14507] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP [ 336.647508][T14512] lo speed is unknown, defaulting to 1000 [ 336.650788][T14512] lo speed is unknown, defaulting to 1000 [ 336.950627][T14513] block device autoloading is deprecated and will be removed. [ 336.956036][T14513] syz.7.2544: attempt to access beyond end of device [ 336.956036][T14513] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 336.994815][T14513] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2544'. [ 337.001227][ T65] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 337.153040][ T65] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 337.156724][ T65] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 337.159764][ T65] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.164973][ T65] usb 9-1: config 0 descriptor?? [ 337.167266][T14516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 337.573796][ T65] elan 0003:04F3:0755.002B: item fetching failed at offset 3/5 [ 337.576585][ T65] elan 0003:04F3:0755.002B: Hid Parse failed [ 337.578577][ T65] elan 0003:04F3:0755.002B: probe with driver elan failed with error -22 [ 337.594400][ T40] audit: type=1326 audit(1746604182.234:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14530 comm="syz.7.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 337.603245][ T40] audit: type=1326 audit(1746604182.244:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14530 comm="syz.7.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 337.610157][ T40] audit: type=1326 audit(1746604182.244:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14530 comm="syz.7.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 337.618123][ T40] audit: type=1326 audit(1746604182.244:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14530 comm="syz.7.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 337.625645][ T40] audit: type=1326 audit(1746604182.244:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14530 comm="syz.7.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 337.635707][ T40] audit: type=1326 audit(1746604182.244:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14530 comm="syz.7.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 337.643066][ T40] audit: type=1326 audit(1746604182.244:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14530 comm="syz.7.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 337.834467][ T5999] usb 9-1: USB disconnect, device number 42 [ 338.345905][T14540] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2553'. [ 338.871155][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 338.871167][ T40] audit: type=1804 audit(1746604183.464:386): pid=14550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2554" name="/newroot/471/file0/file0" dev="9p" ino=35913879 res=1 errno=0 [ 339.072777][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2558'. [ 339.076259][T14561] hsr_slave_0: left promiscuous mode [ 339.078586][T14561] hsr_slave_1: left promiscuous mode [ 339.116708][T14563] ocfs2: Unknown parameter 'grpquotaÀ' [ 339.121027][T14565] netlink: 'syz.8.2560': attribute type 10 has an invalid length. [ 339.199004][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 339.227171][T14577] netlink: 8868 bytes leftover after parsing attributes in process `syz.7.2566'. [ 339.230919][T14578] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002 [ 339.252146][T14579] input: syz1 as /devices/virtual/input/input33 [ 339.282385][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2567'. [ 339.285427][T14583] netlink: 'syz.8.2567': attribute type 30 has an invalid length. [ 340.240981][T14605] syz.8.2575: attempt to access beyond end of device [ 340.240981][T14605] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 340.246368][T14605] hfsplus: unable to find HFS+ superblock [ 340.459150][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2575'. [ 340.462540][T14609] netlink: 'syz.8.2575': attribute type 5 has an invalid length. [ 340.465117][T14609] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2575'. [ 340.489261][T14611] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2577'. [ 340.492402][T14611] bridge_slave_0: default FDB implementation only supports local addresses [ 340.590225][ T40] audit: type=1326 audit(1746604185.224:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14616 comm="syz.7.2580" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 340.599163][ T40] audit: type=1326 audit(1746604185.224:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14616 comm="syz.7.2580" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 340.617896][ T40] audit: type=1326 audit(1746604185.224:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14616 comm="syz.7.2580" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 340.626844][ T40] audit: type=1326 audit(1746604185.224:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14616 comm="syz.7.2580" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 340.628237][T14619] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2581'. [ 340.641143][ T40] audit: type=1326 audit(1746604185.224:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14616 comm="syz.7.2580" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 340.648069][ T40] audit: type=1326 audit(1746604185.224:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14616 comm="syz.7.2580" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 340.648142][T14619] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2581'. [ 340.655069][ T40] audit: type=1326 audit(1746604185.224:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14616 comm="syz.7.2580" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 340.665024][ T40] audit: type=1326 audit(1746604185.224:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14616 comm="syz.7.2580" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 340.672493][ T40] audit: type=1326 audit(1746604185.224:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14616 comm="syz.7.2580" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 340.769220][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2585'. [ 340.905712][T14640] openvswitch: netlink: Message has 8 unknown bytes. [ 341.071752][T14652] vxcan3: entered promiscuous mode [ 341.281166][ T5954] Bluetooth: hci1: command 0x1003 tx timeout [ 341.281178][ T5945] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 341.737741][T14674] ip6tnl1: entered promiscuous mode [ 341.739505][T14674] ip6tnl1: entered allmulticast mode [ 341.742121][T14674] team0: Device ip6tnl1 is of different type [ 342.159172][T14680] netfs: Couldn't get user pages (rc=-14) [ 342.432826][T14688] netlink: 'syz.8.2606': attribute type 32 has an invalid length. [ 342.435412][T14688] netlink: 'syz.8.2606': attribute type 32 has an invalid length. [ 342.522047][T14690] 8021q: VLANs not supported on ip6_vti0 [ 342.531183][T14692] netlink: 'syz.6.2607': attribute type 5 has an invalid length. [ 342.585802][T14693] wireguard0: entered promiscuous mode [ 342.587869][T14693] wireguard0: entered allmulticast mode [ 342.761263][ T58] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 342.958571][T14701] syz.7.2612: attempt to access beyond end of device [ 342.958571][T14701] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 342.962578][ T58] usb 13-1: too many configurations: 178, using maximum allowed: 8 [ 342.963792][T14701] hfsplus: unable to find HFS+ superblock [ 342.977011][ T58] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 342.979996][ T58] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.983764][ T58] usb 13-1: Product: syz [ 342.985246][ T58] usb 13-1: Manufacturer: syz [ 342.986882][ T58] usb 13-1: SerialNumber: syz [ 343.065490][ T58] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 343.129853][ T58] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 343.180123][T14704] overlayfs: missing 'lowerdir' [ 343.227596][T14705] netlink: 'syz.7.2612': attribute type 5 has an invalid length. [ 343.337315][ T7615] usb 13-1: USB disconnect, device number 10 [ 343.901807][T14718] vlan2: entered promiscuous mode [ 343.903664][T14718] vlan2: entered allmulticast mode [ 343.905445][T14718] hsr_slave_1: entered allmulticast mode [ 344.005305][T14729] syz.7.2621: attempt to access beyond end of device [ 344.005305][T14729] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 344.009606][T14729] hfsplus: unable to find HFS+ superblock [ 344.220401][T14733] __nla_validate_parse: 13 callbacks suppressed [ 344.220476][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2621'. [ 344.221152][ T58] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 344.223155][T14733] netlink: 'syz.7.2621': attribute type 5 has an invalid length. [ 344.226649][ T58] ath9k_htc: Failed to initialize the device [ 344.229011][T14733] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2621'. [ 344.246838][ T7615] usb 13-1: ath9k_htc: USB layer deinitialized [ 344.673606][T14746] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.681272][T14746] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 344.760314][T14746] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.768959][T14746] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 344.854758][T14746] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.857906][T14746] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 344.942131][T14746] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.945385][T14746] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 345.017025][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2631'. [ 345.019878][T14746] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.021182][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2631'. [ 345.025723][T14746] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 345.025746][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2631'. [ 345.031303][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2631'. [ 345.032150][T14746] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.034209][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2631'. [ 345.036799][T14746] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 345.040541][T14746] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.042512][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2631'. [ 345.045216][T14746] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 345.048040][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2631'. [ 345.054103][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2631'. [ 345.057593][T14746] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.060261][T14746] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 345.103949][T14766] fuse: Bad value for 'fd' [ 345.138223][T14769] : entered promiscuous mode [ 345.286584][T14778] fuse: Unknown parameter 'ðt0x0000000000000007' [ 345.625825][T14789] netlink: 'syz.8.2641': attribute type 21 has an invalid length. [ 345.628980][T14789] netlink: 'syz.8.2641': attribute type 20 has an invalid length. [ 345.631604][T14789] IPv6: NLM_F_CREATE should be specified when creating new route [ 345.729090][ T57] libceph: connect (1)[c::]:6789 error -101 [ 345.731890][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 345.784746][T14803] FAULT_INJECTION: forcing a failure. [ 345.784746][T14803] name failslab, interval 1, probability 0, space 0, times 0 [ 345.788895][T14803] CPU: 1 UID: 0 PID: 14803 Comm: syz.4.2646 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 345.788910][T14803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 345.788916][T14803] Call Trace: [ 345.788920][T14803] [ 345.788924][T14803] dump_stack_lvl+0x16c/0x1f0 [ 345.788941][T14803] should_fail_ex+0x512/0x640 [ 345.788955][T14803] ? __kmalloc_noprof+0xbf/0x510 [ 345.788967][T14803] ? ioctl_standard_iw_point+0x414/0xca0 [ 345.788982][T14803] should_failslab+0xc2/0x120 [ 345.788994][T14803] __kmalloc_noprof+0xd2/0x510 [ 345.789009][T14803] ioctl_standard_iw_point+0x414/0xca0 [ 345.789024][T14803] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 345.789039][T14803] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 345.789053][T14803] ? __pfx___might_resched+0x10/0x10 [ 345.789066][T14803] ? rcu_is_watching+0x12/0xc0 [ 345.789075][T14803] ? trace_contention_end+0xdd/0x130 [ 345.789088][T14803] ? __mutex_lock+0x1ca/0xb90 [ 345.789105][T14803] compat_standard_call+0x20d/0x350 [ 345.789119][T14803] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 345.789133][T14803] ? __pfx_compat_standard_call+0x10/0x10 [ 345.789146][T14803] ? full_name_hash+0xbc/0x110 [ 345.789159][T14803] ? netdev_name_node_lookup+0x127/0x180 [ 345.789171][T14803] ? __pfx_compat_standard_call+0x10/0x10 [ 345.789184][T14803] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 345.789196][T14803] wireless_process_ioctl.constprop.0+0x28e/0x3d0 [ 345.789213][T14803] compat_wext_handle_ioctl+0x284/0x310 [ 345.789228][T14803] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 345.789250][T14803] compat_sock_ioctl+0x320/0x730 [ 345.789266][T14803] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 345.789284][T14803] ? __fget_files+0x20e/0x3c0 [ 345.789297][T14803] ? fput+0x20/0xf0 [ 345.789312][T14803] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 345.789325][T14803] __ia32_compat_sys_ioctl+0x24c/0x360 [ 345.789340][T14803] __do_fast_syscall_32+0x73/0x120 [ 345.789356][T14803] do_fast_syscall_32+0x32/0x80 [ 345.789370][T14803] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.789382][T14803] RIP: 0023:0xf7fa5579 [ 345.789391][T14803] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 345.789400][T14803] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 345.789410][T14803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b2a [ 345.789416][T14803] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.789422][T14803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.789427][T14803] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 345.789433][T14803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.789446][T14803] [ 345.991378][ T57] libceph: connect (1)[c::]:6789 error -101 [ 345.993478][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 346.183798][T14807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 346.332573][T14815] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 346.351540][ T6006] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 346.496778][T14795] ceph: No mds server is up or the cluster is laggy [ 346.501203][ T6006] usb 12-1: Using ep0 maxpacket: 16 [ 346.501437][ T57] libceph: connect (1)[c::]:6789 error -101 [ 346.505579][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 346.506428][ T6006] usb 12-1: config 0 has no interfaces? [ 346.512545][ T6006] usb 12-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.515668][ T6006] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.518766][ T6006] usb 12-1: Product: syz [ 346.520507][ T6006] usb 12-1: Manufacturer: syz [ 346.523736][ T6006] usb 12-1: SerialNumber: syz [ 346.530931][ T6006] usb 12-1: config 0 descriptor?? [ 347.061741][T14820] ip6tnl1: entered promiscuous mode [ 347.063478][T14820] ip6tnl1: entered allmulticast mode [ 347.067857][T14820] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 347.519756][T14836] binder: 14834:14836 ioctl 4018620d 0 returned -22 [ 347.519809][T14837] binder: 14834:14837 ioctl 4018620d 0 returned -22 [ 348.236772][T14866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 348.578135][ T1177] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 348.581836][ T1177] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 348.648370][ T1177] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 348.651814][ T1177] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 348.723934][ T1177] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 348.727199][ T1177] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 348.793604][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 348.795480][ T1177] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 348.799530][ T1177] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 348.799588][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 348.807262][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 348.811122][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 348.813901][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 348.834990][T14872] lo speed is unknown, defaulting to 1000 [ 348.838120][T14872] lo speed is unknown, defaulting to 1000 [ 348.949603][ T5950] kernel write not supported for file /dsp (pid: 5950 comm: kworker/1:3) [ 349.092987][ T5999] usb 12-1: USB disconnect, device number 17 [ 349.413708][ T1177] bond0 (unregistering): Released all slaves [ 349.427789][T14872] chnl_net:caif_netlink_parms(): no params data found [ 349.537189][ T1177] tipc: Disabling bearer [ 349.539422][ T1177] tipc: Left network mode [ 349.539603][T14872] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.544868][T14872] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.547231][T14872] bridge_slave_0: entered allmulticast mode [ 349.550308][T14872] bridge_slave_0: entered promiscuous mode [ 349.567153][T14872] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.569759][T14872] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.572568][T14872] bridge_slave_1: entered allmulticast mode [ 349.575485][T14872] bridge_slave_1: entered promiscuous mode [ 349.628460][T14872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.638312][T14872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.862591][T14872] team0: Port device team_slave_0 added [ 349.866853][T14872] team0: Port device team_slave_1 added [ 349.995574][T14872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.997905][T14872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.006564][T14872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.105192][T14872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.107460][T14872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.116973][T14872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.260084][T14872] hsr_slave_0: entered promiscuous mode [ 350.263555][T14872] hsr_slave_1: entered promiscuous mode [ 350.480397][ T1177] hsr_slave_0: left promiscuous mode [ 350.483894][ T1177] hsr_slave_1: left promiscuous mode [ 350.540592][ T1177] veth1_macvtap: left promiscuous mode [ 350.542564][ T1177] veth0_macvtap: left promiscuous mode [ 350.590050][ T1177] veth1_vlan: left promiscuous mode [ 350.861253][ T5945] Bluetooth: hci1: command tx timeout [ 350.950733][T14921] __nla_validate_parse: 63 callbacks suppressed [ 350.950751][T14921] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.2679'. [ 350.959701][T14921] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2679'. [ 351.481350][ T5999] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 351.633084][ T5999] usb 12-1: Using ep0 maxpacket: 8 [ 352.458291][T14930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.590045][T14872] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 352.604048][T14872] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 352.610002][T14872] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 352.627982][T14872] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 352.706679][T14872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.716877][T14872] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.722407][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.725415][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.734470][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.736894][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.854301][T14872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.876886][ T1177] IPVS: stop unused estimator thread 0... [ 352.941178][ T5945] Bluetooth: hci1: command tx timeout [ 353.087090][T14872] veth0_vlan: entered promiscuous mode [ 353.105858][T14872] veth1_vlan: entered promiscuous mode [ 353.133589][T14872] veth0_macvtap: entered promiscuous mode [ 353.143174][T14872] veth1_macvtap: entered promiscuous mode [ 353.152534][T14872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.159225][T14872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.165179][T14872] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.168031][T14872] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.170948][T14872] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.174245][T14872] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.279272][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.282448][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.405389][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.407943][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.452014][T14976] syz.9.2671: attempt to access beyond end of device [ 353.452014][T14976] loop9: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 353.457353][T14976] hfsplus: unable to find HFS+ superblock [ 353.534216][T14982] tty tty33: ldisc open failed (-12), clearing slot 32 [ 354.310288][T15001] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 354.345888][ T5999] usb 12-1: unable to get BOS descriptor or descriptor too short [ 354.348740][ T5999] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 354.350952][ T5999] usb 12-1: can't read configurations, error -71 [ 354.792461][T14990] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2671'. [ 354.798217][T14990] netlink: 'syz.9.2671': attribute type 5 has an invalid length. [ 354.800810][T14990] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2671'. [ 354.807698][T14990] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 354.810590][T14990] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 354.814603][T14990] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 354.817361][T14990] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 354.820370][T14990] geneve2: entered promiscuous mode [ 354.823529][T14990] geneve2: entered allmulticast mode [ 355.021166][ T5945] Bluetooth: hci1: command tx timeout [ 355.033442][T15030] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 355.369777][T15035] syz.7.2690: attempt to access beyond end of device [ 355.369777][T15035] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 355.374684][T15035] hfsplus: unable to find HFS+ superblock [ 355.591362][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2690'. [ 355.594356][T15041] netlink: 'syz.7.2690': attribute type 5 has an invalid length. [ 355.596926][T15041] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2690'. [ 355.827281][T15046] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 356.231903][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2696'. [ 356.264162][T15044] syzkaller1: entered promiscuous mode [ 356.268653][T15044] syzkaller1: entered allmulticast mode [ 356.353378][T15091] netlink: 'syz.6.2698': attribute type 1 has an invalid length. [ 356.368415][T15091] bond4: entered promiscuous mode [ 356.370312][T15091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 356.415486][T15091] bond4: (slave veth7): making interface the new active one [ 356.417969][T15091] veth7: entered promiscuous mode [ 356.420423][T15091] bond4: (slave veth7): Enslaving as an active interface with an up link [ 356.516342][T15090] team0: Port device geneve0 removed [ 356.519516][T15090] bond1: (slave veth3): Releasing active interface [ 356.522116][T15090] bond1: (slave veth3): the permanent HWaddr of slave - e6:33:72:c1:2a:b5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 356.528175][T15090] vlan2: entered promiscuous mode [ 356.534671][T15090] bond1: (slave vlan2): Releasing active interface [ 356.537167][T15090] vlan2: left promiscuous mode [ 356.539975][T15090] veth1: left promiscuous mode [ 356.546471][T15090] bond2: (slave veth5): Releasing active interface [ 356.553635][T15090] bond3: (slave macvlan2): Releasing backup interface [ 356.558722][T15090] bond0: left promiscuous mode [ 356.565317][T15090] bond4: (slave veth7): Releasing backup interface [ 356.568036][T15090] veth7: left promiscuous mode [ 356.661318][ T5999] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 356.827223][ T5999] usb 12-1: config 0 has no interfaces? [ 356.830608][ T5999] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 356.833617][ T5999] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.836194][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2701'. [ 356.836381][ T5999] usb 12-1: Product: syz [ 356.839856][T15101] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2701'. [ 356.840476][ T5999] usb 12-1: Manufacturer: syz [ 356.840485][ T5999] usb 12-1: SerialNumber: syz [ 356.841759][ T5999] usb 12-1: config 0 descriptor?? [ 356.878220][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2702'. [ 356.919223][T15105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.997436][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2705'. [ 357.101424][ T5945] Bluetooth: hci1: command tx timeout [ 357.114964][ T65] usb 12-1: USB disconnect, device number 20 [ 357.126999][T15089] [U] .