last executing test programs: 18m31.998645521s ago: executing program 32 (id=797): socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xda, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), 0x4) connect$inet6(r0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f000018e000/0x3000)=nil, 0x3000, 0x1) r1 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000007c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r3, 0x0, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x4000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) 17m18.77247471s ago: executing program 1 (id=1323): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r1, &(0x7f00000003c0), 0x100000000000022d) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x10, 0x8000, 0xe, 0xb, {{0x7, 0x4, 0x3, 0x9, 0x1c, 0x66, 0x0, 0x9, 0x6, 0x0, @multicast2, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xb9, [@multicast1]}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x3, 0x8cf, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x80, 0xfffffff7, 0x373}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@multicast2, @initdev}, &(0x7f0000000380)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000003c0)={@local}, &(0x7f0000000440)=0x14) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x10, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r11, @ANYRESOCT=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x200}}]}, 0x38}}, 0x0) bind$packet(r7, &(0x7f0000000400)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x7, 0x40, 0x3f8, 0x7, {{0xd, 0x4, 0x2, 0x8, 0x34, 0x66, 0x0, 0x5, 0x2b, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@ssrr={0x89, 0x1b, 0xd8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, @remote, @private=0xa010102, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3b}]}, @noop, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x8, 0x6, 0x41, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x10, 0xa, 0x3}}) 17m18.564357567s ago: executing program 1 (id=1326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) close(r0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000080)={{0xf, 0xc53}, {0xfffffffffffffffc, 0x8000}, 0x7}) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) bind$802154_raw(r2, &(0x7f0000000280)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r2}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x420, 0x3f3, 0x10, 0x70bd25, 0x25dfdbfd, {0x10, 0x2, 0x19, [0x7, 0xffffff94, 0x3, 0xffffff1d, 0x10000, 0x9, 0x7, 0x6, 0x8, 0x1e41, 0x5, 0xd, 0x6, 0x9, 0x2, 0x7, 0x2, 0xffffffff, 0xae, 0x9, 0x8, 0x1, 0x401, 0x1, 0x5, 0xfffffffe, 0x4, 0x5, 0x0, 0x274f, 0x6, 0x101, 0x6, 0x3, 0x0, 0x81, 0x0, 0x27, 0x101, 0x5, 0x8, 0x5e0f563f, 0x8000000, 0x6, 0xff, 0x400, 0x4, 0x2, 0x4, 0x4, 0x221, 0x8, 0x0, 0xffff, 0xffffffff, 0x1, 0x9, 0x9, 0xfff, 0x5, 0x4, 0xe1, 0x2, 0x4], [0x1, 0xb, 0x9, 0x0, 0x6, 0x40, 0x1, 0x5, 0xab46, 0x8, 0x5, 0x4, 0x8001, 0xd, 0x13ffe392, 0x6, 0x742, 0x5, 0x3, 0x8, 0x6, 0xffffffff, 0x1, 0x2, 0x5, 0xdeb, 0x5, 0x9, 0x6, 0x8, 