last executing test programs: 4m2.087058463s ago: executing program 32 (id=120): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000340)) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000340)) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x100000001) (async) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x100000001) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000380)={0xfffffffffffff001, 0x2000}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000380)={0xfffffffffffff001, 0x2000}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x4410, &(0x7f0000000180)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_off}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x488002, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7}, 0x0) sched_setaffinity(0x0, 0xffffffffffffffbb, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0xffffffffffffffbb, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x4040) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x4040) writev(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x8, 0x89845e5b11591684) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'gre0\x00'}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYRES32=r4, @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2m11.309920316s ago: executing program 33 (id=790): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x3}, 'syz1\x00', 0x52}) ioctl$UI_DEV_CREATE(r0, 0x5501) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @loopback}}) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000048000000030a01020000000000000000010000000900030073797a32000000001c0004800800024000000000080001400000000508000140000000020900010073797a31000040004c000000050a01010000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xdc}}, 0x0) r12 = syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0) readv(r12, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1) 2m5.590932207s ago: executing program 0 (id=813): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0xac, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x98, 0x1, [@m_ct={0x94, 0xb, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x1ff}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e676ce1a91d1ed1211b456a99b6294c7"}]}, {0x46, 0x6, "63571f949496b26900c4e5ccf38b213c50acfaf282bc366a8fede9c7695af61557ec9f83f05c5d37cd6e6651ece8339ddaf06b373c6a8fc26d7f6e54098c2af23598"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x483, &(0x7f0000000200)={0x20000000000084, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1, 'dh\x00', 0x20}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m5.261591875s ago: executing program 0 (id=815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'vlan0\x00', 0x0}) socket(0x2a, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b2", 0x1}, {&(0x7f00000008c0)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='8', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f0000000540)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000000100)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000200)="01", 0x1}, {&(0x7f0000000140)="87", 0x1}, {&(0x7f0000000440)}, {&(0x7f00000002c0)='y', 0x1}, {&(0x7f0000000300)="04", 0x1}], 0x9}}, {{&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000280)="30d94c942a5413c4d28102405bc02563ee5813acf5968aba91814e1a227522cb6215045b3c7b9333", 0x28}, {&(0x7f00000004c0)="14fcd5db4823670a6b5b95a940668f6f0f7c0ffc9e84403d437b56dae5c62e06e43312c9954e1fd1d41d20e228ae0f88399c118d611ca39e0c8a663c1c15f36170905b5ddd8e6549cd14288206732db8ff8ab4742f73", 0x56}, {&(0x7f0000000580)="9e76171a8cc5c2415e290985725feff9639135cfd262b78a64a0a05a0169c89ac4ad9f6472bf7664ca08b5607e85111a069e1ced92ee7d370df134bcd2c70dbc895387cec7b9b6450730a2c42b22420119edf9d263e310fb5fa1b4cb8c55656216a5a77d43f14a5a78b0969db484a1", 0x6f}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000700)="393969b0d97663b1f0939e9762eb22185213155bcaa512175caeca2f6513433f87094e49e5d7b99456666dcfb3f7fe23795fb1f8265ae46a0b3fc96c50b19ba19cab03db1e3bcf24bdcda23f04cf44e123bd3357bc1ced48169dee7f57febe98c34ced2413bd78189e3f76e161be7a05a8227abec09cfb188411b088648271208c2a63da6b3d820ceb4fee99457b9064a2e1a79e6eb10032bbc5ea456bff5f86cb2d9ee49a6459068d691a8891269212ade8a3730d8f7270e8e212b294016fe986c23f656426038084e95527c063d5d0431004e4446c1e8a5384afe6287eb787", 0xe0}], 0x5, &(0x7f0000000800)=[@ip_ttl={{0x10, 0x0, 0x2, 0xbd}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x65}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x42c2}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x80}}, @ip_ttl={{0x10, 0x0, 0x2, 0xfff}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x2}}], 0xa8}}], 0x4, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[], 0x48}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2m5.205109845s ago: executing program 34 (id=815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'vlan0\x00', 0x0}) socket(0x2a, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b2", 0x1}, {&(0x7f00000008c0)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='8', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f0000000540)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000000100)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000200)="01", 0x1}, {&(0x7f0000000140)="87", 0x1}, {&(0x7f0000000440)}, {&(0x7f00000002c0)='y', 0x1}, {&(0x7f0000000300)="04", 0x1}], 0x9}}, {{&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000280)="30d94c942a5413c4d28102405bc02563ee5813acf5968aba91814e1a227522cb6215045b3c7b9333", 0x28}, {&(0x7f00000004c0)="14fcd5db4823670a6b5b95a940668f6f0f7c0ffc9e84403d437b56dae5c62e06e43312c9954e1fd1d41d20e228ae0f88399c118d611ca39e0c8a663c1c15f36170905b5ddd8e6549cd14288206732db8ff8ab4742f73", 0x56}, {&(0x7f0000000580)="9e76171a8cc5c2415e290985725feff9639135cfd262b78a64a0a05a0169c89ac4ad9f6472bf7664ca08b5607e85111a069e1ced92ee7d370df134bcd2c70dbc895387cec7b9b6450730a2c42b22420119edf9d263e310fb5fa1b4cb8c55656216a5a77d43f14a5a78b0969db484a1", 0x6f}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000700)="393969b0d97663b1f0939e9762eb22185213155bcaa512175caeca2f6513433f87094e49e5d7b99456666dcfb3f7fe23795fb1f8265ae46a0b3fc96c50b19ba19cab03db1e3bcf24bdcda23f04cf44e123bd3357bc1ced48169dee7f57febe98c34ced2413bd78189e3f76e161be7a05a8227abec09cfb188411b088648271208c2a63da6b3d820ceb4fee99457b9064a2e1a79e6eb10032bbc5ea456bff5f86cb2d9ee49a6459068d691a8891269212ade8a3730d8f7270e8e212b294016fe986c23f656426038084e95527c063d5d0431004e4446c1e8a5384afe6287eb787", 0xe0}], 0x5, &(0x7f0000000800)=[@ip_ttl={{0x10, 0x0, 0x2, 0xbd}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x65}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x42c2}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x80}}, @ip_ttl={{0x10, 0x0, 0x2, 0xfff}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x2}}], 0xa8}}], 0x4, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[], 0x48}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1m58.778237719s ago: executing program 35 (id=828): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) mkdir(0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x4, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x40048820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x1e3d50de03aa3d1, &(0x7f0000000180)={0x2}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180000c6329b5b72002000000000000000fcffff7f18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000850000000e0000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) socket$kcm(0x10, 0x2, 0x0) 1m57.50080599s ago: executing program 36 (id=840): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@multicast2}, {@in=@empty, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) ftruncate(0xffffffffffffffff, 0x9) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010100}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1m54.096245013s ago: executing program 37 (id=849): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) epoll_pwait2(r0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0x3, 0x1]}, 0x8) 1m50.646601398s ago: executing program 38 (id=854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) epoll_pwait2(r1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0x3, 0x1]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 1m45.916488487s ago: executing program 39 (id=864): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0xac, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x98, 0x1, [@m_ct={0x94, 0xb, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x1ff}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e676ce1a91d1ed1211b456a99b6294c7"}]}, {0x46, 0x6, "63571f949496b26900c4e5ccf38b213c50acfaf282bc366a8fede9c7695af61557ec9f83f05c5d37cd6e6651ece8339ddaf06b373c6a8fc26d7f6e54098c2af23598"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x483, &(0x7f0000000200)={0x20000000000084, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1, 'dh\x00', 0x20}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m42.281480667s ago: executing program 9 (id=871): unshare(0x62040200) socket(0x840000000002, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x913, &(0x7f0000000300)={0x0, 0x400600, 0x40, 0x1000001, 0xf7fffffc, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x1, 0x0, {0x4}}) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae09, &(0x7f0000000000)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r11 = socket(0x1e, 0x1, 0x0) connect$tipc(r11, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r11, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1}, 0xa46}], 0x1, 0x2102, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x48b}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) write$binfmt_misc(r11, &(0x7f0000000340), 0x2000011a) 1m41.711370525s ago: executing program 40 (id=873): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r4 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x4000000b}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) r6 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r6, &(0x7f0000000000)={0x2a, 0xffffffff, 0x3fff}, 0xc) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0x8, 0x6, {0x4, @struct={0x3, 0x10001}, 0x0, 0x4, 0xc, 0xfffffffffffffff5, 0x0, 0x8000, 0x802, @usage=0x80000001, 0x7, 0x6, [0x80, 0x4, 0x400, 0x80000000, 0x10000, 0xfff8000000000000]}, {0x8000000000000000, @usage=0xffffffff, 0x0, 0x64, 0x1000, 0x0, 0x1, 0x7fffffff, 0x468, @struct={0x2, 0x7fffffff}, 0x7, 0x4, [0x6, 0x21, 0x9f, 0x4, 0xe073, 0xffffffffffff6b14]}, {0x7, @struct={0x800, 0x4}, 0x0, 0x6fd0, 0x2d5, 0x7fff, 0xffffffffffffffff, 0x7f, 0x406, @struct={0xef07, 0x3}, 0x8, 0x10001, [0x1ff, 0x8000, 0x0, 0x8f, 0xcc]}, {0x3, 0x1, 0x4}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000007c0)={0x0, 0x7, 0x8, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000bc0)={0x14, 0x8, {0x56, @struct={0x40, 0x7ff}, r7, 0x2, 0x9, 0x489b5ff, 0x6, 0x3c6d6fb4, 0x8, @usage=0x1, 0x2, 0x6, [0xc1, 0x6, 0x0, 0x0, 0xa, 0x180000000]}, {0x9, @usage=0xa, r8, 0xfffffffffffffff8, 0x2, 0x8000, 0x401, 0x6, 0xc2, @usage=0xb4, 0x5, 0xf37a, [0x1, 0xf8, 0x4, 0x3, 0x800, 0x4]}, {0x401, @usage=0xffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3, 0x2, @usage, 0x10000, 0xffffff00, [0x0, 0x100000000, 0x8, 0x6, 0x9, 0x1400]}, {0x6, 0x7, 0x50}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r9 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200000, 0x30) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000200)={0x100, r10}, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000340)={0x100, r11}, 0x0) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000140)=[{r12, 0x2093}], 0x1, 0x0, 0x0, 0x0) 1m40.960604516s ago: executing program 9 (id=876): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@multicast2}, {@in=@empty, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010100}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1m39.756693863s ago: executing program 9 (id=878): syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) socket(0x2c, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x104, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xf0, 0x1, [@m_ct={0x98, 0xb, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x1ff}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e676ce1a91d1ed1211b456a99b6294c7"}]}, {0x4a, 0x6, "63571f949496b26900c4e5ccf38b213c50acfaf282bc366a8fede9c7695af61557ec9f83f05c5d37cd6e6651ece8339ddaf06b373c6a8fc26d7f6e54098c2af235987c9847f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x54, 0x201b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1}}}]}, {0xf, 0x6, "d8378a6ad864825bb979f5"}, {0xc}, {0xc}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x804}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f071, 0x19}) pipe2(0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x483, &(0x7f0000000200)={0x20000000000084, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1, 'dh\x00', 0x20}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m38.888673731s ago: executing program 7 (id=880): openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004800)=@newtaction={0x18, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x40000) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000500)="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", 0xc00}, {&(0x7f0000001500)="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", 0xe00}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000004780)={{0xf}, 0x0, 0x7, 0x2080002, {0x1}, 0xa, 0x401}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r3, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x22000014) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000440)={0x2, 'netpci0\x00', 0x3}, 0x18) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 1m38.612003898s ago: executing program 9 (id=881): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) getresuid(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000005c0)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x118, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mmap(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, 0x8011, 0xffffffffffffffff, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 1m37.978016615s ago: executing program 7 (id=882): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@multicast2}, {@in=@empty, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) ftruncate(0xffffffffffffffff, 0x9) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1m37.639388748s ago: executing program 9 (id=883): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x3}, 'syz1\x00', 0x52}) ioctl$UI_DEV_CREATE(r0, 0x5501) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @loopback}}) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r8, &(0x7f0000000300), 0x2, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m37.129917506s ago: executing program 9 (id=885): syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000004e80)={0x1b, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x3, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x9d, &(0x7f0000000140)=""/157, 0x41100, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$phonet(0x23, 0x2, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB='\x00'/13, @ANYRESOCT=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b9ae0a5196380486259fc0aafaaded9f3d2e661c696267249ba74e0731162766c0a381a2296c75c5fec8710df439bd519e3e8a5321bc3b00111e90a6eff7579adb370eab72b4cc89a2e0a5e3b52ff39bcaebbe8f25b2fde4a89c6968846d7d51b21fbb243486ed1c406d86feb72995ef613504694b8dce5ecab09894de0ba485707c9c0272487dcc82d372e6f0a9bba869b1c74b"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f00000000c0)=0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) memfd_create(0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x0, 0xe4, 0xe4, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x80000}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) close_range(r1, 0xffffffffffffffff, 0x0) 1m36.810574299s ago: executing program 41 (id=885): syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000004e80)={0x1b, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x3, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x9d, &(0x7f0000000140)=""/157, 0x41100, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$phonet(0x23, 0x2, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB='\x00'/13, @ANYRESOCT=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b9ae0a5196380486259fc0aafaaded9f3d2e661c696267249ba74e0731162766c0a381a2296c75c5fec8710df439bd519e3e8a5321bc3b00111e90a6eff7579adb370eab72b4cc89a2e0a5e3b52ff39bcaebbe8f25b2fde4a89c6968846d7d51b21fbb243486ed1c406d86feb72995ef613504694b8dce5ecab09894de0ba485707c9c0272487dcc82d372e6f0a9bba869b1c74b"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f00000000c0)=0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) memfd_create(0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x0, 0xe4, 0xe4, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x80000}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) close_range(r1, 0xffffffffffffffff, 0x0) 1m36.790105222s ago: executing program 7 (id=887): syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) socket(0x2c, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x104, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xf0, 0x1, [@m_ct={0x98, 0xb, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x1ff}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e676ce1a91d1ed1211b456a99b6294c7"}]}, {0x4a, 0x6, "63571f949496b26900c4e5ccf38b213c50acfaf282bc366a8fede9c7695af61557ec9f83f05c5d37cd6e6651ece8339ddaf06b373c6a8fc26d7f6e54098c2af235987c9847f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x54, 0x201b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1}}}]}, {0xf, 0x6, "d8378a6ad864825bb979f5"}, {0xc}, {0xc}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x804}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f071, 0x19}) pipe2(0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x483, &(0x7f0000000200)={0x20000000000084, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1, 'dh\x00', 0x20}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m35.790890132s ago: executing program 7 (id=889): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) getresuid(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000005c0)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x118, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mmap(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, 0x8011, 0xffffffffffffffff, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 1m35.445414009s ago: executing program 7 (id=890): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) 1m35.110542205s ago: executing program 7 (id=892): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) getresuid(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000005c0)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x118, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$binfmt_script(r5, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 1m35.049648538s ago: executing program 42 (id=892): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) getresuid(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000005c0)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x118, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$binfmt_script(r5, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 1m32.071350982s ago: executing program 0 (id=874): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 1m31.942084625s ago: executing program 0 (id=896): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) getresuid(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000005c0)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x118, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mmap(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, 0x8011, 0xffffffffffffffff, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 1m30.85059636s ago: executing program 0 (id=898): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@multicast2}, {@in=@empty, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) ftruncate(0xffffffffffffffff, 0x9) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1m28.822004387s ago: executing program 0 (id=900): r0 = socket(0x840000000002, 0x3, 0xfa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0x800, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000001a000100ffffff1f00000a0080bab2a2b98d6ccaf5da29558e624787b648aefe2d3db8005efcdff41f95c137075614bddf701aea77b8c35b84b67e9f9224320da90eef9f4340c7762844d64a653d", @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRESHEX=r3], 0x38}, 0x1, 0x0, 0x0, 