last executing test programs: 6m6.516653119s ago: executing program 0 (id=666): io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x4000040, &(0x7f00000001c0), 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x7ffd) 6m6.437978699s ago: executing program 0 (id=667): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4810) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create(0xa00) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000001380)={0x80002008}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x1000, 0x101000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400, 0x400}}, 0x50) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001300)={0x50, 0x0, r6, {0x7, 0x2b, 0x9, 0x20000, 0x2, 0x9, 0x2, 0x2, 0x0, 0x0, 0x10, 0x7}}, 0x50) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x1000000, 0x2) 6m5.896847393s ago: executing program 0 (id=674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffeb2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e20, 0x8, @empty, 0x5}, 0x1b) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, 0x0}}], 0x1, 0x2008405d) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, 0x0, {0x2}, {0xafabc05531515610, 0xffff}, {0xf, 0x5}}}, 0x6}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c004}, 0x4008014) openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8200, 0x2) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES32, @ANYRES16], 0x2c, 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x112, 0xe, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f00000000c0)={0x20002012}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 6m5.790215587s ago: executing program 0 (id=675): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x80000018}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x10000, 0x1, 0x8000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102380, 0xffffffd0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000440), 0x4) bind$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) r7 = eventfd2(0x0, 0x80001) r8 = eventfd2(0x80000000, 0x80801) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r9, &(0x7f0000000040)=""/148, 0xffffff96) io_submit(0x0, 0x7, &(0x7f0000001980)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000300)="fc4d0460bd7cda2fc6da2b3288879fbd33168b6c8fbf504d80a403a81f1990e5b9", 0x21, 0xe6b5, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x23, 0xffffffffffffffff, &(0x7f0000000480)="7a3c124156320cfd5f295b32c9b526e94237bf6c1e068f09f041fd5562c7e7c4e5f12c3d4065fa966436a53a0506765b31398d8a41f5396c965a0dba6d53acda127bd6d18156503a26087e271d9947d64218507117b3b275410d7d7be1f60295c5a5dc50cd5b911205ab1f098843fcca21cc9d47f4e2c60dba8af70af0a3915f73722a9c39648a8764567bd15749576ea2a5b97d9830e9689953b79649f3e230b94c61994342eaf0233755ad05baf7d741399925f1f175ec", 0xb8, 0x100000000, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x5, r2, &(0x7f00000005c0)="b1a2a3f85079bd48034d560f0bb4b9", 0xf, 0x8, 0x0, 0x3, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f0000000780)="ef68e3b1e558487b526c54da065a58958bb6ae5452bbec4318818c4201f0a5edc689a1377c29d5cae59289c98e9ad6ba476072d3af1cd237923bcece865449342effdf7f7fca7aa6fb0ccff4d5bee8349713423a1b0676e0b6d2840b13f3d3bb179fb17fe3675a814bd0f5e562ac2941e912b6fa791ede748197ef1e1cb9a590d1403f39a5e3db7aef7c9d7a4b722367e60f7a02d3708db0e562e24c9866260785e80bb0341ad1cfe995c694c1ecfa5f5bb31c999b6470f616eacb58c47a161debac234e36eb024936cb6ef6235a0e3aee7bce6427e18b3ffaf3e151983941612c670529d7c29da390afb76258a16f1a157238e3629229feae04bcaf78c693e6d20518c00a945c0affeb9609461e09cca117d0eb4f135b717435d6070db3adf48f347fd8a9222cbaf5ecd5cb32b4b48d0b710ce5b614197fa2a692136ab7f8406987bdea285ab27c1710ec6dbc542b3f70433c98f9bcddbcfc2d18cd53fe1a1afe4d392c7d53c6e3ffbc628dfc54f0291edf867564d59497c1b0ca8c4998516446f088122bb3ab68b576d05cb476c65ffd25ed1a4b21b9acfc46ccd7a054f04b8480565044ebc1fec79815588ea6e4a2e87ceaa076d9f7219d4426d99a6d0b04e79eafe6ba6801b7eaf9b0d9124f72210e8e3d82c1a9169f839a56f55b79d6e09238d33d07cd9a08d72adc4aebebf0d8aa1f4a36e3242437e7d299a88590f71d1fd06a0f259c2b4eefa079a873c534f7b7b6da7ab3bad6a093afe952885f0f3696a681349c5f487427944587a9b1acfe6e4c7c8225ff32376eae255daa671127b494a921f3a4a88fd026023d97e8e6410a3d6344e5cd9b91fcc68d2eac823e1ba853f522f041382f2850071e27ac94a6d1ada28ce76996df648cfe637da142b6b2c016029f3a9f7a2a4b795826205398c4b8c3372efeea3ea3834556b0feabf55fdda46ce4c6c7b4b8cb3aa2968889875ec7bb7256bbcc77d14ba3284b6262fc4199fbce08d05a42f1922a8985c3aef5169e99290499dc834eda17cd92b8e043614dc7e3669c24061b2015a1687ee0bcef0c3aa6ae947d7f6aba7774b112f276c0b6d07e51b5f40dcdae665b947fef53d03b69067395924238bbf83e238ae31fa3da041065b5040c6b02a60dad979afdb2650ba916279e436709e6ddc0eb12d86574765445c3a3c2e626107dff1a81279aec780cb41ca257948dd67a032bcfb94623fd6ed942d89a7c93d0d34db54ee032783f44364cb2ac65fe5815d2d4a023db50854baf14238bcb3a573018312f4e28bfa5cd17b8ba4221bc5ee4101e60bc2082a3ec91e17b024e90f001aadc3d1b389b759d28c282c3e2d1998da1b0a388d598f438c61d9ecb3434d9a07c3c8b80dbc80f60a39d681cf3bc1f7322d627f5e69eb0c5dcaf0191f91f36cc445917dd684f6713041f48204ce8f8b5f658ca653d465c7f926f9345188012051b96b4daf2aa56465748d69152f48701c8a083d6f17f21246e744d7d3be9950b8e96abf1aee15dc6ba7b5588a7c1f7018683772c3585a21276b02f766e4454d2c9b1c3bdf8b0aa5a7869fa8a9480ce950ef737a1f704fb9da8df6a92f70e3649403722866f209db029b0e26b4966e658325cece586b4addca37fc0da41aa8601c67fd20f7058d3ab4ae14b923af09802982958e3e2d2e09871c0488b6923f9f6ccf75f6bfa83c789ba2c7278c8dcbf9d84e9f7e56f2dbe66df60f2ab14e9efc139355774357724dca15cfc035732975642bef33d40f2cbae9a431792676d154593756fecaea9d6dec3c7eda5153e75e6caef4e77bb0cbb4cdaccd401ec868a8e3e7fe0282df9b9b33a5ee76591bca85e677d92f674ed795f17b18bc8247c7d0dc5779699758aa926bd4af89b5752b627c36ed90d3f75c4c363de8170a9bc635f8067406739702c50a7f4309a30e5b906e4bb278373c92efb0f6d77c839fbdc6315fd4a07dc610a6f323b21a34ef04c5ad42357c661743103662ebc4e6df07493efcc5a9f4a925ec30342c228e4288847ecd9583883e7ac196feea432b84a6e981d1951f2d05ade94b51317dc183f9efd219cb0a68ef7f2a1cb92c6ef0b98af0c53d2ca2a5daf72f5b2920d57aa6cfec296da5933c5bbc2d3f0c5e8c73eaf63b088710d1cfde5bfe2675585384fc6512563f432906f519668bf3fca3c35064020c2070b871331aae40f5c90b6d285142b3fe207b5c121317fd0d92a1b996a5c259bf2fd6ebe844e1cfd7fcd7f8443f09fe4ec6c7c38255086d5bfdcf1bb8d1efb81db4c415da789c9e3abfece59a1725ab84acd7dad96efbec03b39481a43ead49c9896192eca108644e5fecabcc1fda50499d43c87fe8579e47fb85d8ce3fcdaf0801405a8be3aeb7fbbb7631065f1fb1667f99024eca5d47333b9306c38fa51f8af9750e82d412583697939b387e07c8f54ba49f7ccf787741fa50feb4e89de3544221fc62ca81b51adfe1056f2f1e26840b851df0a8b1674726c4f02306dc54169e9c98b98670db53b5723b7d6b1fbdae155efeedd7e30a2b0e0ef5c49bc1e1cc3602c1437da509532b79318f4a3c409baec7bb5d19789450107a4a0c1474e6196573d2ce5fdd3dccddd824e31c19ee48e303d608a33e960141135ed9988841454d91a260f04134ec364f1303074e8ebcf52074e18f46396b7adeb55e32fb0d99873fa77674a2a1ca7a0cb04c3a252512f8e0a07a72a2737d0ad234739cec21d9b3349c7312443c3dc1b10b0430bbf48ca8e537b6d819dca012c601f74c5726257ce3300503d4cc9a4cdea16253ede0d20320a1a17295092fa32b2358febf679da5c97aa023b2ac296c3f30037a95d018d0a8394f72f0f490dfc6c00ca85e1afc3df02e33dce8e59369a50778b785a9e99a16cb037b2d6fb5a6e106d256ece152bd4254acc723344ba8df92efb46debacd69ee2406d8a6e35c22c32cc701f797d3e54a2a27c6491c5258b2119f84dd29bac91cf8efb9ed98c5941b31b1e2490ff1ab2d231f6c9a3ee54d61fb3fbfec7946e4496cbd77c35318009af7715037f0f6566538f8fd03c0266e7f70690f6f92e14d341ba8e61b0347c33a3561e83d444e9d4d8e56c427a7054f326637d9b2af89176b6e17b7fa02a0cdd69ece3e8c9b940cebfb04366549c9cf850291ce7dbd30d57cc9ef0ffd8803ede82e01fadb76a33a60d52a9d6e3691c5ee733235ef8f4d17e496307b1fa97bf34fd7fc1299de1692b342cfe3aecb00710cd1f2c69c48a95303ef881241c21267068971dd710935ea8a9af15d3540759321984ea2fe23d074cbf24253e653e9ca7848b7d97c22ddec2f1acd212a54e26d79b51daa69375024c455b63d3abc89a15be37f64c546128455b560fc6f29f0e84cf1e3adbc2a64e0990ba2500f4a1fd4aaaab85ddcafd973f880460d0df60aab188f9b365af2dd720c37cf824204c8cb0e41b7b87005ea1e7a1a197bc3e8e0c9126cf6ffcccc758cfdd7c13f243cb93a3cccefbced0689a43e7b732b05be6792fe0713b7295cee9c5a03ef68cc1df6b424693242a716302a4ce3141a2ba529cef2abd0534b0a05ad42080052d43ee4b40c2842f5528ac297df15ba733ffbc48ba393e2bb5b636c6a0d20c36caeaff8619180976428f317dc54542cd5dbe68ffd7d2cc84fea913c4004a1c442ef307227c9b083441bd87f671fce2d6c167d16ddcaaff115db092d6081274adc6b38504e6d443bff592d165307022345967156da19e65bd9025fe77f348c6736f8c99701567260b2c3e8fe8a2b667dd594cad81803a5f09618a919c897fe59ecf16a19ced7e09092ce2ed7279d33fe199e955d7adcadc595e12acf061769d40714887dfcfbc44e3f0ebd77a2b01d445c7e0a8a1a367b8bdc3534ebd210fbf3377e1ebe01896f574aa820b254d45301f228f38b75258e78a1d588636546f4c92f1d7368630353940e989aa7533c98cc28f9da8e161b4301f4a4dba22e06f7cdb575dfc99b2a72d16e57ef6f5765125729b6787f7e63234e142159c893a644632a5ddfd3782b7e26a3c68dcb9c162f3e337881f5619bfbe672d469f064fd4f494d16917066b5c6c28af3f19be0a3500bf8a86ca95c1f5f0ad74802801a4290146507a9d85d638ac3cce33849721926ea9c766d5db899a4145ed5935cca7c6dba64297e945061bb7f6db8f59649e365208341d4d79283f58afaca1e529c7d537138d52736b85d5c128bdbf4ae24bc776644300570c9eede710b6a739e11ad526d53a79ede35c4eed9678b0fa8e3535709002d89c9d69125a6b23c8593bf8ba4d543f6f0be9ab7dd47e9a7bfa7de8060708d17fe3c7ad0fa5260da0d26a52afed7f064b215cbe20b00effb2d80e0a97922d273dd71c7a23d2afbca458cca5b547a2446ad2ca4e89565f62b52831576ba5e8fcf86adc524fcd272adcc3b0da4168113715c360189ddf138fd9600cf79b8c38948db1d14f997821dee5f5ba90066bdb9a8a1cd3bddb7c433cb5fdfd56e6f65f04b97a6568a2bdaae5e1f794e13de69dacde99526691ce92f3755fb7c98aadad0e13f5c5eff52d15a76e55617712d418cbb912244d6bef5e427e0715a9ea09808a92c01509fb83515eac373e3b123ad5e0ec806c63b4e9035f369fdc9782b28011d7fb6e2dab585f211a5d740e2ac44fb6a4657a1b721b874e014ac30f289be74d8546a9a487c72291377c6be475567851594fb373e1f3a611d52afd7c26e5b56faefcd4c476ee73524e60090dc9cb0a1f032defb37fa88d21b7d99611d5c47a217d123523361373b7f8fb8ca0940e97b0238eab118b80a6a0c541f77a6713f7aed007352458bd295139fc506c6466e396812764787cb06d90d5eb6c1bc57907331281f315e2bcbe68c94f38519d299c3cf1f0fd2d5b1cea03b29bb8f7d5111e15bc24a30224f8fbd9927b9f9cce2f7f06252a61124c2ddc44c12c6f9677c26eaf865ee42a4e1963de6a8fbb4ebb3069fb1828965da6385194d33358d0a9bc024cc6b81a06b50ac66c850347a37328f5180b1cf179e5a223de7a7eebba5032f85cf41d9db97421c829233b12a8463c2939b0f0cc7f75a074d1dc29b8236ad99988a865ee916b02aa5d4bb645d2930c202f4d924913a21d67345ccca53e8e59ddd2bba096f21ddacc457ae3c2406f2a03d92d56bda307a4adefa266d382a7acd017a3fb3bbac6b18e57733fa49767d61a42d03cc555d457bcec3947f6e7fe919e216dad91984b2c6d11e99281116367bd6205ecc07c7c422f73810a9693f776169497de434cea7237c6d763760a6fe64833d91c3d40e13878c5399f733b18f6b40cb7f67a0a9a6dfcb24a8bcc6602436cf8bc6a0cbf96914619dc57d692350a3513758d81491b411e338c681486c73768d0d6192ebbc5480e4bbc3cccd2411027191dc0fcf6a6fb499233ebe5fe9e78feb16f186b0998c264463038d50ca1c6c6cc09d5fac802d6ff11090a64da5e40ca860914d9937a6e51e0ed285dc885132e082abbcff47bf13e7181d0cadff2ce00724835cc091da518dd904df2faec4667891fd70b456a2a35e55c0e5b48e91ffe3967577f2dae6cc3638270abcb8d1d45c93fb4f14c4447a9fb4c3245b0b2f8a0a14f5d611130c84e14fb8fb456e5dd993a743b1ff68feffa186f1dab3a929f364a1342efdedd8122fd18ceeddd1e5795284b1e4085fe0a99b2b199fbd7a20c9d45242c6ee6baf7fed2adb69781ef09867f7aaf8fff7c54fa1f6904b973cbd137370462aadc55f554d0df456fe997d55d14f5892b43b4b11190c75bc99af", 0x1000, 0x1, 0x0, 0x3}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x7, 0xa214, r1, &(0x7f0000000680)="b29252c35a5969fdfb8e07d8b1b02fb2af49fe5ef302ae5ce4c08a2e6393705802889ec5670e5ef0c020f1431b6228298a69f45e8da2058ba1f29c8434ed7bd4c835b88c8a359ab7bf6c7f160d41a80db6c51d65f8eec0d1dc908cdd01380e9a6c68131ee179b2dcfac7f329042d772a6da354efda6805bd8a63cbd6645b3389a7565106414ddaaf6c2fab871fa79302dfaf2c5b4ba031819e8652ed7faf9ac7b9c6", 0xa2, 0x0, 0x0, 0x0, r7}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f00000017c0)="d797da711358a967b0994b12df5d4ff2d02d93a69267d36bc8dbc9a722f376c75d94ee22e97e83a78e8a23", 0x2b, 0x0, 0x0, 0x0, r8}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x2, r4, &(0x7f0000001840)="4b46947d500151c63ee8ff6ed0891bb78e963388239a7377780d851f5b5673f1b7d44a4981d0dd792c163a21b0323921def6d2404eabe06fbc8bc69f872c69d90300000000000000a7b8952d5ac0e31a46cac1343cf6b16d888f36308f1ca21ba565cb85c87a642f5407934f329d16d5853d6f582512d05682985bdd882d6efc77c31abec4bb42798b53a4b40202c7911f5268d16717ad4eb22326e276518544471b8c81715e037e52c1238ef2efae10aa1a42475a5e3d5cf32bdd293313e0ce8ae37ad70748f2c7f3e34788f81e020498dd1a933aa07522f4446ff772daa628087931446ecc5a08", 0xe8, 0x9, 0x0, 0x2, r9}]) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "e49e951bfb0c065a", "0ee52035783e8665be4f0298d525dfbff20b621fb95fa5c2df2922bedea9e057", "04deb67f", "bd131d021da991c3"}, 0x38) socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r10, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 5m50.751398836s ago: executing program 32 (id=675): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x80000018}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x10000, 0x1, 0x8000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102380, 0xffffffd0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000440), 0x4) bind$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) r7 = eventfd2(0x0, 0x80001) r8 = eventfd2(0x80000000, 0x80801) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r9, &(0x7f0000000040)=""/148, 0xffffff96) io_submit(0x0, 0x7, &(0x7f0000001980)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000300)="fc4d0460bd7cda2fc6da2b3288879fbd33168b6c8fbf504d80a403a81f1990e5b9", 0x21, 0xe6b5, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x23, 0xffffffffffffffff, &(0x7f0000000480)="7a3c124156320cfd5f295b32c9b526e94237bf6c1e068f09f041fd5562c7e7c4e5f12c3d4065fa966436a53a0506765b31398d8a41f5396c965a0dba6d53acda127bd6d18156503a26087e271d9947d64218507117b3b275410d7d7be1f60295c5a5dc50cd5b911205ab1f098843fcca21cc9d47f4e2c60dba8af70af0a3915f73722a9c39648a8764567bd15749576ea2a5b97d9830e9689953b79649f3e230b94c61994342eaf0233755ad05baf7d741399925f1f175ec", 0xb8, 0x100000000, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x5, r2, &(0x7f00000005c0)="b1a2a3f85079bd48034d560f0bb4b9", 0xf, 0x8, 0x0, 0x3, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f0000000780)="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", 0x1000, 0x1, 0x0, 0x3}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x7, 0xa214, r1, &(0x7f0000000680)="b29252c35a5969fdfb8e07d8b1b02fb2af49fe5ef302ae5ce4c08a2e6393705802889ec5670e5ef0c020f1431b6228298a69f45e8da2058ba1f29c8434ed7bd4c835b88c8a359ab7bf6c7f160d41a80db6c51d65f8eec0d1dc908cdd01380e9a6c68131ee179b2dcfac7f329042d772a6da354efda6805bd8a63cbd6645b3389a7565106414ddaaf6c2fab871fa79302dfaf2c5b4ba031819e8652ed7faf9ac7b9c6", 0xa2, 0x0, 0x0, 0x0, r7}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f00000017c0)="d797da711358a967b0994b12df5d4ff2d02d93a69267d36bc8dbc9a722f376c75d94ee22e97e83a78e8a23", 0x2b, 0x0, 0x0, 0x0, r8}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x2, r4, &(0x7f0000001840)="4b46947d500151c63ee8ff6ed0891bb78e963388239a7377780d851f5b5673f1b7d44a4981d0dd792c163a21b0323921def6d2404eabe06fbc8bc69f872c69d90300000000000000a7b8952d5ac0e31a46cac1343cf6b16d888f36308f1ca21ba565cb85c87a642f5407934f329d16d5853d6f582512d05682985bdd882d6efc77c31abec4bb42798b53a4b40202c7911f5268d16717ad4eb22326e276518544471b8c81715e037e52c1238ef2efae10aa1a42475a5e3d5cf32bdd293313e0ce8ae37ad70748f2c7f3e34788f81e020498dd1a933aa07522f4446ff772daa628087931446ecc5a08", 0xe8, 0x9, 0x0, 0x2, r9}]) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "e49e951bfb0c065a", "0ee52035783e8665be4f0298d525dfbff20b621fb95fa5c2df2922bedea9e057", "04deb67f", "bd131d021da991c3"}, 0x38) socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r10, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 5m27.166960541s ago: executing program 4 (id=930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x40086603, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 5m27.166651502s ago: executing program 4 (id=931): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000007980)=0x2, 0x4) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d0800ed1f40d47a6edb3367b5cc887c41d5251f8d49025ceab4152b6e6d87cd6088e97a9d06b6914300", 0x11}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0xee00) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c00000013000100d53f012d3910b34f709187caa479da6b2dbd7000fcdbdf25047c0000be6c6eec3c8538ac04f8a895af69ce64dd2c9eadb5a1c834a1f5da726b61e6a92d45273952a1ed96d4313e9ab13dbd7f15d8a425d68f617107d3c6526fc2b98664927c17749267f48305cf729f7d2f2a3bb84cec234735f09357b73c8a8a3b35475ed488df0061786257ca408c99b34dd21f4641220c369a1896502f", @ANYRES32=r3, @ANYBLOB], 0x2c}}, 0x0) keyctl$chown(0x4, r1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r5, 0x402c5839, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x4113, r7, 0x5e80d000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') close(0x3) bind$802154_dgram(r6, &(0x7f0000000140)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) 5m27.094695681s ago: executing program 4 (id=933): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000100001002dbd700000000000640101020000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000232000000000000000000000000000000000000010000000000000000000000000000000000000000080000000000000000000000090000000000000000000000000000000600000000000000a3355f93000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000002000200bf00000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000000000000000000000ff7fffff0000000079000000"], 0x150}, 0x1, 0x0, 0x0, 0x4048091}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x28, 0x4, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}}, 0x24}}, 0x48800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x2, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xfff2, 0x1}, {0xfff1}}}, 0x24}}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x483, &(0x7f0000001280)={0x2e, @remote, 0x0, 0x1, 'sed\x00', 0x20, 0x0, 0x1}, 0x2c) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x1}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x8000, 0x30, 0xe5c, 0x1}, 0x0) bind$bt_hci(r8, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r8, 0x800448d7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5m27.008282914s ago: executing program 4 (id=936): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000500)={0xffffffffffffffff, r0, 0x8, 0xa, &(0x7f0000000340)="38b7ad33cf92cb684f13", 0x4b, 0x75, 0x8, 0x401, 0x19fc, 0x5, 0x6, 'syz1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, r2, 0x3f, 0x0, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x30}}, 0x4000004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000005c0), 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2814002, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r7 = openat(r6, &(0x7f0000000400)='./file0\x00', 0x2000, 0x1ad) write$P9_RREADLINK(r7, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000100)='./file0\x00', r7, 0x4000, r8}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x74, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x0, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 5m26.097335973s ago: executing program 4 (id=946): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000100001002dbd700000000000640101020000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000232000000000000000000000000000000000000010000000000000000000000000000000000000000080000000000000000000000090000000000000000000000000000000600000000000000a3355f93000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000002000200bf00000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000000000000000000000ff7fffff0000000079000000"], 0x150}, 0x1, 0x0, 0x0, 0x4048091}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x28, 0x4, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}}, 0x24}}, 0x48800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x2, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xfff2, 0x1}, {0xfff1}}}, 0x24}}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x483, &(0x7f0000001280)={0x2e, @remote, 0x0, 0x1, 'sed\x00', 0x20, 0x0, 0x1}, 0x2c) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x1}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x8000, 0x30, 0xe5c, 0x1}, 0x0) bind$bt_hci(r8, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r8, 0x800448d7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5m25.79915683s ago: executing program 4 (id=948): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket(0x1d, 0x4, 0x6454) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f00000001c0), 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) readv(r7, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) r8 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x550503) r9 = syz_open_dev$dri(0x0, 0x2, 0xc8d03) r10 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r10, 0x107, 0x6, 0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r8, 0xc01864cd, &(0x7f0000000280)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x4a, 0x18, &(0x7f0000000100)="88262886f462c33df1fbfa7561aa27884c5bf6f7d171ef71b35dc5c478ae87d826269b50aa5befaeaa510661bd49e86f7f62f17f480d53d84fa79d132321275e04e776c34a46ff6d7575", &(0x7f0000000180)=""/24, 0xfffffff8, 0x0, 0x21, 0xc0, &(0x7f00000001c0)="1e47d408fd73c8483987d1f03590afde798e2b2ec8ed9d252d15d34c4a783bc3d8", &(0x7f0000000380)="0904728a1a0918744da34f26fc5f312fb4709ef763b0d6586e06854eccee28d477856a24572dffb60dee925e8f7f2780692cea37e6370d762ca8f2047320fc9d302e40dc0e296b37385e22824bb865a61a69331a381c18cf9854b303e4c6adc7a7b78c5e9a16b5f7f8548adfc3bd9ab04b4d55150b9645b928313ef73bc110a258906f85ff343e08141e8b015f65896e940dcd3da16d31b7032e57a5266ed19db91996bbd09c5d1b088af95ecb95babf716f9e54f894e68208e662a6d28520d2", 0x1, 0x0, 0x1}, 0x4c) ioctl$FS_IOC_SETVERSION(r9, 0x40047602, &(0x7f0000000040)=0x2534) r11 = socket$qrtr(0x2a, 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) connect$qrtr(r11, &(0x7f0000000080), 0xc) r13 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 5m25.701037303s ago: executing program 33 (id=948): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket(0x1d, 0x4, 0x6454) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f00000001c0), 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) readv(r7, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) r8 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x550503) r9 = syz_open_dev$dri(0x0, 0x2, 0xc8d03) r10 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r10, 0x107, 0x6, 0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r8, 0xc01864cd, &(0x7f0000000280)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x4a, 0x18, &(0x7f0000000100)="88262886f462c33df1fbfa7561aa27884c5bf6f7d171ef71b35dc5c478ae87d826269b50aa5befaeaa510661bd49e86f7f62f17f480d53d84fa79d132321275e04e776c34a46ff6d7575", &(0x7f0000000180)=""/24, 0xfffffff8, 0x0, 0x21, 0xc0, &(0x7f00000001c0)="1e47d408fd73c8483987d1f03590afde798e2b2ec8ed9d252d15d34c4a783bc3d8", &(0x7f0000000380)="0904728a1a0918744da34f26fc5f312fb4709ef763b0d6586e06854eccee28d477856a24572dffb60dee925e8f7f2780692cea37e6370d762ca8f2047320fc9d302e40dc0e296b37385e22824bb865a61a69331a381c18cf9854b303e4c6adc7a7b78c5e9a16b5f7f8548adfc3bd9ab04b4d55150b9645b928313ef73bc110a258906f85ff343e08141e8b015f65896e940dcd3da16d31b7032e57a5266ed19db91996bbd09c5d1b088af95ecb95babf716f9e54f894e68208e662a6d28520d2", 0x1, 0x0, 0x1}, 0x4c) ioctl$FS_IOC_SETVERSION(r9, 0x40047602, &(0x7f0000000040)=0x2534) r11 = socket$qrtr(0x2a, 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) connect$qrtr(r11, &(0x7f0000000080), 0xc) r13 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 4m37.550595751s ago: executing program 3 (id=1351): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m36.241291107s ago: executing program 3 (id=1378): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) unshare(0x28000600) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m36.234940804s ago: executing program 3 (id=1380): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 4m35.980308642s ago: executing program 3 (id=1388): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) 4m35.921934958s ago: executing program 3 (id=1389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) read$FUSE(r2, &(0x7f0000001fc0)={0x2020}, 0x2020) 4m35.746101142s ago: executing program 3 (id=1393): socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) r1 