last executing test programs: 8m25.466639s ago: executing program 0 (id=209): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x80, 0x25, 0x20, 0x17a1, 0x128, 0xae33, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x5, 0xd0, 0x5, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x95, 0xbd, 0x7f}}]}}]}}, 0x0) 8m24.280081333s ago: executing program 0 (id=228): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 8m24.279663587s ago: executing program 0 (id=229): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="4000000018"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)}, {&(0x7f0000002840)="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", 0x3b9}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8m24.101031267s ago: executing program 0 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x44000, 0x0) 8m24.100221441s ago: executing program 0 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 8m23.767924232s ago: executing program 0 (id=237): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 8m23.686430079s ago: executing program 32 (id=237): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 5m21.297643546s ago: executing program 3 (id=3274): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r0, 0x1, 0x71bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0d109731cd"}]}]}, 0x38}, 0x1, 0x0, 0xcac0f00, 0x40188d4}, 0x8010) 5m21.237240593s ago: executing program 3 (id=3276): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0x10) write(r0, &(0x7f0000000000)="8fcefe000048000000160000000000127f2226bb75a44056", 0x18) 5m21.234804411s ago: executing program 3 (id=3278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb9", 0xd7}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a", 0x6b}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m21.2343445s ago: executing program 3 (id=3279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000140)={0x4, 0x1, 0x200000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x8}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a09"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x54840) recvmmsg(r2, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) eventfd(0x8) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000340)="3949f8017aa147be48f3ead41b9bb6747a75ced8f0557ee2a3569383f46a42bb123ac20df2d0661e2461c05073f646e144e39fb47b065118a3e587d41a014095e693588dc46d775bdb4665ee2c62fa32b89f8ea84f081e4a7c3d659b4dff23399868c821cde3085806dc113aeed22b77cf495fce58660c640447c3a1b1fc728a57a64401fe37bc0163051bfbca8dc20c40acac3e", 0x94}, {&(0x7f0000001700)="b35376902652f17749bc29b4bc0abadac0be61e6992361d2853b6f63c9a0f037b0b56ff2af96c5b5edd1f975435e6313f46a76d2302721c54e6489ce80cd025742b1578ec24c744a960e0000", 0x4c}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000500)="941bc707570ade934290bb66436d1a8aada70b8b8c5c9189672636c28007ae67062e9f4ecec6752379d88bf29c659da1499b04c0ef88aab67c9d6f8a1f11178ee9ec3e813e7ca1be4a1a84b6a5af8f36e719007ba529b4f4010000002e7f421c61d5153cd68ad4cc3c2d45aa3da0d0e23d501e549d9a2bce47450700000000000000a679d4cb300bd3fdd564ce74be9a6e22289751470e799ba5c7bc990a20ab9a2cd99aa4963fdfb51fa40a051e5b52e77f6a0b2fcaa159428f458f8e2b6af0c6df38d27df263fcf5754c3b7ccdf3790e18ec9f66996a", 0xd7}, {&(0x7f0000001600)="db020a5051797436ea219da58981ac8252e9c3c874dadc1ccb330dc85b52ac4289e09a64d2fc40d38a9611733ce34b7f99f855913fa25a187f0ad8cf99a7d34662e82f9c0c527e32158a72aca1cd0c967a2a229063f2cec08c2d131a6399c9f9454af2516947c9255025cfee3435899b689451dd275f1a38d6695ab7648090768671917e6f783e813a15d550fdc1d9a816045566fecb4ab2779710863ee2116d94c35f23be72e5371ba01becd5dea508a1728b1221b75a5a1cbe05038b6ac2b5ae04ec200a2b6ef51ed7814ea4a49ba2c66da5a4adcd2006c3819bc7faeba2d314c2e822b4", 0xe5}], 0x5) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 5m21.026338395s ago: executing program 3 (id=3280): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='pstore\x00', 0x2000001, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000240)='./bus\x00', 0x21) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1c113e, 0x40) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000080)=0x0) chown(&(0x7f0000000040)='./file0\x00', r2, 0xffffffffffffffff) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) 5m20.678180395s ago: executing program 3 (id=3281): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x800) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x2, 0x1}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x95}, 0x4004) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xf1d, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) (async, rerun: 32) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008814}, 0x4010) 5m20.580876168s ago: executing program 33 (id=3281): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x800) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x2, 0x1}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x95}, 0x4004) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xf1d, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) (async, rerun: 32) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008814}, 0x4010) 5m14.106149638s ago: executing program 1 (id=3400): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x40, r2, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='v'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x6a61fad1863abe55}]}]}]}, 0x40}, 0x1, 0x500000000000000, 0x0, 0x80}, 0x4804) 5m14.058426364s ago: executing program 1 (id=3402): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) (async) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) ppoll(&(0x7f0000000440)=[{r0, 0x5000}, {r2, 0x1610}, {r2, 0x10}, {r2}, {r3, 0x100}, {r4, 0x602}, {r5, 0x200}], 0x7, &(0x7f0000000480), &(0x7f0000000500)={[0x8]}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0xa11f, 0x7, 0x8, 0x1f3, 0xf3, 0x0, 0xd, 0xde39, 0x9, 0x9, 0x5, 0x8, 0x4c, 0xf1, 0xf43]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x20b, 0xffffff9d, 0x3, r6}, &(0x7f0000000280)=0x10) 5m14.05825862s ago: executing program 1 (id=3403): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x48) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00, 0x0, 0x100000}]) 5m13.878364801s ago: executing program 1 (id=3406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfb", 0x77}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad12", 0xe4}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m13.877839109s ago: executing program 1 (id=3407): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000006ffc)=0x4000000000000200, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r8, &(0x7f0000000300)) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000980), 0xfdef) splice(r10, 0x0, r13, 0x0, 0x80, 0x4) (async) splice(r10, 0x0, r13, 0x0, 0x80, 0x4) read$FUSE(r12, &(0x7f0000000980)={0x2020}, 0x2020) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff2, 0xfff1}, {}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x24042814) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff2, 0xfff1}, {}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x24042814) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r14, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r14, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@gettfilter={0x64, 0x2e, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xf}, {0x2, 0x2}, {0xe}}, [{0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x24028082}, 0x4044080) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@gettfilter={0x64, 0x2e, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xf}, {0x2, 0x2}, {0xe}}, [{0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x24028082}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @remote}, 0x14) open$dir(&(0x7f0000000100)='./file0\x00', 0x80, 0x20) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x80, 0x20) 5m12.967216593s ago: executing program 1 (id=3431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfb", 0x77}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad12", 0xe4}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m56.961100301s ago: executing program 34 (id=3431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfb", 0x77}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad12", 0xe4}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m20.333504847s ago: executing program 2 (id=7083): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f00000002c0)) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2}) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x24008881) 1m20.216126141s ago: executing program 2 (id=7084): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"9d2d6858f3014133fa118f5c265cf8c1ffe3c2b86f91ff3591a8039cdd7d7ec6", 0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f00000007c0)={0x1, 0x1ff}) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) poll(&(0x7f0000000100)=[{r0, 0x1504}, {r1, 0x8000}, {r2, 0x520}, {r3, 0x8002}, {0xffffffffffffffff, 0x1220}, {}, {r4, 0x2000}, {r5, 0xb003}], 0x8, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x2}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"9d2d6858f3014133fa118f5c265cf8c1ffe3c2b86f91ff3591a8039cdd7d7ec6"}) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f00000007c0)={0x1, 0x1ff}) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async) poll(&(0x7f0000000100)=[{r0, 0x1504}, {r1, 0x8000}, {r2, 0x520}, {r3, 0x8002}, {0xffffffffffffffff, 0x1220}, {}, {r4, 0x2000}, {r5, 0xb003}], 0x8, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x2}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) 1m20.133765288s ago: executing program 2 (id=7086): r0 = inotify_init() r1 = socket$l2tp(0x2, 0x2, 0x73) listen(r1, 0x4) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0x850003d1) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) 1m20.045823192s ago: executing program 2 (id=7089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x3) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x3) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) 1m19.974956811s ago: executing program 2 (id=7091): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x5, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x5, 0x2) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close(r0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchown(r2, 0x0, 0x0) clock_nanosleep(0x3, 0x0, &(0x7f0000000080), &(0x7f0000000100)) (async) clock_nanosleep(0x3, 0x0, &(0x7f0000000080), &(0x7f0000000100)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x7a09280d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x102, 0x1cc) sendfile(r7, r7, 0x0, 0x6) (async) sendfile(r7, r7, 0x0, 0x6) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) listen(r6, 0x2) (async) listen(r6, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000006c0)) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r8, 0xaea2, 0x7f) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x10}]}) 1m19.092161248s ago: executing program 2 (id=7105): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) (async) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0088a81327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x15, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) sendmmsg$unix(r7, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x20000000) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x5) (async) r8 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000000080)={0x2020}, 0x2020) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230800000000030000000b00000008000300", @ANYRES32=r11, @ANYBLOB="0a0006000802110000010000200050800500020002000000090001007ee5d52ffd0000000800030001ac0f00"], 0x48}}, 0x40000) (async, rerun: 32) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r10, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r12, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0xfffffffffffffcf5, 0x3, 0x4002}]}}]}, 0x40}}, 0x0) 1m3.884635936s ago: executing program 35 (id=7105): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) (async) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0088a81327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x15, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) sendmmsg$unix(r7, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x20000000) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x5) (async) r8 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000000080)={0x2020}, 0x2020) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230800000000030000000b00000008000300", @ANYRES32=r11, @ANYBLOB="0a0006000802110000010000200050800500020002000000090001007ee5d52ffd0000000800030001ac0f00"], 0x48}}, 0x40000) (async, rerun: 32) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r10, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r12, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0xfffffffffffffcf5, 0x3, 0x4002}]}}]}, 0x40}}, 0x0) 28.102673438s ago: executing program 5 (id=7678): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r3, &(0x7f00000000c0)=""/53, 0x35) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060064680000080008000000000008000b0073"], 0x54}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x50, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x71}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdf}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c880}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xc01, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 27.405827821s ago: executing program 5 (id=7685): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0xa4a4, 0x6, 0x8000, 0x6ffb}) 27.403582539s ago: executing program 5 (id=7686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bynd=s']) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x5}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x65, 0x95, 0x2, 0xb8, 0x8, 0x3, 0x4, 0x3, 0x8, 0x9, 0x6, 0x5, 0x7, 0xce, 0x9, 0x9}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0xffffffffffffffff, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27.205808414s ago: executing program 5 (id=7694): r0 = io_uring_setup(0x41bd, &(0x7f0000000000)={0x0, 0x88758, 0x800, 0x2, 0x255}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000080)={0x400}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000572000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_PBURST={0x8, 0x7, 0x1bb8}]}}]}, 0x60}}, 0x44080) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000240)) (async) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000240)) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r8, 0x701, 0x70bd25, 0x25dfdbfd, {0xb}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r8, 0x701, 0x70bd25, 0x25dfdbfd, {0xb}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17.80762107s ago: executing program 4 (id=7726): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 17.804489325s ago: executing program 4 (id=7728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="010029bd700000000000010000001400020077673000000000000000000000000000cc0008802800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691ca000008024000200754da32d7227a3b7b70c62527a4a568f17a7ebc88bd526cfa8f9937d7f5d72355400098028000080060001000a00000014000200fe8000000000000000000000000000bb050003000300000028000080060001000a00000014000200fe8000000000000000000000000000bb050003000200000024000100dbffffffffffffffffffffffffffffffffffffffffff06ffffffffffffffffff"], 0xf4}, 0x1, 0x0, 0x0, 0x4004840}, 0x44000) r2 = socket(0x840000000002, 0x800, 0x9) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r5, &(0x7f0000012400)={0x2020}, 0x2020) preadv2(r4, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x3) 17.66887267s ago: executing program 4 (id=7729): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x1, @pix_mp={0x7, 0x80000001, 0x3631564e, 0x1, 0x9, [{0x1, 0x8}, {0xa, 0x4}, {0x3, 0x9}, {0x80000001, 0xffff}, {0xe647, 0x325a935}, {0x6, 0x8}, {0xdc23, 0x7fffffff}, {0x1, 0x2}], 0x8, 0xb, 0x0, 0x2, 0x5}}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x44041}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x49, 0x0, &(0x7f0000000680)="755bb05395201ad875a81f08fbf73c46403cbcf9922ed5e124d4576314b9d703e2270ea77e8be9b7d6a78d90f5cd95c2293b2397fd6fbb743e63ffe5e2e2d924e7f40180f4b1704f0f", 0x0}, 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x1f, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x1, @pix_mp={0x7, 0x80000001, 0x3631564e, 0x1, 0x9, [{0x1, 0x8}, {0xa, 0x4}, {0x3, 0x9}, {0x80000001, 0xffff}, {0xe647, 0x325a935}, {0x6, 0x8}, {0xdc23, 0x7fffffff}, {0x1, 0x2}], 0x8, 0xb, 0x0, 0x2, 0x5}}) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x44041}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x49, 0x0, &(0x7f0000000680)="755bb05395201ad875a81f08fbf73c46403cbcf9922ed5e124d4576314b9d703e2270ea77e8be9b7d6a78d90f5cd95c2293b2397fd6fbb743e63ffe5e2e2d924e7f40180f4b1704f0f", 0x0}, 0x50) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x1f, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) (async) 17.591496974s ago: executing program 6 (id=7731): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x6f, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x150, 0x29, 0x36, {0x5e, 0x26, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1]}}, @generic={0x8, 0x95, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e03"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x338}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xbad}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17.518792941s ago: executing program 7 (id=7732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xff35, &(0x7f0000000040)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xe038}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82840) ioctl$CEC_ADAP_G_LOG_ADDRS(r1, 0x805c6103, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{&(0x7f0000000100)=@l2, 0x80, &(0x7f0000001900)=[{&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/225, 0xe1}, {&(0x7f00000005c0)=""/89, 0x59}, {&(0x7f0000001880)=""/72, 0x48}], 0x6, &(0x7f0000000180)=""/61, 0x3d}, 0x6}, {{&(0x7f0000001980)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001a00)=""/88, 0x58}, {&(0x7f0000001a80)=""/222, 0xde}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000000500)=""/48, 0x30}, {&(0x7f0000001c40)=""/66, 0x42}, {&(0x7f0000001cc0)=""/142, 0x8e}], 0x8, &(0x7f0000000640)=""/2, 0x2}, 0x7}, {{&(0x7f0000001e00), 0x80, &(0x7f00000031c0)=[{&(0x7f0000001e80)=""/50, 0x32}, {&(0x7f0000001ec0)=""/74, 0x4a}, {&(0x7f0000001f40)=""/73, 0x49}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/247, 0xf7}, {&(0x7f00000030c0)=""/196, 0xc4}], 0x6, &(0x7f0000003240)=""/4096, 0x1000}, 0x5}], 0x3, 0x12022, &(0x7f0000004300)={0x77359400}) r2 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a5d185ad6000000000000000000081400000011000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$proc_mixer(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x34}}, 0x10) 17.518569286s ago: executing program 4 (id=7733): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x59, 0xe0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000640)=@vmx={0x103, 0x0, 0x2080, {0x60000, 0x54000, {}, 0x0, 0xd}, {"d07ee511000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae00", "00000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) 17.40133246s ago: executing program 6 (id=7734): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xd4, 0x30, 0x871a15abc695fb3d, 0x70bd25, 0x0, {}, [{0xc0, 0x1, [@m_tunnel_key={0xbc, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffff4, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x200, 0x0, 0xf, 0x2}, 0x5}}]}, {0x6f, 0x6, "8888c532403a986c0a76a1ac652884b9ed0c2143f7045b8ac947ad45c854ea2bfdb45311923ff98386cc823cd81bce507ba4473d4b20a0c5085e7a502a74e3561c8985e7f712c6a479b7d92412b5c0ccc9e0af1dbe3ffe50f3f2d07d063fe52866944a0a64f163fb8fbb0c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4006040}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x7) splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0) (async) splice(r4, 0x0, r3, 0x0, 0x7f, 0xe) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x10, 0x3, 0x0, 0x7, 0x4, 0x1, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x2e, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x8000000, 0x4000, 0x8, 0x4, 0x3, 0x5, 0x0, 0xa, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0xe6e78c00, [0x0, 0x401, 0x7, 0xc5]}) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x85b, 0x0, 0x8}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r11, 0x0, 0x0}, 0x10) (async) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000f3c000/0x4000)=nil, 0x4000, 0x3) (async) lseek(r12, 0x2004, 0x0) (async) request_key(0x0, 0x0, 0x0, 0x0) (async) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r13) 17.310235579s ago: executing program 4 (id=7735): write$proc_mixer(0xffffffffffffffff, &(0x7f0000000280)=[{'BASS', @void}, {'LINE1', @val={' \'', 'Synth Capture Switch'}}, {'DIGITAL2', @val={' \'', 'Master Playback Switch'}}, {'LINE3', @void}, {'DIGITAL3', @void}, {'RECLEV', @void}, {'PHONEIN', @val={' \'', 'Capture Switch'}}, {'RADIO', @void}, {'SYNTH', @void}, {'DIGITAL2', @void}], 0xc7) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xbc, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0xaa, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"]}]}, 0xbc}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mlock2(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 17.310060156s ago: executing program 6 (id=7736): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000002300)) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000002300)) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) (async) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 17.309766354s ago: executing program 4 (id=7737): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x11) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f4401020301090212"], 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 17.248249828s ago: executing program 7 (id=7738): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)={0x4, [0x3, 0x6, 0x20, 0x7]}, &(0x7f0000000100)=0xc) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r2 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) r6 = fsmount(r3, 0x1, 0x0) fchdir(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x20040, 0x40, 0xe}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r1, 0x406, r0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f0000000040)=0xe8, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000080)=0x6) 17.248038904s ago: executing program 6 (id=7739): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="ff0f0000140001002001000000000000000000000000000008000200070000001400010020010000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008090}, 0x20040010) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000200)) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000240)=[{0x9, '\x00', @data=0x800, 0x5}]}) 17.153355468s ago: executing program 7 (id=7740): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) io_setup(0x3, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0/file0\x00'}) io_submit(r3, 