0x88895}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x1000001, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000090) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 1m28.733034423s ago: executing program 43 (id=900): r0 = socket(0x840000000002, 0x3, 0xfa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0x800, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000001a000100ffffff1f00000a0080bab2a2b98d6ccaf5da29558e624787b648aefe2d3db8005efcdff41f95c137075614bddf701aea77b8c35b84b67e9f9224320da90eef9f4340c7762844d64a653d", @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRESHEX=r3], 0x38}, 0x1, 0x0, 0x0, 0x88895}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x1000001, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000090) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 52.661599245s ago: executing program 4 (id=1032): syz_open_dev$loop(&(0x7f0000000000), 0x8e4a, 0x40480) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x3, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r4}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r5, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x1f4, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_USERDATA={0x48, 0xc, "93aee9a2d9dafe2dcde5a0a3e98ede3633d13488233cdceee15941c97c077e411afeef105694cbbf8ca45734e2f0c7c59ed72125b56082c294eb0a180e5d296676609ebf"}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9b}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x3f, 0xc, "6cda3334b5d13b18ca9ac365bea8ab1b55d80ebfced293609f477b529a93787f768b9968fb9a13d43cd3824667e3b5cb47a51cdc90b95485bb098f"}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7baeae35}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_USERDATA={0xb0, 0xc, "826b62f0b16d1524d60fb5a6c6c14fcebe5e9a4ca4170519e9333f6821473d7d7dbb9042bda1405554a782094796440d0715a4a4a6b4ea1a53d70f1e2aa5989b21b4b92c2fea3713f4ae5ce8501af9271bab9a1ba51aaf7ced99847bfcbec724744e6b974bd713fade479b4534de111e2d8c22e57cb6eed124e294a61088fc767554f1accbef2b587ceb776f8a7e42806dd3efa790303d1d0cc53fbdd30f3010414ca7054805af88e8b95b0f"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r8, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) 51.566592557s ago: executing program 4 (id=1035): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0xd0040, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000240)=""/4096) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000700)=0x80000000) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x8a100) (async) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f00000001c0)={0xa3, 0x0, &(0x7f0000000040)}) 50.721032345s ago: executing program 4 (id=1038): syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) socket(0x2c, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x104, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xf0, 0x1, [@m_ct={0x98, 0xb, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x1ff}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e676ce1a91d1ed1211b456a99b6294c7"}]}, {0x4a, 0x6, "63571f949496b26900c4e5ccf38b213c50acfaf282bc366a8fede9c7695af61557ec9f83f05c5d37cd6e6651ece8339ddaf06b373c6a8fc26d7f6e54098c2af235987c9847f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x54, 0x201b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1}}}]}, {0xf, 0x6, "d8378a6ad864825bb979f5"}, {0xc}, {0xc}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x804}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f071, 0x19}) pipe2(0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x483, &(0x7f0000000200)={0x20000000000084, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1, 'dh\x00', 0x20}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 49.153311228s ago: executing program 4 (id=1044): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x118, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mmap(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, 0x8011, 0xffffffffffffffff, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 48.175214673s ago: executing program 4 (id=1048): socket$inet6(0x10, 0x3, 0x0) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000280)=0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) write$sysctl(r6, &(0x7f0000000180)='4\x00', 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00000174f23de27c91fd5d16ff4f9a7ce35b2e1916ddc709f35d13dd1100bbcb11daf132d000220a11095cc651abc247acaa338a4bb8"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 47.759997801s ago: executing program 4 (id=1051): ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x178, 0x20000810, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$FUSE_INIT(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10) mq_timedsend(0xffffffffffffffff, &(0x7f0000000240)="e3b52d2c11b740e626a34febf85af28f4f8193e6ddaaecc90b16c2605ac4e1ebaccf69f865be56feff8d664375a1da532abb728ea50b283d4d8dc55469b0f2b7096b", 0x42, 0x3, &(0x7f0000000000)) 47.70899061s ago: executing program 44 (id=1051): ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x178, 0x20000810, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$FUSE_INIT(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10) mq_timedsend(0xffffffffffffffff, &(0x7f0000000240)="e3b52d2c11b740e626a34febf85af28f4f8193e6ddaaecc90b16c2605ac4e1ebaccf69f865be56feff8d664375a1da532abb728ea50b283d4d8dc55469b0f2b7096b", 0x42, 0x3, &(0x7f0000000000)) 46.190714236s ago: executing program 3 (id=1065): socket$inet6(0x10, 0x3, 0x0) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000280)=0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) write$sysctl(r6, &(0x7f0000000180)='4\x00', 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00000174f23de27c91fd5d16ff4f9a7ce35b2e1916ddc709f35d13dd1100bbcb11daf132d000220a11095cc651abc247acaa338a4bb8"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 44.996753788s ago: executing program 3 (id=1067): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf) socket$inet6(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vxcan1\x00', &(0x7f00000003c0)=@ethtool_dump={0x3e, 0x7b8c, 0x200, 0xd7, "8de44e4b46fd478bd550407c75d3c1c42d0f6749f3a78fffdd83e2cba5b36d1ceaf1d7be1491344823ec56a1cc58b625654cadde7323f480d7b9af3c098b9834b9d4b9704652c5d284d1a92e2aaf39d3a37c1ebdc44553ce7ee1cfa11abbad44b03ed8d23020164caef9012983740449125676e6a2dd832a3ac7b818840b1c0eac1159b55dbf81c599021dee5134f526df0302beef3c10d8c6c48f8105353bb71747f4a9ed87939b62a3050d4ed01e2f022b8b0b75ed6e4541d5dce0565f6f1e4bd98b812d4b54b0483aabd0c68ee088a8dc7b81e35d24"}}) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r3) unshare(0x20020680) r4 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x1, 0x2000008}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) 44.713902045s ago: executing program 3 (id=1068): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x8, "7949a82a1bd0be9f7ae41957d63c0b09d7f4e92dddaff26e18fefc5f8d3fcaa9", 0x30b9, 0x3e61d5d9, 0x1, 0xb5}, 0x3c) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xfffb, 0xe, 0x6, 0x6}, {0x8, 0xc, 0x2, 0xc31}, {0x3, 0x6, 0xff, 0x8}, {0xc8, 0xc0, 0x0, 0x6}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r6, r6, 0x8, &(0x7f0000000140)={0x24, 0x5, 0xfffffff9}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf253400000008000300", @ANYRES32=r2, @ANYBLOB="14105500d6d25168c42d9e23c3b2ac000600b612eee917d60000000000000000"], 0x3c}}, 0x40010) 44.411221931s ago: executing program 3 (id=1070): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x118, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mmap(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, 0x8011, 0xffffffffffffffff, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 43.723940396s ago: executing program 3 (id=1074): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) signalfd4(r0, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 43.430826407s ago: executing program 3 (id=1076): socket$inet6(0x10, 0x3, 0x0) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000280)=0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}) write$sysctl(r6, &(0x7f0000000180)='4\x00', 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00000174f23de27c91fd5d16ff4f9a7ce35b2e1916ddc709f35d13dd1100bbcb11daf132d000220a11095cc651abc247acaa338a4bb8"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 43.371143508s ago: executing program 45 (id=1076): socket$inet6(0x10, 0x3, 0x0) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000280)=0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}) write$sysctl(r6, &(0x7f0000000180)='4\x00', 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00000174f23de27c91fd5d16ff4f9a7ce35b2e1916ddc709f35d13dd1100bbcb11daf132d000220a11095cc651abc247acaa338a4bb8"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 33.161476235s ago: executing program 1 (id=1098): syz_open_dev$usbfs(&(0x7f0000000040), 0x10, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=ANY=[@ANYRES16=r2, @ANYRES16=r2], 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000d40)={0x3, 0x8, 0x2, {0x2, @raw_data="18dd1a971146e2a41daac67bbd1a3eacb63d6ea49d6e86f89d1e67be3ad76d729d4a2c6b6867140323d97d29d547b08ecafb29a86161f5b29a176ba97e69b2deeb3f5c8dae14ef354a9dc262e81b3239a4a1b8e96999b065b49c878b2ee273405550d730e9499f6620ee5bbd369dde41aacba01e7b124851599d938888bd7865af46099cfca4a103545eee1646b0f8dce2f0bffc8a0810dec9434ab8af518e9e9c7657e31e39a11db658c8f391164c96a97c8480887cc6ae08722296718bfb06f8e2d07493763c38"}, 0x2}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r7 = accept4(r6, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000040)="cb", 0xfffffdef) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000e80)=ANY=[@ANYBLOB="7c2a674e9656e0fb7ed7763bd1a5a89615663d1d51c349c3dace63eba72b44294ec820620512d3fb8651dc2cccc25bc987b626f1b82b4df01a1f45981538a5c92123bd060000000000007f0b6180191f19262fbddc42", @ANYRES16=r2, @ANYBLOB="10002cbd7000fcdbdf25270000000a00340001010101010100000400340004005f0035002a00100121751801008a0dff0f1900c186673790c41b117284c9de546eb98d65120802110000010802110000010802110000010000000c002a00720603030303030306003600020000"], 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x20000800) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff45, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8b29, &(0x7f0000000000)={'wlan0\x00', @remote}) 32.042160562s ago: executing program 1 (id=1100): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x8000000}) write(r1, &(0x7f0000000000)="fc00", 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) splice(r0, 0x0, r3, 0x0, 0x1100000000f336, 0x0) 31.881493769s ago: executing program 1 (id=1102): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ppoll(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0xd, 0x3]}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000500000004000000000d000e04000000000001000000000000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) close(r1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000140001002dbd70000000000008"], 0x18}], 0x1}, 0x0) 30.875019176s ago: executing program 1 (id=1105): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x118, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mmap(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, 0x8011, 0xffffffffffffffff, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 30.783716569s ago: executing program 1 (id=1106): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@multicast2}, {@in=@empty, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) ftruncate(0xffffffffffffffff, 0x9) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010100}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 30.229068606s ago: executing program 1 (id=1108): syz_open_dev$loop(&(0x7f0000000000), 0x8e4a, 0x40480) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x3, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r4}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r5, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r8, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) 30.139715268s ago: executing program 46 (id=1108): syz_open_dev$loop(&(0x7f0000000000), 0x8e4a, 0x40480) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x3, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r4}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r5, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r8, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) 4.140050844s ago: executing program 2 (id=1297): openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x3000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 4.081033929s ago: executing program 2 (id=1301): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) (fail_nth: 1) 3.221161557s ago: executing program 5 (id=1303): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000000400561501b0e10400000000006856240000db66b0685236171010948840"], 0x50) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], 0x1}) pread64(r0, &(0x7f0000000080)=""/237, 0xed, 0x0) 3.221059237s ago: executing program 5 (id=1304): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 3.160715948s ago: executing program 5 (id=1305): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYRES64=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r2}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000003080)=ANY=[@ANYBLOB="800100001000130700000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}}, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000fc0)={0x0, @l2tp={0x2, 0x0, @empty}, @llc={0x1a, 0x30a, 0x4, 0x6, 0x5, 0x8d, @remote}, @nfc={0x27, 0x0, 0x3, 0x6}, 0x9, 0x0, 0x0, 0x0, 0x2400, 0x0, 0xffffffff, 0x2, 0x14cd}) mmap(&(0x7f0000165000/0x2000)=nil, 0x2000, 0x200000a, 0x100010, r1, 0x95c56000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x200, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r12, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002abd7010fff422d67a00000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00002bbd7000fddbdf251d00000008000300", @ANYRES32=r11, @ANYBLOB="0c00238005000800030000000c1e99000200000026000000d6de68a9514822eeca824a7b6272634cd03d6766cc0b0b72f3fd83fa95190df2706a5a52e49e3eb69d5394044802bc1fdbbbaf7e2769d2f6a442365e9467a4b29a59"], 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f80), 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r15, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x80000}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) sendmsg$nl_route_sched(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xa, 0x1000004, 0xfff, 0x8001, 0x0, 0x4, 0x3, 0x4a82, 0x5, 0x100, 0xd, 0x4, 0x809, 0x4, 0x5, 0x6, 0xf17a, 0x6, 0x800080, 0x9, 0x80000001, 0x6e1e28f3, 0x9, 0x101, 0x9, 0x80, 0xad, 0x1, 0x0, 0x80, 0x0, 0x8, 0xfffffffc, 0x171d, 0x40, 0x2, 0x464, 0x40, 0x0, 0x4, 0x2, 0xa0000, 0x5, 0x8, 0x3, 0xffffff96, 0x7, 0xdd10eff, 0x8, 0x6, 0x9c4, 0x100, 0x3, 0x9, 0x5, 0x4ba, 0x8001, 0xd, 0x0, 0x6, 0x4, 0x16d, 0xbb, 0xfffffff5, 0x9, 0x1, 0xacf, 0xa, 0x3, 0x8001, 0x6, 0x2, 0xda9, 0x6, 0xf, 0x9e05, 0x2d1, 0x80000001, 0x5, 0xfff, 0x600, 0x3, 0x0, 0xc76, 0xe2, 0x9, 0xfffffff9, 0x0, 0x0, 0x6, 0x9, 0x5, 0xdbff, 0x5, 0x10, 0x7, 0xe7, 0xfffffffb, 0x8, 0x1, 0x9, 0x0, 0x5, 0x9, 0x3, 0x3, 0x4, 0x3, 0xfffffff9, 0x10000, 0x0, 0x2, 0x80000000, 0x8001, 0x4, 0x52, 0x7b03, 0x6, 0xec00, 0xfffffffb, 0x5, 0x0, 0xb91470fb, 0x3, 0x3, 0x4, 0xa, 0x6d, 0x2, 0x3, 0x8, 0x412e, 0x24, 0xfffffff7, 0x6, 0x9, 0x2, 0x6, 0x0, 0xeaf, 0x75a0, 0x8, 0x5, 0x268, 0x200, 0x1, 0x403, 0x167, 0x9, 0x7, 0x8, 0xf, 0xdf, 0x1, 0xb, 0xa4, 0x5, 0xc6, 0x5b0, 0x9, 0x8, 0x2, 0x4, 0x1ee, 0x8, 0x1, 0xf725, 0x6, 0x6c0, 0x5, 0x1, 0x0, 0x1baac88f, 0x5, 0x400, 0x5, 0xff, 0x3, 0x1ff, 0x4, 0xceb, 0x3, 0xff, 0x5, 0xdc, 0x9, 0xfffffff0, 0x0, 0x800, 0x6, 0x8eb, 0xfffffffc, 0x8, 0x36919bdd, 0x5, 0x2, 0x8, 0x5, 0x81, 0x892c, 0x3, 0x2, 0x7ff, 0xef83, 0x4, 0x80, 0x200, 0xda, 0x0, 0x5, 0xa, 0x80000000, 0x93c, 0x0, 0xa, 0x0, 0x7, 0x7, 0x8, 0xff, 0x3, 0xfaa6, 0x1, 0x1, 0x5, 0x6, 0x1, 0x0, 0x0, 0x8, 0x7f, 0x9710, 0x6, 0x81, 0x2, 0x7, 0x401, 0x9, 0x7, 0x80000000, 0x5, 0x3, 0x6, 0x7ff00000, 0x401, 0xd3d, 0x3, 0x5, 0x200, 0xe, 0x7, 0x3, 0x9, 0x9, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x10001, 0x59e9, 0x5, 0x1ffe, 0x7f, 0x1, 0x1000, 0xffffffff, 0x7, 0x1c00, 0x4, 0x9, 0x16c800, 0xf, 0x1, 0x81, 0x80000000, 0x9, 0xf760, 0x6, 0x2, 0x4, 0x0, 0x101, 0x7, 0x3f, 0x1, 0x655, 0x1, 0x6, 0x7, 0x1, 0xb, 0x7077, 0x10, 0x0, 0x0, 0xffff, 0x200, 0x63a08ec6, 0x800, 0xa373762, 0x9, 0x6, 0x9, 0xffff2cbd, 0x6, 0x6, 0x6, 0xfffffffb, 0x7, 0x8, 0x1, 0xffff, 0x8, 0x7, 0x5, 0x6, 0x5a, 0x1, 0x0, 0x1, 0x3, 0x6, 0x2, 0x5, 0x597, 0x1, 0x1, 0x2, 0x8, 0x400, 0x8, 0x100, 0x6, 0xfffffff7, 0xa, 0x6, 0x401, 0x3, 0x0, 0x5, 0x5, 0x7ff, 0x1, 0x7, 0x2, 0x3ac, 0x3, 0x0, 0xe559, 0xb, 0x7fffffff, 0x39, 0x125e, 0x6, 0x1, 0xc5d5, 0x7, 0xffff051b, 0x1, 0x0, 0x200, 0x8, 0xb5, 0x8001, 0x7, 0x4, 0x3, 0x2, 0xc4a, 0x0, 0xe, 0x5, 0xff, 0x4c18575, 0xe, 0x2, 0x78000, 0x1000, 0x2e, 0x8, 0x6, 0x0, 0x88, 0x401, 0x8, 0xa, 0x94f, 0x3, 0xcf0, 0x22, 0x3, 0x0, 0x9, 0x27a, 0x10, 0x40, 0x3, 0x3, 0x9, 0x7, 0x1800000, 0x7ffffffe, 0x8, 0x2e, 0x10000, 0x5, 0x8, 0x1, 0x8, 0x8, 0xa8, 0xf, 0x4040, 0xfffffffb, 0x0, 0xc14, 0x6, 0xfffffffb, 0x1, 0x0, 0x9, 0x2, 0x8, 0x3, 0x1, 0xb, 0x4, 0x6, 0x3, 0x9, 0x2, 0xfffffe01, 0xa22, 0x7, 0xfffc, 0x6, 0x5c5e, 0x7, 0x4, 0x8, 0x5, 0x5, 0x9, 0x6, 0x3, 0x7, 0x2, 0x5, 0x0, 0x64, 0xb, 0x2, 0x3, 0x5, 0x42a1d4b5, 0x6, 0x4, 0x4, 0x5, 0x0, 0x834f, 0x4, 0x80000000, 0x5, 0x2, 0x101, 0x0, 0xfffffffe, 0xb, 0x8002, 0x8000, 0xfffffffd, 0x6, 0x80000001, 0x7a39f194, 0xcf, 0x5e249f10, 0x6, 0x1, 0x5e1b, 0x6, 0x80000000, 0x3, 0x8, 0x4, 0x6, 0x4cb, 0x3, 0xf0, 0xfffffffd, 0x0, 0x1, 0x8, 0x7, 0x6, 0x2, 0x4, 0xd56, 0xd, 0x275b, 0x9, 0x3ff, 0xfffff292, 0x3, 0x3, 0xffffff80, 0xf, 0xd9, 0x7a, 0x6, 0x7, 0x6, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0xaf9, 0x60, 0x2, {0x6, 0x1, 0x4, 0xffff, 0xa, 0x9}, {0xff, 0x2, 0x3ff, 0x7ff, 0x7c, 0x3}, 0x890a, 0xb8, 0x6}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000580), 0x2, 0x0) 2.106693053s ago: executing program 2 (id=1307): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) close(r0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x6f88, 0x0, 0x9, 0x0, 0x1}, &(0x7f0000000180), 0x0) 2.106290752s ago: executing program 5 (id=1308): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create(0x3) write(r1, &(0x7f0000000000)="fc00", 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 2.104373731s ago: executing program 6 (id=1309): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x2800, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x0, 0x0, 0xfffffff8, 0x5, 0xc, 0x8, 0x8, 0x8}}}}]}, 0x58}}, 0x0) 2.104181208s ago: executing program 2 (id=1310): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3640, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) 2.104046398s ago: executing program 6 (id=1311): mkdir(0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRESDEC=r1, @ANYBLOB="4dbdee087dad247e51f55ba25d4e1f44b42cbf8b2630be6110cce1d17acf718f8afd678c07e3af28e56a6ae10b724a680363376b27c26484ca616163a6a0064c3caa9ce1d72bb1f3de5131aee70955127bdaf55dc9e139a4f716a087da5ac474cc233b9583f5ab735632c84c"]) 1.96123542s ago: executing program 5 (id=1312): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000800)=[{0x0, 0x40, 0x1, 0xd, @time={0x339109e1, 0x62b}, {0x6, 0x91}, {0x3, 0x3}, @note={0x7, 0x2, 0x0, 0x81, 0xc91}}, {0xf, 0x4, 0x1, 0xfe, @time={0xf, 0x4}, {0x0, 0x2}, {0xca, 0x3}, @quote={{0x1, 0x9}, 0x400}}, {0x8, 0x0, 0x6, 0x4, @tick=0x209e, {0x0, 0x7}, {0x1, 0x5}, @connect={{0xa, 0x9}, {0x4}}}, {0x7, 0xe, 0x0, 0xe0, @tick=0x6, {0x4, 0x1a}, {0x80, 0x80}, @result={0xfff, 0xc}}, {0x4, 0xfd, 0x3, 0x2, @tick=0x52adec99, {0x1, 0x5}, {0x3, 0x1}, @time=@time={0x77, 0x146}}, {0x0, 0x4, 0xff, 0xc, @time={0x2, 0x7}, {0x10, 0x9}, {0x7, 0x9}, @quote={{0x80, 0xe}, 0x140, &(0x7f0000000240)={0x8, 0xa, 0x3, 0x1, @tick=0xffffff81, {0x7, 0x1}, {0xda, 0x7}, @time=@tick=0x21bb}}}, {0x8, 0x80, 0x7, 0x10, @tick=0x5, {0xd, 0x3}, {0x8c, 0x8}, @ext={0xbc, &(0x7f00000003c0)="5a31d01e3654045af67ea364d936fd8fa2f07f749bc5cdc75e42cc9602ccceb243a4057fe1e1b0210baee916db8009f6e6d2d3a48111dcdd183a028aabcc9c4cf5cc3b22e8199e8ddd4ee72c171e18b9ec1c0b3f2eaacda98443261c8d2d39371ea778282f367e4da11f04f3400287fc1ed5de37e6fad4349a4011f983f0f33d6861c06592b9c54e3e774c74b0049e08e9f847006b4da7c6ea22b4fc1f06e9eca83c424b43711220e969d61a499470813cca55aaf1ed05dd2750cd7c"}}, {0xd, 0x20, 0x2, 0x5, @time={0x1a00}, {0x4}, {0x9, 0x5}, @raw32={[0x5, 0x800, 0x5]}}, {0x2, 0x4, 0x8, 0x6, @time={0x3, 0x2}, {0x81, 0x1}, {0x3, 0x2}, @note={0x8, 0x5, 0x5, 0x8, 0xd}}, {0x32, 0x2, 0x0, 0xe, @tick=0xffff, {0xa}, {0xee, 0x9}, @queue={0xf, {0xf2d2, 0xcee4}}}, {0x7, 0x1, 0x70, 0xd0, @time={0x7ff}, {0x2, 0x3}, {0x40, 0x7}, @result={0x7, 0x2}}], 0x134) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) inotify_init() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2202, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc040564a, &(0x7f0000000140)={0x0, 0x6, @value=0x1}) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000001000030428b57000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="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"], 0x5c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) syz_open_pts(r2, 0x0) eventfd(0x10) close_range(r2, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r6 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r6, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) 1.961065235s ago: executing program 6 (id=1313): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f000000070000000c000000ff"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) (fail_nth: 8) 1.676841494s ago: executing program 6 (id=1314): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x3}, 'syz1\x00', 0x52}) ioctl$UI_DEV_CREATE(r0, 0x5501) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @loopback}}) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000048000000030a01020000000000000000010000000900030073797a32000000001c0004800800024000000000080001400000000508000140000000020900010073797a31000040004c000000050a01010000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xdc}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0) readv(r7, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1.091610889s ago: executing program 5 (id=1318): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='!