0x6, 0x8001, 0x1, 0x80000001, 0xf4911e4, 0x401, 0x9, 0x0, 0x1ff, 0x200, 0x7, 0x9, 0xff, 0x7, 0x5, 0xfffffff7, 0x80000000, 0x8, 0xa99c, 0x0, 0x3, 0x1, 0x3, 0xaf65, 0x3, 0x7f, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1f, 0x6, 0x2], [0xacb, 0x5, 0x16, 0xfffffffb, 0x40, 0x5, 0xef, 0x1000, 0x5, 0x0, 0x5, 0xd6, 0x2, 0x8, 0x9, 0x9, 0xffffffff, 0x2, 0x31, 0x4, 0x2, 0x4, 0xf, 0x8, 0xffff, 0x80000001, 0x0, 0x6, 0x60b9, 0x587, 0x2, 0x82, 0x4, 0x6, 0x9, 0x818, 0x1000, 0x0, 0x1, 0x21a6, 0x1, 0x9, 0x1, 0x5, 0x101, 0x1, 0x8952b2a, 0x7, 0xe7b7, 0x3, 0x100, 0xd3, 0x2, 0xffffffff, 0x2, 0x0, 0x9, 0xa589, 0xfffffffd, 0x7fffffff, 0x8, 0x8, 0x8, 0x4], [0x5, 0x8, 0x7, 0xc, 0x5, 0x7, 0x8, 0xdf76, 0x5, 0xc6, 0xb40, 0x2, 0x2, 0x5, 0x6, 0x40, 0x9, 0x7, 0x81, 0x400, 0x7, 0x2, 0x1ff, 0x1, 0x5, 0x10, 0xffffffff, 0x5, 0x7b, 0x9, 0x2, 0x21c0, 0x0, 0x800, 0xbe, 0x8000, 0x4, 0x10, 0x2, 0x7, 0xffff, 0x7, 0x4c, 0x1, 0x3, 0x0, 0xffffffff, 0xff, 0x7, 0x1, 0x4e, 0x8001, 0x6000000, 0x7f, 0x80000001, 0xb56, 0x9, 0x6, 0x71, 0x7, 0x1, 0x80000000, 0x2, 0x7]}}, 0x420}}, 0x40004000) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0xffffffa8}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r7, 0xc01064c5, &(0x7f0000000200)={&(0x7f0000000180)=[r8], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000200)={&(0x7f00000001c0)=[r4, r8, r9], 0x3}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) 17m18.364596549s ago: executing program 1 (id=1327): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) fsopen(&(0x7f0000000100)='vxfs\x00', 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = getpid() ptrace$peekuser(0x3, r3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000800)="a4b3c163364b5c9fb04423e2c99aa411d191db9230d242c0eeb25875a36bd9544b394b207f2e38104601068c638fd9fbda403d9430c5cf20e3f2fb0534a0865f654b5d92a6dc8b7fb4696584962ea2e7bcefefab37a9aee0792776c8ca39efa9c2f524ddff641b74a14b310d3666698026d90253a0a5a9e9315a809011e95f07ab9bb1746aa802ca402caecee4803f3c5a1548bfc43b0a9b17defc9f6c52ac51a4d8ed8327de2c053bc415df6b8237b04778a9652d317f3fe798f9aded7ae79215fae8c9e368ba6c4edbf462e93de6e8bf6a84fb09f6a8156c0337534fb0cc9199d9211a5b2d6c27c3819d8fa1004015b5181e44f28baf8cef458a50e324877e66df90cf195207103d7818287b25afbc79da926e97b8296761d3391ed5b86b1217e97f0477c1f818536a3292bdeaf614405bb6c7f44ca6258898af0d6ed03473b0e915ec065b69a2a17c1a3fba57c305805daa96fb82842b0de89086db05d03bc2da7a596683d03f8438301a4a34fe0febd9161f50d3e697b8f15120db4ec752a940a51f960bf3a626c6572cb76cdb8a5cc2cc47d2dac80c30b51ee50ae8b39e1a62520c57c023f7bc294e56b856325637136830fa4574e9784df58d2bd4d62415725215139dbcf7131fc91b21cef71fc7b637423045994f17c7d5d470264eea8fe6e88fb4c1b571c2ab992b2b93b01e7f3e5fde39b861d10b8e8146d7530a6c116276085ff9b0ad8dd1107f7881e2a17d53974f64a3e9e95959e7d7281c5338ac78c91e73f9648883ab3a205a0decb0a98ddc397a1fd2c75b280b03fe0794ac198cc5c3c37cfc02836c9a39204d705c3a91cb413d1f019aa21da2db2b21e267b841c0e1e25822346f31ca59208017a1cd9d6daa2ca843bef1ddaed4862489494936fa954d89e32d99bf7eb5afb54aa292e6d4d6e4652cd69