0x5, &(0x7f0000001440)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x2, r4, &(0x7f0000000100), 0x0, 0xf, 0x0, 0x3, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f0000000180)="4808a80a89db82ce1b1134e4b5d05d4dec400e69ec37ed05ae35054684bad07b2e83013463f9c50490c63c797fda903882052fd5401b82aec4c62545a4e106b764759499d66db7332546a07ccb8c92d47ebd899934f66dc705519bd0c28eee9b17c65283807ed3645afa8e7df0bf84220e11dd929df751539983bc7909a1bc", 0x7f, 0x3, 0x0, 0x0, r0}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0xff81, r1, &(0x7f0000000240)="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", 0x1000, 0x0, 0x0, 0x1, r2}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x7, 0x4, r1, &(0x7f0000001280)="24261a495d444ba5891aa1813f99cfbde0c7ea25cfbe9dc4b51ad8cb10a5104f623f970c847fb10c38635aaffb8146be7621c32258b283b324540195f5e203ef39fc922d6ebc8a08842680f55f9bb864044561fc43ba815848ec2ad0ebdd48f64959fd26ca035ae1c8caf0915225e3164e57541d602513a7de6ff725f74b7bc1d6feb38cc4d6788c70a015b30df3d052f4cdfff6b9b2e3598ffaff", 0x9b, 0x2393, 0x0, 0x1, r0}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000001380)="c79ef7feee38350c64f2c0c707a126ec1e507cecd7e84c32ab0b5412e46d3c887b2a158336f04b5d53895ebb00b53cfe47bf7812b7940ccf833748c93c79efd4cd1511ab216f66ebc8a8bae6b44207f1854785f71cdbe9fda8d735642112cc29f1ab76bc07cb2a3132d9c0255441167b8c96f5681654", 0x76, 0x1, 0x0, 0x0, r0}]) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001480), 0x401, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x1410, 0x100, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x81) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000001600), &(0x7f0000001640)=0x4) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001680)={0x1000, {{0xa, 0x4e20, 0xfffffffd, @loopback, 0x7}}, 0x0, 0x1, [{{0xa, 0x4e23, 0xd, @dev={0xfe, 0x80, '\x00', 0xb}, 0xa0c}}]}, 0x110) connect$tipc(r2, &(0x7f00000017c0)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x20, r7, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7e}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004014}, 0x2204984c) read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r5, &(0x7f0000003980)={0x18, 0x0, r8, {0x9a32}}, 0x18) r10 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r10, &(0x7f00000039c0)=""/57, 0x39, 0x2, 0x0, 0x0) pipe2(&(0x7f0000003a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000003b40)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a80)={0x60, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x3, 0x0, {0x1, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x9, 0x4}}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x1711}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="ed95368d67d9"}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="bb2ad4b9a69f"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005b80)={r5, 0xe0, &(0x7f0000005a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000058c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000005900)=[0x0, 0x0], &(0x7f0000005940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf1, &(0x7f0000005980)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000059c0), &(0x7f0000005a00), 0x8, 0x75, 0x8, 0x8, &(0x7f0000005a40)}}, 0x10) sendmmsg$sock(r10, &(0x7f0000006180)=[{{&(0x7f0000003b80)=@nl=@unspec, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003c00)="1eb117a3b40b9854714811feba0261c833360d463d5e56c3ae2d70fee767b8b58a719ad9d13d55e5233816d5212074f05f99d3c430ac5ffdb2e757f40da6e1d9352a68d5e6", 0x45}, {&(0x7f0000003c80)="397e295ddcdb674d1385e46232", 0xd}, {&(0x7f0000003cc0)="d529ddd7c1d2c6276ca504912b646b726fa49ac8e6d16ac7d30af7706611b28dc76b8963a0a0efaa598b00c27592d424151ad8c24f2066b930d41ef9c47a02a491d017e6d091618f8e1b9e0a2d5317f67483deace1175a06052ae86c85ca8aeba7e0b15aaf6fd83fe578d4ed53f0731cc73886da5d7ef4ed0c6346fde712e8934a6806a77e7c8e6e4381dcacacb08c500ddfa411ed7cb59b6d08e06a29d6cdf7144389264f319cca9d", 0xa9}, {&(0x7f0000003d80)="669e8c39cb0c02bfd1124904b0fc945141d25d2aa517c8fdb9e02e60441be0406b0d108be340577d457469bb6f87a58524d85e724e597eee92960a2525d71c1f2293ced711676fee7b0edffc33fc98218f76e74eaa0883a0d4db35e7f887e75e84cb5ff5f0e4143c8bf080d4610bd17d7b3b616e953f1c1a6e1b5a53ae9c18040922b36b524f0ec6ba284d7409c21d60affa", 0x92}, {&(0x7f0000003e40)="d2e4fe301d8f2335ea63f1629e07e01ab25275d4cac2cddafe3ea8976911938d840c0f7af4ce6246efbac6a2d6857d4e382f961059b35b3e7568ff3f1e9083472f71cb9069787281658aac10ea514c5fee5ed602ad632fbea527b34efd9bce83e3cae04db03f27dc086003cddcdf0a3a765081a7c1b9ff335fc4720bd4", 0x7d}, {&(0x7f0000003ec0)="5974dc7ff72889d4626671e4116f0298dc2583278d9ad500fd330bfd757e3819bcd38667a209f9bf5da00534c7d32b43e9abd542dd57ca5b17bb8560c39cb581f1d7ce274554fdae4a9f4d2d27ca5997bc063da335a3681e06ce25bcda8e0e2360e2fba344a50a45fce5a2bbd02184", 0x6f}], 0x6, &(0x7f0000003fc0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x30}}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000004000)="1b6c9c01829f719704b85d08e812a72fc0da976aa2a91a4c967ca248dc0af78914489af12e72de90690c03dc8138274df3e1e4bca26c3d6020d755634ce9d79ccf37ff", 0x43}, {&(0x7f0000004080)="3f37de921343a59d1ff1c0ebf622a8469f5f4e26138fe31d76d42e68633df24a5daf540766f30f516190abf7a8b74452c574e6ce57c887ebecd000f17f009e77074d18637ff15359f533d15a74e534ec1a5f4e84cca5b96a9e83a4ffb6fcdd56dcaae0bb8ac68b17becdc0021c3d7702a0c7cadc02bee76fcd10fb07dfa8f5b03caa2124ecfd67c284b1a8e0714904fa429ce11f8a516f705fb9bf1ed196e883fe473933cd65724e7bdd28700d001591ea810a7a19426fde2599a7d54508319008a183dc7f3f31cdc299bf2a4b98357f3893267ba0acb3f09548049c0f7f632a9179d062dc9838", 0xe7}, {&(0x7f0000004180)="1504c86e533a435c0ba56e7171c15542bb0e3b376a3e854269428ac0b69bf79e57f784740dce059fe7d841a7c078821e22dd7b1a", 0x34}, {&(0x7f00000041c0)="91c2ed2ef4a99670eba8f92a3117f1880547be19fa80945e710a9fc60afd340c8b17bc53d516c01a82e059a4db3f14e0078c36f3023883cac1c33bd3e6679a76c77038d61904a7c975855262e5bb837e90f9dd5658496fe19e1b7142441a7f63a395a6bb0df95dc04fb7bcc0dedc5575aeb5f5af0e6cc0366030a009fa1d6661b481f28e8de94b96e2e14db8a696e5b60a45afb1057f2f220145cb7a07bf7232f0b6d14e4586598afbdc", 0xaa}, {&(0x7f0000004280)="63484b8e01477835c122a490c0047e49", 0x10}, {&(0x7f00000042c0)="85c14e45f9436ff6d3eb3a40789e6af8b635abf1eabb99a41ad85aaad2b44f", 0x1f}], 0x6, &(0x7f0000004380)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffe8b}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}], 0x90}}, {{&(0x7f0000004440)=@sco={0x1f, @none}, 0x80, &(0x7f00000057c0)=[{&(0x7f00000044c0)="64360afea11f843443eb58a3f681", 0xe}, {&(0x7f0000004500)="9b9a32a8e25252ee5c68773b942d626c1f9fbeee5ce9bae05db0c27e4cbe9aa079999f57758badba5d7b2d07f9c5ed83c8b9377b7bf8dde98f54301932d3985fd166aaabff8d96c32887", 0x4a}, {&(0x7f0000004580)="4972ed6e43f8e62ec04037bd5f56e4a28d1234e6036861f408bba5853de738c6af394e9847f788ce3ae2984995fd739096c5cf753d1d3efce2046208f20a5f3afcccb98f35b453698502bc2d21c09ff26db2ee44e0f846d44c71314d83448a1c00a44b9fb46aa229b6f1bcd028fb9db232e9031163393776cc8be55abf649fd12960311f36d13db77e68c2a74b862c8d23aa731294bdd5f99e3d568c2e874c128d84f9f1941a50afacdf0839ab4854ecb0a3eafd6fcc1dd63588fcb23e92e7528d9780bb0c5b87eb9d608e25c6a7fc7dfe70ed2dd53bb58cb3e13e556a7fc71d3397dc483a112276976828d5b60fd898bbb31c77", 0xf4}, {&(0x7f0000004680)="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", 0x1000}, {&(0x7f0000005680)="dfcb474db1283e9f80ad97f3a32275ef14f6f8fea188675285499225ab3e28d4900c9d1319480c4c72744f691264318f8abb16bb75bb4b60400edbc52112c1c92e52f0abb6d369b1fecfdbd3f43ae646e2b6f4c7802f7b10a5c2208cbedce8b0e5fe97dea93a7e7b367f6097a875d414e1c5ad96961bdbc434410c2ca4601e81ef66e44761102ba88097434cdfcacc148604940cf2cdfd9bfe76dfcd0acdb439e6553f99a1950e15ad88abd0b16fffe94573e9f4c3fe715ac6db6c3bb369e4409f4230be64", 0xc5}, {&(0x7f0000005780)="c5a2b8cd8dfdd929db695eb38bfe7b533d0278b923e295e90dc0eec3ebaecf8e25895b", 0x23}], 0x6, &(0x7f0000005840)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x60}}, {{&(0x7f0000005bc0)=@can={0x1d, r12}, 0x80, &(0x7f0000005c40), 0x0, &(0x7f0000005c80)=[@timestamping={{0x14, 0x1, 0x25, 0xd}}, @txtime={{0x18, 0x1, 0x3d, 0x47f92d71}}], 0x30}}, {{&(0x7f0000005cc0)=@caif=@dbg={0x25, 0x0, 0x7}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000005d40)="466aeb0f9d08cda8b2309b8ae396f8055cb5f0c98b43b2571e14d7231196f04a07ca0bbfa70103b9edfe968b7ab4af93f8b81c057d4cabe3f8a65bd898d8e26033e545a2e3756eb92ec30a9ec3f7a96e95505ff42889408c1c22783e70ae19", 0x5f}, {&(0x7f0000005dc0)="90137eee940ff467d5fb786614886c6f91a50dacf77af72fe15f680e5f6ab6d856cfe731bfa925c02e9d9e6a08673f7f496dbcce9481145aec551b1eea5ff5c91d0c9320", 0x44}, {&(0x7f0000005e40)="c6c59c2497a11177fb15fb56b4b57ed224bdf395d585b6e962331434668169b0843d90b9d049bffb543fda8bf614ba1b9ab5fd6bfeaa160eed5b0df52600d6c6219e5eeff1330ecc3ee35d0f32baa6953922a0be2dd0ae6ac504cd072ea150669067aecd28bd", 0x66}], 0x3, &(0x7f0000005f00)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff26}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x78}}, {{&(0x7f0000005f80)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000006100)=[{&(0x7f0000006000)="4aa8c7bb50b65ce2c8812eccd2be2842ead90d2212f17f5ff1e3965da0e0595394e73e9d6308bcc29c8210e7e6822df372f126a999c95943367301a0d9849677d354d9071dd79ffb8e722e3e32da74f0bb6d62c2b42e5ba79ba0fca86b1f424e95bfe30e52dcaa2f9c06bc078b1ed4a469b312cf9191ce7d413301508d7ce2b1b92cd45f44f9d84374dd8b8093aeae9153c0e7a033e1d5a6b3fdf6b39c6532ccbc4202c63ac6a2e0a4f65b3cee9f4e6af430420cc8011c6911987ba63745d4528b48", 0xc2}], 0x1, &(0x7f0000006140)}}], 0x6, 0x4000) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r11, &(0x7f0000008340)={0x130, 0x0, r8, {0x10001, 0x40, 0x0, '\x00', {0x10000, 0xf7, 0x5, 0x401, r9, r13, 0xc000, '\x00', 0x0, 0x8000, 0x4000000, 0x7ff, {0x80, 0xee}, {0x3, 0x1}, {0x9, 0x7fff}, {0x7, 0x6}, 0x40, 0x4, 0x7, 0x8}}}, 0x130) accept$alg(r2, 0x0, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000008480)={'veth1_vlan\x00', 0x5}) ioctl$SIOCAX25GETINFO(r11, 0x89ed, &(0x7f00000084c0)) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000008580), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(r14, &(0x7f0000008680)={&(0x7f0000008540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000008640)={&(0x7f0000008600)={0x24, r15, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8401) 17.15221532s ago: executing program 6 (id=7741): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x6f, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x150, 0x29, 0x36, {0x5e, 0x26, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1]}}, @generic={0x8, 0x95, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e03"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x338}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391", 0xbad}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17.026428779s ago: executing program 7 (id=7742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x59, 0xe0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000640)=@vmx={0x103, 0x0, 0x2080, {0x60000, 0x54000, {}, 0x0, 0xd}, {"d07ee511000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae00", "000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) 16.930702236s ago: executing program 6 (id=7743): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000580)=0x1, 0x34) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) ioprio_get$uid(0x2, 0x0) (async) ioprio_get$uid(0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0x9, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000000)={0x5}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x65, 0x95, 0x2, 0xb8, 0x8, 0x3, 0x4, 0x3, 0x8, 0x9, 0x6, 0x5, 0x7, 0xce, 0x9, 0x9}}) (async) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x65, 0x95, 0x2, 0xb8, 0x8, 0x3, 0x4, 0x3, 0x8, 0x9, 0x6, 0x5, 0x7, 0xce, 0x9, 0x9}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0xffffffffffffffff, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) ioctl$KVM_RUN(r8, 0xae80, 0x0) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000080)='\f', 0x1}], 0x1) (async) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000080)='\f', 0x1}], 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000000c0)=0x2, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000000c0)=0x2, 0x4) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) (async) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) unshare(0x2a020480) unshare(0x2c000000) (async) unshare(0x2c000000) close_range(r0, 0xffffffffffffffff, 0x0) 16.930353901s ago: executing program 5 (id=7699): r0 = syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x80) r2 = accept$netrom(r1, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x5) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='u', 0x1}], 0x1, &(0x7f0000000300)=ANY=[], 0xb0}, 0x0, 0x8400, 0x1}) r5 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47bc, 0x0, 0x21, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x3, 0x8, 0x1c, r0}) 16.866940691s ago: executing program 7 (id=7744): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000a300)="f6c5cdd50b89338e6f0228b937225c21a87072407fe83d5fecd7bcca9b3fb6c714baa7d905bd76d4f38eba0ffafc067da9e5b2a863dbea1f11e32b455862ad205d1de267dbf9edb296fda48092e372fd3166c91d636b627f4ce223d2fff7db30abd245c174812a8ebfce720483d74f6658daaba3ea9e453d789d9d1d8b63c91f02b1282f122d5847241f305a5d791a7188c946ed5d5e5343c04968e62b064aeadeafd55ddb6a1b724a9adf29b15c4c55c9afd709d19cf29df117c69d1f855b647f2d6dc3ad9cc2e413cda65ca8d3fd777fdf88827428723d37b89a7330dddd234f39187db8e54905b8eb0dc851f51ff37b5deb69b64bbd27b72881267f94a88974a56b1d3178d49c209d6f4e974c00f25a87255c3804b1150f98d46437f5333b200651dfd1ae939125483cec1690ecb4d449ae4f2bdf88d50382440dbe1699017f21c0f1e0c85cd339a9f87046af063b54b923d4eaa04fc8dabb3bb3e3bc83f0657b5a3c4cdfce3c325abe45a39b794d13057e3a036ec20c4eb1c18a7501a8bf3899626fe01b2b9c18ab08eaa972ab9f8a786888162c7f77db751c1ab88db854ad8a99c7307a52571fd4d0a8ca5a6f4f5e46396bab29e4a5bb6f7c40404be7357b47028a1cd2b780abbba9e37d182866a9171ddea543a5684ff6445d4c3ba61b4300a1556e85518301862b398e43f61d461054469f693c42f995a000dc9b950b277bbc5a9bec872462a0938ef0e0ba4f4d2bff4d81804996a9f97893c02b2deff1abf1a6cb7987f446132f55a10aaf537d93422ed22fa659ceda5939cf18398f8632a257abbf68d4854e452ceb5acc02c7b65d67b582e159fb5039ecfe636dfd00218f2e5d1e2ebeca027472d63fdd2b61d7bbd9258a3fbb14ee2559845a638e07bbde84f87a42b59a09c1bc877b7e51a4ea42c64bcb3b3c8043f1604c569308bd6ddf438204df167580f5aefe2a8beabb77a8fd3392f99e3a43a7cfa0a68b1b21a307aeecd5b7a3742d74ff1790b13f1026ebec296210301d48d9354646382a18d247300bfd8aca878051a2d667ad2ee489edfeb3c1c912cc6a6c573fd92dd4cd1b6d2fb1bbdc86ddd8bf515c28f15ebafe858df78e8a783b293db3144c44397cbaeeadea44655c6350562166bda3accf7a2e65cf3eb7beace08760337e2dff8c9611fb131b345f44dba2aa2eee0bb4ec719c59a269e71ffc0775c5c193e341a833d38edf8a1f01f66b9fd039ff55c884257ec7330f333e579e66ac67097bfe31b2b78d88b81b640351da3bea710e38d8b50b0a63814f4638df1680d2217dfe7364dc228ea79f74e678b338105391e8c1e041cae3d2ccb9d1b034d96b811bf06515b3f4dd02cf2cf9f9884a6a1af39f219fde0b1caee2065536b8e900bf4fe9d87396cb0854ff28db253382a8f1e6c2a2805b5d5c8b756640a49a092f8fbc5ab87e511d790519e9e79c1336b2af288b1b07871858966197f65919009c435e6ca5bc89a15fae0e3534e50cbacb3cb2ee519a9894f08facb453a7ada35c0cd8e6ac71cf9ceb21c1b944d81a16a3299c730fe1ddb164505e2df5e4dc7f46c3fa3230a9cc3845298d4abf909565a67be3316ca881540f2920c8fb6ffe5ffc66ef477476cc4941ba03795287f408b6175df89274e189bc2e12e93f5d8aaa532400946a7a0cb6cacb55d4947d0c02da9e2345b4d0cc92a570019ac51f64b29b7e509109500f9fe8129196bc46230a1848ad7dc721efd97f1cbee41a1e520da4cda9fa5a0024d7865e637d0f17f240647f11f4d41a39e29643917f6ccd8680d83cfaa33081c3dd613ba2ebe736539834ba7977d2617b85b073a4532c8e6cb3dc3ecb492f23b573ee103ad6c56a5930904e836e9390a8b20470de2c7e0d1b52000366cbc198caa4917b593334a449840a093bbd709a6f835eb4338e23b12f59efd0fe6a8f7d108e6c40d63b06b43639a73822b431b636c3c6cfa2c973fd43aab1ebb560eb5b556b98758583195190651d9f12bec2a2db9c87f879af59d9e72786e416ea8fa36ff4a4f08d56c5e208b9995fd9ed0607d3af20b1eb51dc0943cd96bee0cc78875fac1dc471f80664ef9eb1f146d5b6871842ae1c51e83523f28a149346df307eae77929a81c235f5593d7eb30581b0650a8759d5a59b5c2697c461e17d8458b13dc88935b878f71f0597d46924bc84714ca7af2df5749b1b0fbe1950aade8d85555887809f9d4cb5d8d6cdd0ddede90e2fd122d1168f0c7e535aefe0385ce12a5cb1060498ba51b28fc344e6c6094b1cf6263007e299d7ceae7814c664f43bc2b8e989779e1a2a36e7e209175c197117966925ced8cd941fb4d37d05a5c771ba579671d505d6af7fb70fe764d906fa84f046fb4429d82bc7f4ed72f686bf2f923ec7bd48b1be8773ef8a51235825cb6c54d444021e823ba2614e7d93920a96d23f19d9adfcabe1716fea4979ef4d74fadc6fd53e8d6c6704c4eb04a039ba4c83d15afdb195a36f292ba9a2728cd85311076aa6a484c01fbf9fad617f4870fcbd1cd453aeaa391968287263852732552443e3388bd07d975cd2a11624fa2d0d931034b940c4b2babe262706c6cd72007c5fd5744564babc9fc37da476cb38ed0de6b530864e26a6febeb8d901d40c771a0cf2f498830487d83368ff3f8af68a0ffa5762d3f2c9cf2a66e2338d3e3655b647685c2dcacba997eac420d5618c3d268b85795fa49e37ee504521017439581a6c5c064f0184e4cad2b8134e2f9b9ec42981c155775d7d744bfff7adb3f7599f159c7cf1d7d56fb7cddf5b4f8ee8a3dcfbc1151b3d253771db09879f48c3c0cc9506e97c776fa8251c21d5fed9dba8ca6674e45ac2a6bef86ae18b175ffb5d281f58527661ef7d5651b28db85c1b7cc305ab5b34fb49a32778390d3b6d4e78d06d3d863eff86435d36be3043529fb9b4d061a7a983d6e287fa83925dfab1b526d6bf510a29f9d6ad493bbb4da5fdf0aef4f16ff50799b016dc4230aaf87b9ef8953f8ad522ab4c3ec3209a57852cbdb5e39628ad107b248d6f07d123fb0e68d7b7aa8558478de5dee88032de6ccbbcab0ecfe8fccb1681816db894fdc24a9b6cf8ad5690efb01c8b4840255a5d5563b4cb73609f0a5337738e179fd9577bb795eb5a89a4ee4e2b2bed5fc65ba1efb911889e131a0b010c5699d7f6b869ffff3945208feee8d245eb45590f2c67b97d186307dbee5327ef60340386ae04d45f981061b80d33ed6db2e5dcd711d68f8d9befdca10334e9636de1a2d6e6de2888d0984aae79b636eb0576f6cc9f450320b7e946eb82e9e1f8b3477f382090c79a9524a69f3416eadba673ff24cb1846358680d370e6ae98230256ebad4826f90ef8189b95f3b6275950c33ec2781bf438bbcce8ee350f3c1475b026a6c189db5101981b21f82ba8d8f62e852ccc5109a2780c70eb4a0b014c0c06ef46ff506c481b8082154db687b644ff122e5f35af5882212834a5b696afda432241f966d5706fa7c00be4a4912b6adb8e5629d0e18bb2ed4e2d7b6dbe79920d21ed0491f7a5017ae5ccdee5b498f61bb9ad5845a6268abebf80338c20c09530675a8366bfd4ea746957dd7337f1c1184751b649a399891ad2b6306bb062b9b2dc8a8b09302ea3386ccd78d9a3a0314c3df264ce81048391ae66ec9eeda8c70efe95146205d0b6bed2c362f2920615d41c7d12fc3991000a080061dad4e34587ff1684c6756f55dfd249d2d62bef74b5e4a40a63a2bc14a473cf913d5a4fd289d1792fc693c4a5f85326eebc52994a34e16af861438f22633fc5a4ce0d30d37ac0e2277e072f78375d7b1443e1af9647c23decfc411a3d0def781ce6679d92872fbc27dbd4a7edc2acfe565103d472fbde7ac626248a5305cf6e1c5fc81e9b71adb2523839b9425c72a67409539d611240ff5ad04ea2b3d063e197f5663606aeb0b76fa2e1121e3815506fe4a9ac09d555c1b8d8c9749f5dd5096130aaab80d9b721a831013885e3a376a57f97db4f1878372c7ac241b7424b86d97ae5fa3a0943f55c64cdbb4aa3209c4fbee3d9ed201e2bfccee01d33bd99c01689e1f23b185acb82e75cd2a161c316334f4887c8225f11ec1354105e3180d67ebb3a98d1178cca8332eb73555f53ed86c7285fc6c85570be32e74baeece3d610cfb505e1ca6c02fabffbd9b4c80274db8faab4a4d29f8bfa6db38daf4ca8442aad66e40581f40a63e50b3a33d9a3e32f4440b761d149a8d71c138f74d5b0e10d9266788499a19f03a17726226e27c899c538bf4c219d7a035bdab2c5b347bcb176555fa451594050c6196a2236e5b0981eabab3519dd10ed1ffb6334476cbb06059384f02c164f278d49391c6069b9adf25c14870e2fe1f28abdb325d3101fe464f829e971067dc9231fc3bc9d0e2a6c8e13db15f4b69b3b028a587a092453296f7f790a547ba191bca2ca929d1477344d7ba30b826a10152580e5ed7418f481e4b10139a4acea1a1c42f748cafff8b0215c6be50e0af09905366f0403c53f8c746ff06ec45d69d3c4039d0980af45c8a2d6cadafe477ffe3451fce3bdc9644faf73ef3ca3e823526fdc086d82967b1a569cdb99ea26fe6d06a21fdfa7a8342089931240324b786f6be1b987c8fc9e9e602cb0ad66039a0147319a896134cc97a7f50b3a0c04c4f80b8a53ea222f5c009325eca6668e453d92e1577712af0297ffbc3e3365d504ebc1c7e825e045c30c0ad9067fcea6dd754c179c3febce85187611f78634c081192b430010987a852837015a3c2a70604e18c5d394207fa61fd3c51a8ac5ab263d1c15a9918f599338d21b894e6016337a5a31422867a775a7def8fb7cc3a41342175e05c891ebbd7318bf011ab2dcd865dc5efa3a9451d973951c96752803665567c08013259f14fd704d5d108cef5a38b4e2375aa241c5cfa99511e334cac9665a06f25da7d3fdb497363b119bb4d536a6803b3aed59143655ef6df225b5a9305979f77e32942ffb48e859da96a309ab57b68fa56a9e0d6e53650e7b1968fe5afc21e5638cd50f5c415c9addd998fe32ac983a9f9266590967782b6d9b70f22a48cc14301af5de46d7b71d0f7c0ead21ff503cbed5c2535672835ea0216eaa7fed72390b66b4684b51365d1923aec4dcf4dd08b357552cfb7e96a5ab956ac1276882e80a79d018c5ca7ffb3367d59846387f4af1fd4b6098cb560bb565af3ec0c3934da29120546804f3800aaba4969e00cb83d9d9b0cf216c42a8722030a6fc85a01b9748bebe688671318a2cc33f69e0bf3a8a3779c8847de958b28b2e8017da7f74d56f1a75134a4da0944e45dfefe63ff367759b55e1659870e0be86cef2789ec9063ae6093693c1d47cfc164eae67c97efa447120a36b39561d380077ceaff4bf0f55b066af441e400cc3996633abf905a32cf025becf31983dc6fceb6e0fb506bd350d81afa6421115939adef8cd68abbbd94f1567d9e9f7505af57e1802b8d704bb7460b3822330c4a4bb6ff2b187fb9a3f324b0f415c706a1de8a7cf6747c72be3b356c0206a3c0c39daa85309bff9faba7b68178108b261086cc15a0e21a52a37c1576a72d2d5da5c43248ad760d239711739cb79fc79b4ca2dbec2e100db1c535ed90623c67ed2e3817ebec259343b17efdd912ea0fbf73653015b7f8a51cae3cab19ba00638b8c8bfa8db481ca7dc7ce5c2540c46c963386188f74dec088552330e6ea067b222bd97ecab5073d95d5814599f522a36fc80636bb66ee8dca399586f90f1c849e30d92382bb0e64f62511a7f1044560175d68dffc03a9e56ac7629a4bcf50a4334f29b3391ef4bf0f3174a44d69e143437cb3dcb3871c4e7de50084b5e5033c48df364a1d5cf925d42a3c8e2b419909e4a2ca2156c1397eb87704e8f8d6cdb3a4a031c1b5468a1e75a923cbdbd384cd8d87c2c05f11f1df014ef98c13fcf9f182f6fb68dc0aa4adf7bec8a17caedd172f64806c311fc106b39edd9628a01d7159d638e09b39feab432718059589dc971143da4a8e640aa63ae0c2fb4a71129d362cdcf993adbc97b4f1543637cf1acbc9e67067f6c6f95be39fdd14dc6478c507507ceff88c2d1c5e13522547ab149dad2526393714c6c0a221c167ddf1084b563c0bfcc4c75a972131c62ddec7a497bd5118eaa12ab25bbbf7cc62eca5de5ea50bab67ce6ff2e05cc47cc0b0a5465eb01bbc08dac30b8522bd92180d8987390314e19eb3201f0be2b4f71abb697a751fd8d6a3251ca8ea1b2f20a7827d2599d62e392d6c065183a1778950d5ebe04180047ee8a2a096e5f1d6813ec63ff4a626c725b24d259cbd9ca6305009b29c6ef7225eecf9078824f9aef4d3e9aee1e9616b2b7f87499f8abab6c38e9a3e7714132850b5e71fa671697e6c8407ac3dad5abeee5f7b2a63aa51d29744736b0c38adccf8e29a85b81f3b3106daed64fc78618e18c9056cc41ce2f50379cc6c2c1411ba2c690e1899dee193f0f2877412f1cbd54d12255ca81a72211f9a8ab7f0b7bebb6c11b4bd6c77455decdfd7df2b2014395ba69f22e520138a43e1b3a11264822b143adcad307b35800563bab720687a898a76cde1f0a15aa3f32c0d302ce6f1094bacf5a1add935884be029c7fe18a5e90c696e3371af0f3cd721abd7dd4ce74efe353105ebcc4b1411d52026901380a9c7a807a76fa617667adea8b7734822da93d93969641a92ad2af6350ceee54e3d7c7c39e22d6c5f363d201572b8d68c2b9c7230b0b85801cfafbc5557f21bc444ea05fc612e2c2a8d4a38578c69bb252d8f4d617d0974f95b6ebb416d5c8f3fa925d4ed4f23bfce03e28389ca8c1bece1fa49e8d66387bbb09b3c29d9ed75ea5a9ac7930cb3ed05f999867c640b3435962fdb763002e2fb451c5a1b9d4536e49ba50fcf61451168a994249ef29af51694a1426d987ed8cfe09f10462c7629c4ff1b1cc709b99e9e87a54d1ecf54cd9da0c2c19b84b2a2c32c0bd12d158b73230cf610645048cf1afbb62aa7ce6fab79bec3ad84108f3d96cb9fb3d78a26724892a6bca533e64880c7d4c28a6685502f4cb2a27b132c8253b97e88583fe0766d04795709486556df99b7e65fbf71febe24e0a188e2dc489b8fddbf