ú [ 357.158531][T15116] syz.8.2708: attempt to access beyond end of device [ 357.158531][T15116] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 357.162836][T15116] hfsplus: unable to find HFS+ superblock [ 357.281425][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 357.281436][ T40] audit: type=1326 audit(1746604201.914:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz.9.2711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 357.295678][ T40] audit: type=1326 audit(1746604201.924:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz.9.2711" exe="/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 357.306014][ T40] audit: type=1326 audit(1746604201.924:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz.9.2711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 357.313826][T15132] FAULT_INJECTION: forcing a failure. [ 357.313826][T15132] name failslab, interval 1, probability 0, space 0, times 0 [ 357.315120][ T40] audit: type=1326 audit(1746604201.924:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz.9.2711" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 357.317697][T15132] CPU: 0 UID: 0 PID: 15132 Comm: syz.9.2711 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 357.317712][T15132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 357.317719][T15132] Call Trace: [ 357.317723][T15132] [ 357.317727][T15132] dump_stack_lvl+0x16c/0x1f0 [ 357.317745][T15132] should_fail_ex+0x512/0x640 [ 357.317760][T15132] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 357.317778][T15132] should_failslab+0xc2/0x120 [ 357.317791][T15132] __kmalloc_cache_noprof+0x6a/0x3e0 [ 357.317807][T15132] ? __alloc_workqueue+0xda2/0x1810 [ 357.317822][T15132] __alloc_workqueue+0xda2/0x1810 [ 357.317840][T15132] alloc_workqueue+0xd2/0x200 [ 357.317852][T15132] ? __pfx_alloc_workqueue+0x10/0x10 [ 357.317866][T15132] ? rcu_is_watching+0x12/0xc0 [ 357.317876][T15132] ? trace_kmalloc+0x2b/0xd0 [ 357.317888][T15132] ? do_raw_spin_lock+0x12c/0x2b0 [ 357.317903][T15132] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 357.317920][T15132] ieee80211_register_hw+0x1e18/0x4020 [ 357.317938][T15132] ? __pfx__raw_spin_unlock_bh+0x1/0x10 [ 357.317951][T15132] ? __debug_object_init+0x2a1/0x3d0 [ 357.317964][T15132] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 357.317979][T15132] ? __pfx_schedule_timeout+0x10/0x10 [ 357.317993][T15132] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 357.318007][T15132] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 357.318019][T15132] ? __hrtimer_setup+0x176/0x280 [ 357.318034][T15132] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 357.318059][T15132] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 357.318079][T15132] hwsim_new_radio_nl+0xb51/0x12c0 [ 357.318095][T15132] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 357.318114][T15132] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 357.318130][T15132] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 357.318147][T15132] genl_family_rcv_msg_doit+0x206/0x2f0 [ 357.318162][T15132] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 357.318176][T15132] ? trace_cap_capable+0x18d/0x200 [ 357.318190][T15132] ? bpf_lsm_capable+0x9/0x10 [ 357.318200][T15132] ? security_capable+0x7e/0x260 [ 357.318210][T15132] ? ns_capable+0xd7/0x110 [ 357.318222][T15132] genl_rcv_msg+0x55c/0x800 [ 357.318238][T15132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.318250][T15132] ? __pfx___dev_queue_xmit+0x10/0x10 [ 357.318266][T15132] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 357.318281][T15132] ? __lock_acquire+0xaa4/0x1ba0 [ 357.318297][T15132] netlink_rcv_skb+0x16a/0x440 [ 357.318309][T15132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.318323][T15132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 357.318342][T15132] ? __pfx_down_read+0x10/0x10 [ 357.318357][T15132] ? netlink_deliver_tap+0x1ae/0xd30 [ 357.318371][T15132] genl_rcv+0x28/0x40 [ 357.318383][T15132] netlink_unicast+0x53a/0x7f0 [ 357.318397][T15132] ? __pfx_netlink_unicast+0x10/0x10 [ 357.318413][T15132] netlink_sendmsg+0x8d1/0xdd0 [ 357.318428][T15132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.318441][T15132] ? __import_iovec+0x1c8/0x660 [ 357.318460][T15132] ____sys_sendmsg+0xa95/0xc70 [ 357.318476][T15132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.318493][T15132] ? get_compat_msghdr+0x11a/0x170 [ 357.318511][T15132] ___sys_sendmsg+0x134/0x1d0 [ 357.318523][T15132] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.318552][T15132] __sys_sendmsg+0x16d/0x220 [ 357.318564][T15132] ? __pfx___sys_sendmsg+0x10/0x10 [ 357.318581][T15132] ? __secure_computing+0x21c/0x320 [ 357.318593][T15132] __do_fast_syscall_32+0x73/0x120 [ 357.318609][T15132] do_fast_syscall_32+0x32/0x80 [ 357.318622][T15132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.318635][T15132] RIP: 0023:0xf70ee579 [ 357.318644][T15132] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 357.318653][T15132] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 357.318663][T15132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 357.318669][T15132] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.318675][T15132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.318681][T15132] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 357.318686][T15132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.318700][T15132] [ 357.461184][ T40] audit: type=1326 audit(1746604201.924:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz.9.2711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 357.461209][ T40] audit: type=1326 audit(1746604201.934:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz.9.2711" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 357.461228][ T40] audit: type=1326 audit(1746604201.934:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz.9.2711" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 357.461247][ T40] audit: type=1326 audit(1746604201.934:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz.9.2711" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 357.461268][ T40] audit: type=1326 audit(1746604201.954:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz.9.2711" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 357.461288][ T40] audit: type=1326 audit(1746604201.954:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz.9.2711" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 357.469363][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2708'. [ 357.532007][T15138] netlink: 'syz.8.2708': attribute type 5 has an invalid length. [ 357.534777][T15138] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2708'. [ 357.714539][T15150] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 357.795820][T15154] vivid-000: disconnect [ 357.805136][T15149] vivid-000: reconnect [ 357.895333][T15153] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2716'. [ 357.983613][T15164] siw: device registration error -23 [ 358.287902][T15177] overlay: filesystem on ./bus not supported [ 358.341544][T15180] overlay: filesystem on . not supported [ 358.453215][T15179] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.555514][T15189] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 358.644106][T15188] sp0: Synchronizing with TNC [ 359.062877][T15197] binder: 15193:15197 ioctl 4018620d 0 returned -22 [ 359.599058][T15207] syz.9.2732: attempt to access beyond end of device [ 359.599058][T15207] loop9: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 359.603555][T15207] hfsplus: unable to find HFS+ superblock [ 359.814104][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2732'. [ 359.817362][T15209] netlink: 'syz.9.2732': attribute type 5 has an invalid length. [ 359.820269][T15209] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2732'. [ 360.021221][ T1468] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 360.126630][T15217] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 360.129511][T15217] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 360.133487][T15217] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 360.136996][T15217] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 360.139960][T15217] geneve3: entered promiscuous mode [ 360.142936][T15217] geneve3: entered allmulticast mode [ 360.171172][ T1468] usb 11-1: Using ep0 maxpacket: 8 [ 360.176808][ T1468] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.180203][ T1468] usb 11-1: config 0 has no interfaces? [ 360.184565][ T1468] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 360.187581][ T1468] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.191513][ T1468] usb 11-1: config 0 descriptor?? [ 360.365986][T15229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 360.642224][ T5945] Bluetooth: hci1: Malformed LE Event: 0x1b [ 361.794211][T15250] netlink: 'syz.7.2750': attribute type 4 has an invalid length. [ 361.865245][T15261] syz.8.2753: attempt to access beyond end of device [ 361.865245][T15261] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 361.869548][T15261] hfsplus: unable to find HFS+ superblock [ 361.960217][T12348] usb 11-1: USB disconnect, device number 23 [ 361.988935][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2755'. [ 362.040120][T15273] netlink: 'syz.9.2758': attribute type 4 has an invalid length. [ 362.125410][T15281] FAULT_INJECTION: forcing a failure. [ 362.125410][T15281] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 362.130224][T15281] CPU: 0 UID: 0 PID: 15281 Comm: syz.9.2760 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 362.130250][T15281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 362.130257][T15281] Call Trace: [ 362.130262][T15281] [ 362.130268][T15281] dump_stack_lvl+0x16c/0x1f0 [ 362.130287][T15281] should_fail_ex+0x512/0x640 [ 362.130304][T15281] should_fail_alloc_page+0xe7/0x130 [ 362.130318][T15281] prepare_alloc_pages+0x3c2/0x610 [ 362.130336][T15281] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 362.130350][T15281] ? __pfx_vmx_vcpu_pi_load+0x10/0x10 [ 362.130368][T15281] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 362.130388][T15281] ? arch_scale_cpu_capacity+0x15/0xb0 [ 362.130399][T15281] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 362.130414][T15281] ? policy_nodemask+0xea/0x4e0 [ 362.130427][T15281] alloc_pages_mpol+0x1fb/0x550 [ 362.130442][T15281] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 362.130454][T15281] ? __lock_acquire+0x5ca/0x1ba0 [ 