\x00', &(0x7f0000000040)='/dev/adsp1\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 960.924235ms ago: executing program 2 (id=1321): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) inotify_init() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x402423}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x100, 0x0, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0xe4, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb8}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_FLAGS={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20008000}, 0x40084) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x0, 0x101000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000003c0)={0x4, 0x0, 0x2}) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000340)=0x8001) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$sr(0xffffff9c, &(0x7f0000000d40), 0x40, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1, 0x11, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd2}, @call={0x85, 0x0, 0x0, 0x80}, @generic={0x9, 0x7, 0x1, 0x2, 0x1c0000}, @ldst={0x2, 0x2, 0x6, 0xb, 0x3, 0xfffffffffffffff0, 0xfffffffffffffffc}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @tail_call]}, 0x0, 0x0, 0x1000, &(0x7f0000001600)=""/4096, 0x41100, 0x34, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x2, 0x9, 0x1a1e, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000e00), &(0x7f0000000e40)=[{0x1, 0x5, 0x6, 0xb}, {0x5, 0x2, 0x6, 0xe}, {0x1, 0x2, 0x2, 0x8}, {0x5, 0x3, 0x8, 0x5}, {0x3, 0x3, 0x4, 0x8}, {0x0, 0x2, 0x1, 0x4}], 0x10, 0x9, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a10800000001080044001a800e000100697036677265f4000000300002800500160085000000080015002daf0c0014000600fc02000000000000000000000000020000000000b2817470ea3f2227ce7fd221b43888ee828ecd"], 0x64}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e040c122022"], 0x7) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000005000600002000000a00000000000000000000000000000000000000000000000700000000000000080012000000040000"], 0xa0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 850.733736ms ago: executing program 8 (id=1322): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x6f88, 0x0, 0x9, 0x0, 0x1}, &(0x7f0000000180), 0x0) 850.489095ms ago: executing program 8 (id=1323): syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) socket(0x2c, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x104, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xf0, 0x1, [@m_ct={0x98, 0xb, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x1ff}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e676ce1a91d1ed1211b456a99b6294c7"}]}, {0x4a, 0x6, "63571f949496b26900c4e5ccf38b213c50acfaf282bc366a8fede9c7695af61557ec9f83f05c5d37cd6e6651ece8339ddaf06b373c6a8fc26d7f6e54098c2af235987c9847f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x54, 0x201b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1}}}]}, {0xf, 0x6, "d8378a6ad864825bb979f5"}, {0xc}, {0xc}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x804}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f071, 0x19}) pipe2(0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x483, &(0x7f0000000200)={0x20000000000084, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1, 'dh\x00', 0x20}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 633.000536ms ago: executing program 6 (id=1324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x3049, &(0x7f0000000080)={0x0, 0x1954, 0x8000, 0x1, 0x18f}, &(0x7f0000002280), &(0x7f00000022c0)) io_uring_enter(r2, 0x4590, 0x245b, 0x5, &(0x7f0000002300)={[0x10001, 0x1]}, 0x8) r3 = openat$mice(0xffffff9c, &(0x7f0000002340), 0x100) msgget$private(0x0, 0x0) bind$802154_dgram(r3, &(0x7f0000002380)={0x24, @long={0x3, 0xffff}}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$ARCH_MAP_VDSO_X32(0x1e, r5, 0x0, 0x2001) r6 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000440), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r7, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r8}], 0x2c, 0xffffffffffbffff8) dup2(r7, r8) fcntl$setown(r7, 0x8, r6) tkill(r6, 0x13) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1000000000"], 0x10}], 0x1}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="59cf000000000000000008000180060001"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 540.358261ms ago: executing program 8 (id=1325): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0xfd, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000000000000100000554"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000080000000000000000a7ba0b69e2dbea4914375433a8eebb9324c8c62fb14e73d010a922fc2ad49195fb275585a4e835346ae5cc9a01382f6dc36647d09c0bd860b3531bf59e457ecfb16a3d69f2e62867a2468e71064e783550da73313fa6a916c5f69eebbcfc9cb3b0dccc759925df693446f0f90000000078a31e896fa4354774ea426c792dda6cbc2b76"], 0x50) r9 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r9, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r9, 0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, 0x0, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000001380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 482.820913ms ago: executing program 8 (id=1326): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x118, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mmap(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, 0x8011, 0xffffffffffffffff, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 476.218727ms ago: executing program 6 (id=1327): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() (fail_nth: 1) 420.87378ms ago: executing program 8 (id=1328): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) close(r0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x6f88, 0x0, 0x9, 0x0, 0x1}, &(0x7f0000000180), 0x0) 231.090377ms ago: executing program 8 (id=1329): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x4e20, 0x0, 0x3, 0x0, 0xa}, {0xffffffff, 0x0, 0x4, 0x0, 0x7fff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x0, 0x7}}, 0xe4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 0s ago: executing program 2 (id=1330): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r0, r1, 0x0) kernel console output (not intermixed with test programs): e0: port 2(bridge_slave_1) entered forwarding state [ 203.127191][ T9445] veth0_vlan: entered promiscuous mode [ 203.150774][ T9445] veth1_vlan: entered promiscuous mode [ 203.166607][ T9487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.178951][ T9445] veth0_macvtap: entered promiscuous mode [ 203.185811][ T9445] veth1_macvtap: entered promiscuous mode [ 203.198323][ T9445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.207484][ T9445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.212048][ T9445] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.217328][ T9445] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.220707][ T9445] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.224521][ T9445] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.261519][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.313013][ T9544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.330431][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.332888][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.343881][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.348368][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.357464][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.360692][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.361677][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.363887][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.385583][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.388055][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.466369][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.491356][ T9487] veth0_vlan: entered promiscuous mode [ 203.513274][ T9487] veth1_vlan: entered promiscuous mode [ 203.532922][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.542060][ T9544] veth0_vlan: entered promiscuous mode [ 203.548937][ T9544] veth1_vlan: entered promiscuous mode [ 203.605298][ T9487] veth0_macvtap: entered promiscuous mode [ 203.613754][ T9544] veth0_macvtap: entered promiscuous mode [ 203.621417][ T9487] veth1_macvtap: entered promiscuous mode [ 203.624467][ T9632] chnl_net:caif_netlink_parms(): no params data found [ 203.636437][ T9544] veth1_macvtap: entered promiscuous mode [ 203.658840][ T5960] Bluetooth: hci0: command tx timeout [ 203.678502][ T9544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.688669][ T9487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.692943][ T9487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.721266][ T9487] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.726433][ T9487] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.729268][ T9487] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.733118][ T9487] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.748920][ T9544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.754807][ T12] bridge_slave_1: left allmulticast mode [ 203.756607][ T12] bridge_slave_1: left promiscuous mode [ 203.758449][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.762264][ T12] bridge_slave_0: left allmulticast mode [ 203.765446][ T12] bridge_slave_0: left promiscuous mode [ 203.767327][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.031645][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.035758][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.039295][ T12] bond0 (unregistering): Released all slaves [ 204.044567][ T5960] Bluetooth: hci1: command tx timeout [ 204.082557][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.084982][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.087255][ T9632] bridge_slave_0: entered allmulticast mode [ 204.089976][ T9632] bridge_slave_0: entered promiscuous mode [ 204.093500][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.096039][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.098387][ T9632] bridge_slave_1: entered allmulticast mode [ 204.101051][ T9632] bridge_slave_1: entered promiscuous mode [ 204.112983][ T9544] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.115906][ T9544] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.118622][ T9544] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.121323][ T9544] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.158835][ T9632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.163570][ T9632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.221066][ T9632] team0: Port device team_slave_0 added [ 204.234506][ T9632] team0: Port device team_slave_1 added [ 204.320646][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.323607][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.334567][ T9632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.344624][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.347537][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.360070][ T9632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.389650][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.392213][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.459644][ T9632] hsr_slave_0: entered promiscuous mode [ 204.462174][ T9632] hsr_slave_1: entered promiscuous mode [ 204.465012][ T9632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.467427][ T9632] Cannot create hsr debugfs directory [ 204.502729][ T12] hsr_slave_0: left promiscuous mode [ 204.505044][ T12] hsr_slave_1: left promiscuous mode [ 204.507034][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.509400][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.512108][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.516304][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.540154][ T12] veth1_macvtap: left promiscuous mode [ 204.541942][ T12] veth0_macvtap: left promiscuous mode [ 204.543717][ T12] veth1_vlan: left promiscuous mode [ 204.546961][ T12] veth0_vlan: left promiscuous mode [ 204.754711][ T5960] Bluetooth: hci2: command tx timeout [ 205.394932][ T5960] Bluetooth: hci3: command tx timeout [ 205.438866][ T12] team0 (unregistering): Port device team_slave_1 removed [ 205.506833][ T12] team0 (unregistering): Port device team_slave_0 removed [ 206.078924][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.081427][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.082645][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.088344][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.114653][ T5960] Bluetooth: hci1: command tx timeout [ 206.183503][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.189088][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.398935][ T9688] input: syz1 as /devices/virtual/input/input75 [ 207.062721][ T9632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.074555][ T9632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.132206][ T9632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.146404][ T9632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.208955][ T9632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.220126][ T9632] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.228594][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.230914][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.241824][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.244557][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.444613][ T9632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.466229][ T9632] veth0_vlan: entered promiscuous mode [ 207.473350][ T9632] veth1_vlan: entered promiscuous mode [ 207.474428][ T5960] Bluetooth: hci3: command tx timeout [ 207.490997][ T9632] veth0_macvtap: entered promiscuous mode [ 207.494904][ T9632] veth1_macvtap: entered promiscuous mode [ 207.502952][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.514839][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.518557][ T9632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.521276][ T9632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.523968][ T9632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.536608][ T9632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.629357][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.631836][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.658403][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.661003][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.849775][ T5960] Bluetooth: unknown link type 108 [ 207.852115][ T5960] Bluetooth: hci0: connection err: -111 [ 208.204203][ T5960] Bluetooth: hci1: command tx timeout [ 208.498417][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.502502][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.509146][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.512913][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.524939][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.582953][ T1141] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.705643][ T5956] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 208.841458][ T1141] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.845062][ T5956] usb 12-1: device descriptor read/64, error -71 [ 208.923171][ T1141] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.937533][ T9755] chnl_net:caif_netlink_parms(): no params data found [ 209.063678][ T1141] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.069086][ T9755] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.071378][ T9755] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.073665][ T9755] bridge_slave_0: entered allmulticast mode [ 209.076727][ T9755] bridge_slave_0: entered promiscuous mode [ 209.079995][ T9755] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.082261][ T9755] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.084170][ T5956] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 209.084927][ T9755] bridge_slave_1: entered allmulticast mode [ 209.089638][ T9755] bridge_slave_1: entered promiscuous mode [ 209.125068][ T9755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.130564][ T9755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.164736][ T9755] team0: Port device team_slave_0 added [ 209.170697][ T9755] team0: Port device team_slave_1 added [ 209.204585][ T9755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.207258][ T9755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.215601][ T5956] usb 12-1: device descriptor read/64, error -71 [ 209.218155][ T9755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.222750][ T9755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.225808][ T9755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.235683][ T9755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.305928][ T1141] bridge_slave_1: left allmulticast mode [ 209.307747][ T1141] bridge_slave_1: left promiscuous mode [ 209.309626][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.315146][ T1141] bridge_slave_0: left allmulticast mode [ 209.316943][ T1141] bridge_slave_0: left promiscuous mode [ 209.318779][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.324328][ T5956] usb usb12-port1: attempt power cycle [ 209.507921][ T9769] input: syz1 as /devices/virtual/input/input77 [ 209.618954][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.625045][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.629005][ T1141] bond0 (unregistering): Released all slaves [ 209.642411][ T9755] hsr_slave_0: entered promiscuous mode [ 209.645719][ T9755] hsr_slave_1: entered promiscuous mode [ 209.648629][ T9755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.651776][ T9755] Cannot create hsr debugfs directory [ 209.664574][ T5956] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 209.685014][ T5956] usb 12-1: device descriptor read/8, error -71 [ 209.939390][ T5956] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 209.955631][ T5956] usb 12-1: device descriptor read/8, error -71 [ 210.021889][ T1141] hsr_slave_0: left promiscuous mode [ 210.024344][ T1141] hsr_slave_1: left promiscuous mode [ 210.026794][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.029140][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.031943][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.034853][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.067138][ T1141] veth1_macvtap: left promiscuous mode [ 210.068964][ T1141] veth0_macvtap: left promiscuous mode [ 210.070757][ T1141] veth1_vlan: left promiscuous mode [ 210.072433][ T1141] veth0_vlan: left promiscuous mode [ 210.074279][ T5956] usb usb12-port1: unable to enumerate USB device [ 210.404453][ T9775] input: syz1 as /devices/virtual/input/input78 [ 210.595762][ T5960] Bluetooth: hci2: command tx timeout [ 210.775393][ T9781] input: syz1 as /devices/virtual/input/input79 [ 210.805524][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 210.878122][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 211.577191][ T9789] input: syz1 as /devices/virtual/input/input80 [ 212.100618][ T9755] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.120971][ T9755] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.133377][ T9755] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.156793][ T9755] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.229853][ T1141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.320294][ T9755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.341086][ T9755] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.342299][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.346786][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.347075][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.349024][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.351666][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.358399][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.361200][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.387837][ T1141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.400401][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.402672][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.460004][ T1141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.578391][ T9828] random: crng reseeded on system resumption [ 212.665970][ T13] tipc: Subscription rejected, illegal request [ 212.676459][ T5960] Bluetooth: hci2: command tx timeout [ 212.694948][ T1141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.818950][ T9755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.854107][ T9755] veth0_vlan: entered promiscuous mode [ 212.863625][ T9755] veth1_vlan: entered promiscuous mode [ 212.934649][ T9815] chnl_net:caif_netlink_parms(): no params data found [ 213.049737][ T1141] bridge_slave_1: left allmulticast mode [ 213.051566][ T1141] bridge_slave_1: left promiscuous mode [ 213.054355][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.059156][ T1141] bridge_slave_0: left allmulticast mode [ 213.061156][ T1141] bridge_slave_0: left promiscuous mode [ 213.063109][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.476106][ T9849] input: syz1 as /devices/virtual/input/input81 [ 213.562701][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.585769][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.591206][ T1141] bond0 (unregistering): Released all slaves [ 214.158023][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.160287][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.162567][ T9815] bridge_slave_0: entered allmulticast mode [ 214.170195][ T9815] bridge_slave_0: entered promiscuous mode [ 214.179005][ T9755] veth0_macvtap: entered promiscuous mode [ 214.193902][ T9815] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.200528][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.202898][ T9815] bridge_slave_1: entered allmulticast mode [ 214.207240][ T9815] bridge_slave_1: entered promiscuous mode [ 214.230037][ T9755] veth1_macvtap: entered promiscuous mode [ 214.261490][ T9755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.301430][ T9755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.313182][ T9815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.319787][ T9755] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.322381][ T9755] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.326337][ T9755] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.329182][ T9755] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.334639][ T9815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.434802][ T5960] Bluetooth: hci3: command tx timeout [ 214.440931][ T1141] hsr_slave_0: left promiscuous mode [ 214.441699][ T1141] hsr_slave_1: left promiscuous mode [ 214.442283][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.442315][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.445788][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.445820][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.528939][ T1141] veth1_macvtap: left promiscuous mode [ 214.531378][ T1141] veth0_macvtap: left promiscuous mode [ 214.533179][ T1141] veth1_vlan: left promiscuous mode [ 214.536592][ T1141] veth0_vlan: left promiscuous mode [ 214.806955][ T5960] Bluetooth: hci2: command tx timeout [ 215.345491][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 215.417903][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 215.938081][ T9815] team0: Port device team_slave_0 added [ 215.944813][ T9815] team0: Port device team_slave_1 added [ 216.008365][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.010615][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.019479][ T9815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.034611][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.037565][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.054441][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.061122][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.079052][ T9815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.146213][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.149181][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.173785][ T9815] hsr_slave_0: entered promiscuous mode [ 216.179394][ T9815] hsr_slave_1: entered promiscuous mode [ 216.181525][ T9815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.183863][ T9815] Cannot create hsr debugfs directory [ 216.523450][ T5960] Bluetooth: hci3: command tx timeout [ 216.872504][ T5960] Bluetooth: hci2: command tx timeout [ 217.249214][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.259266][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.276736][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.283485][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.291439][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.368341][ T1141] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.686095][ T1141] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.772954][ T1141] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.798027][ T9815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.803971][ T9815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.809584][ T9815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.818097][ T9815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.864193][ T1141] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.905708][ T9925] chnl_net:caif_netlink_parms(): no params data found [ 217.912354][ T9815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.963548][ T9815] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.086655][ T9925] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.092191][ T9925] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.096217][ T9925] bridge_slave_0: entered allmulticast mode [ 218.100458][ T9925] bridge_slave_0: entered promiscuous mode [ 218.105548][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.107799][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.128881][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.131148][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.135624][ T9925] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.137835][ T9925] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.140173][ T9925] bridge_slave_1: entered allmulticast mode [ 218.142784][ T9925] bridge_slave_1: entered promiscuous mode [ 218.159806][ T1141] bridge_slave_1: left allmulticast mode [ 218.161833][ T1141] bridge_slave_1: left promiscuous mode [ 218.163755][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.172935][ T1141] bridge_slave_0: left allmulticast mode [ 218.174894][ T1141] bridge_slave_0: left promiscuous mode [ 218.176970][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.465515][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.470191][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.473778][ T1141] bond0 (unregistering): Released all slaves [ 218.537036][ T9925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.542386][ T9925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.594361][ T63] Bluetooth: hci3: command tx timeout [ 218.608509][ T9925] team0: Port device team_slave_0 added [ 218.623424][ T9815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.633213][ T9815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.648353][ T9925] team0: Port device team_slave_1 added [ 218.705097][ T9925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.707830][ T9925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.718512][ T9925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.738422][ T9925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.740785][ T9925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.749724][ T9925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.849008][ T9925] hsr_slave_0: entered promiscuous mode [ 218.852205][ T9925] hsr_slave_1: entered promiscuous mode [ 218.860986][ T9925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.866972][ T9925] Cannot create hsr debugfs directory [ 218.917847][ T5960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.922510][ T5960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.928425][ T5960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.931418][ T5960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.937742][ T5960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.955439][ T1141] hsr_slave_0: left promiscuous mode [ 218.959722][ T1141] hsr_slave_1: left promiscuous mode [ 218.963494][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.967902][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.971166][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.973666][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.003670][ T1141] veth1_macvtap: left promiscuous mode [ 219.005650][ T1141] veth0_macvtap: left promiscuous mode [ 219.007422][ T1141] veth1_vlan: left promiscuous mode [ 219.009041][ T1141] veth0_vlan: left promiscuous mode [ 219.395492][ T63] Bluetooth: hci1: command tx timeout [ 219.652230][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 219.716149][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 220.281542][ T9973] batman_adv: batadv0: Adding interface: ip6gretap1 [ 220.283637][ T9973] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.292011][ T9973] batman_adv: batadv0: Interface activated: ip6gretap1 [ 220.310592][ T9815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.552974][ T9815] veth0_vlan: entered promiscuous mode [ 220.561358][ T9815] veth1_vlan: entered promiscuous mode [ 220.674366][ T63] Bluetooth: hci3: command tx timeout [ 220.822306][ T9815] veth0_macvtap: entered promiscuous mode [ 220.836369][ T9815] veth1_macvtap: entered promiscuous mode [ 220.928776][ T9972] chnl_net:caif_netlink_parms(): no params data found [ 220.934099][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.960805][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.996260][ T63] Bluetooth: hci0: command tx timeout [ 221.097736][ T9815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.100689][ T9815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.103399][ T9815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.106756][ T9815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.252919][ T9972] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.256633][ T9972] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.258978][ T9972] bridge_slave_0: entered allmulticast mode [ 221.266363][ T9972] bridge_slave_0: entered promiscuous mode [ 221.269568][ T9972] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.271810][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.274299][ T9972] bridge_slave_1: entered allmulticast mode [ 221.276917][ T9972] bridge_slave_1: entered promiscuous mode [ 221.329147][ T9972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.333729][ T9972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.474104][ T63] Bluetooth: hci1: command tx timeout [ 221.482674][ T1141] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.498293][ T9972] team0: Port device team_slave_0 added [ 221.510333][ T9972] team0: Port device team_slave_1 added [ 221.519782][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.522274][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.607326][ T1141] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.632423][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.635181][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.643534][ T9972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.650610][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.653015][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.661833][ T9972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.666523][ T9925] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.670845][ T9925] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.676513][ T9925] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.682541][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.686936][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.695583][ T1141] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.705041][ T9925] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.747783][ T1141] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.777714][ T9972] hsr_slave_0: entered promiscuous mode [ 221.780308][ T9972] hsr_slave_1: entered promiscuous mode [ 221.782428][ T9972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.785151][ T9972] Cannot create hsr debugfs directory [ 222.069390][ T1141] bridge_slave_1: left allmulticast mode [ 222.071261][ T1141] bridge_slave_1: left promiscuous mode [ 222.073267][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.080682][ T1141] bridge_slave_0: left allmulticast mode [ 222.083078][ T1141] bridge_slave_0: left promiscuous mode [ 222.090421][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.570317][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.575800][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.580578][ T1141] bond0 (unregistering): Released all slaves [ 222.780627][ T9925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.859906][ T9925] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.909709][ T9988] Set syz1 is full, maxelem 65536 reached [ 222.925370][ T7883] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.927638][ T7883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.945503][ T7883] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.948160][ T7883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.043596][ T1141] hsr_slave_0: left promiscuous mode [ 223.047496][ T1141] hsr_slave_1: left promiscuous mode [ 223.050147][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.053168][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.060780][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.068486][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.074141][ T63] Bluetooth: hci0: command tx timeout [ 223.130332][ T1141] veth1_macvtap: left promiscuous mode [ 223.132150][ T1141] veth0_macvtap: left promiscuous mode [ 223.134078][ T1141] veth1_vlan: left promiscuous mode [ 223.137041][ T1141] veth0_vlan: left promiscuous mode [ 223.564209][ T63] Bluetooth: hci1: command tx timeout [ 223.862585][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 223.937101][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 224.446149][T10100] random: crng reseeded on system resumption [ 224.808829][ T9925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.971659][ T9925] veth0_vlan: entered promiscuous mode [ 224.999737][ T9925] veth1_vlan: entered promiscuous mode [ 225.086245][ T9972] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.097035][ T9972] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 225.120773][ T9925] veth0_macvtap: entered promiscuous mode [ 225.123194][ T9972] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.129639][ T9972] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.135967][ T9925] veth1_macvtap: entered promiscuous mode [ 225.149648][ T9925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.154247][ T63] Bluetooth: hci0: command tx timeout [ 225.170010][ T9925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.177858][ T9925] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.180584][ T9925] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.183262][ T9925] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.187045][ T9925] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.233603][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.239824][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.241135][ T9972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.245364][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.249356][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.253347][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.279287][ T1141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.299748][ T9972] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.303350][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.306333][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.311294][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.313625][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.317605][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.319844][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.357560][ T1141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.379409][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.384957][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.399727][ T9972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.458761][ T1141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.536836][T10135] chnl_net:caif_netlink_parms(): no params data found [ 225.578506][ T9972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.600837][ T1141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.636238][ T63] Bluetooth: hci1: command tx timeout [ 225.667382][T10135] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.669696][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.673182][T10135] bridge_slave_0: entered allmulticast mode [ 225.676142][T10135] bridge_slave_0: entered promiscuous mode [ 225.685813][T10135] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.689016][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.692116][T10135] bridge_slave_1: entered allmulticast mode [ 225.696154][T10135] bridge_slave_1: entered promiscuous mode [ 225.758650][T10135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.778135][T10135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.922082][T10135] team0: Port device team_slave_0 added [ 225.926140][T10135] team0: Port device team_slave_1 added [ 225.989354][ T1141] bridge_slave_1: left allmulticast mode [ 225.991549][ T1141] bridge_slave_1: left promiscuous mode [ 225.993857][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.999186][ T1141] bridge_slave_0: left allmulticast mode [ 226.001395][ T1141] bridge_slave_0: left promiscuous mode [ 226.003764][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.292625][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.300863][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.305041][ T1141] bond0 (unregistering): Released all slaves [ 226.312564][T10135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.315515][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.323737][T10135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.328434][T10135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.330632][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.338690][T10135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.426202][T10135] hsr_slave_0: entered promiscuous mode [ 226.428442][T10135] hsr_slave_1: entered promiscuous mode [ 226.430553][T10135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.432894][T10135] Cannot create hsr debugfs directory [ 226.585843][ T9972] veth0_vlan: entered promiscuous mode [ 226.604354][ T1141] hsr_slave_0: left promiscuous mode [ 226.607358][ T1141] hsr_slave_1: left promiscuous mode [ 226.610345][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.613484][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.618745][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.621830][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.661133][ T1141] veth1_macvtap: left promiscuous mode [ 226.662906][ T1141] veth0_macvtap: left promiscuous mode [ 226.664853][ T1141] veth1_vlan: left promiscuous mode [ 226.666556][ T1141] veth0_vlan: left promiscuous mode [ 227.244274][ T63] Bluetooth: hci0: command tx timeout [ 227.316562][ T63] Bluetooth: hci3: command tx timeout [ 227.372072][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 227.444071][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 228.084725][ T9972] veth1_vlan: entered promiscuous mode [ 228.127791][ T9972] veth0_macvtap: entered promiscuous mode [ 228.138420][ T9972] veth1_macvtap: entered promiscuous mode [ 228.185386][T10179] random: crng reseeded on system resumption [ 228.207530][ T9972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.216743][ T9972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.226762][ T9972] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.229635][ T9972] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.232336][ T9972] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.235350][ T9972] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.295306][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.299555][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.314847][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.317329][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.386238][T10181] input: syz1 as /devices/virtual/input/input82 [ 228.559753][T10135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.575015][T10135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.580703][T10135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.587244][T10135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.633875][T10135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.648811][T10135] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.654036][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.656334][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.662217][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.664552][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.761563][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.909'. [ 228.816896][T10208] overlay: ./file0 is not a directory [ 228.882006][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.900939][T10135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.966485][T10135] veth0_vlan: entered promiscuous mode [ 228.970990][T10135] veth1_vlan: entered promiscuous mode [ 228.992100][T10135] veth0_macvtap: entered promiscuous mode [ 228.997484][T10220] input: syz1 as /devices/virtual/input/input83 [ 229.001733][T10135] veth1_macvtap: entered promiscuous mode [ 229.050276][T10135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.060775][T10135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.102042][T10135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.111205][T10135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.116807][T10135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.120276][T10135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.233151][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.242402][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.257971][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.260786][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.272584][ C2] hpet: Lost 1 RTC interrupts [ 229.399547][ T63] Bluetooth: hci3: command tx timeout [ 231.474272][ T63] Bluetooth: hci3: command tx timeout [ 231.902150][T10283] input: syz1 as /devices/virtual/input/input84 [ 232.177526][T10292] netlink: 44 bytes leftover after parsing attributes in process `syz.4.922'. [ 232.253179][T10295] input: syz1 as /devices/virtual/input/input85 [ 233.161164][T10330] input: syz1 as /devices/virtual/input/input86 [ 233.555006][ T63] Bluetooth: hci3: command tx timeout [ 235.380147][T10371] input: syz1 as /devices/virtual/input/input87 [ 235.725258][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'. [ 235.731696][T10383] input: syz1 as /devices/virtual/input/input88 [ 236.546028][T10415] overlayfs: missing 'lowerdir' [ 238.848937][T10478] input: syz1 as /devices/virtual/input/input89 [ 239.792358][T10494] Invalid ELF header magic: != ELF [ 240.101949][T10510] overlayfs: missing 'lowerdir' [ 242.069874][T10617] input: syz1 as /devices/virtual/input/input90 [ 243.277414][T10417] Set syz1 is full, maxelem 65536 reached [ 243.301315][T10656] overlayfs: missing 'lowerdir' [ 243.372451][T10666] input: syz1 as /devices/virtual/input/input91 [ 244.321137][T10697] input: syz1 as /devices/virtual/input/input92 [ 244.492384][T10706] netlink: 'syz.5.966': attribute type 1 has an invalid length. [ 244.519248][T10406] Set syz1 is full, maxelem 65536 reached [ 244.603846][T10713] netlink: 'syz.1.967': attribute type 27 has an invalid length. [ 244.640536][T10713] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.643013][T10713] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.818038][T10713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.835716][T10713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.891791][T10713] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.894928][T10713] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.897972][T10713] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.900766][T10713] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.947564][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.966'. [ 244.948942][T10716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.954198][T10716] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.973765][T10716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.631694][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 246.837327][T10815] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 247.720970][T10855] overlayfs: missing 'lowerdir' [ 247.894387][T10868] input: syz1 as /devices/virtual/input/input93 [ 248.220728][T10885] random: crng reseeded on system resumption [ 248.736430][T10905] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 248.740096][T10906] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 250.353696][T10967] random: crng reseeded on system resumption [ 251.295377][T10993] ALSA: mixer_oss: invalid index 40000 [ 251.624807][T10996] input: syz1 as /devices/virtual/input/input94 [ 251.841171][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'. [ 251.894203][T11010] input: syz1 as /devices/virtual/input/input95 [ 252.936599][T11046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.270163][T11060] overlayfs: missing 'lowerdir' [ 253.834521][ T40] audit: type=1326 audit(1749139634.215:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.5.1004" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f61579 code=0x0 [ 253.885130][T11090] ALSA: mixer_oss: invalid index 40000 [ 253.941813][T11094] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1004'. [ 254.539165][T11107] input: syz1 as /devices/virtual/input/input96 [ 255.194683][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.808487][T11126] random: crng reseeded on system resumption [ 256.461661][T11142] input: syz1 as /devices/virtual/input/input97 [ 256.768076][T11158] overlayfs: missing 'lowerdir' [ 257.803887][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1017'. [ 258.228489][ T40] audit: type=1326 audit(1749139638.615:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.1.1015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7fc00000 [ 258.236993][ T40] audit: type=1326 audit(1749139638.615:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.1.1015" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf707e579 code=0x7fc00000 [ 258.475765][T11224] Bluetooth: MGMT ver 1.23 [ 258.487831][T11224] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 258.543549][T11224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.583828][T11229] bond1: (slave ip6gretap1): making interface the new active one [ 258.596743][T11229] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 258.652318][T11224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1020'. [ 258.662686][T11224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1020'. [ 258.673203][T11224] bridge0: entered promiscuous mode [ 258.683366][T11224] batadv_slave_1: entered promiscuous mode [ 258.723533][T11224] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 258.741238][T11224] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.987104][T11242] input: syz1 as /devices/virtual/input/input98 [ 259.990367][T11260] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.017412][T11260] openvswitch: netlink: IP tunnel dst address not specified [ 260.384259][ T40] audit: type=1326 audit(1749139640.775:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11278 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7fc00000 [ 260.403367][ T40] audit: type=1326 audit(1749139640.775:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11278 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707e579 code=0x7fc00000 [ 260.411379][ T40] audit: type=1326 audit(1749139640.785:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11278 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7fc00000 [ 260.418668][ T40] audit: type=1326 audit(1749139640.785:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11278 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7fc00000 [ 260.425994][ T40] audit: type=1326 audit(1749139640.785:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11278 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7fc00000 [ 260.432562][ T40] audit: type=1326 audit(1749139640.785:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11278 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7fc00000 [ 260.447389][ T40] audit: type=1326 audit(1749139640.785:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11278 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7fc00000 [ 260.464329][ T40] audit: type=1326 audit(1749139640.785:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11278 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7fc00000 [ 260.479442][ T40] audit: type=1326 audit(1749139640.785:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11278 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7fc00000 [ 260.490587][ T40] audit: type=1326 audit(1749139640.785:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11278 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7fc00000 [ 260.830127][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 260.968540][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 260.981666][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 261.294572][T11327] overlayfs: missing 'lowerdir' [ 262.082677][T11342] input: syz1 as /devices/virtual/input/input99 [ 262.952947][T11358] input: syz1 as /devices/virtual/input/input100 [ 263.503190][T11375] random: crng reseeded on system resumption [ 264.650132][T11424] input: syz1 as /devices/virtual/input/input101 [ 264.742655][T11238] Set syz1 is full, maxelem 65536 reached [ 265.631347][T11453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1047'. [ 265.783911][T11462] input: syz1 as /devices/virtual/input/input102 [ 266.102656][ T1140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.192468][ T1140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.250794][ T5960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.254599][ T5960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.259161][ T5960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.264893][ T5960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.269277][ T5960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 266.367352][ T1140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.417286][T11489] overlayfs: missing 'lowerdir' [ 266.445241][ T1140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.503726][T11486] chnl_net:caif_netlink_parms(): no params data found [ 266.554326][ T5960] Bluetooth: hci3: adv larger than maximum supported [ 266.554354][ T5960] Bluetooth: hci3: Malformed LE Event: 0x0d [ 266.648760][T11486] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.651042][T11486] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.653346][T11486] bridge_slave_0: entered allmulticast mode [ 266.656704][T11486] bridge_slave_0: entered promiscuous mode [ 266.672804][T11486] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.675314][T11486] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.677643][T11486] bridge_slave_1: entered allmulticast mode [ 266.680637][T11486] bridge_slave_1: entered promiscuous mode [ 266.745775][T11486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.750338][T11486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.792585][ T1140] bridge_slave_1: left allmulticast mode [ 266.795639][ T1140] bridge_slave_1: left promiscuous mode [ 266.798076][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.802398][ T1140] bridge_slave_0: left allmulticast mode [ 266.804301][ T1140] bridge_slave_0: left promiscuous mode [ 266.806128][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.124527][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.130205][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.134095][ T1140] bond0 (unregistering): Released all slaves [ 267.153099][T11486] team0: Port device team_slave_0 added [ 267.166047][T11486] team0: Port device team_slave_1 added [ 267.224941][T11486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.227148][T11486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.239361][T11486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.265630][T11486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.267800][T11486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.276987][T11486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.351114][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 267.353923][T11516] netlink: 'syz.3.1061': attribute type 5 has an invalid length. [ 267.356499][T11516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1061'. [ 267.482114][T11516] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 267.485661][T11516] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 267.488365][T11516] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 267.491566][T11516] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 267.494803][T11516] geneve2: entered promiscuous mode [ 267.496892][T11516] geneve2: entered allmulticast mode [ 267.503403][T11486] hsr_slave_0: entered promiscuous mode [ 267.506626][T11486] hsr_slave_1: entered promiscuous mode [ 267.508722][T11486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.511856][T11486] Cannot create hsr debugfs directory [ 267.624540][ T1140] hsr_slave_0: left promiscuous mode [ 267.626770][ T1140] hsr_slave_1: left promiscuous mode [ 267.629284][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.631634][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.635956][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.639111][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.673166][ T1140] veth1_macvtap: left promiscuous mode [ 267.675483][ T1140] veth0_macvtap: left promiscuous mode [ 267.677695][ T1140] veth1_vlan: left promiscuous mode [ 267.681578][ T1140] veth0_vlan: left promiscuous mode [ 267.949119][T11553] input: syz1 as /devices/virtual/input/input103 [ 268.366989][ T5960] Bluetooth: hci0: command tx timeout [ 268.582899][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 268.679957][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 269.141809][T11563] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1068'. [ 269.597173][T11576] overlayfs: missing 'lowerdir' [ 270.295482][T11486] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 270.302633][T11486] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 270.307081][T11486] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 270.315855][T11486] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 270.363135][T11486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.379408][T11486] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.389513][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.391786][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.403759][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.406769][ T7886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.445077][ T5960] Bluetooth: hci0: command tx timeout [ 270.452359][ T1140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.455852][ T1140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 270.528837][ T1140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.532141][ T1140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 270.572406][T11486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.574790][ T839] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 270.578854][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.582970][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.586735][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.589812][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.593135][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.617743][ T1140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.621201][ T1140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 270.650946][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1078'. [ 270.687812][ T1140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.691104][ T1140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 270.744236][ T839] usb 6-1: Using ep0 maxpacket: 16 [ 270.747326][ T839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.750518][ T839] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.759704][ T839] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 270.762605][ T839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.765381][ T839] usb 6-1: Product: syz [ 270.766861][ T839] usb 6-1: Manufacturer: syz [ 270.768706][ T839] usb 6-1: SerialNumber: syz [ 270.772191][ T839] usb 6-1: config 0 descriptor?? [ 270.776445][ T839] hub 6-1:0.0: bad descriptor, ignoring hub [ 270.778442][ T839] hub 6-1:0.0: probe with driver hub failed with error -5 [ 270.819766][T11600] chnl_net:caif_netlink_parms(): no params data found [ 270.868932][T11486] veth0_vlan: entered promiscuous mode [ 270.901446][T11486] veth1_vlan: entered promiscuous mode [ 270.904149][ T1140] bridge_slave_1: left allmulticast mode [ 270.906030][ T1140] bridge_slave_1: left promiscuous mode [ 270.908145][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.914995][ T1140] bridge_slave_0: left allmulticast mode [ 270.916774][ T1140] bridge_slave_0: left promiscuous mode [ 270.918610][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.941833][ T1140] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 271.006403][ T1140] batman_adv: batadv0: Removing interface: ip6gretap1 [ 271.275663][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.281007][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.285231][ T1140] bond0 (unregistering): Released all slaves [ 271.338776][T11600] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.341863][T11600] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.345819][T11600] bridge_slave_0: entered allmulticast mode [ 271.348971][T11600] bridge_slave_0: entered promiscuous mode [ 271.362969][T11600] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.367261][T11600] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.370577][T11600] bridge_slave_1: entered allmulticast mode [ 271.381124][T11600] bridge_slave_1: entered promiscuous mode [ 271.513871][T11600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.539714][T11600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.567222][T11486] veth0_macvtap: entered promiscuous mode [ 271.625437][T11486] veth1_macvtap: entered promiscuous mode [ 271.632048][T11600] team0: Port device team_slave_0 added [ 271.653079][T11486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.680921][T11600] team0: Port device team_slave_1 added [ 271.789025][ T1140] hsr_slave_0: left promiscuous mode [ 271.791267][ T1140] hsr_slave_1: left promiscuous mode [ 271.793265][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.798556][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.802440][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.805114][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.837784][ T1140] veth1_macvtap: left promiscuous mode [ 271.839684][ T1140] veth0_macvtap: left promiscuous mode [ 271.841466][ T1140] veth1_vlan: left promiscuous mode [ 271.843830][ T1140] veth0_vlan: left promiscuous mode [ 271.901130][T11660] overlayfs: missing 'lowerdir' [ 272.521898][ T5960] Bluetooth: hci0: command tx timeout [ 272.684238][ T5960] Bluetooth: hci2: command tx timeout [ 272.842618][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 272.944475][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 273.484281][ T9582] usb 6-1: USB disconnect, device number 2 [ 273.631463][T11486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.701139][T11600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.703323][T11600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.711190][T11600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.716747][T11486] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.721042][T11486] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.731006][T11486] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.735599][T11486] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.745771][T11600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.748727][T11600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.757021][T11600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.931465][T11600] hsr_slave_0: entered promiscuous mode [ 273.936853][T11600] hsr_slave_1: entered promiscuous mode [ 273.938939][T11600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.942589][T11600] Cannot create hsr debugfs directory [ 274.008920][ T7883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.016602][ T7883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.046845][ T7883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.054175][ T7883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.519189][T11693] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1052'. [ 274.660986][ T5960] Bluetooth: hci0: command tx timeout [ 274.764375][ T5960] Bluetooth: hci2: command tx timeout [ 275.433854][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 275.433866][ T40] audit: type=1326 audit(1749139655.815:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.5.1084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7fc00000 [ 276.152198][T11600] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 276.163521][T11600] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 276.183112][T11600] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 276.191477][T11600] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 276.316505][ T5989] hid-generic 0000:7FFFFFFF:0000.0002: unknown main item tag 0x0 [ 276.319022][ T5989] hid-generic 0000:7FFFFFFF:0000.0002: unknown main item tag 0x0 [ 276.321417][ T5989] hid-generic 0000:7FFFFFFF:0000.0002: unknown main item tag 0x0 [ 276.346982][T11600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.349880][ T5989] hid-generic 0000:7FFFFFFF:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 276.368317][T11600] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.374827][ T7883] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.377803][ T7883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.435968][T11744] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1088'. [ 276.494797][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.497227][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.621161][T11748] random: crng reseeded on system resumption [ 276.686059][T11739] fido_id[11739]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 276.845600][ T5960] Bluetooth: hci2: command tx timeout [ 276.963493][T11758] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 33554432, id = 0 [ 276.970489][T11600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.479704][T11600] veth0_vlan: entered promiscuous mode [ 277.497645][T11600] veth1_vlan: entered promiscuous mode [ 277.513058][T11600] veth0_macvtap: entered promiscuous mode [ 277.517241][T11600] veth1_macvtap: entered promiscuous mode [ 277.526468][T11600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.530945][T11600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.534874][T11600] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.537524][T11600] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.540510][T11600] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.543203][T11600] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.606863][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.610458][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.642520][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.646573][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.703063][T11790] overlayfs: missing 'lowerdir' [ 278.923609][ T5960] Bluetooth: hci2: command tx timeout [ 282.159481][T11902] random: crng reseeded on system resumption [ 282.228259][T11804] Set syz1 is full, maxelem 65536 reached [ 282.774141][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'. [ 283.519495][T11933] netlink: 'syz.8.1107': attribute type 10 has an invalid length. [ 283.891694][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.904074][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.910068][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.983719][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.989151][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.161107][T11975] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1112'. [ 284.245132][T11975] sctp: [Deprecated]: syz.8.1112 (pid 11975) Use of int in max_burst socket option deprecated. [ 284.245132][T11975] Use struct sctp_assoc_value instead [ 284.305657][T11957] chnl_net:caif_netlink_parms(): no params data found [ 284.501973][ T1263] bridge_slave_1: left allmulticast mode [ 284.518968][ T1263] bridge_slave_1: left promiscuous mode [ 284.521107][ T1263] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.538615][ T1263] bridge_slave_0: left allmulticast mode [ 284.545000][ T1263] bridge_slave_0: left promiscuous mode [ 284.552675][ T1263] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.667814][ T1263] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 284.960149][ T1263] bridge0 (unregistering): left promiscuous mode [ 285.339362][ T1263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.344120][ T72] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 285.347930][ T1263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.361748][ T1263] bond0 (unregistering): Released all slaves [ 285.491837][ T72] usb 13-1: device descriptor read/64, error -71 [ 285.521791][ T1263] bond1 (unregistering): Released all slaves [ 285.601747][T11850] Set syz1 is full, maxelem 65536 reached [ 285.724278][ T72] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 285.791636][T11957] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.793888][T11957] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.797421][T11957] bridge_slave_0: entered allmulticast mode [ 285.800118][T11957] bridge_slave_0: entered promiscuous mode [ 285.803222][T11957] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.807414][T11957] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.809713][T11957] bridge_slave_1: entered allmulticast mode [ 285.812367][T11957] bridge_slave_1: entered promiscuous mode [ 285.854130][ T72] usb 13-1: device descriptor read/64, error -71 [ 285.882592][T11957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.893417][T11957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.950527][T11957] team0: Port device team_slave_0 added [ 285.959392][T11957] team0: Port device team_slave_1 added [ 285.974965][ T72] usb usb13-port1: attempt power cycle [ 285.988286][ T40] audit: type=1326 audit(1749139666.375:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.6.1118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 286.014574][ T40] audit: type=1326 audit(1749139666.375:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.6.1118" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 286.036849][ T5960] Bluetooth: hci3: command tx timeout [ 286.098241][ T40] audit: type=1326 audit(1749139666.375:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.6.1118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 286.112650][ T1263] batadv_slave_1: left promiscuous mode [ 286.122284][ T1263] hsr_slave_0: left promiscuous mode [ 286.132426][ T1263] hsr_slave_1: left promiscuous mode [ 286.157759][ T1263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.168146][ T1263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.214309][ T40] audit: type=1326 audit(1749139666.375:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.6.1118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 286.267193][ T40] audit: type=1326 audit(1749139666.375:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.6.1118" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 286.277937][ T40] audit: type=1326 audit(1749139666.385:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.6.1118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 286.285812][ T40] audit: type=1326 audit(1749139666.385:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.6.1118" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 286.292499][ T40] audit: type=1326 audit(1749139666.385:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.6.1118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 286.299605][ T40] audit: type=1326 audit(1749139666.385:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.6.1118" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 286.307443][ T40] audit: type=1326 audit(1749139666.385:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.6.1118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 286.324169][ T72] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 286.347055][ T72] usb 13-1: device descriptor read/8, error -71 [ 286.584792][ T72] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 286.608695][ T72] usb 13-1: device descriptor read/8, error -71 [ 286.766546][ T72] usb usb13-port1: unable to enumerate USB device [ 287.051068][ T1263] team0 (unregistering): Port device team_slave_1 removed [ 287.134192][ T1263] team0 (unregistering): Port device team_slave_0 removed [ 287.856656][T11957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.859335][T11957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.867557][T11957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.924530][T11957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.926770][T11957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.944897][T11957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.072649][T11957] hsr_slave_0: entered promiscuous mode [ 288.085484][T11957] hsr_slave_1: entered promiscuous mode [ 288.087798][T11957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.106296][T11957] Cannot create hsr debugfs directory [ 288.116603][ T5960] Bluetooth: hci3: command tx timeout [ 288.643278][T12065] FAULT_INJECTION: forcing a failure. [ 288.643278][T12065] name failslab, interval 1, probability 0, space 0, times 0 [ 288.647432][T12065] CPU: 1 UID: 0 PID: 12065 Comm: syz.6.1128 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 288.647457][T12065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 288.647467][T12065] Call Trace: [ 288.647472][T12065] [ 288.647479][T12065] dump_stack_lvl+0x16c/0x1f0 [ 288.647506][T12065] should_fail_ex+0x512/0x640 [ 288.647530][T12065] ? fs_reclaim_acquire+0xae/0x150 [ 288.647547][T12065] ? tomoyo_encode2+0x100/0x3e0 [ 288.647562][T12065] should_failslab+0xc2/0x120 [ 288.647578][T12065] __kmalloc_noprof+0xd2/0x510 [ 288.647603][T12065] ? d_absolute_path+0x136/0x1a0 [ 288.647620][T12065] tomoyo_encode2+0x100/0x3e0 [ 288.647642][T12065] tomoyo_encode+0x29/0x50 [ 288.647662][T12065] tomoyo_realpath_from_path+0x18f/0x6e0 [ 288.647692][T12065] tomoyo_path_number_perm+0x245/0x580 [ 288.647705][T12065] ? tomoyo_path_number_perm+0x237/0x580 [ 288.647720][T12065] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 288.647747][T12065] ? find_held_lock+0x2b/0x80 [ 288.647759][T12065] ? hook_file_ioctl_common+0x145/0x410 [ 288.647775][T12065] ? __fget_files+0x20e/0x3c0 [ 288.647790][T12065] ? __fput_deferred+0x470/0x480 [ 288.647804][T12065] security_file_ioctl_compat+0x9b/0x240 [ 288.647820][T12065] __ia32_compat_sys_ioctl+0xc3/0x370 [ 288.647837][T12065] __do_fast_syscall_32+0x7c/0x3a0 [ 288.647857][T12065] do_fast_syscall_32+0x32/0x80 [ 288.647873][T12065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.647887][T12065] RIP: 0023:0xf7fc1579 [ 288.647895][T12065] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 288.647906][T12065] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 288.647916][T12065] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541c [ 288.647923][T12065] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 288.647929][T12065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.647935][T12065] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 288.647957][T12065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.647972][T12065] [ 288.647982][T12065] ERROR: Out of memory at tomoyo_realpath_from_path. [ 288.833819][T12069] veth1_macvtap: left promiscuous mode [ 288.836204][T12069] macsec0: entered promiscuous mode [ 288.837944][T12069] macsec0: entered allmulticast mode [ 288.844931][T12069] veth1_macvtap: entered promiscuous mode [ 288.846918][T12069] veth1_macvtap: entered allmulticast mode [ 288.848905][T12069] macsec0: left promiscuous mode [ 288.850681][T12069] macsec0: left allmulticast mode [ 288.852381][T12069] veth1_macvtap: left allmulticast mode [ 288.904918][T12072] FAULT_INJECTION: forcing a failure. [ 288.904918][T12072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.910765][T12072] CPU: 0 UID: 0 PID: 12072 Comm: syz.6.1130 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 288.910789][T12072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 288.910800][T12072] Call Trace: [ 288.910807][T12072] [ 288.910831][T12072] dump_stack_lvl+0x16c/0x1f0 [ 288.910860][T12072] should_fail_ex+0x512/0x640 [ 288.910891][T12072] _copy_from_user+0x2e/0xd0 [ 288.910909][T12072] cmsghdr_from_user_compat_to_kern+0x355/0x7d0 [ 288.910944][T12072] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 288.910979][T12072] ____sys_sendmsg+0x488/0xc70 [ 288.911001][T12072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.911019][T12072] ? get_compat_msghdr+0x11a/0x170 [ 288.911048][T12072] ? __pfx__kstrtoull+0x10/0x10 [ 288.911074][T12072] ___sys_sendmsg+0x134/0x1d0 [ 288.911100][T12072] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.911122][T12072] ? __lock_acquire+0x622/0x1c90 [ 288.911176][T12072] __sys_sendmmsg+0x2f9/0x420 [ 288.911203][T12072] ? __pfx___sys_sendmmsg+0x10/0x10 [ 288.911235][T12072] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 288.911269][T12072] ? fput+0x70/0xf0 [ 288.911287][T12072] ? ksys_write+0x1ac/0x250 [ 288.911311][T12072] ? __pfx_ksys_write+0x10/0x10 [ 288.911340][T12072] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 288.911367][T12072] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 288.911392][T12072] __do_fast_syscall_32+0x7c/0x3a0 [ 288.911420][T12072] do_fast_syscall_32+0x32/0x80 [ 288.911444][T12072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.911465][T12072] RIP: 0023:0xf7fc1579 [ 288.911486][T12072] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 288.911504][T12072] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 288.911521][T12072] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000740 [ 288.911532][T12072] RDX: 0000000000000001 RSI: 0000000000004050 RDI: 0000000000000000 [ 288.911542][T12072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.911552][T12072] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 288.911562][T12072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.911585][T12072] [ 289.349074][T12103] cdrom: dropping to single frame dma [ 289.473725][T11957] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.497775][T11957] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.513960][T11957] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.542519][T11957] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.641259][T12113] netlink: 136 bytes leftover after parsing attributes in process `syz.8.1135'. [ 289.646985][T12113] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 289.672683][T12108] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1135'. [ 289.696805][T11957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.717890][T11957] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.725690][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.728226][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.737367][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.739501][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.892496][T11957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.933708][T11957] veth0_vlan: entered promiscuous mode [ 289.947253][T11957] veth1_vlan: entered promiscuous mode [ 289.989137][T11957] veth0_macvtap: entered promiscuous mode [ 289.998598][T11957] veth1_macvtap: entered promiscuous mode [ 290.015746][T11957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.030165][T11957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.041431][T11957] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.047301][T11957] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.057856][T11957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.062262][T11957] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.120829][ T7883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.131179][ T7883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.153762][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.158132][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.196905][ T5960] Bluetooth: hci3: command tx timeout [ 291.990664][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 291.990675][ T40] audit: type=1326 audit(1749139672.215:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 292.023017][ T40] audit: type=1326 audit(1749139672.215:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 292.029883][ T40] audit: type=1326 audit(1749139672.215:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 292.039568][ T40] audit: type=1326 audit(1749139672.215:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 292.047185][ T40] audit: type=1326 audit(1749139672.215:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 292.054630][ T40] audit: type=1326 audit(1749139672.215:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 292.076109][ T40] audit: type=1326 audit(1749139672.215:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 292.088441][ T40] audit: type=1326 audit(1749139672.215:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 292.095951][ T40] audit: type=1326 audit(1749139672.215:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 292.103954][ T40] audit: type=1326 audit(1749139672.215:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 292.112558][T12228] input: syz1 as /devices/virtual/input/input104 [ 292.179818][ T72] IPVS: starting estimator thread 0... [ 292.184905][T12234] tipc: Started in network mode [ 292.186737][T12234] tipc: Node identity ac1414aa, cluster identity 4711 [ 292.189240][T12234] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.191464][T12234] tipc: Enabled bearer , priority 10 [ 292.284280][ T5960] Bluetooth: hci3: command tx timeout [ 292.285080][T12237] IPVS: using max 44 ests per chain, 105600 per kthread [ 292.324123][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.464056][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.470764][T12250] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1162'. [ 292.580603][ C3] vcan0: j1939_tp_rxtimer: 0xffff888060e58000: rx timeout, send abort [ 292.604067][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.744066][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.884058][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.024057][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.084084][ C3] vcan0: j1939_tp_rxtimer: 0xffff888060e58000: abort rx timeout. Force session deactivation [ 293.164050][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.304153][ T72] tipc: Node number set to 2886997162 [ 293.444081][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.456372][T12291] input: syz1 as /devices/virtual/input/input106 [ 293.613180][T12295] FAULT_INJECTION: forcing a failure. [ 293.613180][T12295] name failslab, interval 1, probability 0, space 0, times 0 [ 293.618753][T12295] CPU: 1 UID: 0 PID: 12295 Comm: syz.2.1172 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 293.618769][T12295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.618776][T12295] Call Trace: [ 293.618781][T12295] [ 293.618785][T12295] dump_stack_lvl+0x16c/0x1f0 [ 293.618805][T12295] should_fail_ex+0x512/0x640 [ 293.618822][T12295] ? fs_reclaim_acquire+0xae/0x150 [ 293.618837][T12295] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 293.618867][T12295] should_failslab+0xc2/0x120 [ 293.618891][T12295] __kmalloc_noprof+0xd2/0x510 [ 293.618912][T12295] tomoyo_realpath_from_path+0xc2/0x6e0 [ 293.618929][T12295] ? tomoyo_profile+0x47/0x60 [ 293.618941][T12295] tomoyo_path_number_perm+0x245/0x580 [ 293.618953][T12295] ? tomoyo_path_number_perm+0x237/0x580 [ 293.618968][T12295] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 293.618996][T12295] ? _raw_spin_unlock+0x28/0x50 [ 293.619009][T12295] ? d_add+0x47a/0x780 [ 293.619019][T12295] ? current_check_access_path+0x33c/0x460 [ 293.619035][T12295] ? __pfx_current_check_access_path+0x10/0x10 [ 