9d4b1c9ef4b558f888824469df9b2085a845998220332d9cb693472ff2abcc10784c2280825adfcc630e3a961b39ab786deddc53b18e862edc75742d6eb2d7cc227ba3ed770851718388612e4e7f4f257a90fdf09e3b0081d7498e2d5b628d9132aa0165f323f59af5e9ea54c582999fb527d5f2f3dd7e4f85877080526f8481899b6afc732f5da6af31b561ddc36a6b8c723087d3f168292550d89b228f7a3cc131c110a2dab2f81e339f24d3d2b696892dcd4a3e8f2eaaddc0d78e2d07cb9df9d2fe73e4c55562c0794092c7dabd4364f9fea89d6cdd8369d5bf1bc8863b8f89aacf0fd9b9b380947bb4872656e58bc87526e18fa8b17ef8a7219adf1b79d1be5dd827e7ba8e4ed50a81eb7562b179876a8803dde2ea99fe744e8f7df17040ac38592a3be7eb353416496e867d8a74c7eb94556b16241935d718dd43462fe0855cc31a812e0ac01109d1d3539bd2fd4eeb422009138a92324bd072edee2ba47d6cacc24588410ce30565a8aaa5aad52d9c55368372715717ff5ed3a0243ddafd11a7059c29a26b9ea9374e8434f31e4c15a747ee6d69368d12b96122690f843569e82ad27eb8fb25e94dde94cc15e690dc65f6a6c2a6393821168a79e03cd223ce54a1d5e38eee1c12e23027b12c6a8094c805088617c2fb4f52008366faf37fdb13b3a7a879949d13644da36dd35a4ede785ca0ac7b4f15472e77a33228129143f849ee75c915df31764c96954621a01e0941d6bb58125f544818b7152698f3addcd0a684af8fcdd4bcdf5752b3faa731988866ee8a664850989d280505d2a4b861f159d47d2d61ab3de866fb2c8f90075b713f61cf83a2ed426d53214b70385b7a46e5620c032486a5a00e0e73d3ea16eeccf5731507903a25685466b61311502ce781634ee46542957a0d5ba6016bf11589fff32e503feefccefe4107d0619e7a15336a8655e2f09034b4069941126d48909232592aac6d9c231285dc1d038ff1fa09c1588f543304659ca334afbc42b5f5fb813b34663cc6f4b0a12fc3edc28765b062e7a50fd19ef575be96cd1d9aa48c1fef1b2763949982a47bf25a69c8b1306e8e36c91d2096e6a6cf934452233ff49e91ee173c1e288b9ff70ff364689b82e2467a3d741809657ce0856582d24da5663162422a6f1ed1fce7cef40d90ce57cb99e19a0b4365d483361d03d0cceadd682f333bcdb0a49e24d8c7d004aad2dac06f4839cffc0a77730623917e5f101c33411ab4e0a8491de9a8bbd5dedb8dfeb5a5880da57c74bb8e1fd8b02d3c22087be3f686aee26988b2d62a41d4593ff0dc100c31dad221489f612ef60c160bd6c1f5a00ea6efd3a5aa5ca14efbf78ae4e5d8c5db9c03758b81e636005ade8d03a11f5d8231cfc1bdacdb276992ca8ecbad337fa89dacc9e9be11d398d37207e15ddb45566e0af78833545352d3043b70e20695ddddaccccaa93ee5e2874bfc7f9510541a57fb3cb9c8d6e75460cca3c4cca39a642eff1967dda07a66fe67d87696a5fe22a718a52cd9ba83e348ed211c1dc2e21ebd797455f0648af12c10321240058857632112a75adfdca249f26cf8d6ba05ee83d00ff8d64d8fed069dae70b79105ccd95fc9df34426d765578f651a4cba8094f46e0a9b676c0c0ebb1803660a70f5c7ad2de1ff96676c3ecacdc2953fd235856228556db20395b8d54819b7b12f56e4dddf6a7fe4f7f3d69dff022c59efb2313ae801dcb02b117f50f18eb11dd5a291a7068c820fbe381bd0697566909a38fdab0a0c48442dc935ab8447ebecb93af879a6bb82ab5f245274d873b5be4312856fe4fab8edc9575c02ba4cdb34b31323b69cfef40755bf96279460640ed9fb84d5c60d95cfd76a39726c29f5607d80090e5e3da18fd74682975dd98d98e4afdf4460e1aeb7087a18ded69310b28fa45b356fc28d1f2bef4c9dd50909076de9587fa07b966ee143ec589f70b8ac4d1320cac5bafefe640e445922090c721ce79e4e2c546cfb9b7f058932e6c83170dd2785e28ed81757ade61aa094bd042411aafe0b75156067a5790c78a44589728f1190ac0ba2f93004e06602f51fab34cc56a485569be11e0fd8c89ec3363e053dbdb6cbc69b686e89ff3730dce9099daff958f3be6e7f9ac00bddf0f133a6f904262443963aabe84b0ec9ab9209ebb0d6e81b8d30b2959bbfe5b332459310be2d8183a93ea08301b816d5b009a967916dd45b0f541c57685a6c7ef8cf715ae7fd1780f0a0da48467196e25e26fd2d5a075ad5acfa1ebec9647da21672b642ee4a908fbce416f4ed36ab5b96e5b47a0f6c7f280119567b7d54640c65ce5a0f4912690c4a3d0805e4284fb695eb3af2528f031261439506a4d3f4c2e18b736c55475828a0faf0153acf0dd89bf3c2f6525cb4bfcb419421c7696ee93bc595158a9a43bb288022122a8c45a0db060fe5e85bcc128f396f7af7006eba4e0d6e2f0802625342799bc1b98366682db90ff1be99322bc0672e07757c44173b96e659ff645d263af255d6ecd88bd9a0863006db7f674e79b0493d41a12057e36243394294b4c7850d14a988715de4b55e9f83c2f0676a8486efcc948109076361267f092315dae79164da8f832ad6f35f600b92e4a8228d39e507117c1c1b2a4a12b667538000912ea67de21bd85616cb30f95573ba748a75d2e04b493865a8711a688e33221b26f621ab3a137cf86cc9dd340bcee72f19e00de06f1e9abbe08b4cb8725c9e624f02d36c4c276a529b6e23581c348bb90a4fb1f89053aee36caca5529bad9124825860c011140744f245cd02ffe219e436bfef045517e4e41094b25cf9082692cd8e37d3893c5a90c35b808a17a6508fa7ae743740be0d984ef5ea80e2101e14b9997f86b45b97e5acf89a0a6aa962689c4f53bc7b65e5037de60fa395ed1013591caa79412108224c020d77069939391e20ee32b86139fca7eb9ca5c07fa733311fef5d5594b83ae34c6bc32f037b09995511ff9b9b611bc727055a10b808ebb8c8e5ce532046c7ad3336c38d506e0e3043c4413dc8ce0a9caadbef27d6f663b22bf8d399621ee86e52d9abd5628e3270424d8a06a79174c7de23c431224fd8d0f42853510600f9e2deb8a7bfcd324a5c6ec19cd0c9ca81c552b111a2acc4479e20439e2e3caf443ed8d4de1575216c134d55171568ee64213fc4d32ca5cd7ad04b8705ecfd1b88d56294dca67efe3b1b37c7d5d170cef18997c4af074e97a98c11ec3cdc83a4ea564ebb47f02344d3ab410e25a4ad658be9bf627d49c106c1098dccf7ff62ff9f4dc997a279afdc5630ba32167a68ed7bb3bae2a8b61fca67b5b7dc5b3ef3ab679b602764da9aabf3d0caa56b278c2ab6fbee2cfdd7277402a1f82de1d97807829c0105277073772929f16d79584118f31b45ec4db29aad83693b2d9de08f417beaa2f78d55a36a824a94d1e3cfeb3d75c3d41ddd0e317e85d327e9b5a9da44dc12b6fc3acf6d222a44f59520fa3fcdc37903eca4b7a91fe14cf54b06855d204ebd71018fe767a158b5e389b5e8e136fc8960840ef1916d8e36f08260e5fc9808442e2034f2c761ae051d03fa618a5f6b8ba8cee00411d09aaa3f8fe30a5d29d9403a905403b5310355326387ea6ea72643b70fcc5bf767371878440d07be919c4ad8c4b8952ea61655bbeac50025f4cc2e859c20dfd440a0b1b14549bccaf7952a27f12266c3b7185d9f37ab405d0765011ae6dbc0717f58ec6bd4101589f5c6054faba863bd2af1e8b19cc2cee98c619e477a47497896c42c37697313917b37140a77a5afec97556f06e0ee1d87c3739bd9ff4c210ddd4eceb65701e64bf4d6cbd5d4b9786f4d45acd881fa6eb1c6fda5f8844f5a1635d05e7bb82270694efe063d44296d86b4bb8b28e573dd7cc0d379b5449af1064f10ab8e8f5f177713a63fd7ea8bb68305356c59b5b48334d568fc6d81713bf2c1438dbec4c2c793d5bcd94c459eaace9295ec5b51328fcea5c8f984d8bf90b2f9fb247ce722a1c001e6ff179524417d647b856d905976f623b2db0facf05d62a87662ddc0d6c31cadca2ec262439fdd0f5cd7788617b98bbb802ceed7f971fe6d432a49dc132fe5475db3bc61d6ff04442a9afa9078be7a15de8668cdf469697e337eb4a99b24cd89da2a36eaf4f725cfc77f5e4de3dc010c2ef1f6b22dc479544c0c4c611fe1c8ef5ed3c23ddae7cd01ae1874217f8d1001f0c5f8d2ace0ec72ef3ed9b95b72753462feaa1ff5c2d23f5ec1ccf41064895d6944f38bf7c41a091df7b8c5c5021ff7ab7571439a3d5c889aa57c715e4a55ecd77b5cb4f8bc3408d95d560f5e8ec711e81ef8a751df5d1d053822debf0295574ebfc5f1fc47caafdf8b3862d68fb01d6239fa13c026320aafdead31d003d8bd8b46842687b600", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x3, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x200, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x102, 0x8000, 0x0, 0x0, 0x0, 0x2000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008200)="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", 0x2000, &(0x7f00000003c0)={&(0x7f0000000080)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x28, 0x6, 0x13887e61, 0xfffc, 0x102, 0x5, 0x6, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000e00)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x23072d, 0x10, 0x0, 0x0, 0x3}}, 0x50) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x2) sendto$inet(r0, &(0x7f0000000480)="a3be8faf48033731793776fb2a699061a9d7a0fa31fef06411c34f67ccc2eb280e1de3bcb786b4c1d1a37130254ea8adaa71f9c998104aeeb6673de59a79f228763c748e28bafb11611b326b5ce4d83843c41d5c8e3ca1b04fc148bc8f45ff2a5aa4ea5fae5d453ee7c10ad28c001577e9d59a72f8ad8e278353ce8f6292874b451f22bc8e25b2a0ecfadc12275c651b824dbb4f5d855147f2f35c21837b104521b34f1046edffc1d4357841f09c12067cc571ec01649e20ae69904046643f2f72d6ff1159f98fab47591ddff72e9f", 0xcf, 0x40040c1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) 16.727923282s ago: executing program 7 (id=7745): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) (async) fchdir(r0) (async) exit(0xffff) mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x80e2e8) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f0000000f00)='.\x00', &(0x7f0000000f40), 0x89, 0x0) (rerun: 32) 16.000495553s ago: executing program 5 (id=7746): r0 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) read$char_usb(r2, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) 1.115324135s ago: executing program 36 (id=7737): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x11) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f4401020301090212"], 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 37 (id=7743): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000580)=0x1, 0x34) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) ioprio_get$uid(0x2, 0x0) (async) ioprio_get$uid(0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0x9, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000000)={0x5}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x65, 0x95, 0x2, 0xb8, 0x8, 0x3, 0x4, 0x3, 0x8, 0x9, 0x6, 0x5, 0x7, 0xce, 0x9, 0x9}}) (async) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x65, 0x95, 0x2, 0xb8, 0x8, 0x3, 0x4, 0x3, 0x8, 0x9, 0x6, 0x5, 0x7, 0xce, 0x9, 0x9}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0xffffffffffffffff, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) ioctl$KVM_RUN(r8, 0xae80, 0x0) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000080)='\f', 0x1}], 0x1) (async) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000080)='\f', 0x1}], 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000000c0)=0x2, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000000c0)=0x2, 0x4) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) (async) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) unshare(0x2a020480) unshare(0x2c000000) (async) unshare(0x2c000000) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): andard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 530.948595][T27329] Call Trace: [ 530.948602][T27329] [ 530.948610][T27329] dump_stack_lvl+0x100/0x190 [ 530.948659][T27329] should_fail_ex.cold+0x5/0xa [ 530.948680][T27329] should_failslab+0xc2/0x120 [ 530.948702][T27329] ? lsm_blob_alloc+0x68/0x90 [ 530.948735][T27329] __kmalloc_noprof+0xf6/0x9c0 [ 530.948750][T27329] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 530.948783][T27329] ? lsm_blob_alloc+0x68/0x90 [ 530.948805][T27329] ? __asan_memset+0x23/0x50 [ 530.948820][T27329] lsm_blob_alloc+0x68/0x90 [ 530.948843][T27329] security_task_alloc+0x2a/0x260 [ 530.948868][T27329] copy_process+0x25cc/0x7890 [ 530.948909][T27329] ? __pfx_copy_process+0x10/0x10 [ 530.948938][T27329] ? lockdep_init_map_type+0x5c/0x250 [ 530.948958][T27329] ? lockdep_init_map_type+0x5c/0x250 [ 530.948976][T27329] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 530.948996][T27329] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 530.949023][T27329] vhost_task_create+0x1db/0x370 [ 530.949044][T27329] ? __pfx_vhost_task_create+0x10/0x10 [ 530.949063][T27329] ? register_lock_class+0x40/0x560 [ 530.949087][T27329] ? __pfx_vhost_task_fn+0x10/0x10 [ 530.949111][T27329] ? __pfx___mutex_lock+0x10/0x10 [ 530.949151][T27329] kvm_mmu_post_init_vm+0x1b3/0x370 [ 530.949178][T27329] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 530.949203][T27329] ? kvm_vcpu_ioctl+0x150f/0x16d0 [ 530.949229][T27329] kvm_vcpu_ioctl+0x730/0x16d0 [ 530.949251][T27329] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 530.949271][T27329] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 530.949299][T27329] ? do_vfs_ioctl+0x226/0x13e0 [ 530.949318][T27329] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 530.949333][T27329] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 530.949356][T27329] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 530.949394][T27329] ? selinux_file_ioctl+0x139/0x290 [ 530.949411][T27329] ? selinux_file_ioctl+0xb4/0x290 [ 530.949432][T27329] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 530.949452][T27329] __x64_sys_ioctl+0x18e/0x210 [ 530.949472][T27329] do_syscall_64+0xc9/0xf80 [ 530.949494][T27329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.949512][T27329] RIP: 0033:0x7fec9df9aeb9 [ 530.949531][T27329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.949548][T27329] RSP: 002b:00007fec9ee59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.949566][T27329] RAX: ffffffffffffffda RBX: 00007fec9e215fa0 RCX: 00007fec9df9aeb9 [ 530.949578][T27329] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 530.949588][T27329] RBP: 00007fec9ee59090 R08: 0000000000000000 R09: 0000000000000000 [ 530.949599][T27329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.949609][T27329] R13: 00007fec9e216038 R14: 00007fec9e215fa0 R15: 00007ffced0448f8 [ 530.949635][T27329] [ 531.236761][T27340] netlink: 212336 bytes leftover after parsing attributes in process `syz.6.7335'. [ 531.254040][T27338] nfs4: Unknown parameter 'Î%9‡ [ 531.254040][T27338] ‰36H üŠøM8'ŠV¾ÉÃ×”“°“ëiˆG¶¬ý©tS÷~r•Bë±Ì[먃²¨ýˆLp½' [ 531.267850][ T40] audit: type=1400 audit(2000000325.182:27560): avc: denied { name_bind } for pid=27337 comm="syz.7.7334" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 531.318037][T27343] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 531.359123][T22423] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 531.411650][T27346] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 531.419606][T27346] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 531.428601][T27346] cramfs: wrong magic [ 531.433349][T27348] veth0_to_team: entered promiscuous mode [ 531.436373][T27348] gretap0: entered promiscuous mode [ 531.479970][T27351] VFS: Mount too revealing [ 531.530270][T22423] usb 9-1: Using ep0 maxpacket: 8 [ 531.533174][T22423] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 531.535775][T22423] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 531.538613][T22423] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 531.544604][T22423] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 531.547732][T22423] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.553128][T22423] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 531.555996][T22423] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.694477][T27364] can0: slcan on pty32. [ 531.777754][T22423] usb 9-1: usb_control_msg returned -32 [ 531.779595][T22423] usbtmc 9-1:16.0: can't read capabilities [ 531.825326][T27370] FAULT_INJECTION: forcing a failure. [ 531.825326][T27370] name failslab, interval 1, probability 0, space 0, times 0 [ 531.829367][T27370] CPU: 2 UID: 0 PID: 27370 Comm: syz.7.7344 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.829387][T27370] Tainted: [L]=SOFTLOCKUP [ 531.829391][T27370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 531.829397][T27370] Call Trace: [ 531.829402][T27370] [ 531.829419][T27370] dump_stack_lvl+0x100/0x190 [ 531.829438][T27370] should_fail_ex.cold+0x5/0xa [ 531.829451][T27370] should_failslab+0xc2/0x120 [ 531.829471][T27370] kmem_cache_alloc_noprof+0x83/0x780 [ 531.829486][T27370] ? alloc_pid+0xd8/0x13b0 [ 531.829501][T27370] ? alloc_pid+0xd8/0x13b0 [ 531.829512][T27370] alloc_pid+0xd8/0x13b0 [ 531.829524][T27370] ? copy_thread+0x6d0/0xb60 [ 531.829539][T27370] copy_process+0x4117/0x7890 [ 531.829564][T27370] ? __pfx_copy_process+0x10/0x10 [ 531.829583][T27370] ? lockdep_init_map_type+0x5c/0x250 [ 531.829596][T27370] ? lockdep_init_map_type+0x5c/0x250 [ 531.829608][T27370] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 531.829622][T27370] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 531.829641][T27370] vhost_task_create+0x1db/0x370 [ 531.829656][T27370] ? __pfx_vhost_task_create+0x10/0x10 [ 531.829669][T27370] ? register_lock_class+0x40/0x560 [ 531.829684][T27370] ? __pfx_vhost_task_fn+0x10/0x10 [ 531.829700][T27370] ? __pfx___mutex_lock+0x10/0x10 [ 531.829718][T27370] kvm_mmu_post_init_vm+0x1b3/0x370 [ 531.829735][T27370] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 531.829752][T27370] ? kvm_vcpu_ioctl+0x150f/0x16d0 [ 531.829768][T27370] kvm_vcpu_ioctl+0x730/0x16d0 [ 531.829781][T27370] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 531.829794][T27370] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.829812][T27370] ? do_vfs_ioctl+0x226/0x13e0 [ 531.829823][T27370] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 531.829833][T27370] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 531.829848][T27370] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 531.829870][T27370] ? selinux_file_ioctl+0x139/0x290 [ 531.829881][T27370] ? selinux_file_ioctl+0xb4/0x290 [ 531.829894][T27370] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 531.829906][T27370] __x64_sys_ioctl+0x18e/0x210 [ 531.829919][T27370] do_syscall_64+0xc9/0xf80 [ 531.829933][T27370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.829945][T27370] RIP: 0033:0x7ff56e19aeb9 [ 531.829954][T27370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.829965][T27370] RSP: 002b:00007ff56f02f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.829977][T27370] RAX: ffffffffffffffda RBX: 00007ff56e415fa0 RCX: 00007ff56e19aeb9 [ 531.829984][T27370] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 531.829990][T27370] RBP: 00007ff56f02f090 R08: 0000000000000000 R09: 0000000000000000 [ 531.829997][T27370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.830004][T27370] R13: 00007ff56e416038 R14: 00007ff56e415fa0 R15: 00007fffafcaf798 [ 531.830018][T27370] [ 531.957787][ T29] usb 11-1: new high-speed USB device number 45 using dummy_hcd [ 532.053489][T27377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7346'. [ 532.057463][T27377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.059892][T27377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.062949][T27377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.065401][T27377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.120062][ T29] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.123276][ T29] usb 11-1: config 0 has no interfaces? [ 532.126839][ T29] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 532.130109][ T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.132605][ T29] usb 11-1: Product: syz [ 532.133966][ T29] usb 11-1: Manufacturer: syz [ 532.135384][ T29] usb 11-1: SerialNumber: syz [ 532.138575][ T29] usb 11-1: config 0 descriptor?? [ 532.163040][T27379] usbtmc 9-1:16.0: control status returned 0 [ 532.168248][T27379] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 532.243462][T27381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7347'. [ 532.246303][T27381] netlink: 'syz.5.7347': attribute type 3 has an invalid length. [ 532.359666][ T53] usb 11-1: USB disconnect, device number 45 [ 532.414399][T27389] netlink: zone id is out of range [ 532.431957][T27364] can0 (unregistered): slcan off pty32. [ 532.472741][T22423] usb 9-1: USB disconnect, device number 100 [ 532.588695][ T64] Bluetooth: hci2: command tx timeout [ 532.932138][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7354'. [ 532.997206][T27412] program syz.7.7355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.084650][ T46] Bluetooth: (null): Invalid header checksum [ 533.133675][T27421] netdevsim netdevsim7: Direct firmware load for . failed with error -2 [ 533.138018][T27421] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 533.170533][T27424] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7359'. [ 533.191966][T27420] netlink: 'syz.7.7358': attribute type 1 has an invalid length. [ 533.194604][T27420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7358'. [ 533.198408][T27420] netlink: 'syz.7.7358': attribute type 1 has an invalid length. [ 533.199561][ T60] Bluetooth: (null): Invalid header checksum [ 533.315876][ T60] Bluetooth: (null): Invalid header checksum [ 533.326553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 533.327290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 533.333648][T27448] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 533.335760][T27448] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 533.342019][T27448] vhci_hcd vhci_hcd.0: Device attached [ 533.433797][ T1207] Bluetooth: (null): Invalid header checksum [ 533.455781][T27456] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 533.462795][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 533.462806][ T40] audit: type=1400 audit(2000000327.230:27563): avc: denied { setattr } for pid=27447 comm="syz.6.7366" name="[kvm-gmem]" dev="guest_memfd" ino=198101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 533.556947][ T60] Bluetooth: (null): Invalid header checksum [ 533.561786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 533.636573][ T1026] usb 50-1: SetAddress Request (2) to port 0 [ 533.640691][ T1026] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 534.130227][T27492] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 534.157611][T27498] __nla_validate_parse: 3 callbacks suppressed [ 534.157627][T27498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7380'. [ 534.199252][T27449] vhci_hcd: connection reset by peer [ 534.213105][ T46] vhci_hcd vhci_hcd.6: stop threads [ 534.214936][T27498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7380'. [ 534.223684][ T46] vhci_hcd vhci_hcd.6: release socket [ 534.227465][ T46] vhci_hcd vhci_hcd.6: disconnect device [ 534.346041][T23491] udevd[23491]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 534.651762][T27521] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7385'. [ 534.653037][T27522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7385'. [ 534.844314][T27527] FAULT_INJECTION: forcing a failure. [ 534.844314][T27527] name failslab, interval 1, probability 0, space 0, times 0 [ 534.848878][T27527] CPU: 0 UID: 0 PID: 27527 Comm: syz.5.7387 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.848896][T27527] Tainted: [L]=SOFTLOCKUP [ 534.848901][T27527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 534.848908][T27527] Call Trace: [ 534.848913][T27527] [ 534.848917][T27527] dump_stack_lvl+0x100/0x190 [ 534.848936][T27527] should_fail_ex.cold+0x5/0xa [ 534.848949][T27527] should_failslab+0xc2/0x120 [ 534.848964][T27527] kmem_cache_alloc_noprof+0x83/0x780 [ 534.848978][T27527] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 534.848992][T27527] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 534.849008][T27527] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 534.849022][T27527] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 534.849039][T27527] mmu_topup_memory_caches+0x25/0x170 [ 534.849056][T27527] kvm_mmu_load+0xd6/0x23e0 [ 534.849071][T27527] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 534.849082][T27527] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 534.849093][T27527] ? kvm_msr_allowed+0x47/0x450 [ 534.849109][T27527] ? __pfx_kvm_mmu_load+0x10/0x10 [ 534.849124][T27527] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 534.849138][T27527] ? kvm_check_and_inject_events+0x961/0x10c0 [ 534.849157][T27527] vcpu_run+0x39ee/0x5ca0 [ 534.849175][T27527] ? __lock_acquire+0x4a5/0x2630 [ 534.849189][T27527] ? __pfx_vcpu_run+0x10/0x10 [ 534.849210][T27527] ? rcu_is_watching+0x12/0xc0 [ 534.849227][T27527] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 534.849243][T27527] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 534.849264][T27527] kvm_vcpu_ioctl+0x730/0x16d0 [ 534.849277][T27527] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 