362.130471][T15281] folio_alloc_mpol_noprof+0x36/0x2f0 [ 362.130486][T15281] vma_alloc_folio_noprof+0xed/0x1e0 [ 362.130499][T15281] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 362.130518][T15281] do_pte_missing+0x223d/0x3fb0 [ 362.130534][T15281] __handle_mm_fault+0x103d/0x2a40 [ 362.130550][T15281] ? __pfx___handle_mm_fault+0x10/0x10 [ 362.130559][T15281] ? __pte_offset_map_lock+0x155/0x2f0 [ 362.130573][T15281] ? find_held_lock+0x2b/0x80 [ 362.130581][T15281] ? find_held_lock+0x2b/0x80 [ 362.130600][T15281] handle_mm_fault+0x3fe/0xad0 [ 362.130613][T15281] __get_user_pages+0x771/0x36f0 [ 362.130635][T15281] ? __pfx___get_user_pages+0x10/0x10 [ 362.130650][T15281] ? __pfx_down_read_killable+0x10/0x10 [ 362.130671][T15281] get_user_pages_unlocked+0x1c1/0x780 [ 362.130692][T15281] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 362.130707][T15281] ? get_user_pages_fast_only+0xae/0xf0 [ 362.130723][T15281] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 362.130738][T15281] ? __pfx___might_resched+0x10/0x10 [ 362.130753][T15281] hva_to_pfn+0x886/0xe40 [ 362.130767][T15281] ? __pfx_hva_to_pfn+0x10/0x10 [ 362.130779][T15281] ? __lock_acquire+0x5ca/0x1ba0 [ 362.130793][T15281] ? is_bpf_text_address+0x94/0x1a0 [ 362.130805][T15281] ? kernel_text_address+0x8d/0x100 [ 362.130820][T15281] ? __kernel_text_address+0xd/0x40 [ 362.130835][T15281] ? __kernel_text_address+0xd/0x40 [ 362.130854][T15281] kvm_follow_pfn+0x29f/0x3f0 [ 362.130867][T15281] __kvm_faultin_pfn+0x11c/0x1a0 [ 362.130878][T15281] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 362.130889][T15281] ? __pfx_xa_load+0x10/0x10 [ 362.130907][T15281] ? find_held_lock+0x2b/0x80 [ 362.130917][T15281] kvm_mmu_faultin_pfn+0x581/0x2170 [ 362.130931][T15281] ? __pfx_fast_page_fault+0x10/0x10 [ 362.130942][T15281] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 362.130951][T15281] ? __lock_acquire+0x5ca/0x1ba0 [ 362.130964][T15281] ? __kvm_mmu_topup_memory_cache+0x332/0x600 [ 362.130980][T15281] kvm_tdp_page_fault+0x186/0x3f0 [ 362.130995][T15281] kvm_mmu_do_page_fault+0x588/0x6c0 [ 362.131010][T15281] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 362.131029][T15281] ? find_held_lock+0x2b/0x80 [ 362.131052][T15281] kvm_mmu_page_fault+0x225/0x1cb0 [ 362.131069][T15281] ? kernel_text_address+0x8d/0x100 [ 362.131084][T15281] ? __kernel_text_address+0xd/0x40 [ 362.131099][T15281] ? unwind_get_return_address+0x59/0xa0 [ 362.131112][T15281] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 362.131126][T15281] ? __lock_acquire+0xaa4/0x1ba0 [ 362.131144][T15281] ? rcu_is_watching+0x12/0xc0 [ 362.131153][T15281] ? __vmx_complete_interrupts+0x111/0x4e0 [ 362.131166][T15281] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 362.131183][T15281] handle_ept_violation+0x254/0x640 [ 362.131196][T15281] ? __pfx_handle_ept_violation+0x10/0x10 [ 362.131208][T15281] vmx_handle_exit+0x6ab/0x1cc0 [ 362.131223][T15281] vcpu_run+0x304c/0x5320 [ 362.131237][T15281] ? vmx_get_segment_base+0xd3/0x140 [ 362.131252][T15281] ? skip_emulated_instruction+0x20f/0x4d0 [ 362.131266][T15281] ? __pfx_vcpu_run+0x10/0x10 [ 362.131279][T15281] ? kvm_pmu_trigger_event+0xe6/0x700 [ 362.131299][T15281] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 362.131312][T15281] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 362.131331][T15281] kvm_vcpu_ioctl+0x5e9/0x1680 [ 362.131348][T15281] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 362.131362][T15281] ? tomoyo_path_number_perm+0x18d/0x580 [ 362.131376][T15281] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 362.131388][T15281] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 362.131401][T15281] ? do_vfs_ioctl+0x512/0x1990 [ 362.131416][T15281] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 362.131444][T15281] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 362.131459][T15281] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 362.131474][T15281] ? __fget_files+0x20e/0x3c0 [ 362.131488][T15281] ? fput+0x20/0xf0 [ 362.131501][T15281] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 362.131517][T15281] __ia32_compat_sys_ioctl+0x24c/0x360 [ 362.131532][T15281] __do_fast_syscall_32+0x73/0x120 [ 362.131548][T15281] do_fast_syscall_32+0x32/0x80 [ 362.131562][T15281] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 362.131574][T15281] RIP: 0023:0xf70ee579 [ 362.131583][T15281] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 362.131593][T15281] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 362.131603][T15281] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 362.131609][T15281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 362.131614][T15281] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 362.131620][T15281] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 362.131625][T15281] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 362.131639][T15281] [ 362.152678][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2753'. [ 362.343862][T15283] netlink: 'syz.8.2753': attribute type 5 has an invalid length. [ 362.346487][T15283] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2753'. [ 362.351964][T15279] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 362.683392][T15298] fuse: Unknown parameter 'dd' [ 362.887559][ T1105] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 362.889745][ T1105] ata1: failed to read log page 10h (errno=-5) [ 362.891991][ T1105] ata1.00: exception Emask 0x1 SAct 0x80000 SErr 0x0 action 0x0 [ 362.894614][ T1105] ata1.00: irq_stat 0x40000000 [ 362.896160][ T1105] ata1.00: failed command: WRITE FPDMA QUEUED [ 362.898123][ T1105] ata1.00: cmd 61/18:98:7a:11:10/00:00:00:00:00/40 tag 19 ncq dma 12288 out [ 362.898123][ T1105] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 362.903631][ T1105] ata1.00: status: { DRDY } [ 362.905132][ T1105] ata1.00: error: { ABRT } [ 362.909477][ T1105] ata1.00: configured for UDMA/100 [ 362.911760][ T1105] ata1: EH complete [ 362.988604][T15307] Bluetooth: MGMT ver 1.23 [ 363.104939][T15314] FAULT_INJECTION: forcing a failure. [ 363.104939][T15314] name failslab, interval 1, probability 0, space 0, times 0 [ 363.117430][T15314] CPU: 3 UID: 0 PID: 15314 Comm: syz.6.2770 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 363.117458][T15314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 363.117464][T15314] Call Trace: [ 363.117469][T15314] [ 363.117474][T15314] dump_stack_lvl+0x16c/0x1f0 [ 363.117492][T15314] should_fail_ex+0x512/0x640 [ 363.117506][T15314] ? __kmalloc_noprof+0xbf/0x510 [ 363.117518][T15314] ? iter_file_splice_write+0x1cc/0x1150 [ 363.117533][T15314] should_failslab+0xc2/0x120 [ 363.117546][T15314] __kmalloc_noprof+0xd2/0x510 [ 363.117560][T15314] iter_file_splice_write+0x1cc/0x1150 [ 363.117576][T15314] ? current_time+0x11d/0x1a0 [ 363.117586][T15314] ? __pfx_current_time+0x10/0x10 [ 363.117595][T15314] ? __pfx_make_vfsgid+0x10/0x10 [ 363.117611][T15314] ? atime_needs_update+0x8b/0x710 [ 363.117625][T15314] ? __pfx_iter_file_splice_write+0x10/0x10 [ 363.117640][T15314] ? __lock_acquire+0xaa4/0x1ba0 [ 363.117664][T15314] ? __pfx_iter_file_splice_write+0x10/0x10 [ 363.117680][T15314] direct_splice_actor+0x18f/0x6c0 [ 363.117696][T15314] splice_direct_to_actor+0x342/0xa30 [ 363.117712][T15314] ? __pfx_direct_splice_actor+0x10/0x10 [ 363.117730][T15314] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 363.117743][T15314] ? get_pid_task+0xfc/0x250 [ 363.117761][T15314] do_splice_direct+0x174/0x240 [ 363.117776][T15314] ? __pfx_do_splice_direct+0x10/0x10 [ 363.117790][T15314] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 363.117820][T15314] ? rw_verify_area+0xcf/0x680 [ 363.117836][T15314] do_sendfile+0xafd/0xe50 [ 363.117854][T15314] ? __pfx_do_sendfile+0x10/0x10 [ 363.117869][T15314] ? __might_fault+0xe3/0x190 [ 363.117880][T15314] ? __might_fault+0x13b/0x190 [ 363.117895][T15314] __ia32_compat_sys_sendfile+0x162/0x220 [ 363.117908][T15314] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 363.117921][T15314] ? rcu_is_watching+0x12/0xc0 [ 363.117933][T15314] __do_fast_syscall_32+0x73/0x120 [ 363.117949][T15314] do_fast_syscall_32+0x32/0x80 [ 363.117963][T15314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.117975][T15314] RIP: 0023:0xf706e579 [ 363.117984][T15314] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 363.117994][T15314] RSP: 002b:00000000f503d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 363.118004][T15314] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000005 [ 363.118010][T15314] RDX: 00000000800002c0 RSI: 0000000000007f03 RDI: 0000000000000000 [ 363.118016][T15314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.118022][T15314] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 363.118027][T15314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.118042][T15314] [ 363.252923][T15317] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2772'. [ 363.306654][T15321] syz.9.2774: attempt to access beyond end of device [ 363.306654][T15321] loop9: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 363.310875][T15321] hfsplus: unable to find HFS+ superblock [ 363.512063][T15298] orangefs_mount: mount request failed with -4 [ 363.523325][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2774'. [ 363.527130][T15323] netlink: 'syz.9.2774': attribute type 5 has an invalid length. [ 363.530412][T15323] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2774'. [ 363.747658][T15327] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 363.909241][T15334] tipc: Enabling of bearer rejected, already enabled [ 364.118495][T15348] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 364.121038][T15348] CPU: 1 UID: 0 PID: 15348 Comm: syz.8.2783 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 364.121065][T15348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 364.121072][T15348] Call Trace: [ 364.121077][T15348] [ 364.121082][T15348] dump_stack_lvl+0x16c/0x1f0 [ 364.121099][T15348] sysfs_warn_dup+0x7f/0xa0 [ 364.121117][T15348] sysfs_do_create_link_sd+0x124/0x140 [ 364.121134][T15348] sysfs_create_link+0x61/0xc0 [ 364.121149][T15348] device_add+0x62c/0x1a70 [ 364.121166][T15348] ? __pfx_device_add+0x10/0x10 [ 364.121179][T15348] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.121195][T15348] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 364.121213][T15348] wiphy_register+0x1c9c/0x2850 [ 364.121223][T15348] ? netdev_run_todo+0x864/0x1320 [ 364.121236][T15348] ? __dev_printk+0x190/0x270 [ 364.121248][T15348] ? __pfx_wiphy_register+0x10/0x10 [ 364.121267][T15348] ieee80211_register_hw+0x2432/0x4020 [ 364.121302][T15348] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 364.121322][T15348] ? find_held_lock+0x2b/0x80 [ 364.121333][T15348] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.121347][T15348] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 364.121359][T15348] ? __hrtimer_setup+0x176/0x280 [ 364.121378][T15348] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 364.121403][T15348] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 364.121416][T15348] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 364.121431][T15348] ? __asan_memcpy+0x3c/0x60 [ 364.121443][T15348] hwsim_new_radio_nl+0xb51/0x12c0 [ 364.121459][T15348] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 364.121479][T15348] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 364.121497][T15348] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 364.121514][T15348] genl_family_rcv_msg_doit+0x206/0x2f0 [ 364.121529][T15348] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 364.121542][T15348] ? trace_cap_capable+0x18d/0x200 [ 364.121558][T15348] ? bpf_lsm_capable+0x9/0x10 [ 364.121569][T15348] ? security_capable+0x7e/0x260 [ 364.121580][T15348] ? ns_capable+0xd7/0x110 [ 364.121593][T15348] genl_rcv_msg+0x55c/0x800 [ 