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x400000, 0x12) waitid$P_PIDFD(0x3, r3, &(0x7f0000000340), 0x8, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, 0x0) open$dir(0x0, 0x420081, 0x10a) rt_tgsigqueueinfo(0x0, 0x0, 0x19, 0x0) mount(0x0, 0x0, 0x0, 0x80c000, &(0x7f0000000580)='dax,always') 4m35.593536842s ago: executing program 34 (id=1393): socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) r1 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x400000, 0x12) waitid$P_PIDFD(0x3, r3, &(0x7f0000000340), 0x8, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, 0x0) open$dir(0x0, 0x420081, 0x10a) rt_tgsigqueueinfo(0x0, 0x0, 0x19, 0x0) mount(0x0, 0x0, 0x0, 0x80c000, &(0x7f0000000580)='dax,always') 2m15.51076461s ago: executing program 1 (id=2435): r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500a80a44000000090a010400000009000000000a0000040900000073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x60, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xffffffffffffffb1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000001845996d2bc93f92e0943355ceb81360a0c46f1d3a955891051b14354a3493ef7197320aef9f516dbed04dff7eb0ed97c14c77be10f022ab945ee0c71ecc8d68e92bc1610588bf38035cc68cb5f26af29924b56814dd0f363c71c3f95560f4f06e9d1745306ff92cdb8ec606f4b554fe286c47fd6892c05481273e2fa42982e0668a5d11962ca5a6592200d35426663df74a47f3022f303d2d8f8ad0b0fb01f24f9b7d158dc5c53cc661d32a5a9b232e1d750e4d935322fde582ab"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r7, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$inet6(0xa, 0x3, 0xff) unshare(0x22020600) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) 2m14.639640308s ago: executing program 1 (id=2444): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs$pagemap(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x0, 0x1) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x4, 0x8}, &(0x7f0000000340)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) 2m13.722940577s ago: executing program 1 (id=2446): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000200)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001480)='sys_enter\x00', r3}, 0x18) utimes(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x314, 0x1, 0x24}, 0x9c) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x4, 0xcc7, 0x8, 0x7, 0x274f, 0x100, 0x2, 0x1, 0x1, 0x1, 0x2745, 0x8, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0x9, 0xe69, 0x3c, 0x8, 0x6, 0x7, 0x2]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) wait4(0x0, &(0x7f0000000000), 0x40000000, &(0x7f0000000180)) 2m11.140658302s ago: executing program 1 (id=2454): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) unshare(0x4e000a00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$sndtimer(0xffffff9c, &(0x7f0000000180), 0x200) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, &(0x7f0000000080)={0x4, r1, 'id0\x00'}) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000000340)={'wg2\x00', 0x8, 0x9}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r9, @ANYBLOB="1c005e8008000200010000000800"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00') lseek(r10, 0x80, 0x1) 2m7.92657522s ago: executing program 1 (id=2469): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000020000000400000000000000", @ANYRES32, @ANYBLOB="0f0000000000007bd4c4830f0da8bb5336000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) r2 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r2, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r2, 0xda8c) accept4(r2, &(0x7f0000000340)=@nfc, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, @policy_type={0xa, 0x10, {0x9ffc743cc636203}}]}, 0xac}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r4, 0xfffffffffffffe08, 0x0}, 0x10) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000440)={{r5}, 0x9, 0x5, 0x58c}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000005b40), 0x0, 0x1, 0x0, 0x0, r8}) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {}, {0x9, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x81}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 2m6.926973152s ago: executing program 1 (id=2476): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="400302005ada0204"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x8003380, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x32b}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x1}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0xfffc, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r4, 0x11a, 0x3, 0x0, &(0x7f0000000480)) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x0, 0x6, 0x3, 0xd, 0x5c79}) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x0, 0xa, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r9, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x80, 0x1ff, 0xa, 0x7fdfffff, 0x0, 0x8}, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7d) 1m51.424085458s ago: executing program 35 (id=2476): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="400302005ada0204"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x8003380, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x32b}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x1}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0xfffc, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r4, 0x11a, 0x3, 0x0, &(0x7f0000000480)) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x0, 0x6, 0x3, 0xd, 0x5c79}) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x0, 0xa, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r9, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x80, 0x1ff, 0xa, 0x7fdfffff, 0x0, 0x8}, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7d) 24.363231664s ago: executing program 2 (id=2942): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000022c0)=""/12, &(0x7f0000002340)=0xc) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_buf(r2, 0x1, 0x48, 0x0, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) signalfd(r0, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$netlink(0x10, 0x3, 0xa) (async) socketpair(0x29, 0x5, 0x6, 0x0) syz_io_uring_setup(0x492f, &(0x7f0000000300)={0x0, 0x39b2, 0x80, 0x0, 0x18, 0x0, r4}, &(0x7f0000000180), &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) getrlimit(0xc, &(0x7f0000000300)) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r5 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 24.344756768s ago: executing program 2 (id=2945): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 23.710466242s ago: executing program 2 (id=2952): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006080)=@newtaction={0x2e04, 0x30, 0x1, 0x0, 0x0, {}, [{0x19c, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x154, 0x5, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0xf8, 0x6, "ac4875c8b19b68caf281923cdaa7a6da3afc3e270633e1e8489107adb00119481659d496fffb6ce165f07e1078688f80ebb795a6607559f03348db6efbc694b2228984d5aa774270795a8b0a07b31a34bb47bb43e68bcd9bb166e23808683ca68104e4cc4f01d3eedb48117afb421178fe29b3b6d1f1c1f5849dd22957f21bbc1d4b92a990d8fa16d36c45413824859b764c6eb780c0aa94f9937fcd19d9b40d1e319cbae8941ca1f2895bdfbd21da72badc0f3333de2e080e7bb99a5bcbe2a97dd976213197b817e15dfbdb1830a03c0d57515067993be005125b0000622a17aeca27fe0ff9fade11b98671059bbed89d290cb0"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x1328, 0x1, [@m_nat={0x1194, 0x11, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x10000000, 0x800, 0x3}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x81, 0x4, 0x671, 0x10001}, @dev={0xac, 0x14, 0x14, 0x41}, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xffffffff, 0x7, 0x9, 0x5}, @remote, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8001, 0x2, 0x7, 0x85f}, @local, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x385da824, 0x20000000, 0x800, 0x9}, @broadcast, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x734, 0x2, 0x7, 0xd79}, @empty, @rand_addr=0x64010100, 0x1ffffff01}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xfffff8c2, 0x4, 0xfffffff9, 0x7}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x33}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfd, 0xb, 0x3, 0x6, 0x10}, @remote, @private=0xa010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x10001, 0x10000000, 0x1, 0x4}, @dev={0xac, 0x14, 0x14, 0x43}, @remote, 0x100fffeff}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x90, 0x1d, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x28, 0x6, "e809c403fe5080a8ab64c70861bc22b2ffa5796178b1488eb3171ef6655c6eb8ac5ddbfc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x100, 0x5, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x8000, 0x8, 0x7, 0x10000}}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x85a, 0x3, 0x9d, 0xb}, {0xfff7, 0xf4, 0x4, 0x8}, {0x1, 0xa4, 0x1, 0x1}, {0x42a, 0xff, 0x2, 0xd}, {0x1, 0xb, 0x7, 0xffffffff}, {0x80, 0x80, 0x2, 0x31}, {0xb68d, 0xb4, 0x6, 0x1}, {0x3, 0x7, 0x94, 0x5}, {0x0, 0x5, 0x9, 0xee6}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x1, 0x7, 0x2, 0x3}}]}, {0x33, 0x6, "83c25efe1322ba1ae9c083eff0e55d42cf13082e1f7cebe5f54268038d9c629c83fff29e6afdc75183a36a7428a6e0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x192c, 0x1, [@m_ctinfo={0xf4, 0x3, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffffd}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}]}, {0x9d, 0x6, "1e99232e239251e23b2286c630dfe2144f36e4ff1c0fc217a1d26e5d708d461692030a5389e8ac2819a9d2c5860b6545a720c714cb45fa747ec69ca56c3fc28f65e370504e8e944efcf9ddf41f89b87872118563d75bfb942a598e2452be415e8d68a74a9f4f04abc859a358f2fbf4aeb1c90d78d9a02a8bb8eb4166720a4093bfa3e3e6d050a5f0086fdc41195bb29494099e7d29aa4b1ea5"}, {0xc, 0x7, {0x89eabec32cf1558a}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xec, 0x1b, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x14e8, 0x0, 0x77, 0xf3a}}]}, {0xab, 0x6, "acf123a1752e4bfb87dd29b03601780b5165b57e08d36e9210dbc4aaa2059cb50b4ff115ff3fd8ce441a1d02c71d516e91bb2e6f6a17f7e14079b46fc968a1e3887d14b185ac1f2d284b08c7fdd775dce65be61c748764c924b12846381387daef0fc494ed1b18a69f50ce0956223a826afcb713343b7985c50fc97e8dd7ad1ed608d197f1ad7349e6d1f1124474c8c876fec96ee8cadfd3d4ef35b918b4fecc933aaf9b22fbbe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xbc, 0x20, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1918, 0x1}}]}, {0x82, 0x6, "b1a85a2beb07be4a114efa58bc18ec8c6cf99c51e188f177c0ef35d3692084ad53fe5995866ca62b5ab21ca55404971008413c0360e03bd636a0c4f589efdb973c23e43d02502d552afdcebf83aa10f2399dfef0c0f50f0de9ad1a5d73f9b90148cb8f4c9f3c9aefe262434a4b755ba6d9bd2b314b5a1dfbfabaef87b308"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x108, 0x2, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_ZONE={0x6, 0x4, 0x5}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x80000001}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_LABELS_MASK={0x14, 0x8, "bf9cd05e53bfaf06da55ad17c95708a6"}]}, {0xa3, 0x6, "1fdcf5c01d458809b05d9554979f21ac84a07951e36e3fe992362b2984820a7b5dbae0ac8f3901640b0e9e28aff7d467061cf7d4eb52755cad0811eb0c1e31b4ecd039aac36bce6c1e85ffc9a3ee34fbded9e50e9041cbd6beb79f2bc19f66ef400b94c6d7cb937571c453ae800e5573aa2d00be27eded511110b129ae40318a32ec4015d7f24ed05ae1c3b7c77c393d6785093951c7dc3c74fa47d75ba137"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_simple={0x148, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x5, 0x10000000, 0x8, 0xb6f}}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0xe0, 0x7, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb0e, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x4, 0x8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x4000, 0x8, 0x6, 0x101}}]}, {0x76, 0x6, "a3186e811796d9ca6fd9d89e8c72055e0c5ec20e3d9a134f71dacd00af6760a89529c4ab4078a01319c4ab30a4ced95ae62f0bd751f22b2ac91480c06ee593393fc036f901dd17a85f8a2807781195ac9e05b5b22be4b77a089d208998ac85974a2aee43afe5997ad47932f12e46411a9fa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1d5af742fae13dde}}}}, @m_police={0x11b0, 0x15, 0x0, 0x0, {{0xb}, {0x1098, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0xe2, 0xeb8, 0x7fff, {0xa, 0x2, 0x5, 0x8, 0x7, 0x7}, {0xd, 0x2, 0x9, 0xd, 0x6, 0x8}, 0x86c, 0x724, 0x93}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x926}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6, 0x9, 0x4, 0x7, 0x7, 0xfffffff9, 0x9, 0x4, 0x1, 0x7, 0x8efb, 0x3, 0x0, 0xfffff768, 0xffffffff, 0x1, 0xf, 0x6, 0x82, 0x2, 0x0, 0x800, 0x411, 0x1, 0x40, 0x4, 0xe, 0xbfa, 0x85, 0x6, 0x1000, 0x5, 0xf, 0x2d6c, 0x9, 0x7fffffff, 0x4, 0x3, 0x380, 0x698, 0x31, 0x5, 0x74392dd3, 0x7, 0x7fff, 0x66, 0x8, 0x7ff, 0x10001, 0xffff, 0x3, 0xfff, 0x3, 0x14, 0x4, 0x9, 0x4, 0x652, 0x5, 0x5, 0x8, 0xffff, 0x9, 0x0, 0xfffffff9, 0x9, 0xfffffffd, 0xf4, 0x6, 0x13, 0x8000, 0x80000001, 0x9b, 0xb, 0xfff, 0x2, 0x80, 0x6, 0x0, 0x1000, 0xe0e, 0x4, 0x5, 0x3, 0x1ff, 0x6, 0x8, 0x0, 0xaf8, 0xbf58, 0x2, 0x29, 0x9, 0xf, 0x200, 0x0, 0x8, 0xf850, 0x7, 0x7, 0x0, 0x9, 0xff, 0x9, 0x2, 0x7, 0xfffffffb, 0x1, 0x9, 0x4, 0xd, 0x78a, 0x3ff, 0x1, 0x5, 0xf, 0x8b, 0x7, 0x40, 0x2, 0x7, 0x3, 0x1, 0x1, 0x40, 0x8, 0x9, 0x6, 0x5, 0x9, 0x7, 0x7, 0x2e18, 0xfffffffc, 0x0, 0x1, 0x6, 0xdee0, 0xffff8000, 0x7fff, 0x7, 0x9e, 0x5, 0x445b, 0x2d5a, 0x7fff, 0x2, 0x2, 0x2, 0x7fff, 0xd49b12a, 0x1, 0x3, 0x3, 0x5, 0x2, 0x5, 0x6, 0x8000, 0x3be, 0x8, 0xfff, 0x2, 0x9, 0x67, 0x9f, 0x6, 0x8, 0xfffffff8, 0xffffff01, 0x6, 0x7, 0x8, 0x6dd520bf, 0x2, 0x5, 0x14, 0x3, 0x1ff, 0x326, 0x7, 0x8, 0xfffffffe, 0x6, 0x6a5a2917, 0x0, 0x5ac, 0x5, 0x6, 0x53ec, 0x4, 0x0, 0x6, 0x10, 0x5, 0x47, 0x0, 0x6, 0x675, 0x7ff, 0x10000, 0x80000000, 0x8, 0xfffffffa, 0x4, 0xc, 0x8e3, 0x5, 0x3, 0x4, 0x1, 0x1000, 0xffffffff, 0x1, 0x9, 0x5, 0x8, 0x3, 0x6, 0xfffffffb, 0xbf8f, 0x6, 0x0, 0xb00, 0x4cdd, 0x0, 0x9, 0x7fffffff, 0x1, 0x8, 0x7fff, 0x6, 0x80000001, 0x0, 0xa8, 0x4, 0x7, 0x5, 0x8, 0x1, 0x5, 0x77, 0x400, 0x5, 0x7, 0x9, 0xf2a, 0x6, 0x8, 0x0, 0x7fff, 0x2, 0xb9, 0x101, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x400}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6d3e, 0x1, 0x10, 0x2, 0x9, 0x6, 0x1000, 0x0, 0x8aae, 0x178, 0x1, 0xd5, 0x7, 0x5, 0x7ff, 0xa, 0x2, 0x2, 0x3, 0x8, 0xf, 0x2, 0x6, 0x2, 0x7ff, 0x10000, 0x5, 0x37, 0x0, 0x0, 0x3, 0x5c50, 0xfffffc00, 0x8, 0x0, 0xee, 0x8, 0x2, 0x3ff, 0x9, 0x0, 0x1, 0xda4, 0x1ff, 0x100, 0x5, 0x6, 0x6, 0xddd, 0x6, 0x8000, 0xffff9935, 0x6, 0x1, 0x1, 0x5, 0x0, 0x6, 0x0, 0x6, 0x2cd9, 0x5, 0xbfe, 0x81, 0x4, 0xf, 0xffff, 0x2, 0x3, 0x5, 0x5, 0x5, 0xd4, 0x7, 0x40, 0xfffffffa, 0xff, 0x5, 0x3d5, 0x2, 0x8, 0x10001, 0x800, 0xe0000, 0xfffffffb, 0x3, 0x4, 0xfff, 0x0, 0x5, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x2, 0x7, 0x7, 0x10, 0xadab, 0x0, 0x7, 0x86, 0x3, 0xfff, 0x7, 0x3, 0x5, 0x3ff, 0x2, 0x8, 0x200, 0x1, 0xfffffff9, 0x37a, 0x3f6a, 0x345242e3, 0x0, 0x1, 0x2, 0x7c, 0x22, 0x4, 0x8, 0x2, 0xc0000, 0x1ff, 0x9, 0x2, 0x8, 0x3, 0x6, 0x5, 0x9, 0x4, 0x3ff, 0x81, 0x3, 0x4, 0x1, 0xffffffff, 0x92c, 0x6, 0x7, 0xd76, 0x1, 0x10000, 0x26, 0x0, 0x400, 0x2, 0x5, 0x4, 0x9, 0x2, 0x5, 0x1ff, 0x101, 0x9, 0x0, 0x8, 0x0, 0x9, 0x400, 0xda7, 0x0, 0x5, 0x2, 0x3, 0x7, 0x4, 0xfffffffa, 0x7, 0xfff, 0x5, 0x1, 0x6, 0x2, 0x1, 0x3ff, 0x80, 0xe, 0x1, 0x7fffffff, 0xfffffff1, 0x3, 0x136b, 0x0, 0x3, 0x6, 0x80000000, 0x80000000, 0x1000, 0x6, 0x1, 0x2, 0x2d2e, 0x9, 0x6, 0x7, 0x1, 0x7, 0xf0, 0x4, 0x0, 0x3ff, 0x3, 0xfffff7b7, 0x0, 0x2e1b, 0x101, 0x5, 0x8, 0x9, 0x4, 0x9, 0xfffffffc, 0x5, 0xfffffff8, 0x8, 0x2, 0xfffffff8, 0x7, 0x7, 0x86, 0xfff, 0x0, 0x5, 0x8, 0x5, 0x3ff, 0xf389, 0x4, 0x19, 0x6, 0x100, 0x6, 0x8, 0x8, 0x4, 0x8, 0x4, 0x100, 0x1, 0x5, 0x8, 0x400, 0x9, 0x4, 0x1, 0x1, 0x1, 0x9512, 0x400, 0x7fffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x264d, 0xfffffff7, 0x9, 0x0, 0x7ff, 0x7, 0xfffffff7, 0x72, 0x8, 0x9, 0x0, 0xcdf, 0x800, 0x55f306d8, 0x1000, 0xffff8001, 0x0, 0x7, 0x1000, 0x401, 0xffffff0a, 0x8, 0x5, 0x8, 0xaa9, 0x200, 0x200, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8, 0x40, 0x200, 0x1, 0x80000001, 0x8, 0x0, 0x400, 0x10001, 0x5, 0x137, 0x7fffffff, 0x6, 0x401, 0x546a, 0x1, 0x401, 0x3, 0x9, 0x7fffffff, 0x2, 0x3, 0x2714, 0x3, 0xfff, 0x6, 0xffffffff, 0x9, 0x3, 0x9, 0x9, 0x80, 0x0, 0x7, 0x625, 0x6, 0x5, 0x3, 0x5d6, 0xfffffffb, 0x1, 0xfffffffc, 0x1, 0x8, 0x10001, 0x1, 0xc, 0x0, 0x1000, 0x127d, 0x4c1b, 0xb8, 0x7ff, 0xb, 0x1, 0x2, 0x0, 0x1, 0xfb, 0x1, 0xf035, 0x5, 0x5, 0x8, 0x3, 0x3f, 0x78, 0x2, 0x6, 0x8, 0x400000, 0x943, 0xeb6d, 0x5, 0x5, 0x1000000, 0x6, 0x0, 0x3, 0x3, 0x2, 0x9, 0x4, 0x10000, 0x200, 0x2, 0x1959314c, 0x656, 0xe, 0x8, 0x8000, 0x0, 0x4691, 0xf9, 0xd, 0x3, 0x3, 0x0, 0x4, 0x147f, 0x0, 0x6, 0x10001, 0x101, 0x0, 0xc10e, 0xf24a, 0x1, 0x7fff, 0x5, 0x2, 0x10, 0x3, 0x0, 0x6, 0xf, 0x4, 0xc2c8, 0x9, 0xfffffff7, 0x8, 0x6, 0x1, 0x2, 0x100, 0x9, 0x4, 0x4e, 0xff, 0x101, 0x8, 0x7, 0xffffffff, 0x2d28, 0x7c, 0x7, 0x40, 0xfffffffd, 0x0, 0x6, 0xd, 0x5, 0x1, 0x10001, 0xff, 0x9b, 0x4, 0x4, 0xba2e, 0x7, 0xe, 0x2, 0x6, 0x5, 0x3641e9d0, 0x4, 0x3, 0x81, 0x1, 0x7, 0x800, 0x9, 0x8d02, 0x688b, 0x7, 0xf, 0x201, 0x2, 0x4, 0x9, 0x3ff, 0x4, 0xe17d, 0x7, 0x6, 0x3, 0x10000, 0xfffff1f3, 0x100, 0x3, 0x2, 0x0, 0x5, 0x718, 0x3ff, 0x0, 0x5d, 0x3, 0xd8, 0x7, 0x5, 0x8, 0x5, 0x9ed, 0x8, 0x7d, 0x3, 0xfffffffa, 0x68, 0x4, 0xfffffff9, 0x2, 0xffffff81, 0x7, 0x5, 0x7, 0x16, 0x5, 0xe25, 0x5, 0x8000, 0x16b, 0x7, 0x3, 0x0, 0x9, 0x7, 0x2, 0x2, 0x80000001, 0x1c000, 0x3, 0x5, 0x467c]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x8, 0x9, 0x59ba, 0x1e000, 0x1, 0x3, 0x6, 0x9, 0x4, 0x2, 0x3, 0x200, 0x7, 0x1, 0x5, 0x7, 0xfffffff8, 0x1, 0x4, 0xc73, 0x7, 0x3, 0x7fff, 0x200, 0x4513, 0x8e, 0x9, 0x7f, 0x100, 0x8000, 0x5b46748, 0x8, 0x3ff, 0x8, 0x1, 0xfa69, 0xc9fc, 0x2, 0x5, 0x7, 0x8, 0x800, 0xff, 0x100, 0x40, 0x5, 0x1, 0xee6, 0x3, 0x4, 0x635, 0x7, 0x6, 0x2, 0xfffffff8, 0xfff, 0x3, 0xfffff800, 0x3, 0xf5, 0x4, 0x7, 0x7, 0x6, 0x10001, 0x5, 0x1000, 0x9, 0xcf34, 0x343, 0x1, 0x4604096b, 0x200, 0x5, 0xffffffff, 0x6, 0x0, 0x2, 0x2, 0x9, 0x9, 0xff, 0x5, 0x6, 0xf, 0x6bf, 0x1, 0x4, 0xffff9ddb, 0x400, 0x7, 0x0, 0x1000, 0xb, 0x1, 0x5, 0x98d, 0x1, 0x3, 0x8, 0x1, 0x1, 0x1, 0xd59, 0x4, 0xb, 0x0, 0x3, 0x1, 0x2, 0xff, 0x7, 0x401, 0xbd, 0x0, 0x5, 0x80000000, 0x3, 0xfffffffa, 0xa, 0x800, 0x4c7c, 0x5, 0x3a, 0x7, 0x0, 0x31c23903, 0x57, 0x9, 0x5, 0x7, 0xff, 0x5, 0x1ff, 0x1, 0x9, 0x0, 0x7ff, 0xf3, 0x6, 0x3, 0x1, 0x1, 0xa, 0x2, 0x7, 0x2, 0x4, 0x7, 0xff, 0xcd1, 0xd, 0x5c7, 0x7, 0x8, 0x1, 0x0, 0x3, 0x36, 0xc, 0xc4d, 0x8, 0x9e05, 0xb2, 0x7, 0x7, 0xca42, 0x973, 0x800, 0xfff, 0x5, 0x5dca, 0x1ff, 0x1, 0x7, 0xa, 0x3, 0xe, 0x7fffffff, 0xffffffff, 0x1, 0xe, 0x2, 0x3, 0x5, 0x9, 0xffffff94, 0x1, 0x2, 0x4, 0x5, 0x3, 0x8, 0xc, 0xffff, 0x4, 0x2, 0x5, 0x0, 0xa, 0x9, 0xfffffff7, 0x7, 0x3, 0xfff, 0x5e3, 0x9, 0xffffff61, 0x6, 0x40, 0x914, 0xc, 0xf68, 0x10001, 0x0, 0x4, 0x8, 0xb10b, 0xf8, 0x2, 0x40, 0x2b, 0x9, 0x7ff, 0x5, 0x8, 0x1, 0xfff, 0x6, 0xa0a, 0x0, 0x4, 0x7, 0x4, 0x7, 0x9, 0x7, 0xd4, 0x2, 0x3, 0x5114, 0x3, 0x0, 0x1a4e, 0x13, 0x5, 0xa, 0x1cd, 0x3, 0x401, 0x0, 0x3, 0xffff, 0x7f, 0x7]}]]}, {0xed, 0x6, "608c11178c54f147d47ac9fdcd23da6c257688394a639f4817bef60ac08245176732476e83c9a3926bc1d788ea409b3ba59b5869e15a6e2a25ad7ce54dc5f3d6b8fe4e649124193adf8e4640511dd6e2dadcb094aa16656c7a6a4f937cccd41ba1760ad574e5f2a8f608729b02b25e1b07927816c8cceff321125d9f4e303a317b9997d5e0c7ed356015420e1188dfe5431ecde9acae12aef665a51c7e096bb3861c59ade28c7024e9bb880d0247a434f5907047e09c26991fb96eeefc53713a72e0bc3c26c22a275597a1cf8e053f2614303153b20c21fbf9b32cf65a52c858a1d78c1c6ab8dde8e3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x1ac, 0x11, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x3, 0x5, 0x2, 0x7fffffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x68be, 0x8, 0x2, 0x6, 0x7fff}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff8, 0x3, 0x8, 0xa8b, 0x2}}, @TCA_DEF_DATA={0x6, 0x3, '!\x00'}, @TCA_DEF_DATA={0xe, 0x3, '/dev/ptmx\x00'}, @TCA_DEF_DATA={0x6, 0x3, '\xec\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x1, 0x6, 0x4, 0x2}}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2e04}, 0x1, 0x0, 0x0, 0x804}, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYRES8], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYRES8], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f000024a000/0x2000)=nil, 0x2000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x14eeaa19, &(0x7f00000000c0)) fsmount(r5, 0x0, 0x0) (async) r7 = fsmount(r5, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 23.056433078s ago: executing program 2 (id=2954): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = syz_io_uring_setup(0x109, &(0x7f00000000c0)={0x0, 0xda66, 0x80, 0x40003, 0x302}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x8aa, 0x0, 0x41, 0x0, 0x0) r3 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) r4 = timerfd_create(0x7, 0x80000) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000140)={0x5, r3, 0x1c, {0x9, 0x1}, 0x6}, 0x1) chdir(&(0x7f0000000040)='./file0\x00') link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) 22.920036334s ago: executing program 2 (id=2955): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d7", 0x20}], 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9a82f24b87d44fd0}}, './file0/file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000003000000000000000000000d03000000000000000000000105000000080000000100000000000007000000000000000000000003000000000100000001000000000000"], 0x0, 0x5b}, 0x28) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000100)={0x4, 0xa, 0x6, 0x1, 0x0, 0x3, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8017, &(0x7f0000000400)=ANY=[@ANYBLOB="fc198b4afdb2fa84"]) r2 = socket(0x1a, 0x2, 0x8e2b) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) mount(&(0x7f0000000240)=@sr0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='gfs2\x00', 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, 0x0, 0x3}, 0x18) r3 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) ptrace(0x8, r3) r4 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x80880, 0x0) ioctl$CDROMVOLREAD(r4, 0x5392, 0x0) 22.670070246s ago: executing program 2 (id=2958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x9, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100c34ec6"}) 22.630766268s ago: executing program 36 (id=2958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x9, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100c34ec6"}) 18.990341556s ago: executing program 5 (id=2984): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)='+\f', 0x2) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0xffffffffffffff6b, r6, 0x205, 0x70bd2c, 0x25dfdbf9, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x1, 0x3}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) (async) recvmmsg(r0, &(0x7f0000007900), 0x847, 0x10162, 0x0) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYBLOB="52fb64364baa3f901787a470c8b8767a87fb253f9cb6730f011facb0c2b0800a9976b7fd8a3083ebc2413b6193fe5e384693a9c52e890ea9", @ANYRES32=r2, @ANYRES8, @ANYRESOCT=r6], 0x34}, 0x1, 0x0, 0x0, 0x4b9702dee4ac411b}, 0x4004854) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) 18.815927794s ago: executing program 5 (id=2986): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000000, 0x20000000, 0xfffffffd, 0xb4b, 0x9, 0x8, 0x4, 0x400002}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x4) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000200)={0x0, 0x0, 0xfffffffe}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x814004, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) eventfd(0x5f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f00000000c0)=0x7976, 0x4) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x4, 0x1, 0x0, @local}, 0x10) syz_clone(0x16988800, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 17.720416609s ago: executing program 5 (id=2996): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc1105511, &(0x7f0000000040)={0x9, 0x1, 0x40, 0x8913, 'syz1\x00', 0xff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r3, 0x25, 0x0, @void}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) tkill(r4, 0x1a) ptrace(0x4208, r4) syz_emit_ethernet(0x16, &(0x7f0000000c80)={@empty, @remote, @void, {@llc={0x4, {@snap={0x1, 0x55, 'W', "c4d432", 0x88f5}}}}}, 0x0) 17.586782455s ago: executing program 5 (id=2997): close(0x3) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000380)={0xf0f004, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r3) setrlimit(0x1e3d50de03aa3d1, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x8, 0x8, 0x1, 