534.849290][T27527] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 534.849308][T27527] ? do_vfs_ioctl+0x226/0x13e0 [ 534.849320][T27527] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 534.849329][T27527] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 534.849344][T27527] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 534.849366][T27527] ? selinux_file_ioctl+0x139/0x290 [ 534.849377][T27527] ? selinux_file_ioctl+0xb4/0x290 [ 534.849390][T27527] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 534.849403][T27527] __x64_sys_ioctl+0x18e/0x210 [ 534.849415][T27527] do_syscall_64+0xc9/0xf80 [ 534.849429][T27527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.849441][T27527] RIP: 0033:0x7f770599aeb9 [ 534.849451][T27527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.849461][T27527] RSP: 002b:00007f770683b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.849473][T27527] RAX: ffffffffffffffda RBX: 00007f7705c15fa0 RCX: 00007f770599aeb9 [ 534.849480][T27527] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 534.849486][T27527] RBP: 00007f770683b090 R08: 0000000000000000 R09: 0000000000000000 [ 534.849493][T27527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 534.849499][T27527] R13: 00007f7705c16038 R14: 00007f7705c15fa0 R15: 00007fff6381c098 [ 534.849514][T27527] [ 535.019531][ T40] audit: type=1400 audit(2000000328.689:27564): avc: denied { setattr } for pid=27532 comm="syz.6.7389" name="tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 535.234136][T27545] bridge0: entered promiscuous mode [ 535.241240][T27545] veth0_vlan: left promiscuous mode [ 535.243450][T27545] vlan0: entered promiscuous mode [ 535.245513][T27545] veth0_vlan: entered promiscuous mode [ 535.292556][T27550] Context (ID=0x4df) not attached to queue pair (handle=0x2:0x100) [ 535.359594][T27557] FAULT_INJECTION: forcing a failure. [ 535.359594][T27557] name failslab, interval 1, probability 0, space 0, times 0 [ 535.363664][T27557] CPU: 2 UID: 0 PID: 27557 Comm: syz.6.7398 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.363683][T27557] Tainted: [L]=SOFTLOCKUP [ 535.363687][T27557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 535.363695][T27557] Call Trace: [ 535.363699][T27557] [ 535.363704][T27557] dump_stack_lvl+0x100/0x190 [ 535.363724][T27557] should_fail_ex.cold+0x5/0xa [ 535.363737][T27557] should_failslab+0xc2/0x120 [ 535.363753][T27557] kmem_cache_alloc_noprof+0x83/0x780 [ 535.363767][T27557] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 535.363780][T27557] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 535.363796][T27557] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 535.363810][T27557] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 535.363827][T27557] mmu_topup_memory_caches+0x25/0x170 [ 535.363844][T27557] kvm_mmu_load+0xd6/0x23e0 [ 535.363858][T27557] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 535.363870][T27557] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 535.363880][T27557] ? kvm_msr_allowed+0x47/0x450 [ 535.363897][T27557] ? __pfx_kvm_mmu_load+0x10/0x10 [ 535.363911][T27557] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 535.363924][T27557] ? kvm_check_and_inject_events+0x961/0x10c0 [ 535.363944][T27557] vcpu_run+0x39ee/0x5ca0 [ 535.363962][T27557] ? __lock_acquire+0x4a5/0x2630 [ 535.363976][T27557] ? __pfx_vcpu_run+0x10/0x10 [ 535.363997][T27557] ? rcu_is_watching+0x12/0xc0 [ 535.364014][T27557] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 535.364030][T27557] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 535.364051][T27557] kvm_vcpu_ioctl+0x730/0x16d0 [ 535.364065][T27557] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 535.364077][T27557] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 535.364096][T27557] ? do_vfs_ioctl+0x226/0x13e0 [ 535.364107][T27557] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 535.364117][T27557] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 535.364132][T27557] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 535.364154][T27557] ? selinux_file_ioctl+0x139/0x290 [ 535.364165][T27557] ? selinux_file_ioctl+0xb4/0x290 [ 535.364178][T27557] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 535.364190][T27557] __x64_sys_ioctl+0x18e/0x210 [ 535.364203][T27557] do_syscall_64+0xc9/0xf80 [ 535.364217][T27557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.364229][T27557] RIP: 0033:0x7fec9df9aeb9 [ 535.364239][T27557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.364250][T27557] RSP: 002b:00007fec9ee59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.364261][T27557] RAX: ffffffffffffffda RBX: 00007fec9e215fa0 RCX: 00007fec9df9aeb9 [ 535.364269][T27557] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 535.364276][T27557] RBP: 00007fec9ee59090 R08: 0000000000000000 R09: 0000000000000000 [ 535.364282][T27557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.364289][T27557] R13: 00007fec9e216038 R14: 00007fec9e215fa0 R15: 00007ffced0448f8 [ 535.364303][T27557] [ 535.483640][T27561] netlink: 'syz.4.7399': attribute type 13 has an invalid length. [ 535.486332][T27561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7399'. [ 535.558919][T27565] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 535.812770][T27589] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7408'. [ 535.875688][T27591] binder: 27590:27591 unknown command 0 [ 535.877537][T27591] binder: 27590:27591 ioctl c0306201 200000000080 returned -22 [ 535.930216][T27596] FAULT_INJECTION: forcing a failure. [ 535.930216][T27596] name failslab, interval 1, probability 0, space 0, times 0 [ 535.934187][T27596] CPU: 3 UID: 0 PID: 27596 Comm: syz.7.7410 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.934205][T27596] Tainted: [L]=SOFTLOCKUP [ 535.934208][T27596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 535.934216][T27596] Call Trace: [ 535.934221][T27596] [ 535.934226][T27596] dump_stack_lvl+0x100/0x190 [ 535.934244][T27596] should_fail_ex.cold+0x5/0xa [ 535.934257][T27596] should_failslab+0xc2/0x120 [ 535.934273][T27596] kmem_cache_alloc_noprof+0x83/0x780 [ 535.934288][T27596] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 535.934301][T27596] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 535.934317][T27596] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 535.934330][T27596] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 535.934347][T27596] mmu_topup_memory_caches+0x25/0x170 [ 535.934364][T27596] kvm_mmu_load+0xd6/0x23e0 [ 535.934379][T27596] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 535.934390][T27596] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 535.934401][T27596] ? kvm_msr_allowed+0x47/0x450 [ 535.934433][T27596] ? __pfx_kvm_mmu_load+0x10/0x10 [ 535.934448][T27596] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 535.934462][T27596] ? kvm_check_and_inject_events+0x961/0x10c0 [ 535.934481][T27596] vcpu_run+0x39ee/0x5ca0 [ 535.934499][T27596] ? __lock_acquire+0x4a5/0x2630 [ 535.934515][T27596] ? __pfx_vcpu_run+0x10/0x10 [ 535.934538][T27596] ? rcu_is_watching+0x12/0xc0 [ 535.934567][T27596] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 535.934585][T27596] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 535.934606][T27596] kvm_vcpu_ioctl+0x730/0x16d0 [ 535.934620][T27596] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 535.934632][T27596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 535.934651][T27596] ? do_vfs_ioctl+0x226/0x13e0 [ 535.934663][T27596] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 535.934673][T27596] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 535.934688][T27596] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 535.934710][T27596] ? selinux_file_ioctl+0x139/0x290 [ 535.934721][T27596] ? selinux_file_ioctl+0xb4/0x290 [ 535.934738][T27596] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 535.934751][T27596] __x64_sys_ioctl+0x18e/0x210 [ 535.934763][T27596] do_syscall_64+0xc9/0xf80 [ 535.934778][T27596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.934789][T27596] RIP: 0033:0x7ff56e19aeb9 [ 535.934800][T27596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.934812][T27596] RSP: 002b:00007ff56f02f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.934823][T27596] RAX: ffffffffffffffda RBX: 00007ff56e415fa0 RCX: 00007ff56e19aeb9 [ 535.934830][T27596] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 535.934837][T27596] RBP: 00007ff56f02f090 R08: 0000000000000000 R09: 0000000000000000 [ 535.934844][T27596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.934850][T27596] R13: 00007ff56e416038 R14: 00007ff56e415fa0 R15: 00007fffafcaf798 [ 535.934865][T27596] [ 536.081276][T27599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7411'. [ 536.113823][T27602] netlink: 'syz.6.7412': attribute type 3 has an invalid length. [ 536.117097][T27605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7414'. [ 536.121026][T27605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7414'. [ 536.148972][T27609] netlink: 45 bytes leftover after parsing attributes in process `syz.6.7415'. [ 536.196375][T27613] xt_hashlimit: size too large, truncated to 1048576 [ 536.251340][T27616] x_tables: duplicate underflow at hook 2 [ 536.492396][T27627] FAULT_INJECTION: forcing a failure. [ 536.492396][T27627] name failslab, interval 1, probability 0, space 0, times 0 [ 536.496405][T27627] CPU: 0 UID: 0 PID: 27627 Comm: syz.6.7421 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.496423][T27627] Tainted: [L]=SOFTLOCKUP [ 536.496427][T27627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 536.496435][T27627] Call Trace: [ 536.496439][T27627] [ 536.496444][T27627] dump_stack_lvl+0x100/0x190 [ 536.496464][T27627] should_fail_ex.cold+0x5/0xa [ 536.496476][T27627] should_failslab+0xc2/0x120 [ 536.496493][T27627] kmem_cache_alloc_noprof+0x83/0x780 [ 536.496509][T27627] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 536.496522][T27627] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 536.496539][T27627] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 536.496552][T27627] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 536.496569][T27627] mmu_topup_memory_caches+0x25/0x170 [ 536.496586][T27627] kvm_mmu_load+0xd6/0x23e0 [ 536.496601][T27627] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 536.496612][T27627] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 536.496622][T27627] ? kvm_msr_allowed+0x47/0x450 [ 536.496640][T27627] ? __pfx_kvm_mmu_load+0x10/0x10 [ 536.496654][T27627] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 536.496668][T27627] ? kvm_check_and_inject_events+0x961/0x10c0 [ 536.496691][T27627] vcpu_run+0x39ee/0x5ca0 [ 536.496709][T27627] ? __lock_acquire+0x4a5/0x2630 [ 536.496724][T27627] ? __pfx_vcpu_run+0x10/0x10 [ 536.496745][T27627] ? rcu_is_watching+0x12/0xc0 [ 536.496762][T27627] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 536.496778][T27627] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 536.496798][T27627] kvm_vcpu_ioctl+0x730/0x16d0 [ 536.496812][T27627] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 536.496825][T27627] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 536.496843][T27627] ? do_vfs_ioctl+0x226/0x13e0 [ 536.496854][T27627] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 536.496864][T27627] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 536.496879][T27627] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 536.496901][T27627] ? selinux_file_ioctl+0x139/0x290 [ 536.496912][T27627] ? selinux_file_ioctl+0xb4/0x290 [ 536.496924][T27627] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 536.496937][T27627] __x64_sys_ioctl+0x18e/0x210 [ 536.496949][T27627] do_syscall_64+0xc9/0xf80 [ 536.496964][T27627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.496976][T27627] RIP: 0033:0x7fec9df9aeb9 [ 536.496987][T27627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.496998][T27627] RSP: 002b:00007fec9ee59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.497009][T27627] RAX: ffffffffffffffda RBX: 00007fec9e215fa0 RCX: 00007fec9df9aeb9 [ 536.497016][T27627] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 536.497023][T27627] RBP: 00007fec9ee59090 R08: 0000000000000000 R09: 0000000000000000 [ 536.497029][T27627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.497036][T27627] R13: 00007fec9e216038 R14: 00007fec9e215fa0 R15: 00007ffced0448f8 [ 536.497051][T27627] [ 536.603154][T27630] geneve3: entered promiscuous mode [ 536.604837][T27630] geneve3: entered allmulticast mode [ 536.734320][T27639] loop5: detected capacity change from 0 to 7 [ 536.803358][T27640] loop3: detected capacity change from 0 to 6 [ 536.854574][T27639] Dev loop5: unable to read RDB block 7 [ 536.856505][T27639] loop5: unable to read partition table [ 536.856953][T27640] Dev loop3: unable to read RDB block 6 [ 536.858534][T27639] loop5: partition table beyond EOD, [ 536.860462][T27640] loop3: unable to read partition table [ 536.860568][T27640] loop3: partition table beyond EOD, [ 536.862245][T27639] truncated [ 536.864577][T27640] truncated [ 536.869161][T27639] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 536.870201][T27640] loop_reread_partitions: partition scan of loop3 (þ被xüŸÑø éÚ¬§ÊdƤ´à–ƒÝ¡¯¨) failed (rc=-5) [ 537.003477][ T5344] Dev loop5: unable to read RDB block 7 [ 537.005399][ T5344] loop5: unable to read partition table [ 537.007285][ T5344] loop5: partition table beyond EOD, truncated [ 537.085979][T27653] ref_ctr_offset mismatch. inode: 0x665 offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 537.275836][T27675] netlink: 'syz.5.7435': attribute type 1 has an invalid length. [ 537.282331][T27669] FAULT_INJECTION: forcing a failure. [ 537.282331][T27669] name failslab, interval 1, probability 0, space 0, times 0 [ 537.286664][T27669] CPU: 0 UID: 0 PID: 27669 Comm: syz.6.7434 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.286684][T27669] Tainted: [L]=SOFTLOCKUP [ 537.286688][T27669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 537.286709][T27669] Call Trace: [ 537.286714][T27669] [ 537.286719][T27669] dump_stack_lvl+0x100/0x190 [ 537.286739][T27669] should_fail_ex.cold+0x5/0xa [ 537.286765][T27669] should_failslab+0xc2/0x120 [ 537.286781][T27669] kmem_cache_alloc_noprof+0x83/0x780 [ 537.286796][T27669] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 537.286809][T27669] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 537.286825][T27669] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 537.286838][T27669] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 537.286856][T27669] mmu_topup_memory_caches+0x25/0x170 [ 537.286873][T27669] kvm_mmu_load+0xd6/0x23e0 [ 537.286887][T27669] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 537.286899][T27669] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 537.286910][T27669] ? kvm_msr_allowed+0x47/0x450 [ 537.286926][T27669] ? __pfx_kvm_mmu_load+0x10/0x10 [ 537.286940][T27669] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 537.286954][T27669] ? kvm_check_and_inject_events+0x961/0x10c0 [ 537.286973][T27669] vcpu_run+0x39ee/0x5ca0 [ 537.286991][T27669] ? __lock_acquire+0x4a5/0x2630 [ 537.287006][T27669] ? __pfx_vcpu_run+0x10/0x10 [ 537.287027][T27669] ? rcu_is_watching+0x12/0xc0 [ 537.287045][T27669] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 537.287061][T27669] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 537.287081][T27669] kvm_vcpu_ioctl+0x730/0x16d0 [ 537.287095][T27669] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 537.287108][T27669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 537.287126][T27669] ? do_vfs_ioctl+0x226/0x13e0 [ 537.287137][T27669] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 537.287147][T27669] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 537.287162][T27669] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 537.287184][T27669] ? selinux_file_ioctl+0x139/0x290 [ 537.287195][T27669] ? selinux_file_ioctl+0xb4/0x290 [ 537.287208][T27669] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 537.287220][T27669] __x64_sys_ioctl+0x18e/0x210 [ 537.287232][T27669] do_syscall_64+0xc9/0xf80 [ 537.287247][T27669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.287258][T27669] RIP: 0033:0x7fec9df9aeb9 [ 537.287269][T27669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.287279][T27669] RSP: 002b:00007fec9ee59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.287290][T27669] RAX: ffffffffffffffda RBX: 00007fec9e215fa0 RCX: 00007fec9df9aeb9 [ 537.287297][T27669] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 537.287304][T27669] RBP: 00007fec9ee59090 R08: 0000000000000000 R09: 0000000000000000 [ 537.287310][T27669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.287317][T27669] R13: 00007fec9e216038 R14: 00007fec9e215fa0 R15: 00007ffced0448f8 [ 537.287331][T27669] [ 537.544350][ T40] audit: type=1400 audit(2000000331.046:27565): avc: denied { ioctl } for pid=27691 comm="syz.6.7438" path="socket:[199206]" dev="sockfs" ino=199206 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 538.016309][T27724] FAULT_INJECTION: forcing a failure. [ 538.016309][T27724] name failslab, interval 1, probability 0, space 0, times 0 [ 538.020235][T27724] CPU: 2 UID: 0 PID: 27724 Comm: syz.7.7447 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.020253][T27724] Tainted: [L]=SOFTLOCKUP [ 538.020257][T27724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 538.020275][T27724] Call Trace: [ 538.020280][T27724] [ 538.020285][T27724] dump_stack_lvl+0x100/0x190 [ 538.020319][T27724] should_fail_ex.cold+0x5/0xa [ 538.020332][T27724] should_failslab+0xc2/0x120 [ 538.020347][T27724] kmem_cache_alloc_noprof+0x83/0x780 [ 538.020362][T27724] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 538.020380][T27724] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 538.020396][T27724] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 538.020409][T27724] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 538.020427][T27724] mmu_topup_memory_caches+0x25/0x170 [ 538.020443][T27724] kvm_mmu_load+0xd6/0x23e0 [ 538.020459][T27724] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 538.020470][T27724] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 538.020480][T27724] ? kvm_msr_allowed+0x47/0x450 [ 538.020497][T27724] ? __pfx_kvm_mmu_load+0x10/0x10 [ 538.020511][T27724] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 538.020525][T27724] ? kvm_check_and_inject_events+0x961/0x10c0 [ 538.020545][T27724] vcpu_run+0x39ee/0x5ca0 [ 538.020563][T27724] ? __lock_acquire+0x4a5/0x2630 [ 538.020577][T27724] ? __pfx_vcpu_run+0x10/0x10 [ 538.020599][T27724] ? rcu_is_watching+0x12/0xc0 [ 538.020616][T27724] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 538.020632][T27724] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 538.020653][T27724] kvm_vcpu_ioctl+0x730/0x16d0 [ 538.020667][T27724] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 538.020680][T27724] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 538.020698][T27724] ? do_vfs_ioctl+0x226/0x13e0 [ 538.020709][T27724] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 538.020719][T27724] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 538.020743][T27724] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 538.020765][T27724] ? selinux_file_ioctl+0x139/0x290 [ 538.020777][T27724] ? selinux_file_ioctl+0xb4/0x290 [ 538.020789][T27724] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 538.020802][T27724] __x64_sys_ioctl+0x18e/0x210 [ 538.020814][T27724] do_syscall_64+0xc9/0xf80 [ 538.020837][T27724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.020849][T27724] RIP: 0033:0x7ff56e19aeb9 [ 538.020859][T27724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.020870][T27724] RSP: 002b:00007ff56f02f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.020881][T27724] RAX: ffffffffffffffda RBX: 00007ff56e415fa0 RCX: 00007ff56e19aeb9 [ 538.020888][T27724] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 538.020895][T27724] RBP: 00007ff56f02f090 R08: 0000000000000000 R09: 0000000000000000 [ 538.020902][T27724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.020908][T27724] R13: 00007ff56e416038 R14: 00007ff56e415fa0 R15: 00007fffafcaf798 [ 538.020923][T27724] [ 538.203449][T27718] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 538.301241][T27741] bond5: option xmit_hash_policy: invalid value (6) [ 538.305589][T27741] bond5 (unregistering): Released all slaves [ 538.487395][T27771] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 538.502063][ T40] audit: type=1804 audit(2000000331.953:27566): pid=27771 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.7461" name="/newroot/55/file0" dev="tmpfs" ino=302 res=1 errno=0 [ 538.640576][ T6006] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 538.807409][T27806] IPv6: addrconf: prefix option has invalid lifetime [ 538.818201][ T6006] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 538.820948][ T6006] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.827394][ T6006] usb 9-1: Product: syz [ 538.828695][ T6006] usb 9-1: Manufacturer: syz [ 538.830149][ T6006] usb 9-1: SerialNumber: syz [ 538.840380][ T6006] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 538.857905][ T1332] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 538.867794][T27819] 9p: Unknown access argument 18446744073709551615: -34 [ 539.081884][ T53] usb 9-1: USB disconnect, device number 101 [ 539.089884][ T1026] usb 50-1: device descriptor read/8, error -110 [ 539.164475][ T29] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 539.185841][ T6319] usb 10-1: new low-speed USB device number 35 using dummy_hcd [ 539.335568][ T29] usb 12-1: Using ep0 maxpacket: 32 [ 539.339151][ T29] usb 12-1: config 0 has an invalid interface number: 119 but max is 0 [ 539.341804][ T29] usb 12-1: config 0 has no interface number 0 [ 539.345847][ T29] usb 12-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 539.348832][ T29] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.351490][ T29] usb 12-1: Product: syz [ 539.352894][ T29] usb 12-1: Manufacturer: syz [ 539.354360][ T29] usb 12-1: SerialNumber: syz [ 539.356900][ T6319] usb 10-1: Invalid ep0 maxpacket: 64 [ 539.357232][ T29] usb 12-1: config 0 descriptor?? [ 539.362979][ T29] input: bcm5974 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.119/input/input134 [ 539.453385][ T10] usb 11-1: new low-speed USB device number 46 using dummy_hcd [ 539.495911][ T6319] usb 10-1: new low-speed USB device number 36 using dummy_hcd [ 539.509779][ T1026] usb usb50-port1: attempt power cycle [ 539.615409][ T10] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 539.619948][ T10] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 539.624432][ T10] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 539.637257][ T10] usb 11-1: string descriptor 0 read error: -22 [ 539.640137][ T10] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.656312][ T6319] usb 10-1: Invalid ep0 maxpacket: 64 [ 539.656312][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.660941][ T6319] usb usb10-port1: attempt power cycle [ 539.665346][T27839] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 539.722211][ T6061] usb 12-1: USB disconnect, device number 2 [ 539.841320][T27845] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 539.843619][T27847] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 539.892721][T27853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.895731][T27853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.907326][ T10] cdc_ncm 11-1:1.0: bind() failure [ 539.914781][ T10] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 539.917072][ T10] cdc_ncm 11-1:1.1: bind() failure [ 539.922589][ T10] usb 11-1: USB disconnect, device number 46 [ 539.946064][ T1332] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 539.948426][ T1332] ath9k_htc: Failed to initialize the device [ 539.950733][ T53] usb 9-1: ath9k_htc: USB layer deinitialized [ 540.037034][T27864] netlink: 'syz.6.7480': attribute type 21 has an invalid length. [ 540.039653][T27864] __nla_validate_parse: 6 callbacks suppressed [ 540.039663][T27864] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7480'. [ 540.044785][ T6319] usb 10-1: new low-speed USB device number 37 using dummy_hcd [ 540.074626][ T6319] usb 10-1: Invalid ep0 maxpacket: 64 [ 540.116978][ T1026] usb usb50-port1: unable to enumerate USB device [ 540.212409][ T6319] usb 10-1: new low-speed USB device number 38 using dummy_hcd [ 540.234420][ T6319] usb 10-1: Invalid ep0 maxpacket: 64 [ 540.236429][ T6319] usb usb10-port1: unable to enumerate USB device [ 540.459630][T27876] netlink: 'syz.7.7484': attribute type 1 has an invalid length. [ 540.466897][T27876] overlayfs: failed to resolve './file0': -2 [ 540.542057][T27880] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 540.543480][T27880] @0Ù: renamed from bond_slave_1 (while UP) [ 540.726787][T27885] FAULT_INJECTION: forcing a failure. [ 540.726787][T27885] name failslab, interval 1, probability 0, space 0, times 0 [ 540.730816][T27885] CPU: 2 UID: 0 PID: 27885 Comm: syz.7.7488 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.730833][T27885] Tainted: [L]=SOFTLOCKUP [ 540.730837][T27885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 540.730844][T27885] Call Trace: [ 540.730850][T27885] [ 540.730854][T27885] dump_stack_lvl+0x100/0x190 [ 540.730873][T27885] should_fail_ex.cold+0x5/0xa [ 540.730886][T27885] should_failslab+0xc2/0x120 [ 540.730901][T27885] __kmalloc_node_noprof+0xfb/0x9e0 [ 540.730917][T27885] ? alloc_slab_obj_exts+0x46/0x110 [ 540.730931][T27885] ? alloc_slab_obj_exts+0x46/0x110 [ 540.730940][T27885] alloc_slab_obj_exts+0x46/0x110 [ 540.730951][T27885] new_slab+0x354/0x440 [ 540.730962][T27885] ___slab_alloc+0xda3/0x1ca0 [ 540.730972][T27885] ? find_held_lock+0x2b/0x80 [ 540.730988][T27885] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 540.731006][T27885] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 540.731019][T27885] ? __slab_alloc.isra.0+0x63/0x110 [ 540.731029][T27885] __slab_alloc.isra.0+0x63/0x110 [ 540.731041][T27885] kmem_cache_alloc_noprof+0x4ec/0x780 [ 540.731056][T27885] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 540.731068][T27885] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 540.731084][T27885] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 540.731097][T27885] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 540.731115][T27885] mmu_topup_memory_caches+0x25/0x170 [ 540.731132][T27885] kvm_mmu_load+0xd6/0x23e0 [ 540.731147][T27885] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 540.731158][T27885] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 540.731168][T27885] ? kvm_msr_allowed+0x47/0x450 [ 540.731186][T27885] ? __pfx_kvm_mmu_load+0x10/0x10 [ 540.731200][T27885] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 540.731213][T27885] ? kvm_check_and_inject_events+0x961/0x10c0 [ 540.731232][T27885] vcpu_run+0x39ee/0x5ca0 [ 540.731250][T27885] ? __lock_acquire+0x4a5/0x2630 [ 540.731264][T27885] ? __pfx_vcpu_run+0x10/0x10 [ 540.731285][T27885] ? rcu_is_watching+0x12/0xc0 [ 540.731302][T27885] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 540.731318][T27885] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 540.731339][T27885] kvm_vcpu_ioctl+0x730/0x16d0 [ 540.731352][T27885] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 540.731365][T27885] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 540.731383][T27885] ? do_vfs_ioctl+0x226/0x13e0 [ 540.731395][T27885] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 540.731405][T27885] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 540.731419][T27885] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 540.731441][T27885] ? selinux_file_ioctl+0x139/0x290 [ 540.731453][T27885] ? selinux_file_ioctl+0xb4/0x290 [ 540.731465][T27885] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 540.731478][T27885] __x64_sys_ioctl+0x18e/0x210 [ 540.731490][T27885] do_syscall_64+0xc9/0xf80 [ 540.731505][T27885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.731517][T27885] RIP: 0033:0x7ff56e19aeb9 [ 540.731527][T27885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.731538][T27885] RSP: 002b:00007ff56f02f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.731549][T27885] RAX: ffffffffffffffda RBX: 00007ff56e415fa0 RCX: 00007ff56e19aeb9 [ 540.731557][T27885] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 540.731563][T27885] RBP: 00007ff56f02f090 R08: 0000000000000000 R09: 0000000000000000 [ 540.731570][T27885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.731576][T27885] R13: 00007ff56e416038 R14: 00007ff56e415fa0 R15: 00007fffafcaf798 [ 540.731591][T27885] [ 540.995220][T27892] batadv_slave_1: entered promiscuous mode [ 540.999582][T27892] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 541.009092][T27892] xt_hashlimit: size too large, truncated to 1048576 [ 541.122959][T27896] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7492'. [ 541.132606][T27896] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 541.137110][T27896] gretap1: entered promiscuous mode [ 541.139154][T27896] gretap1: entered allmulticast mode [ 541.601012][T27936] tmpfs: Bad value for 'mpol' [ 541.793975][T27948] MPI: mpi too large (112776 bits) [ 541.850799][T27891] batadv_slave_1: left promiscuous mode [ 541.990372][T27951] serio: Serial port ptm0 [ 541.998097][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 542.008654][T27953] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7509'. [ 542.135792][ T40] audit: type=1400 audit(2000000335.339:27567): avc: denied { nosuid_transition } for pid=27961 comm="syz.5.7512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 542.143380][ T40] audit: type=1400 audit(2000000335.339:27568): avc: denied { transition } for pid=27961 comm="syz.5.7512" path="/file0" dev="ramfs" ino=202440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 542.147657][T27958] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 542.151176][ T40] audit: type=1400 audit(2000000335.339:27569): avc: denied { entrypoint } for pid=27961 comm="syz.5.7512" path="/file0" dev="ramfs" ino=202440 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 542.163501][ T40] audit: type=1400 audit(2000000335.339:27570): avc: denied { noatsecure } for pid=27961 comm="syz.5.7512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 542.194858][T27964] binder: 27963:27964 ioctl c0306201 200000000380 returned -14 [ 542.197724][T27966] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7514'. [ 542.228571][T27969] netlink: 'syz.6.7516': attribute type 1 has an invalid length. [ 542.233724][T27970] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input135 [ 542.273091][T27969] 8021q: adding VLAN 0 to HW filter on device bond5 [ 542.283273][T27974] program syz.7.7517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 542.288514][T27969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27969 comm=syz.6.7516 [ 542.299416][T27969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7516'. [ 542.305572][ T40] audit: type=1400 audit(2000000335.479:27571): avc: denied { read } for pid=27968 comm="syz.5.7515" path="socket:[202459]" dev="sockfs" ino=202459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 542.314588][T27969] bond5: (slave bridge5): making interface the new active one [ 542.318542][T27969] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 542.335659][T27974] fuse: Bad value for 'fd' [ 542.356721][T27975] 9p: Could not find request transport: uni  [ 542.398029][T27985] fuseblk: block size(5632) > page size(4096) not supported by filesystem [ 542.701259][T28009] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.7528'. [ 542.768152][ T1332] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 542.815503][T28009] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 542.858894][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 542.862332][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 542.865888][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 542.869292][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 542.872570][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 542.950756][ T1332] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 542.954292][ T1332] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 542.957429][ T1332] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 542.961568][ T1332] usb 12-1: config 0 interface 0 has no altsetting 0 [ 542.969481][ T1332] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 542.973050][ T1332] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 542.976503][ T1332] usb 12-1: config 0 interface 0 has no altsetting 0 [ 542.979605][ T1332] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 542.982956][ T1332] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 542.986422][ T1332] usb 12-1: config 0 interface 0 has no altsetting 0 [ 542.989413][ T1332] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 542.992708][ T1332] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 542.996400][ T1332] usb 12-1: config 0 interface 0 has no altsetting 0 [ 543.019399][ T1332] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 543.022293][ T1332] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 543.027987][ T1332] usb 12-1: config 0 interface 0 has no altsetting 0 [ 543.031149][ T1332] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 543.034129][ T1332] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 543.035432][T28022] FAULT_INJECTION: forcing a failure. [ 543.035432][T28022] name failslab, interval 1, probability 0, space 0, times 0 [ 543.039066][ T1332] usb 12-1: config 0 interface 0 has no altsetting 0 [ 543.043566][T28022] CPU: 1 UID: 0 PID: 28022 Comm: syz.6.7532 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.043585][T28022] Tainted: [L]=SOFTLOCKUP [ 543.043589][T28022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 543.043596][T28022] Call Trace: [ 543.043600][T28022] [ 543.043605][T28022] dump_stack_lvl+0x100/0x190 [ 543.043639][T28022] should_fail_ex.cold+0x5/0xa [ 543.043652][T28022] should_failslab+0xc2/0x120 [ 543.043669][T28022] kmem_cache_alloc_noprof+0x83/0x780 [ 543.043684][T28022] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 543.043698][T28022] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 543.043714][T28022] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 543.043728][T28022] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 543.043746][T28022] mmu_topup_memory_caches+0x25/0x170 [ 543.043764][T28022] kvm_mmu_load+0xd6/0x23e0 [ 543.043780][T28022] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 543.043791][T28022] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 543.043803][T28022] ? kvm_msr_allowed+0x47/0x450 [ 543.043820][T28022] ? __pfx_kvm_mmu_load+0x10/0x10 [ 543.043835][T28022] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 543.043849][T28022] ? kvm_check_and_inject_events+0x961/0x10c0 [ 543.043869][T28022] vcpu_run+0x39ee/0x5ca0 [ 543.043888][T28022] ? __lock_acquire+0x4a5/0x2630 [ 543.043902][T28022] ? __pfx_vcpu_run+0x10/0x10 [ 543.043924][T28022] ? rcu_is_watching+0x12/0xc0 [ 543.043942][T28022] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 543.043959][T28022] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 543.043980][T28022] kvm_vcpu_ioctl+0x730/0x16d0 [ 543.043995][T28022] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 543.044008][T28022] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 543.044027][T28022] ? do_vfs_ioctl+0x226/0x13e0 [ 543.044039][T28022] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 543.044049][T28022] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 543.044074][T28022] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 543.044096][T28022] ? selinux_file_ioctl+0x139/0x290 [ 543.044108][T28022] ? selinux_file_ioctl+0xb4/0x290 [ 543.044121][T28022] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 543.044134][T28022] __x64_sys_ioctl+0x18e/0x210 [ 543.044147][T28022] do_syscall_64+0xc9/0xf80 [ 543.044169][T28022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.044181][T28022] RIP: 0033:0x7fec9df9aeb9 [ 543.044192][T28022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.044203][T28022] RSP: 002b:00007fec9ee59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.044214][T28022] RAX: ffffffffffffffda RBX: 00007fec9e215fa0 RCX: 00007fec9df9aeb9 [ 543.044222][T28022] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 543.044228][T28022] RBP: 00007fec9ee59090 R08: 0000000000000000 R09: 0000000000000000 [ 543.044235][T28022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 543.044241][T28022] R13: 00007fec9e216038 R14: 00007fec9e215fa0 R15: 00007ffced0448f8 [ 543.044256][T28022] [ 543.060965][T28015] chnl_net:caif_netlink_parms(): no params data found [ 543.063819][ T1332] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 543.164236][ T1332] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 543.168577][ T1332] usb 12-1: config 0 interface 0 has no altsetting 0 [ 543.171897][ T1332] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 543.175082][ T1332] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 543.178545][ T1332] usb 12-1: config 0 interface 0 has no altsetting 0 [ 543.182489][ T1332] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 543.185673][ T1332] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 543.188347][ T1332] usb 12-1: Product: syz [ 543.189727][ T1332] usb 12-1: Manufacturer: syz [ 543.191385][ T1332] usb 12-1: SerialNumber: syz [ 543.195857][ T1332] usb 12-1: config 0 descriptor?? [ 543.197141][ T1207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.201213][ T1207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.206880][ T1332] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 543.267352][T28015] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.267472][T28015] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.267556][T28015] bridge_slave_0: entered allmulticast mode [ 543.268679][T28015] bridge_slave_0: entered promiscuous mode [ 543.270911][T28015] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.270981][T28015] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.271118][T28015] bridge_slave_1: entered allmulticast mode [ 543.272284][T28015] bridge_slave_1: entered promiscuous mode [ 543.292604][T28015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.336180][ T1207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.339143][ T1207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.348213][T28015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.380430][T28015] team0: Port device team_slave_0 added [ 543.384124][T28015] team0: Port device team_slave_1 added [ 543.417554][T28015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.419774][T28015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.428441][T28015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.447680][ T1207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.451022][ T1207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.467579][T28015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.469864][T28015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.478165][T28015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.503811][T28015] hsr_slave_0: entered promiscuous mode [ 543.506220][T28015] hsr_slave_1: entered promiscuous mode [ 543.508323][T28015] debugfs: 'hsr0' already exists in 'hsr' [ 543.510145][T28015] Cannot create hsr debugfs directory [ 543.574546][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7538'. [ 543.579753][T28046] hsr_slave_0: left promiscuous mode [ 543.583761][T28046] hsr_slave_1: left promiscuous mode [ 543.618159][ T1207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.621476][ T1207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.807409][T28051] FAULT_INJECTION: forcing a failure. [ 543.807409][T28051] name failslab, interval 1, probability 0, space 0, times 0 [ 543.811437][T28051] CPU: 3 UID: 0 PID: 28051 Comm: syz.5.7540 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.811468][T28051] Tainted: [L]=SOFTLOCKUP [ 543.811472][T28051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 543.811479][T28051] Call Trace: [ 543.811484][T28051] [ 543.811489][T28051] dump_stack_lvl+0x100/0x190 [ 543.811508][T28051] should_fail_ex.cold+0x5/0xa [ 543.811521][T28051] should_failslab+0xc2/0x120 [ 543.811537][T28051] kmem_cache_alloc_noprof+0x83/0x780 [ 543.811551][T28051] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 543.811564][T28051] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 543.811581][T28051] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 543.811594][T28051] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 543.811611][T28051] mmu_topup_memory_caches+0x25/0x170 [ 543.811628][T28051] kvm_mmu_load+0xd6/0x23e0 [ 543.811644][T28051] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 543.811655][T28051] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 543.811666][T28051] ? kvm_msr_allowed+0x47/0x450 [ 543.811682][T28051] ? __pfx_kvm_mmu_load+0x10/0x10 [ 543.811697][T28051] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 543.811711][T28051] ? kvm_check_and_inject_events+0x961/0x10c0 [ 543.811730][T28051] vcpu_run+0x39ee/0x5ca0 [ 543.811748][T28051] ? __lock_acquire+0x4a5/0x2630 [ 543.811763][T28051] ? __pfx_vcpu_run+0x10/0x10 [ 543.811784][T28051] ? rcu_is_watching+0x12/0xc0 [ 543.811802][T28051] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 543.811818][T28051] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 543.811839][T28051] kvm_vcpu_ioctl+0x730/0x16d0 [ 543.811853][T28051] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 543.811865][T28051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 543.811883][T28051] ? do_vfs_ioctl+0x226/0x13e0 [ 543.811895][T28051] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 543.811905][T28051] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 543.811920][T28051] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 543.811943][T28051] ? selinux_file_ioctl+0x139/0x290 [ 543.811953][T28051] ? selinux_file_ioctl+0xb4/0x290 [ 543.811966][T28051] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 543.811979][T28051] __x64_sys_ioctl+0x18e/0x210 [ 543.811991][T28051] do_syscall_64+0xc9/0xf80 [ 543.812006][T28051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.812018][T28051] RIP: 0033:0x7f770599aeb9 [ 543.812027][T28051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.812038][T28051] RSP: 002b:00007f770683b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.812050][T28051] RAX: ffffffffffffffda RBX: 00007f7705c15fa0 RCX: 00007f770599aeb9 [ 543.812057][T28051] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 543.812063][T28051] RBP: 00007f770683b090 R08: 0000000000000000 R09: 0000000000000000 [ 543.812070][T28051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 543.812076][T28051] R13: 00007f7705c16038 R14: 00007f7705c15fa0 R15: 00007fff6381c098 [ 543.812091][T28051] [ 544.210309][ T1207] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 544.214084][ T1207] bridge1 (unregistering): left promiscuous mode [ 544.222104][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 544.438967][T28054] netlink: 'syz.6.7541': attribute type 11 has an invalid length. [ 544.511370][ T1207] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 544.515186][ T1207] mac80211_hwsim hwsim33 wlan1: left allmulticast mode [ 544.523354][ T1207] bond0 (unregistering): Released all slaves [ 544.528181][ T1207] bond1 (unregistering): Released all slaves [ 544.687951][ T1207] bond2 (unregistering): Released all slaves [ 544.818886][ T1207] bond3 (unregistering): Released all slaves [ 544.830041][ T1207] bond4 (unregistering): (slave bond5): Releasing backup interface [ 544.833468][ T1207] bond4 (unregistering): Released all slaves [ 544.929901][ T1207] bond5 (unregistering): Released all slaves [ 544.938785][ T1207] bond6 (unregistering): Released all slaves [ 545.037263][ T1207] bond7 (unregistering): (slave veth3): Releasing active interface [ 545.040973][ T1207] bond7 (unregistering): Released all slaves [ 545.047470][ T1207] bond8 (unregistering): Released all slaves [ 545.091023][ T5938] Bluetooth: hci3: command tx timeout [ 545.184310][ T1207] tipc: Left network mode [ 545.195376][T28075] netlink: 'syz.5.7545': attribute type 1 has an invalid length. [ 545.259857][ T1207] IPVS: stopping master sync thread 26296 ... [ 545.517548][ T1207] hsr_slave_0: left promiscuous mode [ 545.519850][ T1207] hsr_slave_1: left promiscuous mode [ 545.522013][ T1207] batman_adv: batadv0: Removing interface: dummy0 [ 545.529131][ T1207] veth1_macvtap: left promiscuous mode [ 545.530934][ T1207] veth0_macvtap: left promiscuous mode [ 545.532811][ T1207] veth1_vlan: left promiscuous mode [ 545.592063][ C3] usb 12-1: yurex_control_callback - control failed: -2 [ 545.598450][ T6006] usb 12-1: USB disconnect, device number 3 [ 545.610888][ T6006] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 546.567827][T28015] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 546.572459][T28123] FAULT_INJECTION: forcing a failure. [ 546.572459][T28123] name failslab, interval 1, probability 0, space 0, times 0 [ 546.576842][T28123] CPU: 3 UID: 0 PID: 28123 Comm: syz.5.7552 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.576861][T28123] Tainted: [L]=SOFTLOCKUP [ 546.576865][T28123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 546.576872][T28123] Call Trace: [ 546.576876][T28123] [ 546.576880][T28123] dump_stack_lvl+0x100/0x190 [ 546.576900][T28123] should_fail_ex.cold+0x5/0xa [ 546.576913][T28123] should_failslab+0xc2/0x120 [ 546.576929][T28123] kmem_cache_alloc_noprof+0x83/0x780 [ 546.576944][T28123] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 546.576957][T28123] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 546.576973][T28123] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 546.576986][T28123] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 