293.619048][T12295] ? simple_lookup+0x12c/0x180 [ 293.619063][T12295] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 293.619075][T12295] ? lookup_dcache+0x66/0x170 [ 293.619094][T12295] tomoyo_path_mknod+0x10c/0x190 [ 293.619104][T12295] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 293.619116][T12295] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 293.619136][T12295] security_path_mknod+0x161/0x310 [ 293.619151][T12295] do_mknodat+0x239/0x5d0 [ 293.619169][T12295] ? __pfx_do_mknodat+0x10/0x10 [ 293.619184][T12295] ? getname_flags.part.0+0x1c5/0x550 [ 293.619195][T12295] ? __pfx_ksys_write+0x10/0x10 [ 293.619214][T12295] __ia32_sys_mknodat+0xaa/0xe0 [ 293.619231][T12295] __do_fast_syscall_32+0x7c/0x3a0 [ 293.619248][T12295] do_fast_syscall_32+0x32/0x80 [ 293.619264][T12295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.619278][T12295] RIP: 0023:0xf706e579 [ 293.619287][T12295] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 293.619298][T12295] RSP: 002b:00000000f503d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000129 [ 293.619309][T12295] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 293.619315][T12295] RDX: 0000000000008000 RSI: 0000000000000704 RDI: 0000000000000000 [ 293.619322][T12295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.619328][T12295] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 293.619335][T12295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.619350][T12295] [ 293.619545][T12295] ERROR: Out of memory at tomoyo_realpath_from_path. [ 293.654379][ T61] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 293.845558][ T61] usb 10-1: device descriptor read/64, error -71 [ 294.095910][ T61] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 294.234077][ T61] usb 10-1: device descriptor read/64, error -71 [ 294.437263][ T61] usb usb10-port1: attempt power cycle [ 295.003812][ T61] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 295.034474][ T61] usb 10-1: device descriptor read/8, error -71 [ 295.284121][ T61] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 295.304665][ T61] usb 10-1: device descriptor read/8, error -71 [ 295.314057][ C1] net_ratelimit: 2 callbacks suppressed [ 295.314068][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 295.329124][T12372] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 295.331461][T12372] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 295.424312][ T61] usb usb10-port1: unable to enumerate USB device [ 295.478097][T12386] input: syz1 as /devices/virtual/input/input107 [ 296.354081][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.394227][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.444826][T12488] FAULT_INJECTION: forcing a failure. [ 297.444826][T12488] name failslab, interval 1, probability 0, space 0, times 0 [ 297.449825][T12488] CPU: 2 UID: 0 PID: 12488 Comm: syz.5.1198 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 297.449842][T12488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 297.449849][T12488] Call Trace: [ 297.449853][T12488] [ 297.449857][T12488] dump_stack_lvl+0x16c/0x1f0 [ 297.449890][T12488] should_fail_ex+0x512/0x640 [ 297.449907][T12488] ? __kmalloc_noprof+0xbf/0x510 [ 297.449925][T12488] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 297.449937][T12488] should_failslab+0xc2/0x120 [ 297.449948][T12488] __kmalloc_noprof+0xd2/0x510 [ 297.449968][T12488] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 297.449980][T12488] vb2_core_reqbufs+0x398/0xfe0 [ 297.449994][T12488] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 297.450013][T12488] __vb2_init_fileio+0x3f1/0x1100 [ 297.450030][T12488] vb2_core_poll+0x5ec/0x700 [ 297.450041][T12488] vb2_poll+0x33/0x150 [ 297.450059][T12488] vb2_fop_poll+0x10f/0x2c0 [ 297.450077][T12488] ? __pfx_vb2_fop_poll+0x10/0x10 [ 297.450094][T12488] v4l2_poll+0x163/0x320 [ 297.450112][T12488] ? __pfx_v4l2_poll+0x10/0x10 [ 297.450124][T12488] do_sys_poll+0x559/0xdf0 [ 297.450144][T12488] ? __pfx_do_sys_poll+0x10/0x10 [ 297.450158][T12488] ? finish_task_switch.isra.0+0x221/0xc10 [ 297.450189][T12488] ? __pfx_pollwake+0x10/0x10 [ 297.450205][T12488] ? __pfx_pollwake+0x10/0x10 [ 297.450220][T12488] ? __pfx_pollwake+0x10/0x10 [ 297.450235][T12488] ? __pfx_pollwake+0x10/0x10 [ 297.450250][T12488] ? __pfx_pollwake+0x10/0x10 [ 297.450266][T12488] ? __pfx_pollwake+0x10/0x10 [ 297.450281][T12488] ? __pfx_pollwake+0x10/0x10 [ 297.450296][T12488] ? __pfx_pollwake+0x10/0x10 [ 297.450311][T12488] ? __pfx_pollwake+0x10/0x10 [ 297.450325][T12488] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 297.450343][T12488] ? set_compat_user_sigmask+0x213/0x2a0 [ 297.450355][T12488] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 297.450366][T12488] ? __fget_files+0x20e/0x3c0 [ 297.450380][T12488] ? handle_mm_fault+0x200/0xd10 [ 297.450397][T12488] __ia32_compat_sys_ppoll_time32+0x248/0x2c0 [ 297.450415][T12488] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 297.450431][T12488] ? ksys_write+0x1ac/0x250 [ 297.450447][T12488] ? __pfx_ksys_write+0x10/0x10 [ 297.450463][T12488] ? rcu_is_watching+0x12/0xc0 [ 297.450478][T12488] __do_fast_syscall_32+0x7c/0x3a0 [ 297.450495][T12488] do_fast_syscall_32+0x32/0x80 [ 297.450511][T12488] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.450527][T12488] RIP: 0023:0xf7f61579 [ 297.450539][T12488] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 297.450553][T12488] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000135 [ 297.450568][T12488] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 297.450577][T12488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.450586][T12488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.450595][T12488] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 297.450601][T12488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.450615][T12488] [ 297.554066][ C2] hpet_rtc_timer_reinit: 128 callbacks suppressed [ 297.554077][ C2] hpet: Lost 5 RTC interrupts [ 298.434060][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 299.484070][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 300.524119][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 301.230093][T12644] random: crng reseeded on system resumption [ 301.554109][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.594126][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 303.634086][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 303.949456][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 304.127542][T12805] x_tables: duplicate underflow at hook 1 [ 304.177976][T12807] netlink: 'syz.5.1236': attribute type 11 has an invalid length. [ 304.180553][T12807] netlink: 448 bytes leftover after parsing attributes in process `syz.5.1236'. [ 304.285787][T12818] input: syz1 as /devices/virtual/input/input108 [ 304.684113][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 305.111613][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1244'. [ 305.173413][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1244'. [ 305.714332][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 305.731989][T12927] FAULT_INJECTION: forcing a failure. [ 305.731989][T12927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.736153][T12927] CPU: 1 UID: 0 PID: 12927 Comm: syz.6.1252 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 305.736180][T12927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 305.736188][T12927] Call Trace: [ 305.736192][T12927] [ 305.736197][T12927] dump_stack_lvl+0x16c/0x1f0 [ 305.736216][T12927] should_fail_ex+0x512/0x640 [ 305.736235][T12927] _copy_from_user+0x2e/0xd0 [ 305.736247][T12927] memdup_user+0x6b/0xe0 [ 305.736265][T12927] strndup_user+0x78/0xe0 [ 305.736282][T12927] __ia32_sys_mount+0x180/0x310 [ 305.736293][T12927] ? __pfx___ia32_sys_mount+0x10/0x10 [ 305.736305][T12927] ? rcu_is_watching+0x12/0xc0 [ 305.736319][T12927] __do_fast_syscall_32+0x7c/0x3a0 [ 305.736336][T12927] do_fast_syscall_32+0x32/0x80 [ 305.736352][T12927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.736366][T12927] RIP: 0023:0xf7fc1579 [ 305.736375][T12927] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 305.736385][T12927] RSP: 002b:00000000f50a455c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 305.736396][T12927] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080004a00 [ 305.736402][T12927] RDX: 0000000080000040 RSI: 000000000100080f RDI: 0000000000000000 [ 305.736409][T12927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.736414][T12927] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 305.736421][T12927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.736433][T12927] [ 305.791668][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.682592][T12995] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 306.684705][T12995] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 306.713060][T12995] vhci_hcd vhci_hcd.0: Device attached [ 306.729625][T12995] netdevsim netdevsim2: Direct firmware load for @ failed with error -2 [ 306.732438][T12995] netdevsim netdevsim2: Falling back to sysfs fallback for: @ [ 306.754058][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 306.944087][ T29] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 307.063106][T12996] vhci_hcd: connection reset by peer [ 307.067682][T12912] vhci_hcd: stop threads [ 307.069601][T12912] vhci_hcd: release socket [ 307.071653][T12912] vhci_hcd: disconnect device [ 307.289121][T13041] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1267'. [ 307.426830][T13055] input: syz1 as /devices/virtual/input/input109 [ 307.794080][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 308.313032][T13111] FAULT_INJECTION: forcing a failure. [ 308.313032][T13111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.326788][T13111] CPU: 1 UID: 0 PID: 13111 Comm: syz.6.1278 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 308.326805][T13111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.326812][T13111] Call Trace: [ 308.326816][T13111] [ 308.326820][T13111] dump_stack_lvl+0x16c/0x1f0 [ 308.326840][T13111] should_fail_ex+0x512/0x640 [ 308.326860][T13111] _copy_from_user+0x2e/0xd0 [ 308.326872][T13111] __io_uring_register+0x4d0/0x2320 [ 308.326888][T13111] ? trace_contention_end+0xdd/0x130 [ 308.326905][T13111] ? __pfx___io_uring_register+0x10/0x10 [ 308.326922][T13111] ? __ia32_sys_io_uring_register+0x159/0x280 [ 308.326940][T13111] ? __pfx___mutex_lock+0x10/0x10 [ 308.326965][T13111] __ia32_sys_io_uring_register+0x169/0x280 [ 308.326984][T13111] __do_fast_syscall_32+0x7c/0x3a0 [ 308.327001][T13111] do_fast_syscall_32+0x32/0x80 [ 308.327017][T13111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 308.327031][T13111] RIP: 0023:0xf7fc1579 [ 308.327039][T13111] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 308.327050][T13111] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 00000000000001ab [ 308.327060][T13111] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000022 [ 308.327067][T13111] RDX: 0000000080000200 RSI: 0000000000000001 RDI: 0000000000000000 [ 308.327073][T13111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.327079][T13111] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 308.327085][T13111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.327098][T13111] [ 308.331301][T13114] FAULT_INJECTION: forcing a failure. [ 308.331301][T13114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.388747][T13114] CPU: 0 UID: 0 PID: 13114 Comm: syz.2.1280 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 308.388764][T13114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.388771][T13114] Call Trace: [ 308.388775][T13114] [ 308.388779][T13114] dump_stack_lvl+0x16c/0x1f0 [ 308.388799][T13114] should_fail_ex+0x512/0x640 [ 308.388829][T13114] _copy_from_user+0x2e/0xd0 [ 308.388840][T13114] sg_write+0x2cc/0xe10 [ 308.388856][T13114] ? __pfx_sg_write+0x10/0x10 [ 308.388883][T13114] ? apparmor_file_permission+0x251/0x400 [ 308.388897][T13114] ? bpf_lsm_file_permission+0x9/0x10 [ 308.388910][T13114] ? security_file_permission+0x71/0x210 [ 308.388925][T13114] ? rw_verify_area+0xcf/0x680 [ 308.388941][T13114] ? __pfx_sg_write+0x10/0x10 [ 308.388953][T13114] vfs_write+0x2a0/0x1150 [ 308.388971][T13114] ? __pfx_vfs_write+0x10/0x10 [ 308.388986][T13114] ? find_held_lock+0x2b/0x80 [ 308.388998][T13114] ? __fget_files+0x204/0x3c0 [ 308.389015][T13114] ? __fget_files+0x20e/0x3c0 [ 308.389029][T13114] ? handle_mm_fault+0x200/0xd10 [ 308.389048][T13114] ksys_write+0x12a/0x250 [ 308.389066][T13114] ? __pfx_ksys_write+0x10/0x10 [ 308.389083][T13114] ? rcu_is_watching+0x12/0xc0 [ 308.389097][T13114] __do_fast_syscall_32+0x7c/0x3a0 [ 308.389114][T13114] do_fast_syscall_32+0x32/0x80 [ 308.389130][T13114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 308.389144][T13114] RIP: 0023:0xf706e579 [ 308.389153][T13114] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 308.389163][T13114] RSP: 002b:00000000f505e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 308.389174][T13114] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000640 [ 308.389181][T13114] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.389187][T13114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.389193][T13114] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 308.389199][T13114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.389212][T13114] [ 308.632053][T13140] netlink: 'syz.2.1286': attribute type 10 has an invalid length. [ 308.632776][T13141] input: syz1 as /devices/virtual/input/input110 [ 308.643759][T13140] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.650122][T13140] bond0: (slave team0): Enslaving as an active interface with an up link [ 308.834064][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 308.898000][T13143] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 308.900863][T13143] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 308.906768][T13143] vhci_hcd vhci_hcd.0: Device attached [ 308.932629][T13156] vhci_hcd: connection closed [ 308.934722][ T13] vhci_hcd: stop threads [ 308.944559][ T13] vhci_hcd: release socket [ 308.946008][ T13] vhci_hcd: disconnect device [ 309.579928][T13198] Bluetooth: MGMT ver 1.23 [ 309.804839][T13232] FAULT_INJECTION: forcing a failure. [ 309.804839][T13232] name failslab, interval 1, probability 0, space 0, times 0 [ 309.814433][T13232] CPU: 2 UID: 0 PID: 13232 Comm: syz.2.1301 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 309.814450][T13232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.814457][T13232] Call Trace: [ 309.814461][T13232] [ 309.814466][T13232] dump_stack_lvl+0x16c/0x1f0 [ 309.814486][T13232] should_fail_ex+0x512/0x640 [ 309.814502][T13232] ? fs_reclaim_acquire+0xae/0x150 [ 309.814518][T13232] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 309.814534][T13232] should_failslab+0xc2/0x120 [ 309.814545][T13232] __kmalloc_noprof+0xd2/0x510 [ 309.814565][T13232] tomoyo_realpath_from_path+0xc2/0x6e0 [ 309.814582][T13232] ? tomoyo_profile+0x47/0x60 [ 309.814593][T13232] tomoyo_path_number_perm+0x245/0x580 [ 309.814606][T13232] ? tomoyo_path_number_perm+0x237/0x580 [ 309.814620][T13232] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 309.814648][T13232] ? find_held_lock+0x2b/0x80 [ 309.814659][T13232] ? hook_file_ioctl_common+0x145/0x410 [ 309.814675][T13232] ? __fget_files+0x20e/0x3c0 [ 309.814690][T13232] ? __fput_deferred+0x470/0x480 [ 309.814703][T13232] security_file_ioctl_compat+0x9b/0x240 [ 309.814719][T13232] __ia32_compat_sys_ioctl+0xc3/0x370 [ 309.814735][T13232] __do_fast_syscall_32+0x7c/0x3a0 [ 309.814753][T13232] do_fast_syscall_32+0x32/0x80 [ 309.814769][T13232] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.814783][T13232] RIP: 0023:0xf706e579 [ 309.814792][T13232] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 309.814803][T13232] RSP: 002b:00000000f503d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 309.814813][T13232] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400448c9 [ 309.814820][T13232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.814826][T13232] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.814832][T13232] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 309.814838][T13232] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.814851][T13232] [ 309.814855][T13232] ERROR: Out of memory at tomoyo_realpath_from_path. [ 309.874039][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 310.022270][T13240] input: syz1 as /devices/virtual/input/input111 [ 310.914072][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 311.634308][ T5960] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 311.635542][ T63] Bluetooth: hci0: command 0x1407 tx timeout [ 311.643798][T13232] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 311.645857][T13253] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 311.648783][T13229] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 311.862557][T13286] FAULT_INJECTION: forcing a failure. [ 311.862557][T13286] name failslab, interval 1, probability 0, space 0, times 0 [ 311.869036][T13286] CPU: 3 UID: 0 PID: 13286 Comm: syz.6.1313 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 311.869053][T13286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.869060][T13286] Call Trace: [ 311.869064][T13286] [ 311.869068][T13286] dump_stack_lvl+0x16c/0x1f0 [ 311.869088][T13286] should_fail_ex+0x512/0x640 [ 311.869108][T13286] should_failslab+0xc2/0x120 [ 311.869120][T13286] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 311.869137][T13286] ? trace_kmem_cache_alloc+0x28/0xc0 [ 311.869148][T13286] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 311.869164][T13286] ? __alloc_skb+0x2b2/0x380 [ 311.869181][T13286] __alloc_skb+0x2b2/0x380 [ 311.869196][T13286] ? __pfx___alloc_skb+0x10/0x10 [ 311.869215][T13286] ? __alloc_skb+0x200/0x380 [ 311.869229][T13286] ? __pfx___alloc_skb+0x10/0x10 [ 311.869246][T13286] create_monitor_ctrl_event+0x3b/0x450 [ 311.869265][T13286] mgmt_cmd_complete+0x2de/0x550 [ 311.869282][T13286] user_pairing_resp+0x31f/0x560 [ 311.869298][T13286] ? __print_lock_name+0x90/0xe0 [ 311.869311][T13286] ? __pfx_user_pairing_resp+0x10/0x10 [ 311.869327][T13286] ? do_raw_read_unlock+0x44/0xe0 [ 311.869344][T13286] ? _raw_read_unlock+0x28/0x50 [ 311.869359][T13286] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 311.869377][T13286] hci_sock_sendmsg+0x1522/0x25f0 [ 311.869396][T13286] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 311.869416][T13286] sock_write_iter+0x4ff/0x5b0 [ 311.869429][T13286] ? __pfx_sock_write_iter+0x10/0x10 [ 311.869445][T13286] ? bpf_lsm_file_permission+0x9/0x10 [ 311.869458][T13286] ? security_file_permission+0x71/0x210 [ 311.869474][T13286] ? rw_verify_area+0xcf/0x680 [ 311.869491][T13286] vfs_write+0x6c4/0x1150 [ 311.869507][T13286] ? __pfx_sock_write_iter+0x10/0x10 [ 311.869520][T13286] ? __pfx_vfs_write+0x10/0x10 [ 311.869534][T13286] ? find_held_lock+0x2b/0x80 [ 311.869554][T13286] ksys_write+0x1f8/0x250 [ 311.869569][T13286] ? __pfx_ksys_write+0x10/0x10 [ 311.869587][T13286] ? rcu_is_watching+0x12/0xc0 [ 311.869600][T13286] __do_fast_syscall_32+0x7c/0x3a0 [ 311.869617][T13286] do_fast_syscall_32+0x32/0x80 [ 311.869633][T13286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.869647][T13286] RIP: 0023:0xf7fc1579 [ 311.869656][T13286] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 311.869667][T13286] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 311.869677][T13286] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 311.869684][T13286] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 311.869690][T13286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.869696][T13286] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 311.869702][T13286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.869715][T13286] [ 311.954058][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 312.056054][ T40] audit: type=1804 audit(1749139692.415:269): pid=13296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1312" name="/newroot/110/bus/bus" dev="overlay" ino=620 res=1 errno=0 [ 312.070872][ T29] vhci_hcd: vhci_device speed not set [ 312.286975][T13303] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1315'. [ 312.288272][T13300] input: syz1 as /devices/virtual/input/input112 [ 312.510852][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1315'. [ 313.004065][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 313.036463][ T840] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 313.158904][T13348] random: crng reseeded on system resumption [ 313.205563][ T840] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.209353][ T840] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 313.212432][ T840] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.216434][ T840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.226018][T13327] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 313.231573][T13358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.232293][ T840] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.234285][T13358] IPv6: NLM_F_CREATE should be set when creating new route [ 313.265260][T13361] netlink: 5280 bytes leftover after parsing attributes in process `syz.8.1325'. [ 313.436191][T13375] FAULT_INJECTION: forcing a failure. [ 313.436191][T13375] name failslab, interval 1, probability 0, space 0, times 0 [ 313.440836][T13375] CPU: 0 UID: 0 PID: 13375 Comm: syz.6.1327 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 313.440854][T13375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.440861][T13375] Call Trace: [ 313.440866][T13375] [ 313.440870][T13375] dump_stack_lvl+0x16c/0x1f0 [ 313.440889][T13375] should_fail_ex+0x512/0x640 [ 313.440907][T13375] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 313.440926][T13375] should_failslab+0xc2/0x120 [ 313.440937][T13375] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 313.440954][T13375] ? mas_alloc_nodes+0x18b/0x8b0 [ 313.440970][T13375] mas_alloc_nodes+0x18b/0x8b0 [ 313.440986][T13375] mas_node_count_gfp+0x105/0x130 [ 313.441000][T13375] mas_preallocate+0x77b/0xda0 [ 313.441013][T13375] ? __pfx_mas_preallocate+0x10/0x10 [ 313.441035][T13375] ? __asan_memset+0x23/0x50 [ 313.441051][T13375] commit_merge+0x29a/0x1020 [ 313.441069][T13375] ? __pfx_commit_merge+0x10/0x10 [ 313.441087][T13375] ? vma_modify+0x136f/0x20a0 [ 313.441102][T13375] ? dup_anon_vma.constprop.0+0x74/0x320 [ 313.441120][T13375] vma_modify+0x959/0x20a0 [ 313.441139][T13375] ? __pfx_vma_modify+0x10/0x10 [ 313.441158][T13375] vma_modify_flags+0x212/0x2d0 [ 313.441175][T13375] ? __pfx_vma_modify_flags+0x10/0x10 [ 313.441191][T13375] ? mtree_range_walk+0x718/0xc00 [ 313.441223][T13375] mlock_fixup+0x27c/0xe50 [ 313.441242][T13375] apply_mlockall_flags+0x2d4/0x470 [ 313.441259][T13375] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 313.441276][T13375] ? __pfx___might_resched+0x10/0x10 [ 313.441292][T13375] ? __pfx_down_write_killable+0x10/0x10 [ 313.441310][T13375] ? __pfx_ksys_write+0x10/0x10 [ 313.441329][T13375] __do_sys_munlockall+0xc5/0x280 [ 313.441348][T13375] __do_fast_syscall_32+0x7c/0x3a0 [ 313.441365][T13375] do_fast_syscall_32+0x32/0x80 [ 313.441382][T13375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.441395][T13375] RIP: 0023:0xf7fc1579 [ 313.441405][T13375] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 313.441416][T13375] RSP: 002b:00000000f50c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000099 [ 313.441426][T13375] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 313.441433][T13375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.441439][T13375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.441445][T13375] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 313.441451][T13375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.441464][T13375] [ 313.441473][T13375] vmg ffffc90003a1fc68 dumped because: VM_WARN_ON_VMG(prev && start <= prev->vm_start) [ 313.532369][T13375] vmg ffffc90003a1fc68 state: mm ffff8880647c4b40 pgoff 80000 [ 313.532369][T13375] vmi ffffc90003a1fe20 [80000000,80800000) [ 313.532369][T13375] prev ffff888012f95a40 middle ffff888012f95a40 next 0000000000000000 target 0000000000000000 [ 313.532369][T13375] start 80000000 end 80800000 flags 8100077 [ 313.532369][T13375] file 0000000000000000 anon_vma ffff888077677ba0 policy 0000000000000000 [ 313.532369][T13375] uffd_ctx 0000000000000000 [ 313.532369][T13375] anon_name 0000000000000000 [ 313.532369][T13375] state 0 [ 313.532369][T13375] just_expand 0 [ 313.532369][T13375] __adjust_middle_start 0 __adjust_next_start 0 [ 313.532369][T13375] __remove_middle 0 __remove_next 0 [ 313.537239][ T840] usb 10-1: USB disconnect, device number 6 [ 313.552043][T13375] vmg ffffc90003a1fc68 mm: [ 313.556165][T13375] mm ffff8880647c4b40 task_size 4294959104 [ 313.556165][T13375] mmap_base 139921092579328 mmap_legacy_base 47711702589440 [ 313.556165][T13375] pgd ffff88805966d000 mm_users 3 mm_count 1 pgtables_bytes 118784 map_count 33 [ 313.556165][T13375] hiwater_rss 14ce hiwater_vm 5f5c total_vm 5f9e locked_vm 800 [ 313.556165][T13375] pinned_vm 0 data_vm 23c5 exec_vm 1ac stack_vm 21 [ 313.556165][T13375] start_code f7109000 end_code f72b27f8 start_data f7460000 end_data f7460000 [ 313.556165][T13375] start_brk 573f2000 brk 57414000 start_stack ffe9f4a0 [ 313.556165][T13375] arg_start ffe9ff6f arg_end ffe9ff82 env_start ffe9ff82 env_end ffe9ffea [ 313.556165][T13375] binfmt ffffffff8e613a60 flags 800007fd [ 313.556165][T13375] ioctx_table 0000000000000000 [ 313.556165][T13375] owner ffff888041abc880 exe_file ffff88802577efc0 [ 313.556165][T13375] notifier_subscriptions 0000000000000000 [ 313.556165][T13375] numa_next_scan 4294968609 numa_scan_offset 0 numa_scan_seq 0 [ 313.556165][T13375] tlb_flush_pending 0 [ 313.556165][T13375] def_flags: 0x0() [ 313.616775][T13375] vmg ffffc90003a1fc68 prev: [ 313.618279][T13375] vma ffff888012f95a40 start 0000000080000000 end 0000000080800000 mm ffff8880647c4b40 [ 313.618279][T13375] prot 25 anon_vma ffff888077677ba0 vm_ops 0000000000000000 [ 313.618279][T13375] pgoff 80000 file 0000000000000000 private_data 0000000000000000 [ 313.618279][T13375] refcnt 1 [ 313.618279][T13375] flags: 0x8102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty) [ 313.636883][T13375] vmg ffffc90003a1fc68 middle: [ 313.638535][T13375] vma ffff888012f95a40 start 0000000080000000 end 0000000080800000 mm ffff8880647c4b40 [ 313.638535][T13375] prot 25 anon_vma ffff888077677ba0 vm_ops 0000000000000000 [ 313.638535][T13375] pgoff 80000 file 0000000000000000 private_data 0000000000000000 [ 313.638535][T13375] refcnt 1 [ 313.638535][T13375] flags: 0x8102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty) [ 313.650577][T13375] vmg ffffc90003a1fc68 next: (NULL) [ 313.652445][T13375] vmg ffffc90003a1fc68 vmi: [ 313.654184][T13375] MAS: tree=ffff8880647c4b80 enode=ffff88806e8ebe0c [ 313.654196][T13375] (ma_active) [ 313.656755][T13375] Store Type: [ 313.658099][T13375] node_store [ 313.660476][T13375] [8/14] index=80000000 last=807fffff [ 313.662463][T13375] min=0 max=f50c6fff alloc=0000000000000000, depth=0, flags=0 [ 313.665256][T13375] maple_tree(ffff8880647c4b80) flags 30B, height 2 root ffff88806e8eb01e [ 313.668090][T13375] 0-ffffffffffffffff: node ffff88806e8eb000 depth 0 type 3 parent ffff8880647c4b81 contents: 740a4000 0 ffffffff00160000 0 0 0 0 0 0 0 | 02 02| ffff88806e8ebe0c F50C6FFF ffff88806e8eae0c F6CEFFFF ffff8880247baa0c FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 313.678861][T13375] 0-f50c6fff: node ffff88806e8ebe00 depth 1 type 1 parent ffff88806e8eb006 contents: 0000000000000000 C22FFFF ffff888012f957c0 E22FFFF 0000000000000000 30E1FFFF ffff888012f95680 30E5FFFF 0000000000000000 573F1FFF ffff888012f95540 57413FFF 0000000000000000 7FFFEFFF ffff888012f95400 7FFFFFFF ffff888012f95a40 807FFFFF ffff888054bc9400 80FFFFFF ffff888012f95cc0 81000FFF 0000000000000000 F50A4FFF ffff888054bc9900 F50A5FFF ffff8880605f12c0 F50C5FFF ffff888054bc8c80 F50C6FFF 000000000000000e [ 313.702603][T13375] 0-c22ffff: 0000000000000000 [ 313.705190][T13375] c230000-e22ffff: ffff888012f957c0 [ 313.707041][T13375] e230000-30e1ffff: 0000000000000000 [ 313.708838][T13375] 30e20000-30e5ffff: ffff888012f95680 [ 313.710636][T13375] 30e60000-573f1fff: 0000000000000000 [ 313.712483][T13375] 573f2000-57413fff: ffff888012f95540 [ 313.716510][T13375] 57414000-7fffefff: 0000000000000000 [ 313.718773][T13375] 7ffff000-7fffffff: ffff888012f95400 [ 313.720779][T13375] 80000000-807fffff: ffff888012f95a40 [ 313.722703][T13375] 80800000-80ffffff: ffff888054bc9400 [ 313.726190][T13375] 81000000-81000fff: ffff888012f95cc0 [ 313.728252][T13375] 81001000-f50a4fff: 0000000000000000 [ 313.730250][T13375] f50a5000-f50a5fff: ffff888054bc9900 [ 313.732192][T13375] f50a6000-f50c5fff: ffff8880605f12c0 [ 313.736534][T13375] f50c6000-f50c6fff: ffff888054bc8c80 [ 313.738457][T13375] f50c7000-f6ceffff: node ffff88806e8eae00 depth 1 type 1 parent ffff88806e8eb00e contents: ffff888012f95b80 F50E6FFF ffff8880605f1b80 F50E7FFF ffff888012f95e00 F58E7FFF ffff888012f95180 F58E8FFF ffff888012f95040 F60E8FFF ffff888012f94f00 F60EAFFF ffff888012f94dc0 F64EAFFF ffff888012f06a00 F64ECFFF ffff888012f068c0 F68ECFFF ffff888012f07180 F68EEFFF ffff888012f07900 F6CEEFFF ffff888012f07e00 F6CEFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 000000000000000b [ 313.753043][T13375] f50c7000-f50e6fff: ffff888012f95b80 [ 313.762548][T13375] f50e7000-f50e7fff: ffff8880605f1b80 [ 313.768364][T13375] f50e8000-f58e7fff: ffff888012f95e00 [ 313.770333][T13375] f58e8000-f58e8fff: ffff888012f95180 [ 313.772316][T13375] f58e9000-f60e8fff: ffff888012f95040 [ 313.778494][T13375] f60e9000-f60eafff: ffff888012f94f00 [ 313.787544][T13375] f60eb000-f64eafff: ffff888012f94dc0 [ 313.813679][T13375] f64eb000-f64ecfff: ffff888012f06a00 [ 313.816759][T13375] f64ed000-f68ecfff: ffff888012f068c0 [ 313.866906][T13375] f68ed000-f68eefff: ffff888012f07180 [ 313.868746][T13375] f68ef000-f6ceefff: ffff888012f07900 [ 313.870505][T13375] f6cef000-f6ceffff: ffff888012f07e00 [ 313.872429][T13375] f6cf0000-ffffffffffffffff: node ffff8880247baa00 depth 1 type 1 parent ffff88806e8eb016 contents: ffff888012f06000 F70EFFFF ffff88806c9d3400 F7108FFF ffff88806c9d3cc0 F72B2FFF ffff88806c9d3540 F7389FFF ffff88806c9d3a40 F7452FFF ffff88806c9d3e00 F745AFFF 0000000000000000 F745FFFF ffff88806c9d3b80 F7FBAFFF ffff88806c9d3680 F7FBEFFF ffff88806c9d37c0 F7FC0FFF ffff88806c9d3900 F7FC2FFF 0000000000000000 FFE7EFFF ffff8880605f1040 FFE9FFFF 0000000000000000 FFFFFFFFFFFFFFFF 0000000000000000 0 000000000000000d [ 313.904266][T13375] f6cf0000-f70effff: ffff888012f06000 [ 313.906060][T13375] f70f0000-f7108fff: ffff88806c9d3400 [ 313.907787][T13375] f7109000-f72b2fff: ffff88806c9d3cc0 [ 313.909558][T13375] f72b3000-f7389fff: ffff88806c9d3540 [ 313.911381][T13375] f738a000-f7452fff: ffff88806c9d3a40 [ 313.913123][T13375] f7453000-f745afff: ffff88806c9d3e00 [ 313.918371][T13375] f745b000-f745ffff: 0000000000000000 [ 313.920197][T13375] f7460000-f7fbafff: ffff88806c9d3b80 [ 313.922258][T13375] f7fbb000-f7fbefff: ffff88806c9d3680 [ 313.924612][T13375] f7fbf000-f7fc0fff: ffff88806c9d37c0 [ 313.926381][T13375] f7fc1000-f7fc2fff: ffff88806c9d3900 [ 313.928140][T13375] f7fc3000-ffe7efff: 0000000000000000 [ 313.932422][T13375] ffe7f000-ffe9ffff: ffff8880605f1040 [ 313.936699][T13375] ffea0000-ffffffffffffffff: 0000000000000000 [ 313.938742][T13375] ------------[ cut here ]------------ [ 313.940432][T13375] WARNING: CPU: 0 PID: 13375 at mm/vma.c:808 vma_modify+0xa28/0x20a0 [ 313.943406][T13375] Modules linked in: [ 313.945082][T13375] CPU: 0 UID: 0 PID: 13375 Comm: syz.6.1327 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 313.950074][T13375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.953455][T13375] RIP: 0010:vma_modify+0xa28/0x20a0 [ 313.955160][T13375] Code: 12 00 00 4c 8b 63 28 4d 85 e4 0f 85 86 02 00 00 e9 b3 01 00 00 e8 28 f9 a9 ff 48 c7 c6 e0 03 9c 8b 48 89 df e8 f9 22 f2 ff 90 <0f> 0b 90 e9 51 f8 ff ff e8 0b f9 a9 ff 48 8b 54 24 20 48 b8 00 00 [ 313.960948][T13375] RSP: 0018:ffffc90003a1fb48 EFLAGS: 00010293 [ 313.963011][T13375] RAX: 0000000000000000 RBX: ffffc90003a1fc68 RCX: ffffffff8b71a883 [ 313.965469][T13375] RDX: ffff888012f2c880 RSI: ffffffff82118997 RDI: 0000000000000006 [ 313.967902][T13375] RBP: ffff888012f95a40 R08: 0000000000000006 R09: ffffffffffffffff [ 313.970297][T13375] R10: ffffffffffffffff R11: 0000000000000001 R12: 0000000080000001 [ 313.972742][T13375] R13: 0000000000000001 R14: 0000000080000000 R15: ffffc90003a1fc88 [ 313.975245][T13375] FS: 0000000000000000(0000) GS:ffff888097765000(0063) knlGS:00000000f50c5b40 [ 313.978272][T13375] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 313.980326][T13375] CR2: 0000559ee2961950 CR3: 000000005966d000 CR4: 0000000000352ef0 [ 313.982887][T13375] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 313.985417][T13375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 313.987992][T13375] Call Trace: [ 313.989046][T13375] [ 313.989977][T13375] ? __pfx_vma_modify+0x10/0x10 [ 313.991622][T13375] vma_modify_flags+0x212/0x2d0 [ 313.993138][T13375] ? __pfx_vma_modify_flags+0x10/0x10 [ 313.994837][T13375] ? mtree_range_walk+0x718/0xc00 [ 313.996437][T13375] ? mas_walk+0x6a6/0x910 [ 313.997780][T13375] mlock_fixup+0x27c/0xe50 [ 313.999189][T13375] apply_mlockall_flags+0x2d4/0x470 [ 314.000807][T13375] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 314.003117][T13375] ? __pfx___might_resched+0x10/0x10 [ 314.004944][T13375] ? __pfx_down_write_killable+0x10/0x10 [ 314.006656][T13375] ? __pfx_ksys_write+0x10/0x10 [ 314.008176][T13375] __do_sys_munlockall+0xc5/0x280 [ 314.009757][T13375] __do_fast_syscall_32+0x7c/0x3a0 [ 314.011374][T13375] do_fast_syscall_32+0x32/0x80 [ 314.012899][T13375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.014917][T13375] RIP: 0023:0xf7fc1579 [ 314.016184][T13375] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 314.022009][T13375] RSP: 002b:00000000f50c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000099 [ 314.024609][T13375] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 314.027009][T13375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.029453][T13375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.032118][T13375] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 314.034590][T13375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.037010][T13375] [ 314.037990][T13375] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 314.040183][T13375] CPU: 0 UID: 0 PID: 13375 Comm: syz.6.1327 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 314.043708][T13375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 314.046973][T13375] Call Trace: [ 314.048030][T13375] [ 314.048967][T13375] dump_stack_lvl+0x3d/0x1f0 [ 314.050378][T13375] panic+0x71c/0x800 [ 314.051654][T13375] ? __pfx_panic+0x10/0x10 [ 314.053533][T13375] ? show_trace_log_lvl+0x29b/0x3e0 [ 314.055219][T13375] ? check_panic_on_warn+0x1f/0xb0 [ 314.056781][T13375] ? vma_modify+0xa28/0x20a0 [ 314.058189][T13375] check_panic_on_warn+0xab/0xb0 [ 314.059710][T13375] __warn+0xf6/0x3c0 [ 314.061038][T13375] ? vma_modify+0xa28/0x20a0 [ 314.062496][T13375] report_bug+0x3c3/0x580 [ 314.063883][T13375] ? vma_modify+0xa28/0x20a0 [ 314.065340][T13375] handle_bug+0x184/0x210 [ 314.066708][T13375] exc_invalid_op+0x17/0x50 [ 314.068163][T13375] asm_exc_invalid_op+0x1a/0x20 [ 314.069698][T13375] RIP: 0010:vma_modify+0xa28/0x20a0 [ 314.071459][T13375] Code: 12 00 00 4c 8b 63 28 4d 85 e4 0f 85 86 02 00 00 e9 b3 01 00 00 e8 28 f9 a9 ff 48 c7 c6 e0 03 9c 8b 48 89 df e8 f9 22 f2 ff 90 <0f> 0b 90 e9 51 f8 ff ff e8 0b f9 a9 ff 48 8b 54 24 20 48 b8 00 00 [ 314.077534][T13375] RSP: 0018:ffffc90003a1fb48 EFLAGS: 00010293 [ 314.079773][T13375] RAX: 0000000000000000 RBX: ffffc90003a1fc68 RCX: ffffffff8b71a883 [ 314.082668][T13375] RDX: ffff888012f2c880 RSI: ffffffff82118997 RDI: 0000000000000006 [ 314.085209][T13375] RBP: ffff888012f95a40 R08: 0000000000000006 R09: ffffffffffffffff [ 314.087625][T13375] R10: ffffffffffffffff R11: 0000000000000001 R12: 0000000080000001 [ 314.090041][T13375] R13: 0000000000000001 R14: 0000000080000000 R15: ffffc90003a1fc88 [ 314.092551][T13375] ? mt_dump_node+0xcd3/0x16d0 [ 314.094054][T13375] ? vma_modify+0xa27/0x20a0 [ 314.095507][T13375] ? vma_modify+0xa27/0x20a0 [ 314.096970][T13375] ? __pfx_vma_modify+0x10/0x10 [ 314.098495][T13375] vma_modify_flags+0x212/0x2d0 [ 314.100007][T13375] ? __pfx_vma_modify_flags+0x10/0x10 [ 314.101925][T13375] ? mtree_range_walk+0x718/0xc00 [ 314.103511][T13375] ? mas_walk+0x6a6/0x910 [ 314.104791][T13375] mlock_fixup+0x27c/0xe50 [ 314.106199][T13375] apply_mlockall_flags+0x2d4/0x470 [ 314.107849][T13375] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 314.109635][T13375] ? __pfx___might_resched+0x10/0x10 [ 314.111432][T13375] ? __pfx_down_write_killable+0x10/0x10 [ 314.113303][T13375] ? __pfx_ksys_write+0x10/0x10 [ 314.114832][T13375] __do_sys_munlockall+0xc5/0x280 [ 314.116417][T13375] __do_fast_syscall_32+0x7c/0x3a0 [ 314.118010][T13375] do_fast_syscall_32+0x32/0x80 [ 314.119526][T13375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.121691][T13375] RIP: 0023:0xf7fc1579 [ 314.123314][T13375] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 314.128927][T13375] RSP: 002b:00000000f50c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000099 [ 314.131698][T13375] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 314.134288][T13375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.136732][T13375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.139194][T13375] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 314.141920][T13375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.144815][T13375] [ 314.146364][T13375] Kernel Offset: disabled [ 314.147705][T13375] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:08:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8557aa85 RDI=ffffffff9ae69a00 RBP=ffffffff9ae699c0 RSP=ffffc90003a1f4b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000054 R14=ffffffff9ae699c0 R15=ffffffff8557aa20 RIP=ffffffff8557aaaf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097765000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000559ee2961950 CR3=000000005966d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eaf0ec4c50 000055eaf0ec4c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8602ebc0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6566662020202020 5d3537333331545b 5d3232343233392e 33313320205b203a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6620464646393833 3746203034353364 3963363038383866 6666662046464632 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4232374620306363 3364396336303838 3866666666204646 4638303137462030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3034336439633630 3838386666666620 4646464645303746 2030303036306632 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130383838666666 66203a73746e6574 6e6f632036313062 6538653630383838 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000d2fcc7 RBX=0000000000000001 RCX=ffffffff8b7b4c69 RDX=0000000000000000 RSI=ffffffff8dc0ea98 RDI=ffffffff8bf55a60 RBP=ffffed1003a57488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801d2ba440 R14=ffffffff90881950 R15=0000000000000000 RIP=ffffffff8b7b37cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097865000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f4c01da4 CR3=00000000003b4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=000000000000004a RCX=ffffffff84900152 RDX=ffff88802319c880 RSI=ffffffff8490015c RDI=0000000000000004 RBP=ffff8880203ccfdd RSP=ffffc90004997700 R8 =0000000000000004 R9 =0000000000000030 R10=0000000000000010 R11=0000000000000001 R12=0000000000000030 R13=0000000000000010 R14=0000000000000010 R15=dffffc0000000000 RIP=ffffffff81bb82c0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f466588fc80 ffffffff 00c00000 GS =0000 ffff888097965000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562ff950bf40 CR3=00000000760a1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffe80 Opmask01=000000000000001c Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000069 616d6f6401828700 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000075676f0086 8589888482818387 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69616d6f64018287 00873d6663018287 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 31343132312d7265 00007f46659f0d48 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000393734393465 0000562ff94ff890 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265767265730182 3d68637261657301 823d6e69616d6f64 01828700873d6663 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f584b4f584e0182 00555e4f5c584e01 820053545c505259 0182870087005b5e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000f 00000000873d7373 6e64725f77656e01 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff8880217dae40 RCX=ffffffff81985493 RDX=1ffff110042fb5ca RSI=0000000000000004 RDI=ffff8880217dae40 RBP=ffff8880246951a8 RSP=ffffc90002b97e40 R8 =0000000000000000 R9 =ffffed10042fb5c8 R10=ffff8880217dae43 R11=0000000000000001 R12=ffff8880217dae50 R13=0000000100000000 R14=00000000ffbe50bc R15=0000000000000000 RIP=ffffffff819854dc RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097a65000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffefa30c668 CR3=0000000060e41000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000