0x5}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 16.584366293s ago: executing program 5 (id=3004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="a0"], 0xa0}], 0x1, 0x0, 0x0, 0x804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="700000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d3000000000000034001680300001802c000c"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) (fail_nth: 5) 16.19055001s ago: executing program 5 (id=3006): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000006c0)="94f2b7fc63d709125839ffc3dc0fc83686d6d55f96270445989a7dbedc90f54a7a4071094ee220e6bc1bbfafb1603ffdddcec9cf09e71b0b575ce51e0e32b3de231e8df2fe306cc679bf2330371bb2a7078f35eeef34e14a0fb7899123b88a32aa63790fa3362bfa8c7e072f35aeaaad3a4790667a836c4701babc65798e453716dd6cedfc886fb6d34ba744718b1df4a8d5e51b0438b914bc203df0f7fb67483332520ac1ba23c9e8be91dc1477388652aed8728e372cc1f83d745b645dbe9810a639a64eea81b7f4894270692acb3a817488d57e76e197d537", 0xda}, {0x0}], 0x2) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000230020", @ANYRESOCT=r1, @ANYRES32, @ANYRESDEC], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb9f0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x2000000}}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc769}, 0x94) pipe2$9p(&(0x7f00000000c0), 0x8880) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x24044884) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) socket$rds(0x15, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 16.068927579s ago: executing program 37 (id=3006): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000006c0)="94f2b7fc63d709125839ffc3dc0fc83686d6d55f96270445989a7dbedc90f54a7a4071094ee220e6bc1bbfafb1603ffdddcec9cf09e71b0b575ce51e0e32b3de231e8df2fe306cc679bf2330371bb2a7078f35eeef34e14a0fb7899123b88a32aa63790fa3362bfa8c7e072f35aeaaad3a4790667a836c4701babc65798e453716dd6cedfc886fb6d34ba744718b1df4a8d5e51b0438b914bc203df0f7fb67483332520ac1ba23c9e8be91dc1477388652aed8728e372cc1f83d745b645dbe9810a639a64eea81b7f4894270692acb3a817488d57e76e197d537", 0xda}, {0x0}], 0x2) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000230020", @ANYRESOCT=r1, @ANYRES32, @ANYRESDEC], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb9f0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x2000000}}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc769}, 0x94) pipe2$9p(&(0x7f00000000c0), 0x8880) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x24044884) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) socket$rds(0x15, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 4.128151576s ago: executing program 9 (id=3099): bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x88, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x48}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\b'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x10c}, 0x1, 0x0, 0x0, 0x4c899}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00030000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r10, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) 4.070357347s ago: executing program 8 (id=3100): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x74000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) process_vm_writev(r0, &(0x7f0000003140)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/132, 0x84}], 0x2, &(0x7f0000003240)=[{&(0x7f0000003180)=""/61, 0x3d}, {&(0x7f00000031c0)=""/28, 0x1c}, {&(0x7f0000003200)=""/60, 0x3c}], 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000006500)=""/116, 0x74}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000006580)=""/154, 0x9a}, {&(0x7f0000000100)=""/16, 0x10}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x27b1539896d9bb5b, &(0x7f0000003700)={0x77359400}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000006400)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1, &(0x7f0000000880)=""/224, 0xe0}, 0xd}, {{&(0x7f0000000980)=@phonet, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a00)=""/253, 0xfd}, {&(0x7f0000000b00)=""/132, 0x84}, {&(0x7f0000000bc0)=""/76, 0x4c}, {&(0x7f0000000700)=""/8, 0x8}], 0x4}, 0x7}, {{&(0x7f0000000c80)=@ieee802154, 0x80, &(0x7f0000002000)=[{&(0x7f0000000d00)=""/12, 0xc}, {&(0x7f0000000d40)=""/161, 0xa1}, {&(0x7f0000000e00)=""/209, 0xd1}, {&(0x7f0000000f00)=""/83, 0x53}, {&(0x7f0000003280)=""/201, 0xc9}, {&(0x7f0000000f80)=""/21, 0x15}, {&(0x7f0000001fc0)=""/31, 0x1f}, {&(0x7f0000003380)=""/187, 0xbb}], 0x8, &(0x7f0000003440)=""/216, 0xd8}, 0x8000}, {{&(0x7f0000003540)=@caif, 0x80, &(0x7f0000004900)=[{&(0x7f0000002040)=""/63, 0x3f}, {&(0x7f00000035c0)=""/18, 0x12}, {&(0x7f0000003600)=""/87, 0x57}, {&(0x7f0000003680)=""/81, 0x51}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/204, 0xcc}], 0x7, &(0x7f0000004940)=""/129, 0x81}, 0x40}, {{&(0x7f0000004a00), 0x80, &(0x7f0000004c00)=[{&(0x7f0000004a80)=""/95, 0x5f}, {&(0x7f0000004b00)=""/66, 0x42}, {&(0x7f0000004b80)=""/91, 0x5b}], 0x3, &(0x7f0000004c40)=""/204, 0xcc}, 0x5145945}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000004d40)=""/210, 0xd2}, {&(0x7f0000004e40)=""/108, 0x6c}, {&(0x7f0000004ec0)=""/149, 0x95}, {&(0x7f0000004f80)=""/101, 0x65}, {&(0x7f0000005000)=""/155, 0x9b}, {&(0x7f00000050c0)=""/70, 0x46}, {&(0x7f0000005140)=""/235, 0xeb}], 0x7}, 0x34fab56c}, {{&(0x7f0000005280)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000006340)=[{&(0x7f0000005300)=""/64, 0x40}, {&(0x7f0000005340)=""/4096, 0x1000}], 0x2, &(0x7f0000006380)=""/108, 0x6c}, 0xffff91a8}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0x1a22802, &(0x7f0000006780)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESOCT=r2, @ANYRESOCT]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) write$binfmt_misc(r7, &(0x7f0000000400)="382f5f9c02074dcc8d34b56acbe15223b56aa2af17c4bb791a40a25aabeb72fc012e26", 0x23) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 3.706802326s ago: executing program 9 (id=3104): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=@newtfilter={0x24, 0x28, 0x575ac7824d421509, 0x70bd2b, 0x4, {0x0, 0x0, 0x0, r3, {0xa}, {0x6}, {0xfff1, 0x3d}}}, 0x24}}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigqueueinfo(0xffffffffffffffff, 0xd, 0x0) mlock2(&(0x7f00008ff000/0x3000)=nil, 0x3000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f400000009f238ee39ef48bced8e18f29d8500b43776518f1ce1dce2086c03532db7f4924e3511070a2757c6221558d228db9ef40e405ff4f3b3626cc8c2ba59a2f514a50cb84c31e7b5", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf2516000000e00004803400078008000300ff00000008000400d75b000008000300fbffffff0800030066000000080004000600000008000400ffffffff0900010073797a30000000002c00078008000400ff0f000008000300090000000800030002000000080001000d00000008000200e09500003c000780080003000100000008000400ee8800000800020007000000080004000004000008000300ff0f000008000100080000000800020002000000040007801300010062726f6164636173742d6c696e6b00001c000780080001001c00000008000200000000000800020000000000"], 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc0a, 0x4, &(0x7f0000000000)) 3.470454534s ago: executing program 9 (id=3105): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000100001002dbd700000000000640101020000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000232000000000000000000000000000000000000010000000000000000000000000000000000000000080000000000000000000000090000000000000000000000000000000600000000000000a3355f93000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000002000200bf00000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000000000000000000000ff7fffff0000000079000000"], 0x150}, 0x1, 0x0, 0x0, 0x4048091}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x28, 0x4, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x48800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x2, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xfff2, 0x1}, {0xfff1}}}, 0x24}}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x483, &(0x7f0000001280)={0x2e, @remote, 0x0, 0x1, 'sed\x00', 0x20, 0x0, 0x1}, 0x2c) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x1}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x8000, 0x30, 0xe5c, 0x1}, 0x0) bind$bt_hci(r9, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r9, 0x800448d7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.420399982s ago: executing program 9 (id=3106): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 3.370320403s ago: executing program 9 (id=3107): r0 = fsopen(&(0x7f0000000400)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x7, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffff, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 3.208902535s ago: executing program 8 (id=3108): socket$key(0xf, 0x3, 0x2) pipe2$watch_queue(&(0x7f0000000540), 0x80) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) socket$inet_smc(0x2b, 0x1, 0x0) read$FUSE(r1, &(0x7f0000004140)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYRES16=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x10000, 0xa, 0x4, 0x0, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f00000001c0), 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000640)=0x3) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x0) 3.208552786s ago: executing program 9 (id=3109): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff0b000204be040207fe056406040c5c001f003f0006010d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a3200040016000803180000000000e000e218d1ddf66ed538f252325000000000", 0x78, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0x7079, 0x4000, 0x14, 0x287}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x7c45, 0x0, 0xe, 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000100)={0x5, 0x6a6bcd02, 0xc2, 0xff, 0x3}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f00000002c0)={0x1, 0x7, 0x9, 0x5, 0x7, 0x2}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003780), 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UI_BEGIN_FF_ERASE(r6, 0xc00c55ca, &(0x7f00000037c0)={0x40000007, 0xff, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0500000003000000003800003f00000000000000", @ANYRES32, @ANYBLOB="0000000001000000000000000000000000d0f2d9c85e84892c45ebf46c27081f7d327980131c8777e5c3ada7cf36e9b3db4b0094adec41348d80d3ebb26e492337251aa1f5477e72baa4404c86d658e848b0031be2b65266427aa1520835a907e9b521f9d3680c6b45b2705b18f2994b69f1fe1460f52e2cc53ae848e70327b99f5d2a81f1a7e43f5d946e8778d647868e44e9f8e4058d29354b6f0ce550fd2a35310da0f1000232b9f12ea36b22fae75db78b9edbd420e70fd79be5000a14a614567f303d73678c158dd7062a79672b5a071f76cc1bd155fd16b585b20a841373381c63cd28b2fd5edbf6e785385f872a19a7aebba94095c131f779b8da1322d547009cbf0a834b51bbbda0ac126603c68b2521d4f3b5a8e2444531b5711adb8457570e6afe9436c21f8cef74d324e0d1b54cb2ed529c33f7c059bc3238292eccdfd803cd8451291faeb723", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000180)=0x3) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r8, 0x40043311, 0x0) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r9, 0x0) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0) writev(r10, &(0x7f0000000ac0)=[{&(0x7f0000000540)="fda30e2ed46d812ed92603b91ac31eefb5b2ccfa1cb7a0ca9c2bd0222c413df2ccb809667f75c65acbafdb4ad02cd328496ac923d3ac3d68534bee0591dceeb1cf9c827efb64904c90456df08642720402e3dd23ac2772d5cd3abe9d605231d941fbb92dfa7b99d5703da533caefd7b7a44240faac7692e9d6d82a7b277fc0dd869b34d9355b6e09dac2aafc20a9c25af1267aed165ecc63c88e8cf616fdafbfbb98efc63920fc7afa36be78d02fe5f1627f", 0xb2}, {&(0x7f00000006c0)="93e43645e17fae8ec433dcbe8e7d749daec93b1863502570f54c5a0d9487155d6bd6cadf025c2b4b6e22219cb6c99624451a7c20c5fed5df6ce8199a64320abbf447e4711ffb58123c354db8b9246fab592bd6ba2b49605c2955", 0x5a}, {&(0x7f0000000b40)="69911be93b1f41f874f25217a50473ac98310c835f0f591cbcdfeda181489fd01440a9dae5cb16070c60ea51a1b728d517209bfaafd04fbb4a6caabe116fd2d79c217f3387731c014b0e9fce63b88c97f2663c3ad6d1489e083186336952689b16e4fb81b0f9fc3b681023ffd071b94a677383abfc9aa41d9a694672703de4f8861c4a876fbc43c8348a0398fbb1d18525e26ab2042dc7e4ef7a9b86feda0b36cca8ebd0fd2abcf389896cfbd7a26ad2efa2b9c3b43e0be0154146", 0xbb}, {0x0}, {&(0x7f0000000280)="12157f9d06de06f1fcba", 0xa}, {&(0x7f00000008c0)="920e1edd0572fc19c13473c425350a7202955ac2db7ba8d786393df7271adc836e3b1fc01450e692232c4534233fda66768180dbd3ff01b0b9bacc759cfd95afa8d10add87d168868150cdcd5f3fd6c564c72485a56d676227", 0x59}, {&(0x7f0000000940)="b31de5abcc9b194bad8a16355b3cc006c2e1eabeed99a85a9464493c1cf5892509004e261cac7a3ef10800000000000000bf1f2146f3b8f1ed5daa9bbbdb49c479987389", 0x44}, {&(0x7f0000000300)="fa4f3fcde774f829", 0x8}, {&(0x7f0000002700)="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", 0xcfd}], 0x9) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_disconnect(0xffffffffffffffff) 3.138788472s ago: executing program 38 (id=3109): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff0b000204be040207fe056406040c5c001f003f0006010d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a3200040016000803180000000000e000e218d1ddf66ed538f252325000000000", 0x78, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0x7079, 0x4000, 0x14, 0x287}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x7c45, 0x0, 0xe, 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000100)={0x5, 0x6a6bcd02, 0xc2, 0xff, 0x3}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f00000002c0)={0x1, 0x7, 0x9, 0x5, 0x7, 0x2}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003780), 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UI_BEGIN_FF_ERASE(r6, 0xc00c55ca, &(0x7f00000037c0)={0x40000007, 0xff, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0500000003000000003800003f00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000180)=0x3) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r8, 0x40043311, 0x0) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r9, 0x0) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0) writev(r10, &(0x7f0000000ac0)=[{&(0x7f0000000540)="fda30e2ed46d812ed92603b91ac31eefb5b2ccfa1cb7a0ca9c2bd0222c413df2ccb809667f75c65acbafdb4ad02cd328496ac923d3ac3d68534bee0591dceeb1cf9c827efb64904c90456df08642720402e3dd23ac2772d5cd3abe9d605231d941fbb92dfa7b99d5703da533caefd7b7a44240faac7692e9d6d82a7b277fc0dd869b34d9355b6e09dac2aafc20a9c25af1267aed165ecc63c88e8cf616fdafbfbb98efc63920fc7afa36be78d02fe5f1627f", 0xb2}, {&(0x7f00000006c0)="93e43645e17fae8ec433dcbe8e7d749daec93b1863502570f54c5a0d9487155d6bd6cadf025c2b4b6e22219cb6c99624451a7c20c5fed5df6ce8199a64320abbf447e4711ffb58123c354db8b9246fab592bd6ba2b49605c2955", 0x5a}, {&(0x7f0000000b40)="69911be93b1f41f874f25217a50473ac98310c835f0f591cbcdfeda181489fd01440a9dae5cb16070c60ea51a1b728d517209bfaafd04fbb4a6caabe116fd2d79c217f3387731c014b0e9fce63b88c97f2663c3ad6d1489e083186336952689b16e4fb81b0f9fc3b681023ffd071b94a677383abfc9aa41d9a694672703de4f8861c4a876fbc43c8348a0398fbb1d18525e26ab2042dc7e4ef7a9b86feda0b36cca8ebd0fd2abcf389896cfbd7a26ad2efa2b9c3b43e0be0154146", 0xbb}, {0x0}, {&(0x7f0000000280)="12157f9d06de06f1fcba", 0xa}, {&(0x7f00000008c0)="920e1edd0572fc19c13473c425350a7202955ac2db7ba8d786393df7271adc836e3b1fc01450e692232c4534233fda66768180dbd3ff01b0b9bacc759cfd95afa8d10add87d168868150cdcd5f3fd6c564c72485a56d676227", 0x59}, {&(0x7f0000000940)="b31de5abcc9b194bad8a16355b3cc006c2e1eabeed99a85a9464493c1cf5892509004e261cac7a3ef10800000000000000bf1f2146f3b8f1ed5daa9bbbdb49c479987389", 0x44}, {&(0x7f0000000300)="fa4f3fcde774f829", 0x8}, {&(0x7f0000002700)="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", 0xcfd}], 0x9) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_disconnect(0xffffffffffffffff) 2.757920322s ago: executing program 6 (id=3116): r0 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0x4000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0) r4 = openat$vcs(0xffffff9c, &(0x7f0000000100), 0x80, 0x0) inotify_add_watch(r4, 0x0, 0x400) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)}) (async) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) syz_emit_ethernet(0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaa346359684c825093aa1a88a80500886402051f"], 0x0) 2.710245997s ago: executing program 7 (id=3117): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x40, 0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$key(r5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x2c, r7, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) 2.599112867s ago: executing program 6 (id=3118): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0xef}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000140)=0x0) prlimit64(r5, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000340), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r7) socket(0x10, 0x3, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000040)="4f725d37c107b947055eefc0effb57099f8eaac009aea0d06707607362104b951aa22f72f6032c01a19414d1e80f3c7a449c96a9f8df5b957d93e6f3c236f8bf2f2fe2", 0x43, 0x24000041, &(0x7f0000000100)={0x1a, 0x206, 0x2, 0x6, 0x1, 0x81, @broadcast}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x2a) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x500) 2.241434991s ago: executing program 7 (id=3119): socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x6a040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0xe6c, 0x30, 0x1, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xbd9e}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00'], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'gretap0\x00', 0x200}) 2.124723018s ago: executing program 8 (id=3120): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000180)={0x5, 0x0, [{0x242, 0x0, 0xfffffffffffffff8}, {0x600, 0x0, 0x200}, {0x8be, 0x0, 0x2000000}, {0x345, 0x0, 0xfffffffffffffe01}, {0x770, 0x0, 0x8001}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80000, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106d) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f99f0cbb50a330a3f651ce0d7381e60c400055ec740223f611c9c18ff29dad5be64172e80dfe48d717c624a7ed2a7d3883ff5dbf8d066c94a12a8c399710c9ea5633460ee0f9491961c3f36eea65fd66e64b66c1fab6fc175c80f619cbf3891d265240998b719a708395b7658cf051f34a573359d9f6a65de4ccb7", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) r7 = socket(0x10, 0x803, 0x2) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r8, 0x7a6, &(0x7f0000000040)={0x1, 0xc8a3, 0x4, 0xf, 0x30000, 0xdb3}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)) write$binfmt_misc(r9, &(0x7f0000000740), 0xfffffc8f) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r11, r10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r10, 0x0) r12 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) 1.87029608s ago: executing program 6 (id=3121): r0 = openat$hpet(0xffffff9c, &(0x7f0000000040), 0x400800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x4c, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="fe"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "cf524e3d27"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x40080) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x31}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000180)={0x4, 0x80000000, 0x1}) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) 1.77047336s ago: executing program 6 (id=3122): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000100001002dbd700000000000640101020000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000232000000000000000000000000000000000000010000000000000000000000000000000000000000080000000000000000000000090000000000000000000000000000000600000000000000a3355f93000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000002000200bf00000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000000000000000000000ff7fffff0000000079000000"], 0x150}, 0x1, 0x0, 0x0, 0x4048091}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x28, 0x4, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x48800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x2, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xfff2, 0x1}, {0xfff1}}}, 0x24}}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x483, &(0x7f0000001280)={0x2e, @remote, 0x0, 0x1, 'sed\x00', 0x20, 0x0, 0x1}, 0x2c) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x1}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x8000, 0x30, 0xe5c, 0x1}, 0x0) bind$bt_hci(r9, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r9, 0x800448d7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.76980826s ago: executing program 7 (id=3123): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000001c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd=r0, 0x62f1, {0x0, r0}, 0xee0, 0xa, 0x0, {0x0, 0x0, r2}}) io_uring_enter(r3, 0x7c45, 0x0, 0xe, 0x0, 0x0) r6 = dup3(r1, r0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) fsetxattr$security_ima(r6, &(0x7f00000001c0), &(0x7f0000000240)=ANY=[@ANYBLOB="04f8"], 0x8, 0x1) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.68803444s ago: executing program 6 (id=3124): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0x7fff, &(0x7f00000000c0)=0x2) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 1.687602566s ago: executing program 7 (id=3125): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r1 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x10000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_get_implied_cluster_alloc_exit\x00', r3, 0x0, 0x20002}, 0xffffffffffffff43) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1.077961996s ago: executing program 8 (id=3126): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) readv(r2, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000100)="6306bc3795f8", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="bada0d0095bf51bf071b84e96bfd3043372e80cbaaef96470fd1b0e25ee3f9521ace0100f1fadda45851"], 0x10}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xffffffffffffff2b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 749.05006ms ago: executing program 6 (id=3127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x3}, 0x18) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = gettid() ioprio_get$pid(0x2, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x144, 0x3e, 0x1, 0x7fffc, 0x4, {0xfe}, [@typed={0x4}, @nested={0x118, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@generic="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"]}]}, @typed={0xc, 0xf2, 0x0, 0x0, @u64=0xfffffffffffffffb}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast2}]}, 0x144}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) close_range(r1, 0xffffffffffffffff, 0x0) 748.521456ms ago: executing program 7 (id=3128): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = io_uring_setup(0x6c34, &(0x7f0000000080)={0x0, 0xa6cd, 0x400, 0x2, 0xfffffffe}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000040)=0x1) preadv2(r5, &(0x7f0000000f80)=[{&(0x7f0000000240)=""/156, 0x9c}], 0x1, 0x2, 0x4, 0x14) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000180)={'bridge0\x00', &(0x7f00000004c0)=@ethtool_regs={0x4, 0xffff, 0xf9, "d184beb4baeea2de0fe319866275741d768d9f12784b67b2b58cc088240217cfb7e2c676ccc550bf73a56729bf44e6fd7ff610a8128d62206a660da8c0aa5bd9269739109bf400da1eb0162856b30072279c32373915a11fe5b59eb55907754cde41e875f5c702758b5dd9151dad0eadd27dd315623bc433487110291098d5e5acdf0268c38f2dbac710f5264fb568f8e3cdb1b9e9683973979b71ac12ae595c62ab4c25432a8ecbbe28b23db4184efc398f30722458ae6dc1e55456a683cb56249b68688289617a9f9d2747cf28f3f7e9e6af861efa1f3260fff92f8d3f10cbd89a5e43cbfdda5d59dd6d23122325203d4e9359430cdfa34b"}}) close_range(r6, 0xffffffffffffffff, 0x0) close(r5) socket(0x2b, 0x1, 0x1) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 532.546625ms ago: executing program 7 (id=3129): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, 0x0, 0x0) r1 = io_uring_setup(0xf09, &(0x7f0000000600)={0x0, 0xfb6e, 0x3890, 0x87, 0x400363}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r2 = openat$cdrom(0xffffff9c, &(0x7f00000000c0), 0x60100, 0x0) ioctl$CDROMSUBCHNL(r2, 0x530b, &(0x7f0000000100)={0x3, 0x3, 0xb, 0x0, 0x4, 0x6, @msf={0x9b, 0x3, 0x9}, @lba=0x4}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0xc) syslog(0x1, 0x0, 0x38) 472.972013ms ago: executing program 0 (id=3110): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4008800) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010000000000000002000700", @ANYRES32=0x0, @ANYBLOB="0400000000000000100001000000000020"], 0x2c, 0x3) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) syz_open_dev$mouse(0x0, 