364.121608][T15348] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.121621][T15348] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 364.121637][T15348] ? __lock_acquire+0xaa4/0x1ba0 [ 364.121652][T15348] netlink_rcv_skb+0x16a/0x440 [ 364.121664][T15348] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.121678][T15348] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.121698][T15348] ? __pfx_down_read+0x10/0x10 [ 364.121713][T15348] ? netlink_deliver_tap+0x1ae/0xd30 [ 364.121727][T15348] genl_rcv+0x28/0x40 [ 364.121739][T15348] netlink_unicast+0x53a/0x7f0 [ 364.121752][T15348] ? __pfx_netlink_unicast+0x10/0x10 [ 364.121769][T15348] netlink_sendmsg+0x8d1/0xdd0 [ 364.121784][T15348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.121797][T15348] ? __import_iovec+0x1c8/0x660 [ 364.121815][T15348] ____sys_sendmsg+0xa95/0xc70 [ 364.121831][T15348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.121844][T15348] ? get_compat_msghdr+0x11a/0x170 [ 364.121862][T15348] ___sys_sendmsg+0x134/0x1d0 [ 364.121875][T15348] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.121906][T15348] __sys_sendmsg+0x16d/0x220 [ 364.121918][T15348] ? __pfx___sys_sendmsg+0x10/0x10 [ 364.121928][T15348] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 364.121945][T15348] ? rcu_is_watching+0x12/0xc0 [ 364.121956][T15348] ? rcu_is_watching+0x12/0xc0 [ 364.121967][T15348] __do_fast_syscall_32+0x73/0x120 [ 364.121982][T15348] do_fast_syscall_32+0x32/0x80 [ 364.121996][T15348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.122008][T15348] RIP: 0023:0xf7f98579 [ 364.122017][T15348] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 364.122026][T15348] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 364.122036][T15348] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 364.122043][T15348] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.122048][T15348] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.122054][T15348] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 364.122059][T15348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.122073][T15348] [ 364.490196][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2789'. [ 364.539850][T15369] lo speed is unknown, defaulting to 1000 [ 364.542066][T15369] lo speed is unknown, defaulting to 1000 [ 364.548682][T15369] lo speed is unknown, defaulting to 1000 [ 364.573134][T15369] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 364.621678][T15369] lo speed is unknown, defaulting to 1000 [ 364.628409][T15369] lo speed is unknown, defaulting to 1000 [ 364.635111][T15369] lo speed is unknown, defaulting to 1000 [ 364.640328][T15369] lo speed is unknown, defaulting to 1000 [ 364.802190][T15382] syz.8.2796: attempt to access beyond end of device [ 364.802190][T15382] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 364.806533][T15382] hfsplus: unable to find HFS+ superblock [ 365.123325][T15393] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 365.428129][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2796'. [ 365.440290][T15398] netlink: 'syz.8.2796': attribute type 5 has an invalid length. [ 365.444262][T15398] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2796'. [ 365.840527][T15418] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 365.852542][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2806'. [ 366.425451][T15440] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 366.731358][T15442] FAULT_INJECTION: forcing a failure. [ 366.731358][T15442] name failslab, interval 1, probability 0, space 0, times 0 [ 366.736508][T15442] CPU: 3 UID: 0 PID: 15442 Comm: syz.7.2815 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 366.736533][T15442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 366.736544][T15442] Call Trace: [ 366.736550][T15442] [ 366.736558][T15442] dump_stack_lvl+0x16c/0x1f0 [ 366.736586][T15442] should_fail_ex+0x512/0x640 [ 366.736609][T15442] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 366.736633][T15442] should_failslab+0xc2/0x120 [ 366.736652][T15442] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 366.736672][T15442] ? ife_alloc_meta_u16+0x2a/0x80 [ 366.736695][T15442] kmemdup_noprof+0x29/0x60 [ 366.736717][T15442] ife_alloc_meta_u16+0x2a/0x80 [ 366.736735][T15442] __add_metainfo+0x139/0x460 [ 366.736756][T15442] tcf_ife_init+0xabe/0x14e0 [ 366.736782][T15442] ? __pfx_tcf_ife_init+0x10/0x10 [ 366.736819][T15442] ? __asan_memcpy+0x3c/0x60 [ 366.736837][T15442] tcf_action_init_1+0x45d/0x6c0 [ 366.736866][T15442] ? __pfx_tcf_action_init_1+0x10/0x10 [ 366.736905][T15442] ? __nla_parse+0x40/0x60 [ 366.736925][T15442] tcf_action_init+0x42c/0x9c0 [ 366.736958][T15442] ? __pfx_tcf_action_init+0x10/0x10 [ 366.737003][T15442] ? __lock_acquire+0x5ca/0x1ba0 [ 366.737055][T15442] ? __lock_acquire+0x5ca/0x1ba0 [ 366.737079][T15442] tcf_action_add+0xee/0x5c0 [ 366.737107][T15442] ? __pfx_tcf_action_add+0x10/0x10 [ 366.737174][T15442] ? __nla_parse+0x40/0x60 [ 366.737194][T15442] tc_ctl_action+0x35b/0x470 [ 366.737219][T15442] ? __pfx_tc_ctl_action+0x10/0x10 [ 366.737254][T15442] ? __pfx_tc_ctl_action+0x10/0x10 [ 366.737280][T15442] rtnetlink_rcv_msg+0x3c6/0xe90 [ 366.737302][T15442] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.737335][T15442] netlink_rcv_skb+0x16a/0x440 [ 366.737355][T15442] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.737376][T15442] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.737411][T15442] ? netlink_deliver_tap+0x1ae/0xd30 [ 366.737435][T15442] netlink_unicast+0x53a/0x7f0 [ 366.737459][T15442] ? __pfx_netlink_unicast+0x10/0x10 [ 366.737487][T15442] netlink_sendmsg+0x8d1/0xdd0 [ 366.737516][T15442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.737539][T15442] ? __import_iovec+0x1c8/0x660 [ 366.737570][T15442] ____sys_sendmsg+0xa95/0xc70 [ 366.737596][T15442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.737617][T15442] ? get_compat_msghdr+0x11a/0x170 [ 366.737647][T15442] ___sys_sendmsg+0x134/0x1d0 [ 366.737667][T15442] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.737720][T15442] __sys_sendmsg+0x16d/0x220 [ 366.737738][T15442] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.737768][T15442] ? rcu_is_watching+0x12/0xc0 [ 366.737787][T15442] __do_fast_syscall_32+0x73/0x120 [ 366.737812][T15442] do_fast_syscall_32+0x32/0x80 [ 366.737835][T15442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 366.737857][T15442] RIP: 0023:0xf7f87579 [ 366.737870][T15442] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 366.737885][T15442] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 366.737900][T15442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 366.737913][T15442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.737920][T15442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.737929][T15442] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 366.737935][T15442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.737956][T15442] [ 366.889368][T15447] syz.7.2817: attempt to access beyond end of device [ 366.889368][T15447] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 366.893651][T15447] hfsplus: unable to find HFS+ superblock [ 367.216725][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2817'. [ 367.220834][T15451] netlink: 'syz.7.2817': attribute type 5 has an invalid length. [ 367.223917][T15451] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2817'. [ 367.321574][T15455] netlink: 'syz.9.2819': attribute type 10 has an invalid length. [ 367.324682][T15455] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 367.409995][T15460] geneve1: entered promiscuous mode [ 367.419544][T15462] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2822'. [ 367.422484][T15462] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 367.458081][T15468] input: syz1 as /devices/virtual/input/input34 [ 367.492633][T15472] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2825'. [ 367.559948][T15478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.782226][T15482] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 368.108527][T15485] lo speed is unknown, defaulting to 1000 [ 368.111199][T15485] lo speed is unknown, defaulting to 1000 [ 368.372099][T15493] lo speed is unknown, defaulting to 1000 [ 368.377144][T15493] lo speed is unknown, defaulting to 1000 [ 368.471332][T15496] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2832'. [ 369.129685][T15507] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2836'. [ 369.174967][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2835'. [ 369.203917][T15511] syz.7.2837: attempt to access beyond end of device [ 369.203917][T15511] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 369.208463][T15511] hfsplus: unable to find HFS+ superblock [ 369.586421][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2837'. [ 369.589786][T15520] netlink: 'syz.7.2837': attribute type 5 has an invalid length. [ 369.592741][T15520] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2837'. [ 369.707366][T15525] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 370.329972][T15541] FAULT_INJECTION: forcing a failure. [ 370.329972][T15541] name failslab, interval 1, probability 0, space 0, times 0 [ 370.334843][T15541] CPU: 2 UID: 0 PID: 15541 Comm: syz.7.2846 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 370.334858][T15541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 370.334864][T15541] Call Trace: [ 370.334868][T15541] [ 370.334872][T15541] dump_stack_lvl+0x16c/0x1f0 [ 370.334891][T15541] should_fail_ex+0x512/0x640 [ 370.334906][T15541] ? fs_reclaim_acquire+0xae/0x150 [ 370.334922][T15541] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 370.334936][T15541] should_failslab+0xc2/0x120 [ 370.334949][T15541] __kmalloc_noprof+0xd2/0x510 [ 370.334964][T15541] tomoyo_realpath_from_path+0xc2/0x6e0 [ 370.334979][T15541] ? tomoyo_profile+0x47/0x60 [ 370.334996][T15541] tomoyo_path_number_perm+0x245/0x580 [ 370.335007][T15541] ? tomoyo_path_number_perm+0x237/0x580 [ 370.335020][T15541] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 370.335047][T15541] ? find_held_lock+0x2b/0x80 [ 370.335056][T15541] ? hook_file_ioctl_common+0x145/0x410 [ 370.335067][T15541] ? __fget_files+0x204/0x3c0 [ 370.335085][T15541] ? __fget_files+0x20e/0x3c0 [ 370.335098][T15541] ? fput+0x20/0xf0 [ 370.335112][T15541] security_file_ioctl_compat+0x9b/0x240 [ 370.335126][T15541] __ia32_compat_sys_ioctl+0xc3/0x360 [ 370.335142][T15541] __do_fast_syscall_32+0x73/0x120 [ 370.335157][T15541] do_fast_syscall_32+0x32/0x80 [ 370.335171][T15541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.335184][T15541] RIP: 0023:0xf7f87579 [ 370.335192][T15541] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 370.335202][T15541] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 370.335212][T15541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03 [ 370.335218][T15541] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.335224][T15541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.335229][T15541] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 370.335235][T15541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.335249][T15541] [ 370.335253][T15541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 370.399129][T15542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2845'. [ 370.535224][T15539] hub 6-0:1.0: USB hub found [ 370.538473][T15539] hub 6-0:1.0: 1 port detected [ 370.585774][T15542] bridge_slave_1: left allmulticast mode [ 370.588975][T15542] bridge_slave_1: left promiscuous mode [ 370.591373][T15542] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.602106][T15542] bridge_slave_0: left allmulticast mode [ 370.604975][T15542] bridge_slave_0: left promiscuous mode [ 370.606982][T15542] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.801152][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 370.801169][ T40] audit: type=1804 