546.577004][T28123] mmu_topup_memory_caches+0x25/0x170 [ 546.577020][T28123] kvm_mmu_load+0xd6/0x23e0 [ 546.577035][T28123] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 546.577046][T28123] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 546.577057][T28123] ? kvm_msr_allowed+0x47/0x450 [ 546.577073][T28123] ? __pfx_kvm_mmu_load+0x10/0x10 [ 546.577087][T28123] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 546.577101][T28123] ? kvm_check_and_inject_events+0x961/0x10c0 [ 546.577121][T28123] vcpu_run+0x39ee/0x5ca0 [ 546.577139][T28123] ? __lock_acquire+0x4a5/0x2630 [ 546.577153][T28123] ? __pfx_vcpu_run+0x10/0x10 [ 546.577174][T28123] ? rcu_is_watching+0x12/0xc0 [ 546.577191][T28123] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 546.577207][T28123] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 546.577228][T28123] kvm_vcpu_ioctl+0x730/0x16d0 [ 546.577246][T28123] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 546.577262][T28123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 546.577286][T28123] ? do_vfs_ioctl+0x226/0x13e0 [ 546.577300][T28123] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 546.577314][T28123] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 546.577337][T28123] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 546.577359][T28123] ? selinux_file_ioctl+0x139/0x290 [ 546.577370][T28123] ? selinux_file_ioctl+0xb4/0x290 [ 546.577383][T28123] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 546.577396][T28123] __x64_sys_ioctl+0x18e/0x210 [ 546.577408][T28123] do_syscall_64+0xc9/0xf80 [ 546.577423][T28123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.577434][T28123] RIP: 0033:0x7f770599aeb9 [ 546.577445][T28123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.577456][T28123] RSP: 002b:00007f770681a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.577467][T28123] RAX: ffffffffffffffda RBX: 00007f7705c16090 RCX: 00007f770599aeb9 [ 546.577474][T28123] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 546.577481][T28123] RBP: 00007f770681a090 R08: 0000000000000000 R09: 0000000000000000 [ 546.577487][T28123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 546.577494][T28123] R13: 00007f7705c16128 R14: 00007f7705c16090 R15: 00007fff6381c098 [ 546.577508][T28123] [ 546.679375][T28116] random: crng reseeded on system resumption [ 547.301629][ T5938] Bluetooth: hci3: command tx timeout [ 547.429779][T28015] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 547.436327][T28015] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 547.444021][T28015] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 547.488452][ T5938] block nbd0: Receive control failed (result -32) [ 547.560940][T28125] nbd0: detected capacity change from 0 to 127 [ 547.589721][T23736] block nbd0: Dead connection, failed to find a fallback [ 547.596673][T23736] block nbd0: shutting down sockets [ 547.598859][T23736] blk_print_req_error: 1 callbacks suppressed [ 547.598870][T23736] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.608455][T23736] Buffer I/O error on dev nbd0, logical block 0, async page read [ 547.611088][T23736] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.615942][T23736] Buffer I/O error on dev nbd0, logical block 1, async page read [ 547.618534][T23736] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.621594][T23736] Buffer I/O error on dev nbd0, logical block 2, async page read [ 547.625690][T23736] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.629024][T23736] Buffer I/O error on dev nbd0, logical block 3, async page read [ 547.631537][T23736] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.634914][T23736] Buffer I/O error on dev nbd0, logical block 0, async page read [ 547.637482][T23736] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.640847][T23736] Buffer I/O error on dev nbd0, logical block 1, async page read [ 547.643369][T23736] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.646884][T23736] Buffer I/O error on dev nbd0, logical block 2, async page read [ 547.649534][T23736] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.652646][T23736] Buffer I/O error on dev nbd0, logical block 3, async page read [ 547.657920][T23736] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.658528][T28015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.661065][T23736] Buffer I/O error on dev nbd0, logical block 0, async page read [ 547.671462][T23736] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.677443][T23736] Buffer I/O error on dev nbd0, logical block 1, async page read [ 547.680653][T23736] ldm_validate_partition_table(): Disk read failed. [ 547.683039][T23736] Dev nbd0: unable to read RDB block 0 [ 547.685024][T23736] nbd0: unable to read partition table [ 547.685204][T28015] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.690780][T23736] ldm_validate_partition_table(): Disk read failed. [ 547.695832][T23736] Dev nbd0: unable to read RDB block 0 [ 547.699285][T23736] nbd0: unable to read partition table [ 547.701537][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.703897][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.704249][ T1207] IPVS: stop unused estimator thread 0... [ 547.774740][T28150] ip6erspan0: entered promiscuous mode [ 547.793696][ T10] usb 11-1: new high-speed USB device number 47 using dummy_hcd [ 547.797694][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.800153][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.865567][T28163] binder: BINDER_SET_CONTEXT_MGR already set [ 547.867587][T28163] binder: 28161:28163 ioctl 4018620d 200000000100 returned -16 [ 547.872688][T28162] binder: 28161:28162 ioctl c0306201 0 returned -14 [ 547.896273][T28163] xt_policy: output policy not valid in PREROUTING and INPUT [ 547.902464][T28162] netlink: 'syz.5.7564': attribute type 3 has an invalid length. [ 547.905672][T28162] netlink: 'syz.5.7564': attribute type 1 has an invalid length. [ 547.908911][T28162] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7564'. [ 547.929142][T28015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.935501][T28162] NCSI netlink: No device for ifindex 0 [ 547.953732][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 547.956734][ T10] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 547.959168][ T10] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 547.966291][ T10] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 547.969965][ T10] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 547.973902][ T10] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 547.987654][ T10] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 547.991315][ T10] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 547.995556][ T10] usb 11-1: config 168 interface 0 has no altsetting 0 [ 547.999790][T28176] FAULT_INJECTION: forcing a failure. [ 547.999790][T28176] name failslab, interval 1, probability 0, space 0, times 0 [ 548.004044][T28176] CPU: 0 UID: 0 PID: 28176 Comm: syz.7.7565 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.004062][T28176] Tainted: [L]=SOFTLOCKUP [ 548.004066][T28176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 548.004073][T28176] Call Trace: [ 548.004078][T28176] [ 548.004083][T28176] dump_stack_lvl+0x100/0x190 [ 548.004102][T28176] should_fail_ex.cold+0x5/0xa [ 548.004116][T28176] should_failslab+0xc2/0x120 [ 548.004131][T28176] kmem_cache_alloc_noprof+0x83/0x780 [ 548.004146][T28176] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 548.004159][T28176] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 548.004175][T28176] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 548.004189][T28176] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 548.004206][T28176] mmu_topup_memory_caches+0x25/0x170 [ 548.004223][T28176] kvm_mmu_load+0xd6/0x23e0 [ 548.004238][T28176] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 548.004249][T28176] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 548.004260][T28176] ? kvm_msr_allowed+0x47/0x450 [ 548.004277][T28176] ? __pfx_kvm_mmu_load+0x10/0x10 [ 548.004291][T28176] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 548.004305][T28176] ? kvm_check_and_inject_events+0x961/0x10c0 [ 548.004330][T28176] vcpu_run+0x39ee/0x5ca0 [ 548.004348][T28176] ? __lock_acquire+0x4a5/0x2630 [ 548.004362][T28176] ? __pfx_vcpu_run+0x10/0x10 [ 548.004384][T28176] ? rcu_is_watching+0x12/0xc0 [ 548.004402][T28176] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 548.004418][T28176] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 548.004438][T28176] kvm_vcpu_ioctl+0x730/0x16d0 [ 548.004452][T28176] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 548.004464][T28176] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.004483][T28176] ? do_vfs_ioctl+0x226/0x13e0 [ 548.004494][T28176] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 548.004504][T28176] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 548.004519][T28176] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 548.004541][T28176] ? selinux_file_ioctl+0x139/0x290 [ 548.004554][T28176] ? selinux_file_ioctl+0xb4/0x290 [ 548.004575][T28176] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 548.004593][T28176] __x64_sys_ioctl+0x18e/0x210 [ 548.004613][T28176] do_syscall_64+0xc9/0xf80 [ 548.004637][T28176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.004657][T28176] RIP: 0033:0x7ff56e19aeb9 [ 548.004673][T28176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.004690][T28176] RSP: 002b:00007ff56f00e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.004708][T28176] RAX: ffffffffffffffda RBX: 00007ff56e416090 RCX: 00007ff56e19aeb9 [ 548.004716][T28176] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 548.004723][T28176] RBP: 00007ff56f00e090 R08: 0000000000000000 R09: 0000000000000000 [ 548.004730][T28176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 548.004736][T28176] R13: 00007ff56e416128 R14: 00007ff56e416090 R15: 00007fffafcaf798 [ 548.004751][T28176] [ 548.113769][T28015] veth0_vlan: entered promiscuous mode [ 548.116373][ T10] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 548.118906][ T10] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 548.120605][T28015] veth1_vlan: entered promiscuous mode [ 548.122557][ T10] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 548.129311][ T10] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 548.133113][ T10] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 548.136872][ T10] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 548.139358][T28015] veth0_macvtap: entered promiscuous mode [ 548.140840][ T10] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 548.144853][T28015] veth1_macvtap: entered promiscuous mode [ 548.147253][ T10] usb 11-1: config 168 interface 0 has no altsetting 0 [ 548.152395][ T10] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 548.154887][ T10] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 548.156341][T28015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.158702][ T10] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 548.164770][ T10] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 548.166619][T28015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.168595][ T10] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 548.168613][ T10] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 548.168627][ T10] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 548.168641][ T10] usb 11-1: config 168 interface 0 has no altsetting 0 [ 548.177118][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.182018][ T10] usb 11-1: string descriptor 0 read error: -22 [ 548.191516][ T10] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 548.194627][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.205588][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.209483][ T10] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 548.215080][T25496] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.223546][T25496] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.254959][T25496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.264233][T25496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.293324][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.296511][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.317918][ T40] audit: type=1400 audit(2000000341.128:27572): avc: denied { setopt } for pid=28183 comm="syz.7.7567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 548.489795][T28201] NILFS (nbd7): device size too small [ 548.529610][ T6061] usb 11-1: USB disconnect, device number 47 [ 548.532183][T28199] usb 11-1: Couldn't submit interrupt_out_urb -19 [ 548.723689][ T5942] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 548.755797][T28134] SELinux: failed to load policy [ 548.769806][ T40] audit: type=1400 audit(2000000341.549:27573): avc: denied { link } for pid=28132 comm="syz.6.7557" name="#97" dev="tmpfs" ino=1896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 548.776794][ T40] audit: type=1400 audit(2000000341.549:27574): avc: denied { rename } for pid=28132 comm="syz.6.7557" name="#98" dev="tmpfs" ino=1896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 548.861573][T28209] netlink: 'syz.4.7573': attribute type 1 has an invalid length. [ 548.886772][ T5942] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 548.889769][ T5942] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.893158][ T5942] usb 10-1: Product: syz [ 548.895581][ T5942] usb 10-1: Manufacturer: syz [ 548.897551][ T5942] usb 10-1: SerialNumber: syz [ 548.905414][ T5942] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 548.922430][ T5942] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 548.933815][T28210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=28210 comm=syz.4.7573 [ 549.068046][T28213] FAULT_INJECTION: forcing a failure. [ 549.068046][T28213] name failslab, interval 1, probability 0, space 0, times 0 [ 549.072178][T28213] CPU: 1 UID: 0 PID: 28213 Comm: syz.4.7574 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.072206][T28213] Tainted: [L]=SOFTLOCKUP [ 549.072212][T28213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 549.072223][T28213] Call Trace: [ 549.072230][T28213] [ 549.072238][T28213] dump_stack_lvl+0x100/0x190 [ 549.072283][T28213] should_fail_ex.cold+0x5/0xa [ 549.072304][T28213] should_failslab+0xc2/0x120 [ 549.072333][T28213] kmem_cache_alloc_noprof+0x83/0x780 [ 549.072355][T28213] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 549.072375][T28213] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 549.072401][T28213] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 549.072420][T28213] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 549.072448][T28213] mmu_topup_memory_caches+0x25/0x170 [ 549.072474][T28213] kvm_mmu_load+0xd6/0x23e0 [ 549.072497][T28213] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 549.072516][T28213] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 549.072532][T28213] ? kvm_msr_allowed+0x47/0x450 [ 549.072557][T28213] ? __pfx_kvm_mmu_load+0x10/0x10 [ 549.072577][T28213] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 549.072598][T28213] ? kvm_check_and_inject_events+0x961/0x10c0 [ 549.072628][T28213] vcpu_run+0x39ee/0x5ca0 [ 549.072655][T28213] ? __lock_acquire+0x4a5/0x2630 [ 549.072678][T28213] ? __pfx_vcpu_run+0x10/0x10 [ 549.072710][T28213] ? rcu_is_watching+0x12/0xc0 [ 549.072737][T28213] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 549.072760][T28213] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 549.072793][T28213] kvm_vcpu_ioctl+0x730/0x16d0 [ 549.072814][T28213] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 549.072835][T28213] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 549.072862][T28213] ? do_vfs_ioctl+0x226/0x13e0 [ 549.072880][T28213] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 549.072896][T28213] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 549.072929][T28213] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 549.072966][T28213] ? selinux_file_ioctl+0x139/0x290 [ 549.072982][T28213] ? selinux_file_ioctl+0xb4/0x290 [ 549.073001][T28213] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 549.073022][T28213] __x64_sys_ioctl+0x18e/0x210 [ 549.073042][T28213] do_syscall_64+0xc9/0xf80 [ 549.073074][T28213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.073092][T28213] RIP: 0033:0x7f457239aeb9 [ 549.073108][T28213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.073124][T28213] RSP: 002b:00007f45731d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.073142][T28213] RAX: ffffffffffffffda RBX: 00007f4572616090 RCX: 00007f457239aeb9 [ 549.073153][T28213] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 549.073163][T28213] RBP: 00007f45731d9090 R08: 0000000000000000 R09: 0000000000000000 [ 549.073174][T28213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 549.073184][T28213] R13: 00007f4572616128 R14: 00007f4572616090 R15: 00007ffde1f87fd8 [ 549.073209][T28213] [ 549.154271][T28197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.173548][T28197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.176609][T28197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=28197 comm=syz.5.7571 [ 549.196836][ T6006] usb 10-1: USB disconnect, device number 39 [ 549.245105][T28217] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 549.274676][T28220] xt_hashlimit: size too large, truncated to 1048576 [ 549.313127][T28217] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 549.322443][T28217] overlayfs: failed to look up (tracing) for ino (-66) [ 549.513567][T28237] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 549.520276][T28237] bond1 (unregistering): Released all slaves [ 549.525402][ T5938] Bluetooth: hci3: command tx timeout [ 549.671142][T28254] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.674034][T28254] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.822728][T28254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.840269][T28254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.022035][ T1207] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.025527][ T1207] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.042718][ T1207] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.046024][T25506] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.088701][T28266] tc_dump_action: action bad kind [ 550.090669][T28268] tc_dump_action: action bad kind [ 550.094055][T28267] netlink: 'syz.6.7590': attribute type 1 has an invalid length. [ 550.109091][T28267] 8021q: adding VLAN 0 to HW filter on device bond6 [ 550.119268][T28267] vlan1: entered allmulticast mode [ 550.122153][T28267] veth0_to_bond: entered allmulticast mode [ 550.124754][T28267] bond6: (slave vlan1): Opening slave failed [ 550.145279][T28271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28271 comm=syz.4.7591 [ 550.266122][T28276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7593'. [ 550.304170][ T5942] usb 10-1: Service connection timeout for: 256 [ 550.306973][ T5942] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 550.316780][ T5942] ath9k_htc: Failed to initialize the device [ 550.324858][ T6006] usb 10-1: ath9k_htc: USB layer deinitialized [ 550.423159][T28283] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7596'. [ 550.673694][T28296] overlayfs: failed to resolve './file1': -2 [ 551.760212][ T5938] Bluetooth: hci3: command tx timeout [ 551.842523][ T40] audit: type=1400 audit(2000000344.420:27575): avc: denied { write } for pid=28317 comm="syz.6.7607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 551.849608][T28318] netlink: 'syz.6.7607': attribute type 39 has an invalid length. [ 552.230623][ T1026] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 552.402134][ T1026] usb 10-1: Using ep0 maxpacket: 8 [ 552.406986][ T1026] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 552.410557][ T1026] usb 10-1: config 0 has no interface number 0 [ 552.412850][ T1026] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 552.417892][ T1026] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 552.420908][ T1026] usb 10-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 552.423872][ T1026] usb 10-1: Product: syz [ 552.426578][ T1026] usb 10-1: config 0 descriptor?? [ 552.442100][ T1026] iowarrior 10-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 552.652800][ T830] usb 10-1: USB disconnect, device number 40 [ 553.160827][ T1026] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 553.321230][ T1026] usb 12-1: Using ep0 maxpacket: 8 [ 553.324326][ T1026] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 553.326662][ T1026] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 553.330060][ T1026] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 553.334967][ T1026] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.338649][ T1026] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 553.342108][ T1026] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 553.346677][ T1026] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 553.350799][ T1026] usb 12-1: config 168 interface 0 has no altsetting 0 [ 553.354317][ T1026] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 553.357604][ T1026] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 553.361020][ T1026] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 553.364799][ T1026] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.368475][ T1026] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 553.371900][ T1026] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 553.376668][ T1026] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 553.380858][ T1026] usb 12-1: config 168 interface 0 has no altsetting 0 [ 553.383866][ T1026] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 553.386690][ T1026] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 553.390362][ T1026] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 553.393998][ T1026] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.398838][ T1026] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 553.402441][ T1026] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 553.406084][ T1026] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 553.410375][ T1026] usb 12-1: config 168 interface 0 has no altsetting 0 [ 553.416187][ T1026] usb 12-1: string descriptor 0 read error: -22 [ 553.418720][ T1026] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 553.421789][ T1026] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.438951][ T1026] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 553.527481][ T6061] usb 11-1: new high-speed USB device number 48 using dummy_hcd [ 553.653789][ T830] usb 12-1: USB disconnect, device number 4 [ 553.683696][T28394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.695924][ T6061] usb 11-1: too many configurations: 116, using maximum allowed: 8 [ 553.711157][T28394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.713645][ T6061] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 553.717603][ T6061] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.720879][ T6061] usb 11-1: Product: syz [ 553.722420][ T6061] usb 11-1: Manufacturer: syz [ 553.724047][ T6061] usb 11-1: SerialNumber: syz [ 553.736414][ T6061] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 553.757802][ T1026] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 553.973514][ T830] usb 11-1: USB disconnect, device number 48 [ 554.103977][ T6061] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 554.262435][ T6061] usb 9-1: Using ep0 maxpacket: 32 [ 554.270913][ T6061] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 554.278296][ T6061] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 554.282153][ T6061] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 554.285683][ T6061] usb 9-1: Product: syz [ 554.287459][ T6061] usb 9-1: Manufacturer: syz [ 554.294536][ T6061] usb 9-1: SerialNumber: syz [ 554.298947][ T6061] usb 9-1: config 0 descriptor?? [ 554.302404][T28404] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 554.446744][T28443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7631'. [ 554.613386][T28466] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7634'. [ 554.656576][T28471] netlink: 'syz.5.7639': attribute type 1 has an invalid length. [ 554.659227][T28471] netlink: 'syz.5.7639': attribute type 4 has an invalid length. [ 554.661715][T28471] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.7639'. [ 554.797362][T28476] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 554.884623][T28482] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 554.887059][T28482] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 1th superblock [ 554.889652][T28482] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 554.892143][T28482] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 2th superblock [ 554.896046][T28482] netlink: 'syz.7.7644': attribute type 39 has an invalid length. [ 554.899877][T28482] veth0_macvtap: left promiscuous mode [ 554.916796][ T1026] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 554.919840][ T1026] ath9k_htc: Failed to initialize the device [ 554.924283][ T830] usb 11-1: ath9k_htc: USB layer deinitialized [ 554.950765][ T40] audit: type=1400 audit(2000000347.328:27576): avc: denied { watch_mount } for pid=28481 comm="syz.7.7644" path="/91" dev="tmpfs" ino=484 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 555.028550][T28489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28489 comm=syz.7.7646 [ 555.216082][T28502] netlink: 'syz.7.7650': attribute type 1 has an invalid length. [ 555.246102][ T830] usb 11-1: new high-speed USB device number 49 using dummy_hcd [ 555.271515][T28502] macvlan3: entered promiscuous mode [ 555.273792][T28502] macvlan3: entered allmulticast mode [ 555.277003][T28502] bond1: entered promiscuous mode [ 555.280254][T28502] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 555.289922][T28502] bond1: left promiscuous mode [ 555.304977][T28505] FAULT_INJECTION: forcing a failure. [ 555.304977][T28505] name failslab, interval 1, probability 0, space 0, times 0 [ 555.310458][T28505] CPU: 0 UID: 0 PID: 28505 Comm: syz.5.7651 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.310478][T28505] Tainted: [L]=SOFTLOCKUP [ 555.310483][T28505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 555.310489][T28505] Call Trace: [ 555.310494][T28505] [ 555.310499][T28505] dump_stack_lvl+0x100/0x190 [ 555.310518][T28505] should_fail_ex.cold+0x5/0xa [ 555.310531][T28505] should_failslab+0xc2/0x120 [ 555.310547][T28505] kmem_cache_alloc_noprof+0x83/0x780 [ 555.310562][T28505] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 555.310575][T28505] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 555.310591][T28505] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 555.310604][T28505] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 555.310621][T28505] mmu_topup_memory_caches+0x25/0x170 [ 555.310638][T28505] kvm_mmu_load+0xd6/0x23e0 [ 555.310652][T28505] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 555.310664][T28505] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 555.310674][T28505] ? kvm_msr_allowed+0x47/0x450 [ 555.310691][T28505] ? __pfx_kvm_mmu_load+0x10/0x10 [ 555.310708][T28505] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 555.310722][T28505] ? kvm_check_and_inject_events+0x961/0x10c0 [ 555.310742][T28505] vcpu_run+0x39ee/0x5ca0 [ 555.310760][T28505] ? __lock_acquire+0x4a5/0x2630 [ 555.310774][T28505] ? __pfx_vcpu_run+0x10/0x10 [ 555.310795][T28505] ? rcu_is_watching+0x12/0xc0 [ 555.310813][T28505] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 555.310829][T28505] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 555.310849][T28505] kvm_vcpu_ioctl+0x730/0x16d0 [ 555.310862][T28505] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 555.310875][T28505] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 555.310893][T28505] ? do_vfs_ioctl+0x226/0x13e0 [ 555.310904][T28505] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 555.310914][T28505] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 555.310928][T28505] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 555.310950][T28505] ? selinux_file_ioctl+0x139/0x290 [ 555.310961][T28505] ? selinux_file_ioctl+0xb4/0x290 [ 555.310973][T28505] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 555.310986][T28505] __x64_sys_ioctl+0x18e/0x210 [ 555.310998][T28505] do_syscall_64+0xc9/0xf80 [ 555.311012][T28505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.311023][T28505] RIP: 0033:0x7f770599aeb9 [ 555.311033][T28505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.311043][T28505] RSP: 002b:00007f770683b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.311054][T28505] RAX: ffffffffffffffda RBX: 00007f7705c15fa0 RCX: 00007f770599aeb9 [ 555.311061][T28505] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 555.311068][T28505] RBP: 00007f770683b090 R08: 0000000000000000 R09: 0000000000000000 [ 555.311074][T28505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.311080][T28505] R13: 00007f7705c16038 R14: 00007f7705c15fa0 R15: 00007fff6381c098 [ 555.311095][T28505] [ 555.416967][ T830] usb 11-1: device descriptor read/64, error -71 [ 555.516072][T28508] 9p: Bad value for 'rfdno' [ 555.628030][T28515] openvswitch: netlink: Missing valid actions attribute. [ 555.630317][T28515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.674092][ T830] usb 11-1: new high-speed USB device number 50 using dummy_hcd [ 555.812723][ T830] usb 11-1: device descriptor read/64, error -71 [ 555.931229][ T830] usb usb11-port1: attempt power cycle [ 556.294004][ T830] usb 11-1: new high-speed USB device number 51 using dummy_hcd [ 556.327154][ T830] usb 11-1: device descriptor read/8, error -71 [ 556.593353][ T830] usb 11-1: new high-speed USB device number 52 using dummy_hcd [ 556.615651][ T830] usb 11-1: device descriptor read/8, error -71 [ 556.732435][ T830] usb usb11-port1: unable to enumerate USB device [ 557.059142][ T830] usb 9-1: USB disconnect, device number 102 [ 558.007155][ T5938] block nbd4: Receive control failed (result -32) [ 558.007727][T28540] block nbd4: shutting down sockets [ 558.317003][T28553] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.319440][T28553] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.325384][ T1332] usb 11-1: new high-speed USB device number 53 using dummy_hcd [ 558.423990][T28553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.435924][T28553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.507440][ T1332] usb 11-1: Using ep0 maxpacket: 8 [ 558.510511][ T1332] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 558.512909][ T1332] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 558.516274][ T1332] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 558.520064][ T1332] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 558.523768][ T1332] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 558.527164][ T1332] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 558.531234][ T1332] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 558.535491][ T1332] usb 11-1: config 168 interface 0 has no altsetting 0 [ 558.538565][ T1332] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 558.542004][ T1332] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 558.545450][ T1332] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 558.549612][ T1332] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 558.554581][ T1332] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 558.558080][ T1332] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 558.562242][ T1332] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 558.566437][ T1332] usb 11-1: config 168 interface 0 has no altsetting 0 [ 558.570233][ T1332] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 558.573752][ T1332] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 558.577251][ T1332] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 558.581130][ T1332] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 558.585283][ T1332] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 558.589484][ T1332] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 558.593971][ T1332] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 558.598302][ T1332] usb 11-1: config 168 interface 0 has no altsetting 0 [ 558.603071][ T1332] usb 11-1: string descriptor 0 read error: -22 [ 558.605565][ T1332] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 558.608418][ T1332] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.619602][T25506] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.624941][T25506] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.627150][ T1332] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 558.628720][T25506] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.633710][T25506] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.895996][ T830] usb 11-1: USB disconnect, device number 53 [ 558.974499][T28524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.043274][T28559] usb usb9: usbfs: process 28559 (syz.4.7668) did not claim interface 0 before use [ 559.058830][T28561] netlink: 'syz.7.7670': attribute type 1 has an invalid length. [ 559.080347][T28563] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 559.096841][T28561] macvlan3: entered promiscuous mode [ 559.098579][T28561] macvlan3: entered allmulticast mode [ 559.100882][T28561] bond2: entered promiscuous mode [ 559.102864][T28561] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 559.107380][T28563] block nbd5: not configured, cannot reconfigure [ 559.110702][T28563] netlink: 'syz.5.7669': attribute type 1 has an invalid length. [ 559.114419][T28561] bond2: left promiscuous mode [ 559.140511][T28563] comedi comedi3: comedi_config --init_data is deprecated [ 559.216361][ T40] audit: type=1400 audit(2000000351.322:27577): avc: denied { execute } for pid=28570 comm="syz.7.7672" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=206644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 559.229488][T28571] fuse: Bad value for 'user_id' [ 559.231196][T28571] fuse: Bad value for 'user_id' [ 559.269422][T28575] input: syz0 as /devices/virtual/input/input137 [ 559.400555][T28585] syzkaller0: entered promiscuous mode [ 559.402768][T28585] syzkaller0: entered allmulticast mode [ 559.414276][T28585] overlayfs: regular lower layers cannot follow data lower layers [ 559.495022][T28594] netlink: 'syz.5.7678': attribute type 1 has an invalid length. [ 559.510188][T28594] 8021q: adding VLAN 0 to HW filter on device bond7 [ 559.532071][T28593] bond7: (slave veth3): Enslaving as an active interface with a down link [ 559.556159][T28594] bond7: (slave veth5): Enslaving as an active interface with a down link [ 559.660300][T28594] IPVS: persistence engine module ip_vs_pe_s not found [ 559.687136][T28594] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 559.714174][T28594] bond7: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 560.004047][T28613] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 560.130650][T28637] netlink: 'syz.6.7684': attribute type 39 has an invalid length. [ 560.407660][ T40] audit: type=1400 audit(2000000352.426:27578): avc: denied { execute } for pid=28669 comm="syz.5.7694" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=208514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 560.408076][T28670] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 561.586523][ T830] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 561.587283][ T5938] Bluetooth: hci4: command 0x0406 tx timeout [ 561.589015][ T830] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 563.810618][ T830] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 563.810750][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 563.812551][ T830] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 566.034768][ T5938] Bluetooth: hci2: command 0x0405 tx timeout [ 566.035207][ T830] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 566.039177][ T830] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 568.258989][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout [ 568.259163][ T830] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 568.263564][ T830] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 568.409324][T28691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7701'. [ 568.459271][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 568.466158][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 568.470041][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 568.475085][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 568.477607][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 568.488647][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 568.491097][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 568.493445][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 568.498333][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 568.502022][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 568.590659][T28713] netlink: 'syz.4.7706': attribute type 1 has an invalid length. [ 568.642700][T28713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 568.642998][T28718] netlink: 788 bytes leftover after parsing attributes in process `syz.6.7707'. [ 568.646370][T28713] bond1: (slave bond2): making interface the new active one [ 568.650469][T28713] bond1: (slave bond2): Enslaving as an active interface with an up link [ 568.661857][T28718] bond0: entered allmulticast mode [ 568.664342][T28718] bond_slave_0: entered allmulticast mode [ 568.667055][T28718] bond_slave_1: entered allmulticast mode [ 568.776727][T28693] chnl_net:caif_netlink_parms(): no params data found [ 568.790412][T28727] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 568.793619][T28727] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7710'. [ 568.808004][T28732] netlink: 'syz.7.7712': attribute type 39 has an invalid length. [ 568.827288][T28693] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.830410][T28693] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.832932][T28693] bridge_slave_0: entered allmulticast mode [ 568.835739][T28693] bridge_slave_0: entered promiscuous mode [ 568.839221][T28732] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7712'. [ 568.843193][T28732] netlink: 'syz.7.7712': attribute type 11 has an invalid length. [ 568.848173][T28693] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.850417][T28693] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.852643][T28693] bridge_slave_1: entered allmulticast mode [ 568.855258][T28693] bridge_slave_1: entered promiscuous mode [ 568.866730][T28732] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7712'. [ 568.870025][T28732] netlink: 'syz.7.7712': attribute type 11 has an invalid length. [ 568.873984][T28693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.878600][T28693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.893735][T28693] team0: Port device team_slave_0 added [ 568.897127][T28693] team0: Port device team_slave_1 added [ 568.944280][T28693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.946309][T28693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.954799][T28693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.961851][T28693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.963963][T28693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.972398][T28693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.998011][T28742] FAULT_INJECTION: forcing a failure. [ 568.998011][T28742] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 569.002013][T28742] CPU: 0 UID: 0 PID: 28742 Comm: syz.7.7715 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.002032][T28742] Tainted: [L]=SOFTLOCKUP [ 569.002036][T28742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 569.002043][T28742] Call Trace: [ 569.002047][T28742] [ 569.002052][T28742] dump_stack_lvl+0x100/0x190 [ 569.002071][T28742] should_fail_ex.cold+0x5/0xa [ 569.002082][T28742] ? prepare_alloc_pages+0x16d/0x5f0 [ 569.002100][T28742] should_fail_alloc_page+0xeb/0x140 [ 569.002141][T28742] prepare_alloc_pages+0x1f0/0x5f0 [ 569.002161][T28742] __alloc_frozen_pages_noprof+0x193/0x2410 [ 569.002181][T28742] ? kasan_save_stack+0x3f/0x50 [ 569.002194][T28742] ? kasan_save_stack+0x30/0x50 [ 569.002207][T28742] ? kasan_save_track+0x14/0x30 [ 569.002219][T28742] ? __kasan_kmalloc+0xaa/0xb0 [ 569.002232][T28742] ? __kvmalloc_node_noprof+0x34d/0xac0 [ 569.002245][T28742] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 569.002258][T28742] ? mmu_topup_memory_caches+0xbc/0x170 [ 569.002274][T28742] ? kvm_mmu_load+0xd6/0x23e0 [ 569.002287][T28742] ? vcpu_run+0x39ee/0x5ca0 [ 569.002303][T28742] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 569.002319][T28742] ? kvm_vcpu_ioctl+0x730/0x16d0 [ 569.002331][T28742] ? __x64_sys_ioctl+0x18e/0x210 [ 569.002341][T28742] ? do_syscall_64+0xc9/0xf80 [ 569.002354][T28742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.002368][T28742] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 569.002390][T28742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 569.002409][T28742] ? policy_nodemask+0xed/0x4f0 [ 569.002428][T28742] alloc_pages_mpol+0x1fb/0x550 [ 569.002444][T28742] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 569.002459][T28742] ? trace_kmalloc+0x83/0xb0 [ 569.002473][T28742] ? __kvmalloc_node_noprof+0x36a/0xac0 [ 569.002486][T28742] ? trace_kmem_cache_alloc+0x80/0xb0 [ 569.002500][T28742] ? kmem_cache_alloc_noprof+0x2ff/0x780 [ 569.002516][T28742] alloc_pages_noprof+0x131/0x390 [ 569.002532][T28742] get_free_pages_noprof+0x10/0xb0 [ 569.002547][T28742] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 569.002565][T28742] mmu_topup_memory_caches+0xbc/0x170 [ 569.002581][T28742] kvm_mmu_load+0xd6/0x23e0 [ 569.002596][T28742] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 569.002607][T28742] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 569.002617][T28742] ? kvm_msr_allowed+0x47/0x450 [ 569.002633][T28742] ? __pfx_kvm_mmu_load+0x10/0x10 [ 569.002648][T28742] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 569.002661][T28742] ? kvm_check_and_inject_events+0x961/0x10c0 [ 569.002680][T28742] vcpu_run+0x39ee/0x5ca0 [ 569.002698][T28742] ? __lock_acquire+0x4a5/0x2630 [ 569.002712][T28742] ? __pfx_vcpu_run+0x10/0x10 [ 569.002733][T28742] ? rcu_is_watching+0x12/0xc0 [ 569.002750][T28742] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 569.002767][T28742] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 569.002787][T28742] kvm_vcpu_ioctl+0x730/0x16d0 [ 569.002800][T28742] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 569.002813][T28742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 569.002831][T28742] ? do_vfs_ioctl+0x226/0x13e0 [ 569.002842][T28742] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 569.002851][T28742] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 569.002866][T28742] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 569.002888][T28742] ? selinux_file_ioctl+0x139/0x290 [ 569.002899][T28742] ? selinux_file_ioctl+0xb4/0x290 [ 569.002911][T28742] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 569.002924][T28742] __x64_sys_ioctl+0x18e/0x210 [ 569.002936][T28742] do_syscall_64+0xc9/0xf80 [ 569.002950][T28742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.002961][T28742] RIP: 0033:0x7ff56e19aeb9 [ 569.002971][T28742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.002982][T28742] RSP: 002b:00007ff56f02f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.002993][T28742] RAX: ffffffffffffffda RBX: 00007ff56e415fa0 RCX: 00007ff56e19aeb9 [ 569.003001][T28742] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 569.003007][T28742] RBP: 00007ff56f02f090 R08: 0000000000000000 R09: 0000000000000000 [ 569.003014][T28742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.003021][T28742] R13: 00007ff56e416038 R14: 00007ff56e415fa0 R15: 00007fffafcaf798 [ 569.003035][T28742] [ 569.010655][T28693] hsr_slave_0: entered promiscuous mode [ 569.154461][T28693] hsr_slave_1: entered promiscuous mode [ 569.223402][T28693] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.226639][T28693] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 569.253345][T28751] ALSA: mixer_oss: invalid OSS volume '' [ 569.313457][T28760] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7721'. [ 569.323305][T28693] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.326377][T28693] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 569.404728][T28693] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.408234][T28693] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 569.511210][T28693] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.514466][T28693] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 569.559644][T28770] xt_hashlimit: size too large, truncated to 1048576 [ 569.657837][T28693] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 569.658154][T28776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7724'. [ 569.660210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 569.663803][T28768] random: crng reseeded on system resumption [ 569.677032][T28693] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 569.682219][T28768] befs: (nbd4): unable to read superblock [ 569.686635][T28768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28768 comm=syz.4.7724 [ 569.686784][T28693] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 569.702676][T28693] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 569.706962][T28768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7724'. [ 569.810522][T28693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.813500][T28785] FAULT_INJECTION: forcing a failure. [ 569.813500][T28785] name failslab, interval 1, probability 0, space 0, times 0 [ 569.817701][T28785] CPU: 2 UID: 0 PID: 28785 Comm: syz.7.7727 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.817719][T28785] Tainted: [L]=SOFTLOCKUP [ 569.817723][T28785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 569.817730][T28785] Call Trace: [ 569.817735][T28785] [ 569.817740][T28785] dump_stack_lvl+0x100/0x190 [ 569.817772][T28785] should_fail_ex.cold+0x5/0xa [ 569.817785][T28785] should_failslab+0xc2/0x120 [ 569.817802][T28785] kmem_cache_alloc_noprof+0x83/0x780 [ 569.817816][T28785] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 569.817829][T28785] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 569.817845][T28785] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 569.817858][T28785] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 569.817875][T28785] mmu_topup_memory_caches+0x25/0x170 [ 569.817892][T28785] kvm_mmu_load+0xd6/0x23e0 [ 569.817907][T28785] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 569.817918][T28785] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 569.817929][T28785] ? kvm_msr_allowed+0x47/0x450 [ 569.817946][T28785] ? __pfx_kvm_mmu_load+0x10/0x10 [ 569.817959][T28785] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 569.817973][T28785] ? kvm_check_and_inject_events+0x961/0x10c0 [ 569.817993][T28785] vcpu_run+0x39ee/0x5ca0 [ 569.818010][T28785] ? __lock_acquire+0x4a5/0x2630 [ 569.818025][T28785] ? __pfx_vcpu_run+0x10/0x10 [ 569.818046][T28785] ? rcu_is_watching+0x12/0xc0 [ 569.818063][T28785] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 569.818079][T28785] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 569.818100][T28785] kvm_vcpu_ioctl+0x730/0x16d0 [ 569.818139][T28785] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 569.818153][T28785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 569.818171][T28785] ? do_vfs_ioctl+0x226/0x13e0 [ 569.818183][T28785] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 569.818193][T28785] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 569.818215][T28785] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 569.818237][T28785] ? selinux_file_ioctl+0x139/0x290 [ 569.818248][T28785] ? selinux_file_ioctl+0xb4/0x290 [ 569.818261][T28785] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 569.818273][T28785] __x64_sys_ioctl+0x18e/0x210 [ 569.818286][T28785] do_syscall_64+0xc9/0xf80 [ 569.818307][T28785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.818319][T28785] RIP: 0033:0x7ff56e19aeb9 [ 569.818329][T28785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.818340][T28785] RSP: 002b:00007ff56f02f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.818351][T28785] RAX: ffffffffffffffda RBX: 00007ff56e415fa0 RCX: 00007ff56e19aeb9 [ 569.818358][T28785] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 569.818365][T28785] RBP: 00007ff56f02f090 R08: 0000000000000000 R09: 0000000000000000 [ 569.818377][T28785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.818383][T28785] R13: 00007ff56e416038 R14: 00007ff56e415fa0 R15: 00007fffafcaf798 [ 569.818398][T28785] [ 569.820464][T28693] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.929985][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.932356][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.941694][T22254] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.944948][T22254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.081929][T28810] bridge_slave_1: left allmulticast mode [ 570.083937][T28810] bridge_slave_1: left promiscuous mode [ 570.085852][T28810] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.091472][T28810] bridge_slave_0: left allmulticast mode [ 570.093354][T28810] bridge_slave_0: left promiscuous mode [ 570.095251][T28810] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.221975][T28814] netlink: 168 bytes leftover after parsing attributes in process `syz.6.7734'. [ 570.227019][T28814] netlink: 168 bytes leftover after parsing attributes in process `syz.6.7734'. [ 570.257657][T28693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.302077][T28825] can0: slcan on pty28. [ 570.336461][T28833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28833 comm=syz.6.7739 [ 570.359372][T28833] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 570.367286][T28831] netlink: 'syz.7.7738': attribute type 12 has an invalid length. [ 570.429594][ T40] audit: type=1400 audit(2000000361.797:27579): avc: denied { append } for pid=28841 comm="syz.7.7740" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 570.437113][ T40] audit: type=1400 audit(2000000361.806:27580): avc: denied { read } for pid=28841 comm="syz.7.7740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 570.447487][T28693] veth0_vlan: entered promiscuous mode [ 570.452706][ T40] audit: type=1400 audit(2000000361.806:27581): avc: denied { write } for pid=28841 comm="syz.7.7740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 570.454952][T28693] veth1_vlan: entered promiscuous mode [ 570.476153][T28693] veth0_macvtap: entered promiscuous mode [ 570.480347][T28693] veth1_macvtap: entered promiscuous mode [ 570.489908][T28693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.496798][T28693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.502666][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.527075][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.529854][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.548168][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.561333][T25500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.563812][T25500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.568699][ T6006] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 570.587577][T25500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.591264][T25500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.664712][ T5938] Bluetooth: hci1: command tx timeout [ 570.741177][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.743019][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.745898][ T6006] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.749070][ T6006] usb 9-1: config 0 has no interfaces? [ 570.753661][ T6006] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 570.757241][ T6006] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.760348][ T6006] usb 9-1: Product: syz [ 570.762666][ T6006] usb 9-1: Manufacturer: syz [ 570.764560][ T6006] usb 9-1: SerialNumber: syz [ 570.771818][ T6006] usb 9-1: config 0 descriptor?? [ 570.999781][T28825] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 571.004310][ T6006] usb 9-1: USB disconnect, device number 103 [ 571.872699][ T53] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 572.033007][ T53] usb 10-1: Using ep0 maxpacket: 8 [ 572.036828][ T53] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 572.039315][ T53] usb 10-1: config 0 has no interface number 0 [ 572.041207][ T53] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 572.044832][ T53] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 572.048327][ T53] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 572.051631][ T53] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 572.055905][ T53] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 572.058702][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.062550][ T53] usb 10-1: config 0 descriptor?? [ 572.066938][ T53] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 572.336350][ C1] ldusb 10-1:0.55: usb_submit_urb failed (-19) [ 572.336356][ T6061] usb 10-1: USB disconnect, device number 41 [ 572.346463][ T6061] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 587.606961][ T1422] ================================================================== [ 587.609489][ T1422] BUG: KASAN: slab-use-after-free in handle_tx+0x5c2/0x620 [ 587.611742][ T1422] Read of size 1 at addr ffff8880226ff490 by task aoe_tx0/1422 [ 587.615003][ T1422] [ 587.616357][ T1422] CPU: 2 UID: 0 PID: 1422 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.616384][ T1422] Tainted: [L]=SOFTLOCKUP [ 587.616390][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 587.616399][ T1422] Call Trace: [ 587.616404][ T1422] [ 587.616410][ T1422] dump_stack_lvl+0x100/0x190 [ 587.616427][ T1422] print_report+0x156/0x4c9 [ 587.616443][ T1422] ? __virt_addr_valid+0x81/0x620 [ 587.616455][ T1422] ? __phys_addr+0xe8/0x180 [ 587.616466][ T1422] ? handle_tx+0x5c2/0x620 [ 587.616481][ T1422] kasan_report+0xdf/0x1a0 [ 587.616497][ T1422] ? handle_tx+0x5c2/0x620 [ 587.616513][ T1422] handle_tx+0x5c2/0x620 [ 587.616530][ T1422] dev_hard_start_xmit+0x127/0x6c0 [ 587.616544][ T1422] __dev_queue_xmit+0x6dd/0x46f0 [ 587.616558][ T1422] ? finish_task_switch.isra.0+0x204/0xb70 [ 587.616576][ T1422] ? __pfx___dev_queue_xmit+0x10/0x10 [ 587.616590][ T1422] ? __lock_acquire+0x4a5/0x2630 [ 587.616601][ T1422] ? ref_tracker_free+0x37e/0x6c0 [ 587.616619][ T1422] ? do_raw_spin_lock+0x128/0x260 [ 587.616632][ T1422] ? find_held_lock+0x2b/0x80 [ 587.616647][ T1422] ? skb_dequeue+0x126/0x180 [ 587.616657][ T1422] ? skb_dequeue+0x126/0x180 [ 587.616667][ T1422] ? find_held_lock+0x2b/0x80 [ 587.616681][ T1422] ? tx+0xa4/0x130 [ 587.616692][ T1422] ? tx+0xa4/0x130 [ 587.616701][ T1422] ? rcu_is_watching+0x12/0xc0 [ 587.616717][ T1422] ? __pfx_tx+0x10/0x10 [ 587.616727][ T1422] tx+0xc4/0x130 [ 587.616737][ T1422] kthread+0x1d8/0x3c0 [ 587.616753][ T1422] ? __kthread_parkme+0xbb/0x230 [ 587.616771][ T1422] ? __pfx_kthread+0x10/0x10 [ 587.616787][ T1422] ? rcu_is_watching+0x12/0xc0 [ 587.616801][ T1422] ? __pfx_default_wake_function+0x10/0x10 [ 587.616818][ T1422] ? __kthread_parkme+0x18c/0x230 [ 587.616835][ T1422] ? __pfx_kthread+0x10/0x10 [ 587.616851][ T1422] kthread+0x3b3/0x730 [ 587.616863][ T1422] ? __pfx_kthread+0x10/0x10 [ 587.616873][ T1422] ? ret_from_fork+0x79/0xaf0 [ 587.616886][ T1422] ? ret_from_fork+0x79/0xaf0 [ 587.616898][ T1422] ? rcu_is_watching+0x12/0xc0 [ 587.616913][ T1422] ? __pfx_kthread+0x10/0x10 [ 587.616924][ T1422] ret_from_fork+0x754/0xaf0 [ 587.616937][ T1422] ? __pfx_ret_from_fork+0x10/0x10 [ 587.616950][ T1422] ? __switch_to+0x7b9/0x10c0 [ 587.616966][ T1422] ? __pfx_kthread+0x10/0x10 [ 587.616979][ T1422] ret_from_fork_asm+0x1a/0x30 [ 587.616992][ T1422] [ 587.616997][ T1422] [ 587.704308][ T1422] Allocated by task 21213: [ 587.705740][ T1422] kasan_save_stack+0x30/0x50 [ 587.707286][ T1422] kasan_save_track+0x14/0x30 [ 587.708793][ T1422] __kasan_kmalloc+0xaa/0xb0 [ 587.710301][ T1422] alloc_tty_struct+0x96/0x8c0 [ 587.711826][ T1422] tty_init_dev.part.0+0x20/0x470 [ 587.713432][ T1422] tty_open+0xa63/0xfa0 [ 587.714806][ T1422] chrdev_open+0x234/0x6a0 [ 587.716234][ T1422] do_dentry_open+0x73e/0x1570 [ 587.717815][ T1422] vfs_open+0x82/0x3f0 [ 587.719109][ T1422] path_openat+0x21dc/0x3120 [ 587.720606][ T1422] do_filp_open+0x1f7/0x420 [ 587.722172][ T1422] do_sys_openat2+0x12e/0x220 [ 587.723665][ T1422] __x64_sys_openat+0x12d/0x210 [ 587.725216][ T1422] do_syscall_64+0xc9/0xf80 [ 587.726676][ T1422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.728583][ T1422] [ 587.729358][ T1422] Freed by task 6061: [ 587.730655][ T1422] kasan_save_stack+0x30/0x50 [ 587.732146][ T1422] kasan_save_track+0x14/0x30 [ 587.733640][ T1422] kasan_save_free_info+0x3b/0x70 [ 587.735237][ T1422] __kasan_slab_free+0x5f/0x80 [ 587.736755][ T1422] kfree+0x1c7/0x690 [ 587.738022][ T1422] process_one_work+0x9c2/0x1840 [ 587.739596][ T1422] worker_thread+0x5da/0xe40 [ 587.741067][ T1422] kthread+0x3b3/0x730 [ 587.742518][ T1422] ret_from_fork+0x754/0xaf0 [ 587.744050][ T1422] ret_from_fork_asm+0x1a/0x30 [ 587.745673][ T1422] [ 587.746499][ T1422] Last potentially related work creation: [ 587.748604][ T1422] kasan_save_stack+0x30/0x50 [ 587.750143][ T1422] kasan_record_aux_stack+0xa7/0xc0 [ 587.751797][ T1422] insert_work+0x36/0x230 [ 587.753186][ T1422] __queue_work+0x96f/0x10f0 [ 587.754688][ T1422] queue_work_on+0x180/0x1e0 [ 587.756180][ T1422] release_tty+0x4f3/0x5f0 [ 587.757621][ T1422] tty_release_struct+0xb7/0xe0 [ 587.759193][ T1422] tty_release+0xd7a/0x1300 [ 587.760675][ T1422] __fput+0x3ff/0xb40 [ 587.762003][ T1422] task_work_run+0x150/0x240 [ 587.763515][ T1422] do_exit+0x829/0x2a30 [ 587.764783][ T1422] do_group_exit+0xd5/0x2a0 [ 587.766185][ T1422] get_signal+0x1ec7/0x21e0 [ 587.767644][ T1422] arch_do_signal_or_restart+0x91/0x7a0 [ 587.769385][ T1422] exit_to_user_mode_loop+0x86/0x4b0 [ 587.771075][ T1422] do_syscall_64+0x4fe/0xf80 [ 587.772546][ T1422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.774371][ T1422] [ 587.775146][ T1422] The buggy address belongs to the object at ffff8880226ff000 [ 587.775146][ T1422] which belongs to the cache kmalloc-cg-2k of size 2048 [ 587.779577][ T1422] The buggy address is located 1168 bytes inside of [ 587.779577][ T1422] freed 2048-byte region [ffff8880226ff000, ffff8880226ff800) [ 587.783859][ T1422] [ 587.784578][ T1422] The buggy address belongs to the physical page: [ 587.786582][ T1422] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x226f8 [ 587.789323][ T1422] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 587.791992][ T1422] memcg:ffff888021f2a481 [ 587.793335][ T1422] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 587.795706][ T1422] page_type: f5(slab) [ 587.797013][ T1422] raw: 00fff00000000040 ffff88801b84c140 dead000000000100 dead000000000122 [ 587.799693][ T1422] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888021f2a481 [ 587.802371][ T1422] head: 00fff00000000040 ffff88801b84c140 dead000000000100 dead000000000122 [ 587.805062][ T1422] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888021f2a481 [ 587.807745][ T1422] head: 00fff00000000003 ffffea000089be01 00000000ffffffff 00000000ffffffff [ 587.810464][ T1422] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 587.813125][ T1422] page dumped because: kasan: bad access detected [ 587.815139][ T1422] page_owner tracks the page as allocated [ 587.816917][ T1422] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13474, tgid 13474 (syz-executor), ts 237092388903, free_ts 234970179777 [ 587.823586][ T1422] post_alloc_hook+0x1e1/0x250 [ 587.825108][ T1422] get_page_from_freelist+0xe3d/0x2e10 [ 587.826837][ T1422] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 587.828712][ T1422] alloc_pages_mpol+0x1fb/0x550 [ 587.830262][ T1422] new_slab+0x2c4/0x440 [ 587.831567][ T1422] ___slab_alloc+0xda3/0x1ca0 [ 587.833051][ T1422] __slab_alloc.isra.0+0x63/0x110 [ 587.834661][ T1422] __kmalloc_node_track_caller_noprof+0x629/0x9d0 [ 587.836684][ T1422] kmemdup_noprof+0x29/0x60 [ 587.838173][ T1422] __devinet_sysctl_register+0xbc/0x360 [ 587.839924][ T1422] devinet_sysctl_register+0x17b/0x210 [ 587.841653][ T1422] inetdev_init+0x2b8/0x570 [ 587.843112][ T1422] inetdev_event+0x7fa/0x17f0 [ 587.844613][ T1422] notifier_call_chain+0x99/0x3b0 [ 587.846237][ T1422] call_netdevice_notifiers_info+0xbe/0x110 [ 587.848121][ T1422] register_netdevice+0x16b9/0x21d0 [ 587.849776][ T1422] page last free pid 1332 tgid 1332 stack trace: [ 587.851779][ T1422] __free_frozen_pages+0x822/0x1130 [ 587.853436][ T1422] qlist_free_all+0x47/0xe0 [ 587.854897][ T1422] kasan_quarantine_reduce+0x1a0/0x1f0 [ 587.856618][ T1422] __kasan_slab_alloc+0x69/0x90 [ 587.858176][ T1422] __kmalloc_cache_noprof+0x2e1/0x810 [ 587.859903][ T1422] nsim_fib_event_work+0x157b/0x63b0 [ 587.861587][ T1422] process_one_work+0x9c2/0x1840 [ 587.863179][ T1422] worker_thread+0x5da/0xe40 [ 587.864651][ T1422] kthread+0x3b3/0x730 [ 587.865963][ T1422] ret_from_fork+0x754/0xaf0 [ 587.867462][ T1422] ret_from_fork_asm+0x1a/0x30 [ 587.868999][ T1422] [ 587.869774][ T1422] Memory state around the buggy address: [ 587.871561][ T1422] ffff8880226ff380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 587.874068][ T1422] ffff8880226ff400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 587.876564][ T1422] >ffff8880226ff480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 587.879061][ T1422] ^ [ 587.880530][ T1422] ffff8880226ff500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 587.883034][ T1422] ffff8880226ff580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 587.885541][ T1422] ================================================================== [ 587.888157][ T1422] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 587.890450][ T1422] CPU: 2 UID: 0 PID: 1422 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.893739][ T1422] Tainted: [L]=SOFTLOCKUP [ 587.895118][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 587.898298][ T1422] Call Trace: [ 587.899374][ T1422] [ 587.900330][ T1422] dump_stack_lvl+0x100/0x190 [ 587.901836][ T1422] vpanic+0x20d/0x630 [ 587.903118][ T1422] panic+0xd1/0xd1 [ 587.904325][ T1422] ? __pfx_panic+0x10/0x10 [ 587.905748][ T1422] ? check_panic_on_warn+0x1f/0x90 [ 587.907411][ T1422] check_panic_on_warn.cold+0x19/0x34 [ 587.909106][ T1422] end_report.part.0+0x3a/0x90 [ 587.910651][ T1422] kasan_report.cold+0xe/0x18 [ 587.912154][ T1422] ? handle_tx+0x5c2/0x620 [ 587.913587][ T1422] handle_tx+0x5c2/0x620 [ 587.914952][ T1422] dev_hard_start_xmit+0x127/0x6c0 [ 587.916584][ T1422] __dev_queue_xmit+0x6dd/0x46f0 [ 587.918202][ T1422] ? finish_task_switch.isra.0+0x204/0xb70 [ 587.920046][ T1422] ? __pfx___dev_queue_xmit+0x10/0x10 [ 587.921747][ T1422] ? __lock_acquire+0x4a5/0x2630 [ 587.923326][ T1422] ? ref_tracker_free+0x37e/0x6c0 [ 587.924932][ T1422] ? do_raw_spin_lock+0x128/0x260 [ 587.926570][ T1422] ? find_held_lock+0x2b/0x80 [ 587.928098][ T1422] ? skb_dequeue+0x126/0x180 [ 587.929570][ T1422] ? skb_dequeue+0x126/0x180 [ 587.931053][ T1422] ? find_held_lock+0x2b/0x80 [ 587.932557][ T1422] ? tx+0xa4/0x130 [ 587.933758][ T1422] ? tx+0xa4/0x130 [ 587.934972][ T1422] ? rcu_is_watching+0x12/0xc0 [ 587.936502][ T1422] ? __pfx_tx+0x10/0x10 [ 587.937862][ T1422] tx+0xc4/0x130 [ 587.939030][ T1422] kthread+0x1d8/0x3c0 [ 587.940339][ T1422] ? __kthread_parkme+0xbb/0x230 [ 587.941914][ T1422] ? __pfx_kthread+0x10/0x10 [ 587.943432][ T1422] ? rcu_is_watching+0x12/0xc0 [ 587.944958][ T1422] ? __pfx_default_wake_function+0x10/0x10 [ 587.946815][ T1422] ? __kthread_parkme+0x18c/0x230 [ 587.948449][ T1422] ? __pfx_kthread+0x10/0x10 [ 587.949953][ T1422] kthread+0x3b3/0x730 [ 587.951266][ T1422] ? __pfx_kthread+0x10/0x10 [ 587.952738][ T1422] ? ret_from_fork+0x79/0xaf0 [ 587.954248][ T1422] ? ret_from_fork+0x79/0xaf0 [ 587.955745][ T1422] ? rcu_is_watching+0x12/0xc0 [ 587.957295][ T1422] ? __pfx_kthread+0x10/0x10 [ 587.958771][ T1422] ret_from_fork+0x754/0xaf0 [ 587.960248][ T1422] ? __pfx_ret_from_fork+0x10/0x10 [ 587.961871][ T1422] ? __switch_to+0x7b9/0x10c0 [ 587.963385][ T1422] ? __pfx_kthread+0x10/0x10 [ 587.964861][ T1422] ret_from_fork_asm+0x1a/0x30 [ 587.966369][ T1422] [ 587.968117][ T1422] Kernel Offset: disabled [ 587.969504][ T1422] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:12:16 Registers: info registers vcpu 0 CPU#0 RAX=00000000007d43cb RBX=ffffffff8e297ac0 RCX=ffffffff8b76e4b5 RDX=0000000000000000 RSI=ffffffff8dc46051 RDI=ffffffff8bfa38a0 RBP=0000000000000000 RSP=ffffffff8e207e00 R8 =0000000000000001 R9 =ffffed100d48673d R10=ffff88806a4339eb R11=0000000000000000 R12=fffffbfff1c52f58 R13=0000000000000000 R14=ffffffff90b74ed0 R15=0000000000000000 RIP=ffffffff8b76ce1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d65d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fad3fe9d000 CR3=000000000e392000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000c00f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4953544d4649203c 2068746469770058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad3fd4d020 00007fad3f1e7460 00007fad3f1e7470 00007fad3f1e74b0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad3f1e7498 00007fad3f1e7468 00007fad3f1e74a0 00007fad3f1e7480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000034a57b14 RCX=ffffffff828d7bd1 RDX=ffff8880382f4980 RSI=ffffffff828d7c2f RDI=ffff8880382f4980 RBP=ffffc9000313f9b0 RSP=ffffc9000313f910 R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000077359579 R14=1ffff92000627f25 R15=ffffffff80000000 RIP=ffffffff8206ff7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557fb39500 ffffffff 00c00000 GS =0000 ffff8880d66d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcb83dffffc CR3=0000000027a51000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557fb66528 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000011 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb889e7d20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb889e7d20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557fb5bc98 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800010000000806 0a016cb400080012 000000000000000b 0000555000000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080001a49003 0fffffffffffff04 000000010000001b 8004028200000001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9203068000000032 0000000000000000 006765726d697000 0400140000000600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d003001000000033 0302100000000000 01a0100003859003 0100000008a80614 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000034 8004010000000000 06015edc08080003 86e0030010000386 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000710 a61a010100001808 06020104cc001000 0410004800000037 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7590048100000000 8004010000020806 06015ec80008003c e003001000000036 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010003c00000000 003cb00301c81000 3b90030008003ac0 00007fcb00000035 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb00000000 00000000000001d1 a8035204003aa403 0000012000000034 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8569baf5 RDI=ffffffff9b209c00 RBP=ffffffff9b209bc0 RSP=ffffc900073cf3a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032343154 R12=0000000000000000 R13=0000000000000020 R14=0000000000000010 R15=ffffffff8569ba90 RIP=ffffffff8569bb1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e392000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6e69 5f65676173752e42 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde1f884c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde1f884c6 00007ffde1f884cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4572408704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4572408750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45724086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4572408742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000061a94f RBX=ffff88801e2f8000 RCX=ffffffff8b76e4b5 RDX=0000000000000000 RSI=ffffffff8dc46051 RDI=ffffffff8bfa38a0 RBP=0000000000000003 RSP=ffffc90000197df0 R8 =0000000000000001 R9 =ffffed100d4e673d R10=ffff88806a7339eb R11=0000000000000000 R12=ffffed1003c5f000 R13=0000000000000003 R14=ffffffff90b74ed0 R15=0000000000000000 RIP=ffffffff8b76ce1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8e386a7000 CR3=000000000e392000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffffc Opmask01=000000000000c00f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4953544d4649203c 2068746469770058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e3854d020 00007f8e379e7460 00007f8e379e7470 00007f8e379e74b0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e379e7498 00007f8e379e7468 00007f8e379e74a0 00007f8e379e7480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000