0x358, 0x622000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x2, 0x3, 0xa, @private0, @empty, 0x8000, 0x7, 0x2, 0x9}}) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0x980914, 0x800}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0x5) 79.332445ms ago: executing program 8 (id=3130): socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x6a040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0xe6c, 0x30, 0x1, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xbd9e}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00'], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'gretap0\x00', 0x200}) 457.269µs ago: executing program 0 (id=3131): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000100001002dbd700000000000640101020000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000232000000000000000000000000000000000000010000000000000000000000000000000000000000080000000000000000000000090000000000000000000000000000000600000000000000a3355f93000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000002000200bf00000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000000000000000000000ff7fffff0000000079000000"], 0x150}, 0x1, 0x0, 0x0, 0x4048091}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x28, 0x4, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x48800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x2, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xfff2, 0x1}, {0xfff1}}}, 0x24}}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x483, &(0x7f0000001280)={0x2e, @remote, 0x0, 0x1, 'sed\x00', 0x20, 0x0, 0x1}, 0x2c) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x1}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x8000, 0x30, 0xe5c, 0x1}, 0x0) bind$bt_hci(r9, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r9, 0x800448d7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 8 (id=3132): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffe71) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) finit_module(0xffffffffffffffff, 0x0, 0x3) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(0xfffffffffffffffe, 0xfffffffffffffecd, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(&(0x7f0000000000)='./file0\x00') r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1, &(0x7f0000000100), 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e", @ANYRES64=0x0, @ANYBLOB="09b1e2ed34e71534741006a4ca3cc736af9a280ec272989184e6260f0c8c6c9dfbe1ac8f5d4c5dd3b5d1e248cc1e3ee0062eaeff36a0947d10f1f2437e4d9720c6ab4a921e7f01fce0bf8d0504c751bc9c34906755e152027616079ab09cc839bb019b68e0ec8fc828a9366602387f"], 0x40}}, 0x0) r7 = getpid() syz_pidfd_open(r7, 0x0) 0s ago: executing program 0 (id=3133): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 64) r1 = fcntl$dupfd(r0, 0x0, r0) (rerun: 64) ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async, rerun: 64) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) (rerun: 64) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xdb) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 32) move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x260) (async, rerun: 32) sendmsg$inet6(r3, &(0x7f0000000a40)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private0, 0x25a0}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000180)="381e1107c92ded43def8cf8f9cbcf7b25965b806638d96ef1a06d0a44b480927a5328066876afd03e8c0954af2eff74ae7c0c398c64984bbda15bc875071fa27328033ea6610ccd00f09a9fc49c7a367bd488e071b024108a95fd1d869dd163e735051db35d4e57635af4f2867121818e909fe43efbb1b36811f13f0a6c0b3284a036fb84a7fe69db90c7968cdada3c686", 0x91}, {&(0x7f0000000240)="c4fab2c713096fccdd068acee97795f3a55659019a043b3b36c4d516f52b3631c1e000a0f39ec033c28f971c983000db963761f25bc3c116cce7e2193911634205178c031e0c31f6a213f50cd5b7c5cb33fa2f3cceec18842ac7041e191d4db47cbd637e128f9fd28b1614c5ab1e41f7fcccae50daacc0da1b1901304fc5fd0fd0ff154da0596cbb9ec99f312bacec88be5dc9720dc313831d46b9bff9daecc24d66d0a9f6deb90a06280385a6b95ee06b5f9ca040b13471c32477c08986c3412cda3fac7a127e2a93b39a0cfdecfbb4e0a0ec69b49d01", 0xd7}, {&(0x7f0000000080)="983cbc0b919a2b4a37c0c91bcb70d98cee403878dd37e2cbd0fbdbfeeccce1af54609ee93618add7ea673f5e4e5502f2e120ae2abf1a5449cba7ba1e497c54c9699696c0fe383ff0c351c74b53120e95e61c7542ac8d40b7c6038e0e2ebf31464a9028a3ebe550e3d450fb83f96d", 0x6e}, {&(0x7f0000000440)="39c8aa99643bad6f09d163b5915995c71657d999ea3ca7a992e495efded0a4467d16c8282d15da11b570a09d47ee3bcd207391af728f14257c7ff6f0b2c4a9e0c9f2d007fea67233f9551fbc70cd5be301de9dd538a1e72ead3ec98fc2a9f5b718cdc29a771ca220f19ea949f78f26f16a3f59d8ebbba10cfe3c59165d5ef0b6afdf9a8d8c6f1a1d1ea449a21ae68a65f472b6f25f41778f066f84414df5ef953e6f3c721805294e1f805f66be5fd1d7d501fc10a3816787aa1098853d3ddcd787e1d1", 0xc3}, {&(0x7f0000000340)="79a8fa71e95b971da55a9f693d32da1c955175078cf6b35a6a08dce6e79b330d2567f8001774bb24", 0x28}, {&(0x7f0000000540)="2574859b485cee4822a2fed57fe56f9593975c366437808d5d75ecc61bf1d14aafeb815e5fee75821341309297e463b18eeccd3f4096a944961fd126a2a5bb3ca94df9ea0d167a045431d460d786586550746c46a9f006813f410dbc9aa6c31adb56120c163376510687165e84c368b9b9a4680832d024fd99574eba8aad13d0361a771634802033813d7bd40ea3ec9d898050d4b86af2e6aafc33317660200675ddaa5d8c8567bd77100540e486bb91a05f3fb0bc0be99dc983085f93afaf8f195bfebf7fd5d244fe3a696de66356", 0xcf}, {&(0x7f0000000380)="dc7b021d07c75b44094961b59c600da41300776825220cef14ee4ab8b1578c65f2127a08fe06120938dd21f2a6c4e87882c77e44e53113cc874d481367e74803ac67671857c9460f6edf85d4450d7ecaaf090d4f9fc0ebabcbeeb9fd127f75", 0x5f}, {&(0x7f0000000640)="a82a9530a15dbd845b017bf9718c250d3004e77190ea32dfbb89c1307e55da3aa1d319081283f005a7211680093c5abd297d41020439af5bc65ee08bc475bb4eba853d47b5bb1970f34bd9bf92538ea5b0dc62089288351e5fd12a2a985e478df1453591d41f856a10dbc4602f38f3dfe8dee672dd9baff8db572913d67ddb51d0bf7ebddd3481d29cc8889a2e7697e098ebb828665946b1544bc77c51b3d21b62a0c770ee4732f893d8ce96d7664b971d0f1b432172a1683918657cfb9a30821a9486ca6bae09fb79b0ac240d7ec4338a0a0f6e8b", 0xd5}], 0x8, &(0x7f0000000780)=[@hoplimit={{0x10, 0x29, 0x34, 0x10001}}, @dontfrag={{0x10, 0x29, 0x3e, 0x8}}, @rthdrdstopts={{0x104, 0x29, 0x37, {0x89, 0x1e, '\x00', [@generic={0x8, 0xee, "c36862cc4cacbc5c5c27df5167d882b54910aa4743e893139c7cbda748226bf9a09cbc981018ee63dd62e10dc0323297fce88804a557066a58e7a403f12296901b3cab115870ea16b7aa186672bff5aa0b9e77f000ca4d97a88f7646d31a3d2f085088e54eb15557fd68ac6093cf3b5921f92863afd8c41a0dd377924855a36b4a8ac2a87f5cf0694115d49c7f9dd0ef5f25b3ea574a9f9e720469e98af18446118545f39205950481423f967fcab1bce9527fb413d05e681bfd97c9c9069b83d448ae691c409c7f755717283b04010ff5c64055a418c85a1fdb59a5f8bd078152fedb71efed8235414d834c2f81"}]}}}, @rthdrdstopts={{0x114, 0x29, 0x37, {0x1d, 0x1f, '\x00', [@pad1, @calipso={0x7, 0x30, {0x0, 0xa, 0x3, 0x3, [0x6, 0x5, 0x0, 0x181, 0xff]}}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x81}, @calipso={0x7, 0x58, {0x3, 0x14, 0xc3, 0x5, [0xfffffffffffffff8, 0xf, 0x3, 0xe92, 0xfffffffffffffffe, 0xffff, 0xfffffffffffffff8, 0x2, 0x1, 0x40]}}, @jumbo={0xc2, 0x4, 0x32}, @calipso={0x7, 0x50, {0x1, 0x12, 0x9a, 0x1, [0x0, 0x80000000, 0x2, 0x200, 0x0, 0x8000, 0x8, 0x0, 0x1]}}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x800}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x2176}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x200}}, @flowinfo={{0x10, 0x29, 0xb, 0x2}}, @hoplimit={{0x10, 0x29, 0x34, 0x81}}], 0x288}, 0x20008000) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="050200000000fddbdf25120000001800018014000200626f6e645f736c6176655f310000000008000600010000000800070000000000"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): type 2 family 0 port 6081 - 0 [ 440.899240][ T6920] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.006223][T11226] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 441.156206][T11226] usb 10-1: Using ep0 maxpacket: 16 [ 441.160986][T11226] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.165194][T11226] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 441.172032][T11226] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 441.175827][T11226] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.180023][T11226] usb 10-1: Product: syz [ 441.181452][T11226] usb 10-1: Manufacturer: syz [ 441.183123][T11226] usb 10-1: SerialNumber: syz [ 441.187914][T11226] usb 10-1: config 0 descriptor?? [ 442.142553][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2542'. [ 442.151854][T15203] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 442.202291][ T6047] libceph: connect (1)[c::]:6789 error -101 [ 442.204980][ T6047] libceph: mon0 (1)[c::]:6789 connect error [ 442.319083][T15205] ceph: No mds server is up or the cluster is laggy [ 442.388956][T15212] syz_tun: entered allmulticast mode [ 442.392705][T15212] dvmrp9: left allmulticast mode [ 442.467102][T15211] syz_tun: left allmulticast mode [ 442.826483][T15217] /dev/sr0: Can't open blockdev [ 443.182817][ T59] usb 10-1: USB disconnect, device number 17 [ 444.110904][T15410] tc_dump_action: action bad kind [ 444.156917][T15417] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 444.372492][T15423] loop2: detected capacity change from 0 to 7 [ 444.382095][T15423] Dev loop2: unable to read RDB block 7 [ 444.387075][T15423] loop2: unable to read partition table [ 444.389788][T15423] loop2: partition table beyond EOD, truncated [ 444.392503][T15423] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 444.537975][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.995047][T15433] /dev/sr0: Can't open blockdev [ 445.933654][T15602] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 446.052083][T15633] tmpfs: Bad value for 'size' [ 446.238662][T15641] netlink: 'syz.2.2563': attribute type 3 has an invalid length. [ 446.241690][T15641] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2563'. [ 446.444069][T15644] /dev/sr0: Can't open blockdev [ 446.901497][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2566'. [ 447.044611][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2567'. [ 447.278211][T15665] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 447.419141][T15672] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2572'. [ 447.428481][T15672] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 447.683470][T15674] /dev/sr0: Can't open blockdev [ 448.210970][T15685] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2576'. [ 448.217009][T15685] vlan2: entered promiscuous mode [ 448.218685][T15685] team0: entered promiscuous mode [ 448.220309][T15685] team_slave_0: entered promiscuous mode [ 448.222215][T15685] team_slave_1: entered promiscuous mode [ 450.402867][T15833] /dev/sr0: Can't open blockdev [ 450.468667][T15851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2587'. [ 450.484253][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2590'. [ 450.532384][T15858] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2592'. [ 450.992089][T15868] block nbd7: shutting down sockets [ 451.089340][T15871] loop6: detected capacity change from 0 to 524287999 [ 451.207955][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2596'. [ 451.221590][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2596'. [ 451.247675][T15875] __nla_validate_parse: 2 callbacks suppressed [ 451.247692][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2596'. [ 451.274244][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2596'. [ 451.289059][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2596'. [ 451.320786][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2596'. [ 451.331395][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2596'. [ 451.342097][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2596'. [ 451.349523][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2596'. [ 451.361631][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2596'. [ 451.373119][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2596'. [ 451.387907][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2596'. [ 451.770804][T11382] libceph: connect (1)[c::]:6789 error -101 [ 451.773477][T11382] libceph: mon0 (1)[c::]:6789 connect error [ 451.784520][T15892] netlink: 'syz.2.2601': attribute type 11 has an invalid length. [ 451.873971][T15888] ceph: No mds server is up or the cluster is laggy [ 452.032478][T11382] libceph: connect (1)[c::]:6789 error -101 [ 452.035134][T11382] libceph: mon0 (1)[c::]:6789 connect error [ 452.542340][T11382] libceph: connect (1)[c::]:6789 error -101 [ 452.545051][T11382] libceph: mon0 (1)[c::]:6789 connect error [ 453.122528][T15907] lo speed is unknown, defaulting to 1000 [ 453.236821][T15911] lo speed is unknown, defaulting to 1000 [ 454.116381][T15927] FAULT_INJECTION: forcing a failure. [ 454.116381][T15927] name failslab, interval 1, probability 0, space 0, times 0 [ 454.121516][T15927] CPU: 1 UID: 0 PID: 15927 Comm: syz.6.2608 Not tainted syzkaller #0 PREEMPT(full) [ 454.121552][T15927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 454.121564][T15927] Call Trace: [ 454.121570][T15927] [ 454.121577][T15927] dump_stack_lvl+0x16c/0x1f0 [ 454.121608][T15927] should_fail_ex+0x512/0x640 [ 454.121624][T15927] ? fs_reclaim_acquire+0xae/0x150 [ 454.121653][T15927] should_failslab+0xc2/0x120 [ 454.121676][T15927] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 454.121698][T15927] ? security_inode_alloc+0x3b/0x2b0 [ 454.121722][T15927] security_inode_alloc+0x3b/0x2b0 [ 454.121744][T15927] inode_init_always_gfp+0xce4/0x1030 [ 454.121768][T15927] alloc_inode+0x86/0x240 [ 454.121792][T15927] new_inode+0x22/0x1c0 [ 454.121840][T15927] hugetlbfs_get_inode+0x354/0x730 [ 454.121865][T15927] hugetlb_file_setup+0x15b/0x620 [ 454.121899][T15927] ksys_mmap_pgoff+0x189/0x5c0 [ 454.121925][T15927] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 454.121951][T15927] __do_fast_syscall_32+0x7c/0x300 [ 454.121967][T15927] do_fast_syscall_32+0x32/0x80 [ 454.121984][T15927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 454.122006][T15927] RIP: 0023:0xf707e579 [ 454.122020][T15927] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 454.122037][T15927] RSP: 002b:00000000f542c55c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 454.122055][T15927] RAX: ffffffffffffffda RBX: 0000000080400000 RCX: 0000000000c00000 [ 454.122065][T15927] RDX: 0000000004000002 RSI: 000000000005d031 RDI: 00000000ffffffff [ 454.122076][T15927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.122086][T15927] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 454.122096][T15927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.122119][T15927] [ 454.572969][T15929] /dev/sr0: Can't open blockdev [ 455.027040][T15937] /dev/sr0: Can't open blockdev [ 455.138280][T15946] FAULT_INJECTION: forcing a failure. [ 455.138280][T15946] name failslab, interval 1, probability 0, space 0, times 0 [ 455.142412][T15946] CPU: 2 UID: 0 PID: 15946 Comm: syz.5.2613 Not tainted syzkaller #0 PREEMPT(full) [ 455.142428][T15946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 455.142435][T15946] Call Trace: [ 455.142439][T15946] [ 455.142443][T15946] dump_stack_lvl+0x16c/0x1f0 [ 455.142463][T15946] should_fail_ex+0x512/0x640 [ 455.142474][T15946] ? fs_reclaim_acquire+0xae/0x150 [ 455.142492][T15946] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 455.142509][T15946] should_failslab+0xc2/0x120 [ 455.142524][T15946] __kmalloc_noprof+0xd2/0x510 [ 455.142546][T15946] tomoyo_realpath_from_path+0xc2/0x6e0 [ 455.142572][T15946] ? tomoyo_profile+0x47/0x60 [ 455.142592][T15946] tomoyo_path_number_perm+0x245/0x580 [ 455.142614][T15946] ? tomoyo_path_number_perm+0x237/0x580 [ 455.142633][T15946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 455.142662][T15946] ? find_held_lock+0x2b/0x80 [ 455.142673][T15946] ? hook_file_ioctl_common+0x145/0x410 [ 455.142692][T15946] ? __fget_files+0x20e/0x3c0 [ 455.142708][T15946] security_file_ioctl_compat+0x9b/0x240 [ 455.142724][T15946] __ia32_compat_sys_ioctl+0xc3/0x370 [ 455.142745][T15946] __do_fast_syscall_32+0x7c/0x300 [ 455.142756][T15946] do_fast_syscall_32+0x32/0x80 [ 455.142766][T15946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.142780][T15946] RIP: 0023:0xf7f88579 [ 455.142789][T15946] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 455.142800][T15946] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 455.142811][T15946] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0306201 [ 455.142818][T15946] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.142825][T15946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.142831][T15946] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 455.142838][T15946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.142851][T15946] [ 455.142857][T15946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 455.742013][T11382] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 455.769259][T15956] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 455.772036][T15956] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 455.775698][T15956] vhci_hcd vhci_hcd.0: Device attached [ 455.902008][T11382] usb 11-1: Using ep0 maxpacket: 8 [ 455.905897][T11382] usb 11-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 455.909469][T11382] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 455.912802][T11382] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 455.915875][T11382] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.919733][T11382] usb 11-1: config 0 descriptor?? [ 456.053027][ T1334] usb 42-1: SetAddress Request (6) to port 0 [ 456.055050][ T1334] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 456.173228][ T5989] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 456.310344][T15975] __nla_validate_parse: 20 callbacks suppressed [ 456.310360][T15975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2623'. [ 456.316285][T15975] netlink: 'syz.5.2623': attribute type 1 has an invalid length. [ 456.319594][T15975] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2623'. [ 456.340597][T15959] vhci_hcd: connection reset by peer [ 456.342638][ T6919] vhci_hcd: stop threads [ 456.344139][ T6919] vhci_hcd: release socket [ 456.346053][ T6919] vhci_hcd: disconnect device [ 456.751184][T15983] hpfs: Bad magic ... probably not HPFS [ 457.146481][T15992] netlink: 6 bytes leftover after parsing attributes in process `syz.7.2627'. [ 458.311219][T16019] netlink: 'syz.7.2634': attribute type 10 has an invalid length. [ 458.342430][T16021] FAULT_INJECTION: forcing a failure. [ 458.342430][T16021] name failslab, interval 1, probability 0, space 0, times 0 [ 458.342460][T16021] CPU: 3 UID: 0 PID: 16021 Comm: syz.2.2636 Not tainted syzkaller #0 PREEMPT(full) [ 458.342485][T16021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 458.342530][T16021] Call Trace: [ 458.342537][T16021] [ 458.342544][T16021] dump_stack_lvl+0x16c/0x1f0 [ 458.342576][T16021] should_fail_ex+0x512/0x640 [ 458.342595][T16021] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 458.342620][T16021] should_failslab+0xc2/0x120 [ 458.342646][T16021] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 458.342666][T16021] ? __pfx___might_resched+0x10/0x10 [ 458.342684][T16021] ? alloc_vmap_area+0x648/0x29c0 [ 458.342715][T16021] alloc_vmap_area+0x648/0x29c0 [ 458.342751][T16021] ? __pfx_alloc_vmap_area+0x10/0x10 [ 458.342786][T16021] __get_vm_area_node+0x1ca/0x330 [ 458.342819][T16021] __vmalloc_node_range_noprof+0x271/0x14b0 [ 458.342839][T16021] ? vc_do_resize+0x24d/0x10e0 [ 458.342872][T16021] ? vc_do_resize+0x24d/0x10e0 [ 458.342904][T16021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 458.342933][T16021] ? vc_do_resize+0x24d/0x10e0 [ 458.342958][T16021] __vmalloc_node_noprof+0xad/0xf0 [ 458.342977][T16021] ? vc_do_resize+0x24d/0x10e0 [ 458.343004][T16021] vc_do_resize+0x24d/0x10e0 [ 458.343041][T16021] ? __pfx_vc_do_resize+0x10/0x10 [ 458.343070][T16021] ? rcu_is_watching+0x12/0xc0 [ 458.343093][T16021] vt_ioctl+0x2e2a/0x30a0 [ 458.343119][T16021] ? __pfx_vt_ioctl+0x10/0x10 [ 458.343141][T16021] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 458.343175][T16021] ? rcu_is_watching+0x12/0xc0 [ 458.343200][T16021] ? aa_get_newest_label+0xd2/0x250 [ 458.343221][T16021] ? apparmor_capable+0x114/0x1d0 [ 458.343259][T16021] ? bpf_lsm_capable+0x9/0x10 [ 458.343273][T16021] ? security_capable+0x7e/0x260 [ 458.343299][T16021] vt_compat_ioctl+0x1c2/0x4e0 [ 458.343323][T16021] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 458.343343][T16021] ? hook_file_ioctl_common+0x145/0x410 [ 458.343374][T16021] ? __fget_files+0x20e/0x3c0 [ 458.343398][T16021] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 458.343421][T16021] tty_compat_ioctl+0x2f1/0x4d0 [ 458.343448][T16021] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 458.343476][T16021] __ia32_compat_sys_ioctl+0x242/0x370 [ 458.343510][T16021] __do_fast_syscall_32+0x7c/0x300 [ 458.343531][T16021] do_fast_syscall_32+0x32/0x80 [ 458.343549][T16021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.343572][T16021] RIP: 0023:0xf7f28579 [ 458.343588][T16021] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 458.343607][T16021] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 458.343624][T16021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005609 [ 458.343636][T16021] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 458.343649][T16021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.343660][T16021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 458.343671][T16021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.343695][T16021] [ 458.343815][T16021] syz.2.2636: vmalloc error: size 11264, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 458.343951][T16021] CPU: 3 UID: 0 PID: 16021 Comm: syz.2.2636 Not tainted syzkaller #0 PREEMPT(full) [ 458.343973][T16021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 458.343983][T16021] Call Trace: [ 458.343990][T16021] [ 458.343996][T16021] dump_stack_lvl+0x16c/0x1f0 [ 458.344026][T16021] warn_alloc+0x248/0x3a0 [ 458.344051][T16021] ? __pfx_warn_alloc+0x10/0x10 [ 458.344075][T16021] ? kfree+0x2b4/0x4d0 [ 458.344100][T16021] ? __get_vm_area_node+0x208/0x330 [ 458.344134][T16021] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 458.344162][T16021] ? vc_do_resize+0x24d/0x10e0 [ 458.344200][T16021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 458.344227][T16021] ? vc_do_resize+0x24d/0x10e0 [ 458.344251][T16021] __vmalloc_node_noprof+0xad/0xf0 [ 458.344269][T16021] ? vc_do_resize+0x24d/0x10e0 [ 458.344295][T16021] vc_do_resize+0x24d/0x10e0 [ 458.344332][T16021] ? __pfx_vc_do_resize+0x10/0x10 [ 458.344362][T16021] ? rcu_is_watching+0x12/0xc0 [ 458.344385][T16021] vt_ioctl+0x2e2a/0x30a0 [ 458.344409][T16021] ? __pfx_vt_ioctl+0x10/0x10 [ 458.344431][T16021] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 458.344461][T16021] ? rcu_is_watching+0x12/0xc0 [ 458.344483][T16021] ? aa_get_newest_label+0xd2/0x250 [ 458.344505][T16021] ? apparmor_capable+0x114/0x1d0 [ 458.344528][T16021] ? bpf_lsm_capable+0x9/0x10 [ 458.344545][T16021] ? security_capable+0x7e/0x260 [ 458.344568][T16021] vt_compat_ioctl+0x1c2/0x4e0 [ 458.344593][T16021] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 458.344614][T16021] ? hook_file_ioctl_common+0x145/0x410 [ 458.344645][T16021] ? __fget_files+0x20e/0x3c0 [ 458.344666][T16021] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 458.344691][T16021] tty_compat_ioctl+0x2f1/0x4d0 [ 458.344718][T16021] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 458.344748][T16021] __ia32_compat_sys_ioctl+0x242/0x370 [ 458.344780][T16021] __do_fast_syscall_32+0x7c/0x300 [ 458.344797][T16021] do_fast_syscall_32+0x32/0x80 [ 458.344814][T16021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.344851][T16021] RIP: 0023:0xf7f28579 [ 458.344861][T16021] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 458.344879][T16021] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 458.344897][T16021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005609 [ 458.344909][T16021] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 458.344920][T16021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.344930][T16021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 458.344941][T16021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.344965][T16021] [ 458.345065][T16021] Mem-Info: [ 458.345075][T16021] active_anon:12202 inactive_anon:714 