audit(1746604215.099:448): pid=15559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2851" name="/newroot/238/file0/file0" dev="9p" ino=35913879 res=1 errno=0 [ 370.946575][T15558] program syz.7.2850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.063002][T15565] syz.9.2852: attempt to access beyond end of device [ 371.063002][T15565] loop9: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 371.067336][T15565] hfsplus: unable to find HFS+ superblock [ 371.733654][T15580] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 372.118223][T15589] netlink: 'syz.9.2859': attribute type 10 has an invalid length. [ 372.127463][T15589] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 372.173193][T15591] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 372.208029][ T57] usb 13-1: new full-speed USB device number 11 using dummy_hcd [ 372.390427][ T57] usb 13-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 372.393992][ T57] usb 13-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.398129][ T57] usb 13-1: config 1 interface 0 has no altsetting 0 [ 372.402093][ T57] usb 13-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.40 [ 372.405125][ T57] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.407719][ T57] usb 13-1: Product: syz [ 372.409119][ T57] usb 13-1: Manufacturer: syz [ 372.410791][ T57] usb 13-1: SerialNumber: syz [ 372.414359][T15586] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 372.491894][T15605] FAULT_INJECTION: forcing a failure. [ 372.491894][T15605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.496533][T15605] CPU: 3 UID: 0 PID: 15605 Comm: syz.6.2866 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 372.496549][T15605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 372.496555][T15605] Call Trace: [ 372.496559][T15605] [ 372.496564][T15605] dump_stack_lvl+0x16c/0x1f0 [ 372.496581][T15605] should_fail_ex+0x512/0x640 [ 372.496598][T15605] _copy_from_iter+0x2a4/0x15b0 [ 372.496614][T15605] ? __alloc_skb+0x200/0x380 [ 372.496626][T15605] ? __pfx__copy_from_iter+0x10/0x10 [ 372.496647][T15605] netlink_sendmsg+0x829/0xdd0 [ 372.496663][T15605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.496676][T15605] ? __import_iovec+0x1c8/0x660 [ 372.496694][T15605] ____sys_sendmsg+0xa95/0xc70 [ 372.496712][T15605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.496725][T15605] ? get_compat_msghdr+0x11a/0x170 [ 372.496742][T15605] ___sys_sendmsg+0x134/0x1d0 [ 372.496754][T15605] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.496782][T15605] __sys_sendmsg+0x16d/0x220 [ 372.496793][T15605] ? __pfx___sys_sendmsg+0x10/0x10 [ 372.496811][T15605] ? rcu_is_watching+0x12/0xc0 [ 372.496823][T15605] __do_fast_syscall_32+0x73/0x120 [ 372.496838][T15605] do_fast_syscall_32+0x32/0x80 [ 372.496851][T15605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 372.496864][T15605] RIP: 0023:0xf706e579 [ 372.496872][T15605] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 372.496882][T15605] RSP: 002b:00000000f505e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 372.496891][T15605] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 372.496898][T15605] RDX: 0000000024044094 RSI: 0000000000000000 RDI: 0000000000000000 [ 372.496903][T15605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 372.496909][T15605] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 372.496915][T15605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 372.496928][T15605] [ 372.560308][ T9] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 372.737835][ T57] usbhid 13-1:1.0: can't add hid device: -71 [ 372.740550][ T57] usbhid 13-1:1.0: probe with driver usbhid failed with error -71 [ 372.750724][ T57] usb 13-1: USB disconnect, device number 11 [ 372.798131][ T9] usb 14-1: config index 0 descriptor too short (expected 65535, got 77) [ 372.800944][ T9] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.804272][ T9] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 372.838637][ T9] usb 14-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 372.841630][ T9] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.860802][ T9] usb 14-1: Product: syz [ 372.862350][ T9] usb 14-1: Manufacturer: syz [ 372.863925][ T9] usb 14-1: SerialNumber: syz [ 372.867252][ T9] usb 14-1: config 0 descriptor?? [ 373.089871][ T1468] usb 14-1: USB disconnect, device number 2 [ 373.392591][T15626] FAULT_INJECTION: forcing a failure. [ 373.392591][T15626] name failslab, interval 1, probability 0, space 0, times 0 [ 373.398199][T15626] CPU: 0 UID: 0 PID: 15626 Comm: syz.7.2872 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 373.398214][T15626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 373.398220][T15626] Call Trace: [ 373.398224][T15626] [ 373.398228][T15626] dump_stack_lvl+0x16c/0x1f0 [ 373.398246][T15626] should_fail_ex+0x512/0x640 [ 373.398261][T15626] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 373.398274][T15626] should_failslab+0xc2/0x120 [ 373.398287][T15626] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 373.398298][T15626] ? __alloc_skb+0x2b2/0x380 [ 373.398311][T15626] __alloc_skb+0x2b2/0x380 [ 373.398321][T15626] ? __pfx___alloc_skb+0x10/0x10 [ 373.398333][T15626] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 373.398353][T15626] netlink_alloc_large_skb+0x69/0x130 [ 373.398366][T15626] netlink_sendmsg+0x6a1/0xdd0 [ 373.398380][T15626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.398393][T15626] ? __import_iovec+0x1c8/0x660 [ 373.398412][T15626] ____sys_sendmsg+0xa95/0xc70 [ 373.398427][T15626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.398440][T15626] ? get_compat_msghdr+0x11a/0x170 [ 373.398458][T15626] ___sys_sendmsg+0x134/0x1d0 [ 373.398470][T15626] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.398499][T15626] __sys_sendmsg+0x16d/0x220 [ 373.398510][T15626] ? __pfx___sys_sendmsg+0x10/0x10 [ 373.398527][T15626] ? rcu_is_watching+0x12/0xc0 [ 373.398539][T15626] __do_fast_syscall_32+0x73/0x120 [ 373.398554][T15626] do_fast_syscall_32+0x32/0x80 [ 373.398568][T15626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 373.398580][T15626] RIP: 0023:0xf7f87579 [ 373.398589][T15626] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 373.398599][T15626] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 373.398608][T15626] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 373.398615][T15626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 373.398620][T15626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 373.398626][T15626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 373.398632][T15626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 373.398645][T15626] [ 373.499278][T15629] __nla_validate_parse: 4 callbacks suppressed [ 373.499289][T15629] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2873'. [ 373.503969][T15624] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 373.619013][T15640] netlink: 'syz.7.2876': attribute type 10 has an invalid length. [ 373.623873][T15640] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 373.860602][T15652] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 373.918808][T15655] bond2: (slave macvlan2): Releasing backup interface [ 373.922562][T15655] bond0: left promiscuous mode [ 374.231435][T15663] syz.9.2883: attempt to access beyond end of device [ 374.231435][T15663] loop9: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 374.236049][T15663] hfsplus: unable to find HFS+ superblock [ 374.663642][T15669] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2886'. [ 374.668878][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2886'. [ 374.669186][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2885'. [ 374.680997][T15671] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.685425][T15671] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 374.744371][T15671] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.747720][T15671] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 374.892372][T15671] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.895564][T15671] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 374.961047][T15671] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.965448][T15671] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 375.039665][T15671] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 375.043932][T15671] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.053482][T15671] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 375.056239][T15671] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.063072][T15671] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 375.065072][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2893'. [ 375.065800][T15671] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.068805][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2893'. [ 375.075877][T15671] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 375.080119][T15671] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.086132][T15693] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.088833][T15693] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.091467][T15693] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.094278][T15693] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.329760][T15709] wg1: entered promiscuous mode [ 375.331731][T15709] wg1: entered allmulticast mode [ 375.452905][T15701] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 375.674802][T15724] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2904'. [ 375.772052][ T1152] Bluetooth: hci2: Frame reassembly failed (-84) [ 375.831710][T15731] input: syz1 as /devices/virtual/input/input35 [ 376.107962][T15738] syz.7.2908: attempt to access beyond end of device [ 376.107962][T15738] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 376.114938][T15738] hfsplus: unable to find HFS+ superblock [ 377.384441][T15768] ip6tnl1: entered promiscuous mode [ 377.386223][T15768] ip6tnl1: entered allmulticast mode [ 377.389976][T15768] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 377.501894][T15775] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 377.991059][ T5945] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 378.037689][T15779] netlink: 'syz.9.2920': attribute type 32 has an invalid length. [ 378.040289][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2920'. [ 378.043416][T15779] netlink: 'syz.9.2920': attribute type 32 has an invalid length. [ 378.090726][T15785] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2923'. [ 378.142260][T15789] Cannot find add_set index 1 as target [ 378.453409][T15793] ip6tnl1: entered promiscuous mode [ 378.455847][T15793] ip6tnl1: entered allmulticast mode [ 378.465593][T15793] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 378.745644][T15800] exFAT-fs (nullb0): invalid boot record signature [ 378.747888][T15800] exFAT-fs (nullb0): failed to read boot sector [ 378.752265][T15800] exFAT-fs (nullb0): failed to recognize exfat type [ 378.934834][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.986435][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2928'. [ 379.240687][T15812] gtp0: entered promiscuous mode [ 379.242479][T15812] gtp0: entered allmulticast mode [ 379.273906][ T5945] Bluetooth: hci1: command 0x0405 tx timeout [ 379.479467][T15832] syz.8.2940: attempt to access beyond end of device [ 379.479467][T15832] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 379.483793][T15832] hfsplus: unable to find HFS+ superblock [ 379.643826][T15833] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 379.696790][T15835] wireguard0: entered promiscuous mode [ 379.698798][T15835] wireguard0: entered allmulticast mode [ 381.007799][T15884] syz.9.2958: attempt to access beyond end of device [ 381.007799][T15884] loop9: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 381.012102][T15884] hfsplus: unable to find HFS+ superblock [ 381.106837][T15886] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 381.231265][T15892] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 381.297552][T15892] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 381.368382][T15892] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 381.483482][T15892] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 381.522545][T15895] openvswitch: : Dropping previously announced user features [ 381.575726][T15892] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 381.591660][T15892] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 381.599476][T15892] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 381.606862][T15892] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 381.976400][T15913] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2967'. [ 382.402192][T15950] FAULT_INJECTION: forcing a failure. [ 382.402192][T15950] name failslab, interval 1, probability 0, space 0, times 0 [ 382.408118][T15950] CPU: 2 UID: 0 PID: 15950 Comm: syz.9.2980 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 382.408133][T15950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 382.408139][T15950] Call Trace: [ 382.408143][T15950] [ 382.408148][T15950] dump_stack_lvl+0x16c/0x1f0 [ 382.408166][T15950] should_fail_ex+0x512/0x640 [ 382.408183][T15950] should_failslab+0xc2/0x120 [ 382.408195][T15950] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 382.408207][T15950] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 382.408220][T15950] ? __alloc_skb+0x2b2/0x380 [ 382.408234][T15950] __alloc_skb+0x2b2/0x380 [ 382.408244][T15950] ? __pfx___alloc_skb+0x10/0x10 [ 382.408260][T15950] wireless_send_event+0x3bd/0xc50 [ 382.408278][T15950] ? __pfx_wireless_send_event+0x10/0x10 [ 382.408291][T15950] ? trace_kmalloc+0x2b/0xd0 [ 382.408308][T15950] ioctl_standard_iw_point+0x6a8/0xca0 [ 382.408324][T15950] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 382.408338][T15950] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 382.408352][T15950] ? __pfx___might_resched+0x10/0x10 [ 382.408364][T15950] ? rcu_is_watching+0x12/0xc0 [ 382.408373][T15950] ? trace_contention_end+0xdd/0x130 [ 382.408387][T15950] ? __mutex_lock+0x1ca/0xb90 [ 382.408403][T15950] compat_standard_call+0x20d/0x350 [ 382.408417][T15950] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 382.408431][T15950] ? __pfx_compat_standard_call+0x10/0x10 [ 382.408444][T15950] ? full_name_hash+0xbc/0x110 [ 382.408457][T15950] ? netdev_name_node_lookup+0x127/0x180 [ 382.408468][T15950] ? __pfx_compat_standard_call+0x10/0x10 [ 382.408481][T15950] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 382.408494][T15950] wireless_process_ioctl.constprop.0+0x28e/0x3d0 [ 382.408511][T15950] compat_wext_handle_ioctl+0x284/0x310 [ 382.408530][T15950] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 382.408553][T15950] compat_sock_ioctl+0x320/0x730 [ 382.408569][T15950] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 382.408586][T15950] ? __fget_files+0x20e/0x3c0 [ 382.408601][T15950] ? fput+0x20/0xf0 [ 382.408617][T15950] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 382.408641][T15950] __ia32_compat_sys_ioctl+0x24c/0x360 [ 382.408658][T15950] __do_fast_syscall_32+0x73/0x120 [ 382.408673][T15950] do_fast_syscall_32+0x32/0x80 [ 382.408687][T15950] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 382.408700][T15950] RIP: 0023:0xf70ee579 [ 382.408708][T15950] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 382.408718][T15950] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 382.408728][T15950] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b2a [ 382.408734][T15950] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.408740][T15950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.408745][T15950] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 382.408751][T15950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.408764][T15950] [ 382.515186][ C2] vkms_vblank_simulate: vblank timer overrun [ 382.525479][T15934] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 382.767562][T15955] delete_channel: no stack [ 382.943925][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 382.946028][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 383.218964][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 383.221566][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 383.599828][T15978] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2986'. [ 383.764233][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 383.766313][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 383.827107][T15967] ceph: No mds server is up or the cluster is laggy [ 384.099635][T15991] ip6tnl1: entered promiscuous mode [ 384.101432][T15991] ip6tnl1: entered allmulticast mode [ 384.103775][T15991] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 384.526167][T16001] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 384.575634][T16006] syz.9.2994: attempt to access beyond end of device [ 384.575634][T16006] loop9: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 384.580353][T16006] hfsplus: unable to find HFS+ superblock [ 384.804259][T12348] libceph: connect (1)[c::]:6789 error -22 [ 384.806267][T12348] libceph: mon0 (1)[c::]:6789 connect error [ 385.080137][T12348] libceph: connect (1)[c::]:6789 error -22 [ 385.082171][T12348] libceph: mon0 (1)[c::]:6789 connect error [ 385.199566][T16029] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3001'. [ 385.314867][T16035] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3005'. [ 385.583573][T16012] ceph: No mds server is up or the cluster is laggy [ 385.691957][T16040] overlayfs: conflicting lowerdir path [ 385.958289][T16048] netlink: 'syz.7.3007': attribute type 10 has an invalid length. [ 386.347900][T16052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 386.364193][ T29] lo speed is unknown, defaulting to 1000 [ 386.394266][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3011'. [ 386.397284][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3011'. [ 386.673041][T16057] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3012'. [ 386.735722][T16061] netlink: 'syz.7.3014': attribute type 3 has an invalid length. [ 386.738592][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3014'. [ 386.766157][T16065] AppArmor: change_hat: Invalid input '0x' [ 387.093935][T16076] delete_channel: no stack [ 387.126545][T16083] team_slave_1: entered promiscuous mode [ 387.128426][T16083] team_slave_1: entered allmulticast mode [ 387.134433][T16083] new mount options do not match the existing superblock, will be ignored [ 387.139558][T16083] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3022'. [ 387.327507][T16091] FAULT_INJECTION: forcing a failure. [ 387.327507][T16091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.334622][T16091] CPU: 3 UID: 0 PID: 16091 Comm: syz.6.3024 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 387.334638][T16091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 387.334644][T16091] Call Trace: [ 387.334648][T16091] [ 387.334653][T16091] dump_stack_lvl+0x16c/0x1f0 [ 387.334670][T16091] should_fail_ex+0x512/0x640 [ 387.334687][T16091] _copy_from_user+0x2e/0xd0 [ 387.334702][T16091] v4l2_compat_get_array_args+0x55c/0x760 [ 387.334717][T16091] ? __pfx_v4l2_compat_get_array_args+0x10/0x10 [ 387.334729][T16091] ? rcu_is_watching+0x12/0xc0 [ 387.334739][T16091] ? trace_kmalloc+0x2b/0xd0 [ 387.334752][T16091] ? __kvmalloc_node_noprof+0x296/0x600 [ 387.334762][T16091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 387.334775][T16091] ? video_usercopy+0x9c3/0x1440 [ 387.334790][T16091] video_usercopy+0xc2d/0x1440 [ 387.334804][T16091] ? __pfx___video_do_ioctl+0x10/0x10 [ 387.334817][T16091] ? __pfx_video_usercopy+0x10/0x10 [ 387.334834][T16091] ? hook_file_ioctl_common+0x145/0x410 [ 387.334851][T16091] v4l2_ioctl+0x1ba/0x250 [ 387.334861][T16091] ? fput+0x21/0xf0 [ 387.334875][T16091] v4l2_compat_ioctl32+0x214/0x2c0 [ 387.334886][T16091] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 387.334897][T16091] __ia32_compat_sys_ioctl+0x24c/0x360 [ 387.334912][T16091] __do_fast_syscall_32+0x73/0x120 [ 387.334931][T16091] do_fast_syscall_32+0x32/0x80 [ 387.334950][T16091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 387.334962][T16091] RIP: 0023:0xf706e579 [ 387.334970][T16091] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 387.334980][T16091] RSP: 002b:00000000f503d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 387.334990][T16091] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c0185649 [ 387.334996][T16091] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 387.335002][T16091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 387.335008][T16091] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 387.335013][T16091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 387.335026][T16091] [ 387.849218][T16103] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 388.403897][ T29] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 388.564128][ T29] usb 13-1: device descriptor read/64, error -71 [ 389.173519][ T29] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 389.343162][ T29] usb 13-1: device descriptor read/64, error -71 [ 389.462541][ T29] usb usb13-port1: attempt power cycle [ 389.857650][ T29] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 389.879750][ T29] usb 13-1: device descriptor read/8, error -71 [ 389.984381][T16151] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.3041'. [ 389.987632][T16151] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3041'. [ 390.135577][ T29] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 390.160577][ T29] usb 13-1: device descriptor read/8, error -71 [ 390.285453][ T29] usb usb13-port1: unable to enumerate USB device [ 390.386014][T16160] openvswitch: netlink: Actions may not be safe on all matching packets [ 390.511544][T16164] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 391.697172][T16197] netlink: 136 bytes leftover after parsing attributes in process `syz.9.3055'. [ 391.700186][T16197] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 391.995217][T16218] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 392.343203][T16223] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 392.353970][T16223] cramfs: wrong magic [ 392.714641][T16217] ================================================================== [ 392.717345][T16217] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x132/0x320 [ 392.719834][T16217] Write of size 4064 at addr ffffc90007167020 by task syz.8.3060/16217 [ 392.723896][T16217] [ 392.725353][T16217] CPU: 0 UID: 0 PID: 16217 Comm: syz.8.3060 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 392.725372][T16217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 392.725381][T16217] Call Trace: [ 392.725386][T16217] [ 392.725392][T16217] dump_stack_lvl+0x116/0x1f0 [ 392.725415][T16217] print_report+0xc3/0x670 [ 392.725433][T16217] ? __virt_addr_valid+0x5e/0x590 [ 392.725455][T16217] ? vrealloc_noprof+0x132/0x320 [ 392.725468][T16217] kasan_report+0xe0/0x110 [ 392.725486][T16217] ? vrealloc_noprof+0x132/0x320 [ 392.725504][T16217] kasan_check_range+0xef/0x1a0 [ 392.725526][T16217] __asan_memset+0x23/0x50 [ 392.725550][T16217] vrealloc_noprof+0x132/0x320 [ 392.725564][T16217] push_insn_history+0x2ae/0x6c0 [ 392.725583][T16217] do_check_common+0xbd3/0xc2a0 [ 392.725611][T16217] ? __pfx_do_check_common+0x10/0x10 [ 392.725629][T16217] ? __pfx_mark_fastcall_pattern_for_call+0x10/0x10 [ 392.725656][T16217] ? kfree+0x2b6/0x4d0 [ 392.725670][T16217] ? bpf_check+0x6c86/0xb460 [ 392.725686][T16217] ? bpf_check+0x7b2f/0xb460 [ 392.725706][T16217] bpf_check+0x7f51/0xb460 [ 392.725733][T16217] ? __pfx_bpf_check+0x10/0x10 [ 392.725750][T16217] ? pcpu_alloc_noprof+0x949/0x1470 [ 392.725773][T16217] ? __lock_acquire+0xaa4/0x1ba0 [ 392.725804][T16217] ? find_held_lock+0x2b/0x80 [ 392.725823][T16217] ? __asan_memset+0x23/0x50 [ 392.725848][T16217] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 392.725871][T16217] bpf_prog_load+0xe41/0x2490 [ 392.725895][T16217] ? __pfx_bpf_prog_load+0x10/0x10 [ 392.725917][T16217] ? __pfx___futex_wait+0x10/0x10 [ 392.725950][T16217] ? bpf_lsm_bpf+0x9/0x10 [ 392.725968][T16217] __sys_bpf+0x433c/0x4d80 [ 392.725993][T16217] ? __pfx___sys_bpf+0x10/0x10 [ 392.726017][T16217] ? __lock_acquire+0xaa4/0x1ba0 [ 392.726040][T16217] ? do_futex+0x122/0x350 [ 392.726058][T16217] ? __pfx_do_futex+0x10/0x10 [ 392.726082][T16217] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 392.726103][T16217] ? rcu_is_watching+0x12/0xc0 [ 392.726121][T16217] __ia32_sys_bpf+0x76/0xe0 [ 392.726146][T16217] __do_fast_syscall_32+0x73/0x120 [ 392.726172][T16217] do_fast_syscall_32+0x32/0x80 [ 392.726196][T16217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 392.726217][T16217] RIP: 0023:0xf7f98579 [ 392.726237][T16217] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 392.726252][T16217] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 392.726268][T16217] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000700 [ 392.726279][T16217] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.726289][T16217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 392.726299][T16217] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 392.726309][T16217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 392.726324][T16217] [ 392.726330][T16217] [ 392.823864][T16217] The buggy address belongs to the virtual mapping at [ 392.823864][T16217] [ffffc900070e7000, ffffc90007169000) created by: [ 392.823864][T16217] kvrealloc_noprof+0x7d/0xd0 [ 392.829284][T16217] [ 392.830078][T16217] The buggy address belongs to the physical page: [ 392.832166][T16217] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffffffff00000000 pfn:0x6dc3f [ 392.835331][T16217] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 392.837589][T16217] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 392.840237][T16217] raw: ffffffff00000000 0000000000000000 00000001ffffffff 0000000000000000 [ 392.842957][T16217] page dumped because: kasan: bad access detected [ 392.845258][T16217] page_owner tracks the page as allocated [ 392.847093][T16217] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 16217, tgid 16216 (syz.8.3060), ts 392714405667, free_ts 388137187139 [ 392.852601][T16217] post_alloc_hook+0x181/0x1b0 [ 392.854204][T16217] get_page_from_freelist+0x135c/0x3920 [ 392.856014][T16217] __alloc_frozen_pages_noprof+0x5a8/0x23a0 [ 392.857950][T16217] alloc_pages_mpol+0x1fb/0x550 [ 392.859567][T16217] alloc_pages_noprof+0x131/0x390 [ 392.861250][T16217] __vmalloc_node_range_noprof+0x732/0x1540 [ 392.863186][T16217] __kvmalloc_node_noprof+0x2ff/0x600 [ 392.865055][T16217] kvrealloc_noprof+0x7d/0xd0 [ 392.866659][T16217] push_insn_history+0x2ae/0x6c0 [ 392.868305][T16217] check_mem_access+0x3edc/0x5fb0 [ 392.869958][T16217] check_store_reg+0x2ef/0x470 [ 392.871540][T16217] do_check_common+0x4618/0xc2a0 [ 392.873181][T16217] bpf_check+0x7f51/0xb460 [ 392.874676][T16217] bpf_prog_load+0xe41/0x2490 [ 392.876328][T16217] __sys_bpf+0x433c/0x4d80 [ 392.877804][T16217] __ia32_sys_bpf+0x76/0xe0 [ 392.879305][T16217] page last free pid 33 tgid 33 stack trace: [ 392.881270][T16217] __free_frozen_pages+0x69d/0xff0 [ 392.882936][T16217] tlb_remove_table_rcu+0x116/0x1a0 [ 392.884639][T16217] rcu_core+0x799/0x14e0 [ 392.886100][T16217] handle_softirqs+0x216/0x8e0 [ 392.887684][T16217] run_ksoftirqd+0x3a/0x60 [ 392.889142][T16217] smpboot_thread_fn+0x3f4/0xae0 [ 392.890768][T16217] kthread+0x3c2/0x780 [ 392.892123][T16217] ret_from_fork+0x45/0x80 [ 392.893598][T16217] ret_from_fork_asm+0x1a/0x30 [ 392.895176][T16217] [ 392.896012][T16217] Memory state around the buggy address: [ 392.897876][T16217] ffffc90007166f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.900600][T16217] ffffc90007166f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.903188][T16217] >ffffc90007167000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 392.905779][T16217] ^ [ 392.907565][T16217] ffffc90007167080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 392.910865][T16217] ffffc90007167100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 392.914096][T16217] ================================================================== [ 392.923029][T16217] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 392.925450][T16217] CPU: 0 UID: 0 PID: 16217 Comm: syz.8.3060 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 392.929288][T16217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 392.932744][T16217] Call Trace: [ 392.933865][T16217] [ 392.934865][T16217] dump_stack_lvl+0x3d/0x1f0 [ 392.936404][T16217] panic+0x71c/0x800 [ 392.937694][T16217] ? __pfx_panic+0x10/0x10 [ 392.939151][T16217] ? rcu_is_watching+0x12/0xc0 [ 392.940735][T16217] ? preempt_schedule_thunk+0x16/0x30 [ 392.942514][T16217] ? vrealloc_noprof+0x132/0x320 [ 392.944140][T16217] ? preempt_schedule_common+0x44/0xc0 [ 392.945915][T16217] ? vrealloc_noprof+0x132/0x320 [ 392.947538][T16217] check_panic_on_warn+0xab/0xb0 [ 392.949175][T16217] end_report+0x107/0x170 [ 392.950604][T16217] kasan_report+0xee/0x110 [ 392.952061][T16217] ? vrealloc_noprof+0x132/0x320 [ 392.953697][T16217] kasan_check_range+0xef/0x1a0 [ 392.955295][T16217] __asan_memset+0x23/0x50 [ 392.956738][T16217] vrealloc_noprof+0x132/0x320 [ 392.958305][T16217] push_insn_history+0x2ae/0x6c0 [ 392.959931][T16217] do_check_common+0xbd3/0xc2a0 [ 392.961555][T16217] ? __pfx_do_check_common+0x10/0x10 [ 392.963289][T16217] ? __pfx_mark_fastcall_pattern_for_call+0x10/0x10 [ 392.965435][T16217] ? kfree+0x2b6/0x4d0 [ 392.966765][T16217] ? bpf_check+0x6c86/0xb460 [ 392.968282][T16217] ? bpf_check+0x7b2f/0xb460 [ 392.969783][T16217] bpf_check+0x7f51/0xb460 [ 392.971246][T16217] ? __pfx_bpf_check+0x10/0x10 [ 392.972817][T16217] ? pcpu_alloc_noprof+0x949/0x1470 [ 392.974518][T16217] ? __lock_acquire+0xaa4/0x1ba0 [ 392.976150][T16217] ? find_held_lock+0x2b/0x80 [ 392.977685][T16217] ? __asan_memset+0x23/0x50 [ 392.979215][T16217] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 392.980885][T16217] bpf_prog_load+0xe41/0x2490 [ 392.982452][T16217] ? __pfx_bpf_prog_load+0x10/0x10 [ 392.984116][T16217] ? __pfx___futex_wait+0x10/0x10 [ 392.985765][T16217] ? bpf_lsm_bpf+0x9/0x10 [ 392.987179][T16217] __sys_bpf+0x433c/0x4d80 [ 392.988648][T16217] ? __pfx___sys_bpf+0x10/0x10 [ 392.990200][T16217] ? __lock_acquire+0xaa4/0x1ba0 [ 392.991816][T16217] ? do_futex+0x122/0x350 [ 392.993241][T16217] ? __pfx_do_futex+0x10/0x10 [ 392.994792][T16217] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 392.996804][T16217] ? rcu_is_watching+0x12/0xc0 [ 392.998387][T16217] __ia32_sys_bpf+0x76/0xe0 [ 392.999893][T16217] __do_fast_syscall_32+0x73/0x120 [ 393.001597][T16217] do_fast_syscall_32+0x32/0x80 [ 393.003209][T16217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 393.005280][T16217] RIP: 0023:0xf7f98579 [ 393.006613][T16217] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 393.012696][T16217] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 393.015374][T16217] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000700 [ 393.017914][T16217] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.020467][T16217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 393.023006][T16217] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 393.025541][T16217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.028095][T16217] [ 393.029665][T16217] Kernel Offset: disabled [ 393.031078][T16217] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:42:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c2175 RDI=ffffffff9addfbc0 RBP=ffffffff9addfb80 RSP=ffffc90006706f00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000074697257 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9addfb80 R15=ffffffff854c2110 RIP=ffffffff854c219f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977ec000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7387038 CR3=0000000013315000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff888073949048 RCX=ffffffff82273f9e RDX=0000000000000000 RSI=ffffffff8bf46be0 RDI=ffffffff8dce4d08 RBP=ffff88807ffd6400 RSP=ffffc90006c5f358 R8 =0000000000000000 R9 =fffffbfff210a462 R10=ffffffff90852317 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000017 R14=ffff8880258d6000 R15=0000000000000000 RIP=ffffffff82276be5 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f4bf9da4 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90002f5f328 RCX=0000000000000192 RDX=ffff8880235ca440 RSI=0000000000000800 RDI=0000000000000005 RBP=0000000000000004 RSP=ffffc90002f5f120 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000004 R13=0000000000000800 R14=0000000000000650 R15=0000000000000650 RIP=ffffffff84d426ed RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f297eab3d00 ffffffff 00c00000 GS =0000 ffff8880979ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564304e1d000 CR3=000000004dd1e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=4c06e71b4c06e71b 4c06e71b4c06e71b 4c06e71b4c06e71b 4c06e71b4c06e71b 4c06e71b4c06e71b 4c06e71b4c06e71b 4c06e71b4c06e71b 4c06e71b4c06e71b ZMM22=33d5ba1d33d5ba1d 33d5ba1d33d5ba1d 33d5ba1d33d5ba1d 33d5ba1d33d5ba1d 33d5ba1d33d5ba1d 33d5ba1d33d5ba1d 33d5ba1d33d5ba1d 33d5ba1d33d5ba1d ZMM23=b664dd34b664dd34 b664dd34b664dd34 b664dd34b664dd34 b664dd34b664dd34 b664dd34b664dd34 b664dd34b664dd34 b664dd34b664dd34 b664dd34b664dd34 ZMM24=3a9cd43e3a9cd43e 3a9cd43e3a9cd43e 3a9cd43e3a9cd43e 3a9cd43e3a9cd43e 3a9cd43e3a9cd43e 3a9cd43e3a9cd43e 3a9cd43e3a9cd43e 3a9cd43e3a9cd43e ZMM25=69ce9c1a69ce9c1a 69ce9c1a69ce9c1a 69ce9c1a69ce9c1a 69ce9c1a69ce9c1a 69ce9c1a69ce9c1a 69ce9c1a69ce9c1a 69ce9c1a69ce9c1a 69ce9c1a69ce9c1a ZMM26=dd961f4cdd961f4c dd961f4cdd961f4c dd961f4cdd961f4c dd961f4cdd961f4c dd961f4cdd961f4c dd961f4cdd961f4c dd961f4cdd961f4c dd961f4cdd961f4c ZMM27=7477f29a7477f29a 7477f29a7477f29a 7477f29a7477f29a 7477f29a7477f29a 7477f29a7477f29a 7477f29a7477f29a 7477f29a7477f29a 7477f29a7477f29a ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2211000022110000 2211000022110000 2211000022110000 2211000022110000 2211000022110000 2211000022110000 2211000022110000 2211000022110000 info registers vcpu 3 CPU#3 RAX=ffffc90000415000 RBX=ffff888044f70400 RCX=ffffffff819bc497 RDX=1ffff110089ee006 RSI=ffffffff865189b4 RDI=ffff888044f70030 RBP=0000000000000001 RSP=ffffc900005e8ea8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc90000415008 R13=ffff888044f70028 R14=ffff8880253d5000 R15=0000000000000000 RIP=ffffffff86518a02 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097aec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2bf1ed CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 698cf93a8655304b 02de2352e2d6676d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f23a1b1fb1306aa 24301285d0ba681a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6742f25b68dfb88a 4e736ff9bc26de70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 298a819c4b4a0be7 7c62c54ce0ade304 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000da00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000800100 ef23699600800100 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ee000000ee 000000ee00800100 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef226004000000ee 00800100ef1bb970 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000eeef257372 ef247a38000000ee ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 79898b448f3da372 ada81bc787f9ddf1 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 51a65d861394a7ba 28d5c99aa1e1fe54 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000