isolated_anon:0 [ 458.345075][T16021] active_file:3401 inactive_file:18042 isolated_file:0 [ 458.345075][T16021] unevictable:1768 dirty:390 writeback:0 [ 458.345075][T16021] slab_reclaimable:6698 slab_unreclaimable:57533 [ 458.345075][T16021] mapped:26161 shmem:11639 pagetables:1511 [ 458.345075][T16021] sec_pagetables:328 bounce:0 [ 458.345075][T16021] kernel_misc_reclaimable:0 [ 458.345075][T16021] free:60493 free_pcp:13742 free_cma:0 [ 458.345123][T16021] Node 0 active_anon:272kB inactive_anon:288kB active_file:4kB inactive_file:152kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:8kB writeback:0kB shmem:5384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8432kB pagetables:1648kB sec_pagetables:1208kB all_unreclaimable? yes Balloon:0kB [ 458.345166][T16021] Node 1 active_anon:48536kB inactive_anon:2568kB active_file:13600kB inactive_file:72016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:104584kB dirty:1552kB writeback:0kB shmem:41172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5544kB pagetables:4396kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB [ 458.345217][T16021] Node 0 DMA free:2100kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:660kB local_pcp:196kB free_cma:0kB [ 458.345267][T16021] lowmem_reserve[]: 0 288 288 288 288 [ 458.345307][T16021] Node 0 DMA32 free:17688kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:4096KB free_highatomic:1256KB active_anon:272kB inactive_anon:284kB active_file:4kB inactive_file:152kB unevictable:3536kB writepending:8kB present:1032196kB managed:295096kB mlocked:0kB bounce:0kB free_pcp:10492kB local_pcp:3488kB free_cma:0kB [ 458.345361][T16021] lowmem_reserve[]: 0 0 0 0 0 [ 458.345400][T16021] Node 1 DMA32 free:222184kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:2048KB active_anon:48536kB inactive_anon:2568kB active_file:13600kB inactive_file:72016kB unevictable:3536kB writepending:1552kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:43816kB local_pcp:12616kB free_cma:0kB [ 458.345455][T16021] lowmem_reserve[]: 0 0 0 0 0 [ 458.345493][T16021] Node 0 DMA: 1*4kB (M) 18*8kB (UM) 14*16kB (UM) 8*32kB (UM) 3*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2100kB [ 458.345651][T16021] Node 0 DMA32: 164*4kB (UMEH) 97*8kB (UMH) 96*16kB (UMEH) 182*32kB (UMH) 87*64kB (UMH) 18*128kB (UMH) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17688kB [ 458.345825][T16021] Node 1 DMA32: 1358*4kB (UME) 367*8kB (UME) 394*16kB (UME) 505*32kB (UME) 236*64kB (UME) 127*128kB (UME) 169*256kB (UME) 82*512kB (UME) 57*1024kB (UM) 8*2048kB (MH) 0*4096kB = 222192kB [ 458.345993][T16021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 458.346006][T16021] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 458.346022][T16021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 458.346040][T16021] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 458.346055][T16021] 34161 total pagecache pages [ 458.346063][T16021] 1083 pages in swap cache [ 458.346070][T16021] Free swap = 106952kB [ 458.346174][T16021] Total swap = 124996kB [ 458.346190][T16021] 524155 pages RAM [ 458.346197][T16021] 0 pages HighMem/MovableOnly [ 458.346206][T16021] 209486 pages reserved [ 458.346215][T16021] 0 pages cma reserved [ 458.504934][ T1021] usb 11-1: USB disconnect, device number 13 [ 458.763784][T16031] autofs: Unknown parameter 'ZqDC7D&C$뙾4_4DY!Iu&}Ƌm{DL"fa&]JA' [ 458.782076][ T24] hid_parser_main: 43 callbacks suppressed [ 458.782090][ T24] hid-generic 0001:0000:0000.000E: unknown main item tag 0x0 [ 458.786662][ T24] hid-generic 0001:0000:0000.000E: unknown main item tag 0x0 [ 458.789005][ T24] hid-generic 0001:0000:0000.000E: unknown main item tag 0x0 [ 458.791602][ T24] hid-generic 0001:0000:0000.000E: unknown main item tag 0x0 [ 458.794190][ T24] hid-generic 0001:0000:0000.000E: unknown main item tag 0x0 [ 458.796962][ T24] hid-generic 0001:0000:0000.000E: unknown main item tag 0x0 [ 458.799526][ T24] hid-generic 0001:0000:0000.000E: unknown main item tag 0x0 [ 458.802025][ T24] hid-generic 0001:0000:0000.000E: unknown main item tag 0x0 [ 458.804369][ T24] hid-generic 0001:0000:0000.000E: unknown main item tag 0x0 [ 458.806850][ T24] hid-generic 0001:0000:0000.000E: unknown main item tag 0x0 [ 458.810176][ T24] hid-generic 0001:0000:0000.000E: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 458.962619][T16035] /dev/sr0: Can't open blockdev [ 459.367430][T16053] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.369911][T16053] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.447785][T16053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.458252][T16053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.657041][T16055] geneve2: entered promiscuous mode [ 459.658944][T16055] geneve2: entered allmulticast mode [ 459.663300][ T6915] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.666251][ T6915] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 459.669719][ T6915] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.674565][ T6915] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 459.683527][ T6915] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.687079][ T6915] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 459.692078][ T6915] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.699952][ T6915] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 459.785726][T16067] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2646'. [ 459.870270][T16070] bridge0: port 1(vlan2) entered blocking state [ 459.873896][T16070] bridge0: port 1(vlan2) entered disabled state [ 459.876367][T16070] vlan2: entered allmulticast mode [ 459.877990][T16070] bond0: entered allmulticast mode [ 459.880733][T16070] vlan2: entered promiscuous mode [ 459.884866][T16070] bond0: entered promiscuous mode [ 459.966150][T16079] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2651'. [ 459.968944][T16079] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2651'. [ 461.032596][T16104] lo: entered promiscuous mode [ 461.034089][T16104] lo: entered allmulticast mode [ 461.036747][T16104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.092104][ T1334] usb 42-1: device descriptor read/8, error -110 [ 461.496451][ T1334] usb usb42-port1: attempt power cycle [ 461.963454][T16146] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2661'. [ 462.137197][T16151] tipc: Resetting bearer [ 462.272311][T11394] lo speed is unknown, defaulting to 1000 [ 462.275561][T11394] syz0: Port: 1 Link DOWN [ 462.282887][ T1334] usb usb42-port1: unable to enumerate USB device [ 462.442866][T16150] /dev/sr0: Can't open blockdev [ 464.054763][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2675'. [ 464.087279][T16203] tipc: Resetting bearer [ 464.089597][T16203] tipc: Resetting bearer [ 464.094139][T16203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.323478][T16206] /dev/sr0: Can't open blockdev [ 465.475733][T16226] syzkaller1: entered promiscuous mode [ 465.478006][T16226] syzkaller1: entered allmulticast mode [ 466.129027][T16244] input: syz1 as /devices/virtual/input/input23 [ 466.832767][T16256] /dev/sr0: Can't open blockdev [ 466.987102][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2688'. [ 467.098073][T16267] vlan2: entered allmulticast mode [ 467.099875][T16267] veth0_to_hsr: entered allmulticast mode [ 467.990448][T16288] lo speed is unknown, defaulting to 1000 [ 468.033088][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2694'. [ 468.262574][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 468.382394][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 468.923089][T16302] /dev/sr0: Can't open blockdev [ 469.549716][T16335] netlink: 'syz.6.2702': attribute type 1 has an invalid length. [ 469.571364][T16335] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 469.575481][T16335] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 469.624322][T16337] gretap1: entered promiscuous mode [ 469.630951][T16337] bond2: (slave gretap1): making interface the new active one [ 469.634560][T16337] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 469.646761][T16337] macvlan0: entered promiscuous mode [ 469.649014][T16337] macvlan0: entered allmulticast mode [ 469.651818][T16337] bond2: entered promiscuous mode [ 469.654979][T16337] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 469.661054][T16337] bond2: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 469.674733][T16337] bond2: left promiscuous mode [ 470.613037][T11382] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 478.257528][T16368] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 478.507158][T16374] @0: renamed from bond_slave_1 [ 479.854879][T16399] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2716'. [ 479.859329][T16399] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 480.052828][T16397] /dev/sr0: Can't open blockdev [ 480.092568][T16409] netlink: 'syz.2.2718': attribute type 4 has an invalid length. [ 480.203156][T16409] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2718'. [ 480.292028][ T5989] Bluetooth: hci2: command tx timeout [ 480.386314][T16412] netlink: 'syz.2.2718': attribute type 3 has an invalid length. [ 480.916364][T16420] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 480.981021][T16421] @0: renamed from bond_slave_1 [ 481.842727][T16446] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2725'. [ 481.848175][T16446] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 481.993564][T16450] /dev/sr0: Can't open blockdev [ 483.024853][T16481] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2735'. [ 483.030816][T16481] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 483.033873][ T6042] IPVS: starting estimator thread 0... [ 483.137891][T16489] netlink: 'syz.7.2739': attribute type 1 has an invalid length. [ 483.142220][T16483] IPVS: using max 25 ests per chain, 60000 per kthread [ 483.176537][T16489] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 483.180520][T16489] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 483.182632][T16487] /dev/sr0: Can't open blockdev [ 483.223480][T16496] gretap1: entered promiscuous mode [ 483.227378][T16496] bond1: (slave gretap1): making interface the new active one [ 483.231081][T16496] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 483.245802][T16489] macvlan2: entered promiscuous mode [ 483.247932][T16489] macvlan2: entered allmulticast mode [ 483.250386][T16489] bond1: entered promiscuous mode [ 483.252924][T16489] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 483.257202][T16489] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 483.264586][T16489] bond1: left promiscuous mode [ 483.327020][ T40] audit: type=1326 audit(1757649399.086:15633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.6.2740" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 483.336270][ T40] audit: type=1326 audit(1757649399.086:15634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.6.2740" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707e5a7 code=0x7ffc0000 [ 483.343981][ T40] audit: type=1326 audit(1757649399.086:15635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.6.2740" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 483.350845][ T40] audit: type=1326 audit(1757649399.086:15636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.6.2740" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707e5a7 code=0x7ffc0000 [ 483.372815][ T40] audit: type=1326 audit(1757649399.086:15637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.6.2740" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 483.390153][ T40] audit: type=1326 audit(1757649399.086:15638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.6.2740" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707e5a7 code=0x7ffc0000 [ 483.400002][ T40] audit: type=1326 audit(1757649399.086:15639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.6.2740" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 483.427799][ T40] audit: type=1326 audit(1757649399.086:15640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.6.2740" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707e5a7 code=0x7ffc0000 [ 483.437217][ T40] audit: type=1326 audit(1757649399.086:15641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.6.2740" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 483.444251][ T40] audit: type=1326 audit(1757649399.086:15642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.6.2740" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707e5a7 code=0x7ffc0000 [ 483.530500][T16497] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 483.704834][T16514] FAULT_INJECTION: forcing a failure. [ 483.704834][T16514] name failslab, interval 1, probability 0, space 0, times 0 [ 483.709798][T16514] CPU: 2 UID: 0 PID: 16514 Comm: syz.6.2746 Not tainted syzkaller #0 PREEMPT(full) [ 483.709822][T16514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 483.709832][T16514] Call Trace: [ 483.709839][T16514] [ 483.709845][T16514] dump_stack_lvl+0x16c/0x1f0 [ 483.709874][T16514] should_fail_ex+0x512/0x640 [ 483.709889][T16514] ? fs_reclaim_acquire+0xae/0x150 [ 483.709915][T16514] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 483.709939][T16514] should_failslab+0xc2/0x120 [ 483.709960][T16514] __kmalloc_noprof+0xd2/0x510 [ 483.709985][T16514] tomoyo_realpath_from_path+0xc2/0x6e0 [ 483.710012][T16514] ? tomoyo_profile+0x47/0x60 [ 483.710030][T16514] tomoyo_path_number_perm+0x245/0x580 [ 483.710049][T16514] ? tomoyo_path_number_perm+0x237/0x580 [ 483.710072][T16514] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 483.710116][T16514] ? find_held_lock+0x2b/0x80 [ 483.710132][T16514] ? hook_file_ioctl_common+0x145/0x410 [ 483.710159][T16514] ? __fget_files+0x20e/0x3c0 [ 483.710183][T16514] security_file_ioctl_compat+0x9b/0x240 [ 483.710207][T16514] __ia32_compat_sys_ioctl+0xc3/0x370 [ 483.710240][T16514] __do_fast_syscall_32+0x7c/0x300 [ 483.710257][T16514] do_fast_syscall_32+0x32/0x80 [ 483.710273][T16514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 483.710293][T16514] RIP: 0023:0xf707e579 [ 483.710305][T16514] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 483.710321][T16514] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 483.710338][T16514] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0306201 [ 483.710348][T16514] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 483.710358][T16514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 483.710368][T16514] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 483.710378][T16514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 483.710400][T16514] [ 483.710407][T16514] ERROR: Out of memory at tomoyo_realpath_from_path. [ 483.824856][T16517] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2747'. [ 483.828794][T16517] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 484.013718][T16519] /dev/sr0: Can't open blockdev [ 484.209143][T16524] binder: 16523:16524 ioctl c0306201 80000000 returned -14 [ 484.305967][T16531] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 484.308214][T16531] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 484.322976][T16531] vhci_hcd vhci_hcd.0: Device attached [ 484.632395][ T29] usb 50-1: SetAddress Request (6) to port 0 [ 484.636519][ T29] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd [ 484.679216][T16545] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2754'. [ 484.684437][T16545] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2754'. [ 484.940042][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2755'. [ 484.986186][T16532] vhci_hcd: connection reset by peer [ 484.992923][ T6919] vhci_hcd: stop threads [ 484.994388][ T6919] vhci_hcd: release socket [ 484.998160][ T6919] vhci_hcd: disconnect device [ 485.044933][T16565] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2756'. [ 485.050315][T16565] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 485.562196][ T24] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 485.712000][ T24] usb 12-1: Using ep0 maxpacket: 32 [ 485.723039][ T24] usb 12-1: config 0 has no interfaces? [ 485.726441][ T24] usb 12-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 485.727618][T16590] FAULT_INJECTION: forcing a failure. [ 485.727618][T16590] name failslab, interval 1, probability 0, space 0, times 0 [ 485.729270][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.729284][ T24] usb 12-1: Product: syz [ 485.729292][ T24] usb 12-1: Manufacturer: syz [ 485.734389][T16590] CPU: 0 UID: 0 PID: 16590 Comm: syz.6.2765 Not tainted syzkaller #0 PREEMPT(full) [ 485.734412][T16590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 485.734422][T16590] Call Trace: [ 485.734428][T16590] [ 485.734435][T16590] dump_stack_lvl+0x16c/0x1f0 [ 485.734486][T16590] should_fail_ex+0x512/0x640 [ 485.734507][T16590] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 485.734529][T16590] should_failslab+0xc2/0x120 [ 485.734552][T16590] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 485.734570][T16590] ? __might_fault+0x13b/0x190 [ 485.734590][T16590] ? prepare_creds+0x2c/0x7d0 [ 485.734637][T16590] prepare_creds+0x2c/0x7d0 [ 485.734663][T16590] __do_sys_capset+0x26c/0x460 [ 485.734682][T16590] ? __pfx___do_sys_capset+0x10/0x10 [ 485.734706][T16590] ? ksys_write+0x1ac/0x250 [ 485.734729][T16590] ? rcu_is_watching+0x12/0xc0 [ 485.734746][T16590] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 485.734782][T16590] __do_fast_syscall_32+0x7c/0x300 [ 485.734800][T16590] do_fast_syscall_32+0x32/0x80 [ 485.734816][T16590] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.734837][T16590] RIP: 0023:0xf707e579 [ 485.734850][T16590] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 485.734867][T16590] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000b9 [ 485.734890][T16590] RAX: ffffffffffffffda RBX: 0000000080001500 RCX: 0000000080001540 [ 485.734901][T16590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.734911][T16590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.734922][T16590] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 485.734932][T16590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.734954][T16590] [ 485.782371][T16593] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2766'. [ 485.783818][ T24] usb 12-1: SerialNumber: syz [ 485.788092][T16593] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 485.792835][ T24] usb 12-1: config 0 descriptor?? [ 486.007234][T16599] block device autoloading is deprecated and will be removed. [ 486.014125][T16599] blk_print_req_error: 5 callbacks suppressed [ 486.014136][T16599] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 486.368476][T16610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.371274][T16610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.401564][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2770'. [ 486.754517][T16623] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2775'. [ 486.760480][T16623] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 487.871164][T16645] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2782'. [ 487.986782][T16651] input: syz1 as /devices/virtual/input/input26 [ 488.251472][T16654] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2784'. [ 488.256498][T16654] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 488.334831][ T1021] usb 12-1: USB disconnect, device number 2 [ 488.527293][T16664] 9pnet: Unknown protocol version 9p20\++} [ 488.956148][T16671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2788'. [ 489.102748][T16669] bridge2: port 1(veth5) entered blocking state [ 489.106789][T16669] bridge2: port 1(veth5) entered disabled state [ 489.109779][T16669] veth5: entered allmulticast mode [ 489.122097][T16669] veth5: entered promiscuous mode [ 489.141339][T16671] vlan3: entered allmulticast mode [ 489.143459][T16671] veth0_to_hsr: entered allmulticast mode [ 489.152590][T16671] bridge2: port 2(vlan3) entered blocking state [ 489.158283][T16671] bridge2: port 2(vlan3) entered disabled state [ 489.183526][T16671] vlan3: entered promiscuous mode [ 489.197207][T16671] veth0_to_hsr: entered promiscuous mode [ 489.482847][T16682] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2793'. [ 489.491767][T16682] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 489.534087][T16689] netlink: 'syz.5.2795': attribute type 15 has an invalid length. [ 489.537130][T16689] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2795'. [ 489.607316][T16695] tipc: Resetting bearer [ 489.609155][T16695] tipc: Resetting bearer [ 489.622246][T16695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.745012][ T29] usb 50-1: device descriptor read/8, error -110 [ 490.029839][T16702] Bluetooth: MGMT ver 1.23 [ 490.504393][ T29] usb usb50-port1: attempt power cycle [ 491.093096][ T29] usb usb50-port1: unable to enumerate USB device [ 491.524034][T16722] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2804'. [ 491.530455][T16722] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 491.574131][T16727] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2807'. [ 491.770441][ T5989] Bluetooth: hci2: link tx timeout [ 491.773135][ T5989] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.781423][ T5989] Bluetooth: hci2: link tx timeout [ 491.783181][ T5989] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.785868][ T5989] Bluetooth: hci2: link tx timeout [ 491.787830][ T5989] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.790279][ T5989] Bluetooth: hci2: link tx timeout [ 491.791840][ T5989] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.795256][ T5989] Bluetooth: hci2: link tx timeout [ 491.796988][ T5989] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.799603][ T5989] Bluetooth: hci2: link tx timeout [ 491.801255][ T5989] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.803948][ T5989] Bluetooth: hci2: link tx timeout [ 491.805588][ T5989] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.807888][ T5989] Bluetooth: hci2: link tx timeout [ 491.809418][ T5989] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.812156][ T5989] Bluetooth: hci2: link tx timeout [ 491.813874][ T5989] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.816277][ T5989] Bluetooth: hci2: link tx timeout [ 491.818088][ T5989] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.882486][T16739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2809'. [ 492.766693][T16759] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2817'. [ 492.771538][T16759] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 493.387510][T16763] lo speed is unknown, defaulting to 1000 [ 493.770201][T16780] lo speed is unknown, defaulting to 1000 [ 493.812049][ T5989] Bluetooth: hci2: command 0x0406 tx timeout [ 493.899076][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2822'. [ 493.990538][T16789] netlink: 'syz.5.2824': attribute type 1 has an invalid length. [ 494.102402][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 494.111249][T16789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.126844][T16792] bond2: (slave geneve2): making interface the new active one [ 494.131380][T16792] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 494.175249][T16798] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2826'. [ 494.220514][ T6917] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.248441][ T6917] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.251870][ T6917] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.255504][ T6917] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.295418][T16798] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 496.293081][T15137] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 504.255514][T16851] binder: 16845:16851 ioctl c0306201 80000080 returned -14 [ 504.617855][T16855] lo speed is unknown, defaulting to 1000 [ 505.193987][T16859] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2839'. [ 505.198456][T16859] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 505.329784][T16867] lo speed is unknown, defaulting to 1000 [ 505.625864][T16876] syz.5.2843 (16876): attempted to duplicate a private mapping with mremap. This is not supported. [ 505.645360][T16877] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 505.648017][T16877] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 505.846409][T16877] vhci_hcd vhci_hcd.0: Device attached [ 506.194915][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.234040][ T29] usb 52-1: SetAddress Request (2) to port 0 [ 506.236000][ T29] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 506.303910][T16878] vhci_hcd: connection reset by peer [ 506.307834][ T6920] vhci_hcd: stop threads [ 506.323447][ T6920] vhci_hcd: release socket [ 506.330923][ T6920] vhci_hcd: disconnect device [ 506.509278][T16890] 8021q: adding VLAN 0 to HW filter on device bond3 [ 506.548560][T16890] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 506.554290][T16890] bond3: (slave macvlan2): Enslaving as a backup interface with a down link [ 506.658803][T16908] overlayfs: failed to resolve './file0': -2 [ 506.773106][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2858'. [ 506.914249][T16917] overlayfs: missing 'lowerdir' [ 507.024461][T16935] overlayfs: failed to resolve './file0': -2 [ 507.043191][ T40] kauditd_printk_skb: 597 callbacks suppressed [ 507.043202][ T40] audit: type=1326 audit(1757649422.806:16240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.6.2861" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707e579 code=0x0 [ 507.063539][T16936] kernel profiling enabled (shift: 17) [ 508.112071][ T1458] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 508.207152][T16953] FAULT_INJECTION: forcing a failure. [ 508.207152][T16953] name failslab, interval 1, probability 0, space 0, times 0 [ 508.215013][T16953] CPU: 3 UID: 0 PID: 16953 Comm: syz.6.2867 Not tainted syzkaller #0 PREEMPT(full) [ 508.215030][T16953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 508.215037][T16953] Call Trace: [ 508.215042][T16953] [ 508.215047][T16953] dump_stack_lvl+0x16c/0x1f0 [ 508.215087][T16953] should_fail_ex+0x512/0x640 [ 508.215103][T16953] ? __kmalloc_noprof+0xbf/0x510 [ 508.215118][T16953] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 508.215133][T16953] should_failslab+0xc2/0x120 [ 508.215148][T16953] __kmalloc_noprof+0xd2/0x510 [ 508.215161][T16953] ? __pfx___might_resched+0x10/0x10 [ 508.215176][T16953] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 508.215190][T16953] ? __mutex_lock+0x1c5/0x1060 [ 508.215206][T16953] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 508.215219][T16953] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 508.215231][T16953] ? rcu_is_watching+0x12/0xc0 [ 508.215248][T16953] ? bpf_lsm_capable+0x9/0x10 [ 508.215259][T16953] ? security_capable+0x7e/0x260 [ 508.215274][T16953] genl_rcv_msg+0x55c/0x800 [ 508.215288][T16953] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.215300][T16953] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 508.215314][T16953] ? __pfx_nl802154_set_lbt_mode+0x10/0x10 [ 508.215328][T16953] ? __pfx_nl802154_post_doit+0x10/0x10 [ 508.215341][T16953] ? __lock_acquire+0x62e/0x1ce0 [ 508.215359][T16953] netlink_rcv_skb+0x158/0x420 [ 508.215369][T16953] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.215382][T16953] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.215400][T16953] ? netlink_deliver_tap+0x1ae/0xd30 [ 508.215424][T16953] ? is_vmalloc_addr+0x86/0xa0 [ 508.215448][T16953] genl_rcv+0x28/0x40 [ 508.215464][T16953] netlink_unicast+0x5a7/0x870 [ 508.215497][T16953] ? __pfx_netlink_unicast+0x10/0x10 [ 508.215524][T16953] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 508.215546][T16953] netlink_sendmsg+0x8d1/0xdd0 [ 508.215558][T16953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.215577][T16953] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 508.215593][T16953] ____sys_sendmsg+0xa95/0xc70 [ 508.215608][T16953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.215620][T16953] ? get_compat_msghdr+0x11a/0x170 [ 508.215640][T16953] ? __pfx_default_wake_function+0x10/0x10 [ 508.215654][T16953] ___sys_sendmsg+0x134/0x1d0 [ 508.215672][T16953] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.215695][T16953] ? find_held_lock+0x2b/0x80 [ 508.215720][T16953] __sys_sendmsg+0x16d/0x220 [ 508.215737][T16953] ? __pfx___sys_sendmsg+0x10/0x10 [ 508.215761][T16953] ? rcu_is_watching+0x12/0xc0 [ 508.215774][T16953] __do_fast_syscall_32+0x7c/0x300 [ 508.215786][T16953] do_fast_syscall_32+0x32/0x80 [ 508.215797][T16953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 508.215811][T16953] RIP: 0023:0xf707e579 [ 508.215820][T16953] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 508.215832][T16953] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 508.215842][T16953] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000380 [ 508.215850][T16953] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 508.215856][T16953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 508.215862][T16953] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 508.215869][T16953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 508.215883][T16953] [ 508.262084][ T1458] usb 10-1: Using ep0 maxpacket: 8 [ 508.325844][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2869'. [ 508.328490][ T1458] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 508.338776][T16959] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 508.341653][ T1458] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.353141][T16961] overlayfs: failed to resolve './file0': -2 [ 508.354656][ T1458] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 508.403657][ T1458] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 508.403685][ T1458] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.403722][ T1458] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 508.403744][ T1458] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.441498][ T40] audit: type=1326 audit(1757649424.196:16241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16954 comm="syz.6.2868" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707e579 code=0x0 [ 508.564672][T16970] lo speed is unknown, defaulting to 1000 [ 508.747162][ T1458] usb 10-1: usb_control_msg returned -32 [ 508.749908][ T1458] usbtmc 10-1:16.0: can't read capabilities [ 509.174862][T16975] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.304155][T16975] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.390225][T16975] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.464100][T16981] /dev/sr0: Can't open blockdev [ 509.496698][T16975] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.581605][ T6917] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.619852][ T6917] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.632959][ T6917] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.636811][ T6917] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.891352][T16994] comedi comedi1: pcl816: I/O port conflict (0x4f27,16) [ 509.994619][T16996] overlayfs: failed to resolve './file0': -2 [ 510.282026][ T61] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 510.302879][T17004] lo speed is unknown, defaulting to 1000 [ 510.372566][T17007] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 510.462258][ T61] usb 12-1: Using ep0 maxpacket: 8 [ 510.466044][ T61] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.470502][ T61] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.474817][ T61] usb 12-1: config 0 interface 0 has no altsetting 0 [ 510.477723][ T61] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 510.481586][ T61] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.487066][ T61] usb 12-1: config 0 descriptor?? [ 510.656240][ T1458] usb 10-1: USB disconnect, device number 18 [ 510.713375][T17015] FAULT_INJECTION: forcing a failure. [ 510.713375][T17015] name failslab, interval 1, probability 0, space 0, times 0 [ 510.717364][T17015] CPU: 1 UID: 0 PID: 17015 Comm: syz.2.2889 Not tainted syzkaller #0 PREEMPT(full) [ 510.717380][T17015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 510.717386][T17015] Call Trace: [ 510.717391][T17015] [ 510.717406][T17015] dump_stack_lvl+0x16c/0x1f0 [ 510.717429][T17015] should_fail_ex+0x512/0x640 [ 510.717440][T17015] ? fs_reclaim_acquire+0xae/0x150 [ 510.717458][T17015] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 510.717475][T17015] should_failslab+0xc2/0x120 [ 510.717490][T17015] __kmalloc_noprof+0xd2/0x510 [ 510.717507][T17015] tomoyo_realpath_from_path+0xc2/0x6e0 [ 510.717525][T17015] ? tomoyo_profile+0x47/0x60 [ 510.717537][T17015] tomoyo_path_number_perm+0x245/0x580 [ 510.717550][T17015] ? tomoyo_path_number_perm+0x237/0x580 [ 510.717566][T17015] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 510.717595][T17015] ? find_held_lock+0x2b/0x80 [ 510.717607][T17015] ? hook_file_ioctl_common+0x145/0x410 [ 510.717626][T17015] ? __fget_files+0x20e/0x3c0 [ 510.717641][T17015] security_file_ioctl_compat+0x9b/0x240 [ 510.717658][T17015] __ia32_compat_sys_ioctl+0xc3/0x370 [ 510.717678][T17015] __do_fast_syscall_32+0x7c/0x300 [ 510.717690][T17015] do_fast_syscall_32+0x32/0x80 [ 510.717700][T17015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.717717][T17015] RIP: 0023:0xf7f28579 [ 510.717726][T17015] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 510.717737][T17015] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 510.717748][T17015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002285 [ 510.717756][T17015] RDX: 00000000800005c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 510.717762][T17015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 510.717768][T17015] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 510.717774][T17015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 510.717788][T17015] [ 510.717853][T17015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 510.740678][T17017] overlayfs: failed to resolve './file0': -2 [ 510.833639][ C3] ata1: illegal qc_active transition (00000000->00008000) [ 510.896060][ T61] hid_parser_main: 19 callbacks suppressed [ 510.896073][ T61] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 510.900145][ T61] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 510.902592][ T61] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 510.904840][ T61] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 510.907013][ T61] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 510.909604][ T61] mcp2221 0003:04D8:00DD.000F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 511.117003][ T1458] usb 12-1: USB disconnect, device number 3 [ 511.155795][ T1110] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 511.158686][ T1110] ata1.00: configured for UDMA/100 [ 511.293849][T17021] CIFS mount error: No usable UNC path provided in device string! [ 511.293849][T17021] [ 511.297354][T17021] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 511.332169][ T29] usb 52-1: device descriptor read/8, error -110 [ 511.390495][T17033] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 511.451732][T17038] fuse: Bad value for 'fd' [ 511.463889][T17038] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2896'. [ 511.743101][ T29] usb usb52-port1: attempt power cycle [ 511.773945][T17051] overlayfs: failed to resolve './file0': -2 [ 511.801340][T17053] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2901'. [ 511.885259][T17056] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 511.895214][T17056] ubi: mtd0 is already attached to ubi31 [ 511.954403][T17055] /dev/sr0: Can't open blockdev [ 511.995454][T17061] FAULT_INJECTION: forcing a failure. [ 511.995454][T17061] name failslab, interval 1, probability 0, space 0, times 0 [ 512.002610][T17061] CPU: 3 UID: 0 PID: 17061 Comm: syz.7.2903 Not tainted syzkaller #0 PREEMPT(full) [ 512.002627][T17061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 512.002635][T17061] Call Trace: [ 512.002639][T17061] [ 512.002644][T17061] dump_stack_lvl+0x16c/0x1f0 [ 512.002667][T17061] should_fail_ex+0x512/0x640 [ 512.002678][T17061] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 512.002699][T17061] should_failslab+0xc2/0x120 [ 512.002715][T17061] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 512.002730][T17061] ? __alloc_skb+0x2b2/0x380 [ 512.002750][T17061] __alloc_skb+0x2b2/0x380 [ 512.002766][T17061] ? __pfx___alloc_skb+0x10/0x10 [ 512.002782][T17061] ? __pfx___mutex_trylock_common+0x10/0x10 [ 512.002800][T17061] ? __pfx___might_resched+0x10/0x10 [ 512.002815][T17061] netlink_dump+0x19b/0xd30 [ 512.002835][T17061] ? __pfx_netlink_dump+0x10/0x10 [ 512.002862][T17061] __netlink_dump_start+0x6d6/0x990 [ 512.002880][T17061] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 512.002900][T17061] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 512.002920][T17061] nf_tables_getchain+0x50a/0x6e0 [ 512.002936][T17061] ? __pfx_nf_tables_getchain+0x10/0x10 [ 512.002950][T17061] ? __pfx_nf_tables_dump_chains+0x10/0x10 [ 512.002966][T17061] ? __nla_parse+0x40/0x60 [ 512.002980][T17061] ? __pfx_nf_tables_getchain+0x10/0x10 [ 512.002995][T17061] nfnetlink_rcv_msg+0x580/0x1200 [ 512.003014][T17061] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 512.003031][T17061] ? stack_trace_save+0x8e/0xc0 [ 512.003061][T17061] netlink_rcv_skb+0x158/0x420 [ 512.003072][T17061] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 512.003087][T17061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 512.003103][T17061] ? ns_capable+0xd7/0x110 [ 512.003118][T17061] nfnetlink_rcv+0x1b3/0x430 [ 512.003131][T17061] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 512.003145][T17061] ? netlink_deliver_tap+0x1ae/0xd30 [ 512.003161][T17061] ? is_vmalloc_addr+0x86/0xa0 [ 512.003177][T17061] netlink_unicast+0x5a7/0x870 [ 512.003197][T17061] ? __pfx_netlink_unicast+0x10/0x10 [ 512.003215][T17061] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 512.003237][T17061] netlink_sendmsg+0x8d1/0xdd0 [ 512.003250][T17061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.003269][T17061] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 512.003286][T17061] ____sys_sendmsg+0xa95/0xc70 [ 512.003298][T17061] ? btrfs_folio_set_lock+0x360/0x10f0 [ 512.003326][T17061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.003339][T17061] ? get_compat_msghdr+0x11a/0x170 [ 512.003359][T17061] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 512.003379][T17061] ___sys_sendmsg+0x134/0x1d0 [ 512.003397][T17061] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.003422][T17061] ? find_held_lock+0x2b/0x80 [ 512.003443][T17061] __sys_sendmsg+0x16d/0x220 [ 512.003460][T17061] ? __pfx___sys_sendmsg+0x10/0x10 [ 512.003477][T17061] ? __pfx_bpf_trace_run2+0x10/0x10 [ 512.003497][T17061] ? syscall_trace_enter+0x1cb/0x240 [ 512.003517][T17061] ? rcu_is_watching+0x12/0xc0 [ 512.003530][T17061] __do_fast_syscall_32+0x7c/0x300 [ 512.003543][T17061] do_fast_syscall_32+0x32/0x80 [ 512.003562][T17061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.003580][T17061] RIP: 0023:0xf702e579 [ 512.003589][T17061] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 512.003600][T17061] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 512.003612][T17061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 512.003619][T17061] RDX: 0000000004000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.003626][T17061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.003633][T17061] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 512.003639][T17061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.003654][T17061] [ 512.176243][T17063] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 512.342963][ T29] usb usb52-port1: unable to enumerate USB device [ 512.763905][T17079] overlayfs: failed to resolve './file1': -2 [ 512.944770][T17084] /dev/sr0: Can't open blockdev [ 512.989027][T17091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2913'. [ 513.352095][ T1458] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 513.812051][ T1458] usb 10-1: Using ep0 maxpacket: 32 [ 513.814383][ T1458] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 513.814404][ T1458] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.814420][ T1458] usb 10-1: config 0 has no interface number 0 [ 513.815946][ T1458] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 513.815961][ T1458] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.815971][ T1458] usb 10-1: Product: syz [ 513.815979][ T1458] usb 10-1: Manufacturer: syz [ 513.815987][ T1458] usb 10-1: SerialNumber: syz [ 513.817709][ T1458] usb 10-1: config 0 descriptor?? [ 513.819345][ T1458] smsc95xx v2.0.0 [ 513.819364][ T1458] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 513.819460][ T1458] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 514.592082][ T5338] Bluetooth: hci4: ACL packet for unknown connection handle 2249 [ 515.169604][T17124] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2922'. [ 515.173733][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2922'. [ 515.179498][T17124] bridge0: port 3(syz_tun) entered blocking state [ 515.182778][T17124] bridge0: port 3(syz_tun) entered disabled state [ 515.185199][T17124] syz_tun: entered allmulticast mode [ 515.188524][T17124] syz_tun: entered promiscuous mode [ 515.243271][T17122] /dev/sr0: Can't open blockdev [ 515.349523][T17132] FAULT_INJECTION: forcing a failure. [ 515.349523][T17132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.354105][T17132] CPU: 1 UID: 0 PID: 17132 Comm: syz.6.2924 Not tainted syzkaller #0 PREEMPT(full) [ 515.354141][T17132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 515.354152][T17132] Call Trace: [ 515.354158][T17132] [ 515.354165][T17132] dump_stack_lvl+0x16c/0x1f0 [ 515.354198][T17132] should_fail_ex+0x512/0x640 [ 515.354218][T17132] _copy_to_user+0x32/0xd0 [ 515.354255][T17132] __copy_siginfo_to_user32+0x96/0xf0 [ 515.354280][T17132] ? __pfx___copy_siginfo_to_user32+0x10/0x10 [ 515.354314][T17132] ? siginfo_layout+0x1d2/0x290 [ 515.354337][T17132] ia32_setup_rt_frame+0x6cd/0xb30 [ 515.354371][T17132] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 515.354401][T17132] ? find_held_lock+0x2b/0x80 [ 515.354423][T17132] arch_do_signal_or_restart+0x480/0x790 [ 515.354448][T17132] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 515.354469][T17132] ? do_ftruncate+0x22c/0x970 [ 515.354505][T17132] exit_to_user_mode_loop+0x84/0x110 [ 515.354533][T17132] __do_fast_syscall_32+0x240/0x300 [ 515.354552][T17132] do_fast_syscall_32+0x32/0x80 [ 515.354570][T17132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 515.354594][T17132] RIP: 0023:0xf707e579 [ 515.354610][T17132] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 515.354629][T17132] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 000000000000005d [ 515.354647][T17132] RAX: ffffffffffffffe5 RBX: 0000000000000007 RCX: 000000003292e291 [ 515.354658][T17132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.354668][T17132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 515.354677][T17132] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 515.354687][T17132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 515.354715][T17132] [ 516.243570][T15137] usb 10-1: USB disconnect, device number 19 [ 516.522218][T17162] trusted_key: encrypted_key: master key parameter 'defaulttrusted:trust%d:' is invalid [ 516.918286][T17167] loop2: detected capacity change from 0 to 7 [ 516.925051][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.928912][ C3] buffer_io_error: 7 callbacks suppressed [ 516.928926][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 516.934939][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.938138][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 516.941133][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.945851][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 516.952251][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.955702][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 516.958654][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.961694][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 516.964594][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.968355][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 516.972295][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.976567][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 516.979845][T17167] ldm_validate_partition_table(): Disk read failed. [ 516.984471][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.987720][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 516.991111][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.994949][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 516.998305][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 517.001436][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 517.003527][T17171] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 517.005652][T17167] Dev loop2: unable to read RDB block 0 [ 517.009374][T17167] loop2: unable to read partition table [ 517.012125][T17167] loop2: partition table beyond EOD, truncated [ 517.014546][T17167] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 517.843271][T17179] FAULT_INJECTION: forcing a failure. [ 517.843271][T17179] name failslab, interval 1, probability 0, space 0, times 0 [ 517.848570][T17179] CPU: 2 UID: 0 PID: 17179 Comm: syz.6.2939 Not tainted syzkaller #0 PREEMPT(full) [ 517.848594][T17179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 517.848606][T17179] Call Trace: [ 517.848614][T17179] [ 517.848621][T17179] dump_stack_lvl+0x16c/0x1f0 [ 517.848654][T17179] should_fail_ex+0x512/0x640 [ 517.848671][T17179] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 517.848697][T17179] should_failslab+0xc2/0x120 [ 517.848721][T17179] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 517.848744][T17179] ? io_submit_one+0x122/0x1df0 [ 517.848769][T17179] io_submit_one+0x122/0x1df0 [ 517.848792][T17179] ? __lock_acquire+0xb97/0x1ce0 [ 517.848822][T17179] ? __pfx_io_submit_one+0x10/0x10 [ 517.848852][T17179] ? __might_fault+0xe3/0x190 [ 517.848872][T17179] ? __might_fault+0x13b/0x190 [ 517.848898][T17179] ? __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 517.848927][T17179] __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 517.848954][T17179] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 517.848977][T17179] ? fput+0x9b/0xd0 [ 517.849009][T17179] ? rcu_is_watching+0x12/0xc0 [ 517.849028][T17179] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 517.849061][T17179] __do_fast_syscall_32+0x7c/0x300 [ 517.849081][T17179] do_fast_syscall_32+0x32/0x80 [ 517.849098][T17179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.849121][T17179] RIP: 0023:0xf707e579 [ 517.849135][T17179] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 517.849152][T17179] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 517.849169][T17179] RAX: ffffffffffffffda RBX: 00000000f740f000 RCX: 0000000000000001 [ 517.849181][T17179] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.849191][T17179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.849201][T17179] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 517.849233][T17179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.849258][T17179] [ 518.119824][T17190] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 518.167073][T17199] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2944'. [ 518.171063][T17199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2944'. [ 518.318308][T17207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.335633][T17207] netlink: 'syz.7.2947': attribute type 29 has an invalid length. [ 518.339029][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2947'. [ 518.596361][ T40] audit: type=1326 audit(1757649434.356:16242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17214 comm="syz.5.2951" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f88579 code=0x0 [ 518.628278][T17216] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 518.630987][T17216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 518.635847][T17216] vhci_hcd vhci_hcd.0: Device attached [ 518.774108][T17216] fuse: Unknown parameter 'g' [ 518.933787][ T29] usb 50-1: SetAddress Request (10) to port 0 [ 518.936881][ T29] usb 50-1: new SuperSpeed USB device number 10 using vhci_hcd [ 519.166338][T17230] FAULT_INJECTION: forcing a failure. [ 519.166338][T17230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.172923][T17230] CPU: 3 UID: 0 PID: 17230 Comm: syz.7.2953 Not tainted syzkaller #0 PREEMPT(full) [ 519.172960][T17230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 519.172971][T17230] Call Trace: [ 519.172979][T17230] [ 519.172986][T17230] dump_stack_lvl+0x16c/0x1f0 [ 519.173018][T17230] should_fail_ex+0x512/0x640 [ 519.173040][T17230] _copy_from_iter+0x29f/0x1720 [ 519.173061][T17230] ? __alloc_skb+0x200/0x380 [ 519.173087][T17230] ? __pfx__copy_from_iter+0x10/0x10 [ 519.173109][T17230] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 519.173144][T17230] netlink_sendmsg+0x829/0xdd0 [ 519.173166][T17230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.173211][T17230] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 519.173239][T17230] ____sys_sendmsg+0xa95/0xc70 [ 519.173263][T17230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.173283][T17230] ? get_compat_msghdr+0x11a/0x170 [ 519.173320][T17230] ___sys_sendmsg+0x134/0x1d0 [ 519.173349][T17230] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.173388][T17230] ? find_held_lock+0x2b/0x80 [ 519.173423][T17230] __sys_sendmsg+0x16d/0x220 [ 519.173454][T17230] ? __pfx___sys_sendmsg+0x10/0x10 [ 519.173488][T17230] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 519.173514][T17230] ? rcu_is_watching+0x12/0xc0 [ 519.173535][T17230] __do_fast_syscall_32+0x7c/0x300 [ 519.173555][T17230] do_fast_syscall_32+0x32/0x80 [ 519.173571][T17230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 519.173591][T17230] RIP: 0023:0xf702e579 [ 519.173606][T17230] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 519.173622][T17230] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 519.173639][T17230] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000280 [ 519.173650][T17230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 519.173659][T17230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 519.173671][T17230] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 519.173681][T17230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 519.173701][T17230] [ 519.177481][T17230] team0: No ports can be present during mode change [ 519.256158][T17231] netlink: 'syz.7.2953': attribute type 10 has an invalid length. [ 519.264913][T17231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.269354][T17231] bond0: entered promiscuous mode [ 519.271324][T17231] bond_slave_0: entered promiscuous mode [ 519.274318][T17231] @0: entered promiscuous mode [ 519.276192][T17231] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 519.280595][T17231] team0: Port device bond0 added [ 519.285324][T17217] vhci_hcd: connection reset by peer [ 519.287116][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2953'. [ 519.298987][ T6919] vhci_hcd: stop threads [ 519.300368][ T6919] vhci_hcd: release socket [ 519.306682][ T6919] vhci_hcd: disconnect device [ 519.466343][T17230] team_slave_0: left promiscuous mode [ 519.470721][T17230] team0 (unregistering): Port device team_slave_0 removed [ 519.474845][T17230] team_slave_1: left promiscuous mode [ 519.479014][T17230] team0 (unregistering): Port device team_slave_1 removed [ 519.484038][T17230] bond0: left promiscuous mode [ 519.486377][T17230] bond_slave_0: left promiscuous mode [ 519.489225][T17230] @0: left promiscuous mode [ 519.491427][T17230] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 519.507140][T17230] team0 (unregistering): Port device bond0 removed [ 519.601862][T17238] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2956'. [ 519.646339][T17238] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 519.867284][T17243] lo speed is unknown, defaulting to 1000 [ 519.969619][ T5979] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 519.973921][ T5979] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 519.976997][ T5979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 519.982092][ T5979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 519.987378][ T5979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 520.028971][T17247] lo speed is unknown, defaulting to 1000 [ 520.140237][ T40] audit: type=1800 audit(1757649435.896:16243): pid=17256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2962" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 520.161308][T17247] chnl_net:caif_netlink_parms(): no params data found [ 520.300902][T17247] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.303786][T17247] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.306510][T17247] bridge_slave_0: entered allmulticast mode [ 520.310202][T17247] bridge_slave_0: entered promiscuous mode [ 520.316037][T17247] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.319064][T17247] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.322366][T17247] bridge_slave_1: entered allmulticast mode [ 520.326680][T17247] bridge_slave_1: entered promiscuous mode [ 520.390796][T17247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.397551][T17247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.442453][T17247] team0: Port device team_slave_0 added [ 520.447775][T17247] team0: Port device team_slave_1 added [ 520.497180][T17247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.500290][T17247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.512613][T17247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.517432][T17247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.520313][T17247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.531684][T17247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.573174][T17247] hsr_slave_0: entered promiscuous mode [ 520.575479][T17247] hsr_slave_1: entered promiscuous mode [ 520.577542][T17247] debugfs: 'hsr0' already exists in 'hsr' [ 520.579926][T17247] Cannot create hsr debugfs directory [ 520.726491][T17247] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 520.731507][T17247] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 520.737269][T17247] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 520.741782][T17247] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 520.795500][T17247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.825798][T17247] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.835671][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.838717][ T6909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.847012][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.849993][ T6909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.977796][T17247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.166859][T17247] veth0_vlan: entered promiscuous mode [ 521.172832][T17247] veth1_vlan: entered promiscuous mode [ 521.195780][T17247] veth0_macvtap: entered promiscuous mode [ 521.201493][T17247] veth1_macvtap: entered promiscuous mode [ 521.217681][T17247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.265932][T17247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.274114][ T6915] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.277285][ T6915] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.281338][ T6915] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.286842][ T6915] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.331527][ T6919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.337082][ T6919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.355767][ T6919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.358545][ T6919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.396699][T17296] lo speed is unknown, defaulting to 1000 [ 521.662749][T17305] Invalid source name [ 521.664163][T17305] UBIFS error (pid: 17305): cannot open "/dev/sr0", error -22 [ 521.812148][ T5338] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 521.812270][ T5979] Bluetooth: hci0: command 0x1003 tx timeout [ 522.008200][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.012641][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.018569][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.024326][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.028349][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.031620][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.035502][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.039040][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.043923][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.047288][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.051095][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.052178][ T5338] Bluetooth: hci3: command tx timeout [ 522.060996][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.066027][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.070383][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.080214][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.086748][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.091494][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.098365][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.104092][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.107822][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.111873][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.116035][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.119498][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.123797][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.127571][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.131536][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.139576][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.145228][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.148716][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.154310][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.157789][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.161722][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.166123][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.170723][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.176612][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.181223][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.186364][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.190571][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.194893][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.198500][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.202587][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.206521][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.209815][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.213893][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.217565][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.221328][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.226479][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.231170][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.236919][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.245036][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.250798][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.255136][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.258893][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.266287][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.269795][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.273593][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.278583][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.288682][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.293121][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.296334][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.299923][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.307012][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.310298][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.314033][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.317476][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.320943][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.326448][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.329761][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.333120][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.336401][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.340042][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.345097][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.348503][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.351661][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.355258][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.358645][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.361754][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.377622][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.386999][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.391219][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.395873][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.399959][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.405113][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.408550][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.411846][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.417584][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.420899][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.427014][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.430685][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.472653][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.475858][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.481791][T17327] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2975'. [ 522.487224][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.496784][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.499914][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.507088][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.511300][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.518421][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.525281][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.529654][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.535033][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.539170][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.549977][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.580133][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.587771][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.593452][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.597773][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.605098][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.609222][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.618998][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.634700][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.639197][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.645780][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.650798][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.657241][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.661841][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.668418][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.675077][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.680495][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.710875][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.744505][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.749419][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.755371][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.759482][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.769875][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.776692][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.780147][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.785538][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.800546][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.803962][T17334] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2977'. [ 522.808744][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.813467][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.816848][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.820263][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.831291][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.835936][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.853943][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.869947][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2978'. [ 522.877389][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.882226][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.925981][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.930369][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.934230][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.943106][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 522.944998][T17347] overlayfs: missing 'lowerdir' [ 522.954937][T17318] 9pnet_fd: p9_fd_create_tcp (17318): problem connecting socket to 127.0.0.1 [ 523.004101][T17354] netlink: 'syz.5.2982': attribute type 10 has an invalid length. [ 523.972147][ T29] usb 50-1: device descriptor read/8, error -110 [ 524.132144][ T5338] Bluetooth: hci3: command tx timeout [ 524.138481][T17386] netlink: 'syz.7.2990': attribute type 1 has an invalid length. [ 524.143967][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2990'. [ 524.213405][T17387] netlink: 'syz.7.2990': attribute type 10 has an invalid length. [ 524.216006][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2990'. [ 524.263352][T17387] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 524.363862][ T29] usb usb50-port1: attempt power cycle [ 524.411300][T17391] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2991'. [ 524.418352][T17393] program syz.8.2992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.427206][T17387] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 524.457104][T17391] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 524.498219][T17397] cifs: Unknown parameter 'mode' [ 524.535564][T17387] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 524.614966][T17387] bond0: (slave netdevsim0): Releasing backup interface [ 524.621850][T17387] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 524.735365][ T6917] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 524.744875][ T6909] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 524.756391][ T6909] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 524.765865][ T6919] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 524.852101][ T1334] usb 11-1: new low-speed USB device number 14 using dummy_hcd [ 524.925605][T17408] hub 9-0:1.0: USB hub found [ 524.927876][T17408] hub 9-0:1.0: 1 port detected [ 524.952823][ T29] usb usb50-port1: unable to enumerate USB device [ 525.003764][ T1334] usb 11-1: config index 0 descriptor too short (expected 1307, got 27) [ 525.007154][ T1334] usb 11-1: config 0 has an invalid interface number: 0 but max is -1 [ 525.010516][ T1334] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 525.017615][ T1334] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 525.022245][ T1334] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 525.026276][ T1334] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 525.042272][ T1334] usb 11-1: string descriptor 0 read error: -22 [ 525.044868][ T1334] usb 11-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 525.051290][ T1334] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.061773][ T1334] usb 11-1: config 0 descriptor?? [ 525.069078][T17401] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 525.077533][ T1334] hub 11-1:0.0: bad descriptor, ignoring hub [ 525.081630][ T1334] hub 11-1:0.0: probe with driver hub failed with error -5 [ 525.094666][ T1334] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input27 [ 525.386379][ C1] usb_acecad 11-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -19 [ 525.389912][ T1334] usb 11-1: USB disconnect, device number 14 [ 525.675490][T17423] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3002'. [ 525.680683][T17423] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 526.184823][T17430] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 526.187659][T17430] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 526.195958][T17430] vhci_hcd vhci_hcd.0: Device attached [ 526.222019][ T5338] Bluetooth: hci3: command tx timeout [ 526.294184][T17431] vhci_hcd: connection closed [ 526.296667][T14789] vhci_hcd: stop threads [ 526.302055][T14789] vhci_hcd: release socket [ 526.304982][T14789] vhci_hcd: disconnect device [ 526.316107][ T6915] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.372230][ T1458] vhci_hcd: vhci_device speed not set [ 526.373060][ T6915] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.423426][ T6915] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.488148][ T6915] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.547187][ T5979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 526.553626][ T5979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 526.559913][ T5979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 526.566246][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 526.571396][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 526.607257][ T6915] vlan2: left allmulticast mode [ 526.608802][ T6915] bond0: left allmulticast mode [ 526.610304][ T6915] vlan2: left promiscuous mode [ 526.611736][ T6915] bond0: left promiscuous mode [ 526.614995][ T6915] bridge0: port 1(vlan2) entered disabled state [ 526.620262][ T6915] vlan3: left promiscuous mode [ 526.621765][ T6915] veth0_to_hsr: left promiscuous mode [ 526.624353][ T6915] bridge2: port 2(vlan3) entered disabled state [ 526.627656][ T6915] veth5: left allmulticast mode [ 526.629240][ T6915] veth5: left promiscuous mode [ 526.630840][ T6915] bridge2: port 1(veth5) entered disabled state [ 526.892620][ T6915] bond2 (unregistering): (slave geneve2): Releasing active interface [ 527.220343][ T6915] bond3 (unregistering): (slave macvlan2): Releasing backup interface [ 527.231588][ T6915] bond0 (unregistering): Released all slaves [ 527.333235][ T6915] bond1 (unregistering): Released all slaves [ 527.358303][T17450] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3011'. [ 527.432320][ T6915] bond2 (unregistering): Released all slaves [ 527.471019][ T1021] IPVS: starting estimator thread 0... [ 527.471200][T17452] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 527.522832][ T6915] bond3 (unregistering): Released all slaves [ 527.533972][T17444] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 527.536930][T17438] lo speed is unknown, defaulting to 1000 [ 527.562040][T17453] IPVS: using max 44 ests per chain, 105600 per kthread [ 527.594416][ T6915] : left promiscuous mode [ 527.715719][ T6915] tipc: Disabling bearer [ 527.718987][ T6915] tipc: Left network mode [ 527.745795][T17438] chnl_net:caif_netlink_parms(): no params data found [ 528.164491][T17438] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.166995][T17438] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.169510][T17438] bridge_slave_0: entered allmulticast mode [ 528.173843][T17438] bridge_slave_0: entered promiscuous mode [ 528.197498][T17438] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.200749][T17438] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.205679][T17438] bridge_slave_1: entered allmulticast mode [ 528.225172][T17438] bridge_slave_1: entered promiscuous mode [ 528.229533][T17473] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3015'. [ 528.302394][ T5338] Bluetooth: hci3: command tx timeout [ 528.546567][T17438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.555046][ T6915] hsr_slave_0: left promiscuous mode [ 528.558305][ T6915] hsr_slave_1: left promiscuous mode [ 528.562497][ T6915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.580507][T17475] Bluetooth: Invalid esc byte 0x02 [ 528.600584][T17475] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input28 [ 528.621549][ T5338] Bluetooth: hci0: command tx timeout [ 528.686301][ T6920] Bluetooth: (null): Invalid header checksum [ 528.689628][ T6920] Bluetooth: (null): Invalid header checksum [ 528.794431][T14789] Bluetooth: (null): Invalid header checksum [ 528.823301][ T6915] team0 (unregistering): Port device vlan0 removed [ 528.907891][ T6920] Bluetooth: (null): Invalid header checksum [ 529.025564][ T6920] Bluetooth: (null): Invalid header checksum [ 529.105267][ T840] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 529.143068][T14789] Bluetooth: (null): Invalid header checksum [ 529.244008][T14789] Bluetooth: (null): Invalid header checksum [ 529.272131][ T840] usb 12-1: Using ep0 maxpacket: 32 [ 529.277632][ T840] usb 12-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 529.281328][ T840] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.292716][ T840] usb 12-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.295591][ T840] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.298164][ T840] usb 12-1: Product: 䀁 [ 529.299487][ T840] usb 12-1: Manufacturer: ࠖ [ 529.301012][ T840] usb 12-1: SerialNumber:  [ 529.370272][T14789] Bluetooth: (null): Invalid header checksum [ 529.740966][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3019'. [ 529.794038][ T840] usb 12-1: 0:2 : does not exist [ 529.805761][ T840] usb 12-1: USB disconnect, device number 4 [ 529.886319][T17490] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 530.392957][T17438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.407591][T17495] : entered promiscuous mode [ 530.463944][T17438] team0: Port device team_slave_0 added [ 530.467134][T17438] team0: Port device team_slave_1 added [ 530.508718][T17438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.511041][T17438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.519333][T17438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.523547][T17438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.525563][T17438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.533417][T17438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.586118][T17438] hsr_slave_0: entered promiscuous mode [ 530.588409][T17438] hsr_slave_1: entered promiscuous mode [ 530.590566][T17438] debugfs: 'hsr0' already exists in 'hsr' [ 530.592588][T17438] Cannot create hsr debugfs directory [ 530.692230][ T5338] Bluetooth: hci0: command tx timeout [ 530.694831][ T29] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 530.721682][T17438] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 530.726038][T17438] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 530.730612][T17438] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 530.736441][T17438] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 530.785527][T17438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.802198][T17438] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.809569][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.811850][ T6909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.818098][T14789] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.820374][T14789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.872028][ T29] usb 13-1: Using ep0 maxpacket: 8 [ 530.874975][ T29] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 530.877564][ T29] usb 13-1: config 179 has no interface number 0 [ 530.879559][ T29] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 530.883730][ T29] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 530.887355][ T29] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 530.890869][ T29] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26223, setting to 1024 [ 530.894402][ T29] usb 13-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 530.898451][ T29] usb 13-1: config 179 interface 65 has no altsetting 0 [ 530.900547][ T29] usb 13-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 530.903413][ T29] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.910084][T17502] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 530.917935][ T29] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:179.65/input/input29 [ 530.962440][ T5372] input input29: unable to receive magic message: -110 [ 530.966379][T17438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.971008][ T5372] input input29: unable to receive magic message: -32 [ 530.978450][ T5372] input input29: unable to receive magic message: -32 [ 530.985723][ C1] xpad 13-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 530.990181][ T5372] input input29: unable to receive magic message: -32 [ 531.141993][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3023'. [ 531.148461][T17502] input input29: unable to receive magic message: -32 [ 531.161321][T17438] veth0_vlan: entered promiscuous mode [ 531.167303][T17438] veth1_vlan: entered promiscuous mode [ 531.185243][T17438] veth0_macvtap: entered promiscuous mode [ 531.189252][T17438] veth1_macvtap: entered promiscuous mode [ 531.202056][T17438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.213666][T17438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.222079][ T6916] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.225153][ T6916] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.228999][ T6916] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.232996][ T6916] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.278034][ T6920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.280544][ T6920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.296284][ T6920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.298843][ T6920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.346052][T17545] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3007'. [ 531.349801][T17545] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 531.445532][T17552] ptrace attach of "/syz-executor exec"[10971] was attempted by "/syz-executor exec"[17552] [ 532.782233][ T5338] Bluetooth: hci0: command tx timeout [ 533.718218][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3039'. [ 533.727600][T17587] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 533.761319][T17591] block nbd7: Attempted send on invalid socket [ 533.764890][T17591] blk_print_req_error: 5 callbacks suppressed [ 533.764901][T17591] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.770872][T17591] hpfs: hpfs_map_sector(): read error [ 533.928296][T17602] overlayfs: missing 'workdir' [ 533.970432][T17605] FAULT_INJECTION: forcing a failure. [ 533.970432][T17605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.976160][T17605] CPU: 3 UID: 0 PID: 17605 Comm: syz.7.3046 Not tainted syzkaller #0 PREEMPT(full) [ 533.976185][T17605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 533.976196][T17605] Call Trace: [ 533.976203][T17605] [ 533.976210][T17605] dump_stack_lvl+0x16c/0x1f0 [ 533.976242][T17605] should_fail_ex+0x512/0x640 [ 533.976264][T17605] _copy_to_user+0x32/0xd0 [ 533.976287][T17605] simple_read_from_buffer+0xcb/0x170 [ 533.976309][T17605] proc_fail_nth_read+0x197/0x240 [ 533.976330][T17605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.976352][T17605] ? rw_verify_area+0xcf/0x6c0 [ 533.976370][T17605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.976390][T17605] vfs_read+0x1e1/0xcf0 [ 533.976417][T17605] ? __pfx_vfs_read+0x10/0x10 [ 533.976435][T17605] ? find_held_lock+0x2b/0x80 [ 533.976460][T17605] ? __fget_files+0x20e/0x3c0 [ 533.976488][T17605] ksys_read+0x12a/0x250 [ 533.976508][T17605] ? __pfx_ksys_read+0x10/0x10 [ 533.976531][T17605] ? rcu_is_watching+0x12/0xc0 [ 533.976553][T17605] __do_fast_syscall_32+0x7c/0x300 [ 533.976573][T17605] do_fast_syscall_32+0x32/0x80 [ 533.976590][T17605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.976612][T17605] RIP: 0023:0xf702e579 [ 533.976626][T17605] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 533.976644][T17605] RSP: 002b:00000000f541e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 533.976661][T17605] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541e620 [ 533.976673][T17605] RDX: 000000000000000f RSI: 00000000f73b4ff4 RDI: 0000000000000000 [ 533.976684][T17605] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 533.976694][T17605] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 533.976705][T17605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.976728][T17605] [ 534.367758][T17614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3050'. [ 534.379083][T17614] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 534.423032][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3051'. [ 534.525540][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3053'. [ 534.606558][T17627] overlayfs: missing 'workdir' [ 534.610360][T17628] netlink: 'syz.6.3054': attribute type 4 has an invalid length. [ 534.618031][ T1334] lo speed is unknown, defaulting to 1000 [ 534.620048][ T1334] syz0: Port: 1 Link ACTIVE [ 534.702409][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3059'. [ 534.711145][T17637] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 535.412297][T17657] netlink: 188 bytes leftover after parsing attributes in process `syz.8.3065'. [ 535.869506][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3069'. [ 535.881346][ T29] IPVS: starting estimator thread 0... [ 535.881363][T17667] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 535.918563][T17671] fuse: Bad value for 'fd' [ 535.982005][T17668] IPVS: using max 44 ests per chain, 105600 per kthread [ 536.011623][T17677] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3073'. [ 536.049209][T17680] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.100223][T17684] program syz.9.3075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.176113][T17688] tipc: Started in network mode [ 536.178377][T17688] tipc: Node identity ac14140f, cluster identity 4711 [ 536.181753][T17688] tipc: New replicast peer: 255.255.255.255 [ 536.185291][T17688] tipc: Enabled bearer , priority 10 [ 536.188982][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3077'. [ 536.194413][T17688] tipc: Disabling bearer [ 536.201165][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3078'. [ 536.203630][T17688] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3077'. [ 536.214847][T17690] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 536.268925][T17694] netlink: 'syz.9.3080': attribute type 10 has an invalid length. [ 536.272558][T17694] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3080'. [ 536.276934][T17694] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 536.280124][T17694] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 536.287345][T17694] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 536.323887][ T5979] Bluetooth: hci4: sending frame failed (-49) [ 536.328077][ T5338] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 536.409691][ T5979] Bluetooth: hci4: sending frame failed (-49) [ 536.415474][ T5338] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 536.482115][ T1021] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 536.525245][T17704] 9pnet_fd: Insufficient options for proto=fd [ 536.528884][T17704] CIFS mount error: No usable UNC path provided in device string! [ 536.528884][T17704] [ 536.532892][T17704] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 536.568123][T17706] macsec1: entered allmulticast mode [ 536.618108][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3087'. [ 536.630520][T17709] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 536.631980][ T1021] usb 11-1: Using ep0 maxpacket: 8 [ 536.637771][ T1021] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 536.641278][ T1021] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.659760][ T1021] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 536.666503][ T1021] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 536.670749][ T1021] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.676395][ T1021] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 536.680327][ T1021] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.894899][ T1021] usb 11-1: usb_control_msg returned -32 [ 536.897988][ T1021] usbtmc 11-1:16.0: can't read capabilities [ 537.069521][T17726] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3090'. [ 537.112638][T11382] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 537.343078][T17735] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 537.346879][T17735] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 537.369395][T17737] lo speed is unknown, defaulting to 1000 [ 537.487319][T17747] netlink: 'syz.9.3093': attribute type 1 has an invalid length. [ 538.247620][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3096'. [ 538.259607][T17755] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 538.516438][T17767] loop6: detected capacity change from 0 to 1 [ 538.519324][T17767] Dev loop6: unable to read RDB block 1 [ 538.521281][T17767] loop6: unable to read partition table [ 538.523307][T17767] loop6: partition table beyond EOD, truncated [ 538.525406][T17767] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 538.529168][T17769] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 538.533656][T17769] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 538.586197][T17771] lo speed is unknown, defaulting to 1000 [ 538.988935][T17783] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 539.273990][ T1458] usb 11-1: USB disconnect, device number 15 [ 539.365732][T17794] lo speed is unknown, defaulting to 1000 [ 539.511791][ T5979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 539.520944][ T5979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 539.524549][ T5979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 539.527150][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 539.530212][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 539.557450][T17798] lo speed is unknown, defaulting to 1000 [ 539.642679][T17807] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 539.677870][T17798] chnl_net:caif_netlink_parms(): no params data found [ 539.858114][T17798] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.861205][T17798] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.879588][T17798] bridge_slave_0: entered allmulticast mode [ 539.895585][T17798] bridge_slave_0: entered promiscuous mode [ 539.898848][T17798] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.901377][T17798] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.906649][T17798] bridge_slave_1: entered allmulticast mode [ 539.910611][T17798] bridge_slave_1: entered promiscuous mode [ 540.368628][T17798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.397538][T17798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.453844][T17826] lo speed is unknown, defaulting to 1000 [ 540.478680][T17798] team0: Port device team_slave_0 added [ 540.485427][T17798] team0: Port device team_slave_1 added [ 540.586201][T17798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.588890][T17798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.597165][T17798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.603243][T17798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.605915][T17798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.613915][T17798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.669712][T17839] __nla_validate_parse: 3 callbacks suppressed [ 540.669723][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3122'. [ 540.669908][T17798] hsr_slave_0: entered promiscuous mode [ 540.676912][T17798] hsr_slave_1: entered promiscuous mode [ 540.677806][T17841] binder: 17840:17841 unknown command 0 [ 540.678987][T17798] debugfs: 'hsr0' already exists in 'hsr' [ 540.680465][T17841] binder: 17840:17841 ioctl c0306201 80000080 returned -22 [ 540.682249][T17798] Cannot create hsr debugfs directory [ 540.706384][T17839] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 540.734820][T17841] binder: 17840:17841 ioctl 5201 0 returned -22 [ 540.737905][T17841] binder: 17840:17841 ioctl c0306201 80000180 returned -22 [ 541.287312][T17798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 541.293277][T17798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 541.298683][T17798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 541.303557][T17798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 541.379096][T17798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.395823][T17798] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.406345][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.409475][ T6916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.421957][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.425074][ T6916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.572166][ T5979] Bluetooth: hci0: command tx timeout [ 541.591588][T17798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.655734][T17798] veth0_vlan: entered promiscuous mode [ 541.661066][T17798] veth1_vlan: entered promiscuous mode [ 541.676398][T17798] veth0_macvtap: entered promiscuous mode [ 541.684027][T17798] veth1_macvtap: entered promiscuous mode [ 541.699388][T17798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.718102][T17798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.726805][ T6916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.730523][ T6916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.736716][ T6916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.740384][ T6916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.928689][ T6920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.931766][ T6920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.961062][ T6920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.968112][ T6920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.377417][T17932] lo speed is unknown, defaulting to 1000 [ 542.445674][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3131'. [ 542.450489][ T6047] IPVS: starting estimator thread 0... [ 542.451013][T17939] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 542.542045][T17940] IPVS: using max 44 ests per chain, 105600 per kthread [ 542.558620][T17950] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 542.561859][T17950] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 542.564110][T17950] CPU: 2 UID: 0 PID: 17950 Comm: syz.0.3133 Not tainted syzkaller #0 PREEMPT(full) [ 542.566641][T17950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 542.569802][T17950] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 542.571211][T17950] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 3a 51 43 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 542.578408][T17950] RSP: 0018:ffffc90003b17b98 EFLAGS: 00010293 [ 542.580492][T17950] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff8877b9ea [ 542.583023][T17950] RDX: ffff888028542440 RSI: ffffffff8877ba36 RDI: 0000000000000005 [ 542.585514][T17950] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 542.587969][T17950] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90003b17d30 [ 542.590444][T17950] R13: ffffc90003b17d30 R14: 0000000000000001 R15: ffff888057e38c00 [ 542.592920][T17950] FS: 0000000000000000(0000) GS:ffff8880976bb000(0063) knlGS:00000000f541cb40 [ 542.595695][T17950] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 542.597762][T17950] CR2: 00007fdd4c6be000 CR3: 0000000042e59000 CR4: 0000000000352ef0 [ 542.600228][T17950] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 0000000000000000 [ 542.602697][T17950] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 542.605187][T17950] Call Trace: [ 542.606284][T17950] [ 542.607242][T17950] ? __pfx_bcsp_recv+0x10/0x10 [ 542.608763][T17950] hci_uart_tty_receive+0x251/0x7e0 [ 542.610409][T17950] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 542.612190][T17950] tty_ioctl+0x580/0x1680 [ 542.613596][T17950] ? __pfx_tty_ioctl+0x10/0x10 [ 542.615129][T17950] ? do_vfs_ioctl+0x128/0x14f0 [ 542.616665][T17950] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 542.618259][T17950] ? find_held_lock+0x2b/0x80 [ 542.619746][T17950] ? hook_file_ioctl_common+0x145/0x410 [ 542.621489][T17950] ? __fget_files+0x20e/0x3c0 [ 542.622968][T17950] tty_compat_ioctl+0x24a/0x4d0 [ 542.624526][T17950] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 542.626239][T17950] __ia32_compat_sys_ioctl+0x242/0x370 [ 542.627946][T17950] __do_fast_syscall_32+0x7c/0x300 [ 542.629560][T17950] do_fast_syscall_32+0x32/0x80 [ 542.631083][T17950] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.633165][T17950] RIP: 0023:0xf706e579 [ 542.634489][T17950] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 542.640437][T17950] RSP: 002b:00000000f541c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 542.643030][T17950] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005412 [ 542.645511][T17950] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.648034][T17950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.650525][T17950] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 542.652997][T17950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.655496][T17950] [ 542.656485][T17950] Modules linked in: [ 542.657817][ C2] vkms_vblank_simulate: vblank timer overrun [ 542.660324][T17950] ---[ end trace 0000000000000000 ]--- [ 542.663767][T17950] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 542.666030][T17950] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 3a 51 43 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 542.673475][T17950] RSP: 0018:ffffc90003b17b98 EFLAGS: 00010293 [ 542.675620][T17950] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff8877b9ea [ 542.678266][T17950] RDX: ffff888028542440 RSI: ffffffff8877ba36 RDI: 0000000000000005 [ 542.680965][T17950] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 542.687550][T17950] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90003b17d30 [ 542.690055][T17950] R13: ffffc90003b17d30 R14: 0000000000000001 R15: ffff888057e38c00 [ 542.692860][T17950] FS: 0000000000000000(0000) GS:ffff8880977bb000(0063) knlGS:00000000f541cb40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 542.695929][T17950] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 542.698081][T17950] CR2: 00005588736f5950 CR3: 0000000042e59000 CR4: 0000000000352ef0 [ 542.706035][T17950] Kernel panic - not syncing: Fatal exception [ 542.708502][T17950] Kernel Offset: disabled [ 542.709886][T17950] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:53:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000b21bc4 RBX=0000000000000000 RCX=ffffffff8b915b29 RDX=ffffed1005646656 RSI=ffffffff8c163380 RDI=ffffffff8190ca91 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90aba990 R15=0000000000000000 RIP=ffffffff8b91466f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974bb000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000058b21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=1ffffffff35cb810 RDX=dffffc0000000000 RSI=0000000000000004 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900007cfbe8 R8 =0000000000000000 R9 =fffffbfff1edd630 R10=ffffffff8f6eb183 R11=ffffffff9aff4aa0 R12=0000000000000001 R13=ffffffff8f6eafe0 R14=0000007e52eefde5 R15=0000000000001701 RIP=ffffffff8187acf2 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975bb000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f26fb742286 CR3=0000000057fa4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561b335 RDI=ffffffff9b101700 RBP=ffffffff9b1016c0 RSP=ffffc90003b17490 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000065646f43 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9b1016c0 R15=ffffffff8561b2d0 RIP=ffffffff8561b35f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976bb000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdd4c6be000 CR3=0000000042e59000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000003 RBX=0000000000000000 RCX=ffffffff81f4f512 RDX=ffff888023712440 RSI=ffffffff81f4f51b RDI=0000000000000005 RBP=ffffea00015cc600 RSP=ffffc90003b97a38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000012 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81bb0b87 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bb000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7e6e8cd43c CR3=000000006ee36000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff00ff00ff00 ff00ff00ffffffff ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002d002b002b002b 002c002b00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002e322e325f4342 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e6e8cc6b0 00007f7e6e8cc0c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e6ebcaab0 00007f7e6ebca580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e6ebc9b20 00007f7e6ebca050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000