821cb8bcc3ecb41d5ba5572245d5a7d759639b414adcf6f8d0a0e89b605a09c1e32f21890a8fff54c5bf0689516ba1535aa5b2bf49455fdfd17c5f2bbbd87ee5193b0da0580d5a3ba792ba1ea3310d97bc596b954b063a800d7a6accbbe5ccc50be4a067dd7e554f76dc186bc65bd9c95206dedc80e0351e4bac8a339de399745867efdfa5f14f79c661d7ab71e0f37c44dbbd0140f0512a33074d2151c0fd18bbafe89d1269f858acba83767e6479548f8b7ac043f1c4ac537d0b74f7208ec480dbd7d5da7ccd73cca61e494452f3f12ba451d01dadd5b424baf58990bc08308a94f9f128c932f8b4da2e46c24c19729246f6cbe7c38c9a5fffdefe1f4ae6cc549cced86e428fb8ca8d3db314e07cd53b36186e390434c9e805051f5a8886866051d15bae5e9924a0863740d864525d44f4d3c4d8eb7eacf627b413b7cad720687ca377abbe7ff3da2365bfeae63adb4a8c06746e00b326586c1fd7bb33f418f99aba1a1084e7d0a52e4fd6deeb519f69f15025cb02e1c67609dbbcc304f35ea8bae98c29e3218c337cfdc41f6d54cb70fa2a0ccf27edbaed3a94ec0506e26ff99212cf762f994f88bc02994ca8ed17d25e6291d81441ec4e9a9e1efc8b85223c93e8e000fab2dac3b402fb1ff1f95bd588d35ff3f494a2bd319c5877e2f8998f9916e3954138ad40b6a2352fe94432e42c9aaadfe3d3cbc68861d043eeb1cbf34276e73532951556ac3c06bdef631d95f82ec3af740628c57ea11fa32e8aaebf58f8da8c5f8fb8d5e6133a918dcf899315e3e95d187b730b7b38f1d514537028323d360d6d80120c9f8c9cb1fa94631853c7aecc55d7ae512791bc12b85fccf80348da51221e0ecbbf9e55bd531b5d8c84dbf4f7178dc8819db9a030e8bd44be8b8a5aa5ca67a7758c833d2864585e045b7a22d179c302f882a8b99c8e427e067e9a721a2953955d9749381d02ae9ec965376dc5b0af96c9e388ce7f197df90c72b640102d53c8b85706647ad644e7391b6069c036090e875de790eeb97651b3c5688951337e5b0494dd0e497b6f4d654caa67d3f66b6bb49dd804061cf1ffd2dcc9bd04c84c708659fee044bd3331477e12cad8f9dee892622123373ca3e3f96dddf9306cf7d2ded3b7e562a71fa653113906886213a473db7fa3f6a9be4a1e9d170ca28001304d29c1fb4dfe86e5b72efe24f99a07d001eb8dabd7a8b6f90fd72c25e15c0e923b9edaa69c8f8d8af3007181de85ebf613d0cef8ee43d97baf5de08a53803c3e5eb8ee92148335f2398240534624675ddf39904af7ff84c0caa7c325d1516d9d366e42839fc7699d0a1cf30882cd4fbbf17d7f047c112b9829737f47e2bd9154b519ca67a9d0a8d7ea5ca88142f1e3d9c29413d9696e34fd9212979a5cf1c24c7b8521f70e3384e74bddc227a13efe6b859970e2152beb58ef881c20977d45f427b72724ace334c45e457ea1c156b48b1b1468fb7bc9df6fd5305e13b58bd4a29ca56d41252088897cdcbdc1fdc50fa5047b3c2fc85b30af3f7a04de47c10f546b16109f8d3adca276b937e6f0865bd7b8befa05e9ffba8a283e0623578eaf5e8c4de24b8b3ac64cf12eaadba9f784d410dcae8dd5173e4ce3ebeafdd15e4ec1ec270b6076adcd7c8193374d92cf0337a987aab3a667f36e3476b85dc0c64673fd5bc652358c62ad2482569f7bb8ffceb4c82a553bef94519052e7442aa0dc0b6b9fd33c57876ea82d0578665f708612e27eb9fb405715675364b75e4baaa9695645c13c3dc1cc39490c3579041ff4cadf143ebe8540b18b65d65fdc40f4c44c02ded18df4c3baa4be16e5e1d147040fe7a085963e2adc414704859ecf251f7ce22178d3d1c0a1188b459a2e59ce9a6c0084364bfaab824c4ed5560ef57c201439e17975ab2798a5fbe9d1d8c4b32cb3e2431a16bc8f3abf8f40663cbf3cf6e221b7af3ec31d3102084af8df2d367741c0ad6119783f2ecfbadf17eb4891ca53a7c8b20124f4cd815e1cf2735fe502b29d6bdaf20a34f7ec09a89fe9dda3ff50617b82e8b23d4dba8d229bb1e7c8a6485f7b079dfafc85627440b847fb8a5b2b6d8f6ec6e4c97a876201d4c5da1696efdc2a88b17031030df60d8fdbf69baed4cbc100ce7e86595ee9a3b7fd82b30878a2f680b93bc29286e11c3216ca71ad2b2911a7ce85eeddbba858ded2a980a0c5b981d34d9f105be4283d5ed89f629bb929a2182f76d6f2c69dff95c880b2fed20105fae24206be332b12dff7202c0b05e1228b448f7f82ce2a110cf74de3d7b5bdaac39e918680782e080a79460ab7547b1967c709e15388f4fde2279363b811f69ab31af8928d0642665eae6b01d913e72dee964a00b89b9c68a115b05846deced3f88a6c65940cfb52eb3a346f497dd8bdfb683cd6d77e95419f8060298bb80f5b816ce87cc765e89355e3409717228641b692c8b14976912f2c624f705e6c080c1d33ee13065e734d0fb61428d88316e79aff5f4dad94913d4b229af9c3586c7684b72671e48dc5a20178c3c936f5c46948c645ae6fb71937bbadcfba4061e35366e3be1a407e1e8fad0973759c1c559cbe3ad50dc888f99093be5915758e37e39d58869c3e462b555de1733a2c4527d23238a40e3ff74f509be40714e6ea2a1fd11085310af8a489fd5dfc023fda848f38c8525c2b4e8f13f9dbb05a1a9f04f0af95e1d622aa9d7a8cb15ca2d09a437f7e84dba9ab085bdc94b86cf57dd9a82d69d931cc4d0770e277a681d06c70b0485993a2050b9fe6dd3baffd61233bb0e2c4a7f7678656bf0b8e4ecd670bad6fbe9a448a297ecfb0d1728319b7e8e7dff76b3ec1e770f455a91a64f409d40634ba1d3228aba4647b65c06fab26eb75eee1d995345739b73d311718d69a4a24d3ef6f36e4743c71b05163e9416a118670dbf733b2cb10e3f7c17fb7382ae5adf1521a4bbd38a1a28ff34587101a556846ee4e3e7bd81bbe86896c8a49f7fa415f38a21bdedfeb27f9e352d0948ba2cf4bb88b7dfb3695111371675665b4400ffbd1ee670f62fca351835c96eeacd7f95c67dcd7d8be30437bedec994e5c0334411d20266cd4acc09a23431d744b84e1904e61b08b89dcd62b2bd3b4d4780b5f0c2361f958c49a77287de9b59a69961a2b83e6eb2a327d39a7e14681aaa4b5ae4528b9ce994af08b54913311b27589023812c992e7073fb1261f8fdd94f2dbd005be9da53f8a831d5cf6cecabd3ae8a2ea3d4489a7cca8afb756aff4dee494c423ea5a167c0bc5df08ccc1874252525980555c57a3bbea15051644a480589ca7d8276ecff4fc41a2032433cf379686edba0e95f86eb39714ff8fa969bff8ad6c4fd1ddad7c297cacfbd1bc07740d4056b7d3ffd89dc36db0c9fb6c16a9cb717738847ed12c6aedae48cf2f3710a616335362b5ac714fd11b32fe8cd01c7ab92d861aa2a1d5a13739e40f9c35beb3ea4b17ee65a6b2ab2ac815e814c6479090bcb3d27705cebb812c36b70fdac9bb52356eed33f72a53bd3ef115cbd5c7ca341aa9644c493745710c4d91cd06dbb543caaef4be9ba4bbe58df5d1428fc4931fcc81b6a7a53c921f8b9dbac7fcd302dc73fd7f97cf718c91f40fd49d40ab29bb98fb33d0f68ea35c8f7ce3069d55f22055b6e882418df26274da871b8eee5dffb2082aa9d671227b9af677a95e6c79406caf336620b775f0975b2d8927d90b9ccba7d730cea40318027abfef44909b6e9c5e296711f4b5e0a9ee12ea82a1ce322446270ae45cca452e023de4ad80bb51e2432fc831ac3d4ee57fc8765752065417857dae62d512f2510e8885acfa61e2f00bd4491e89f15fcdb35099e63da8f53973ca0a44869dc324ab78c8a941ea6fdc654f50724c63dc949d9e1d659f19cb5e075d44335a27071eb25dbcaa829fc39082764c24f77798ecfa3a2b0b52eee984d7cf1b2b70418c8fa138feb6db5974b01ae377233f19683aa7616fac64ee51d8a76f68e0940bf3ba71e98a27aa3143d71cd22efb290bed0470c364b1421b90757e60b71b9c7e8dc7160da8ce04776037d4d1cd80edb0e3a1aa76554e514849461b3ce895bb3a835d9e19e83652b1be86f8fc50d89b4ca2df691ab4be39255f9276a84fd32dca84e976af9a2cd4f417c279927ebe9036ef5a4456e275061d633a19a1ffcd3dfddf5209a387adfde8f41e161b760d266c27e1e0a7f2359597de32d1e971c537f69e5b9f7f680de38dffbd0d73a2a817f45e9d10178f6274b351a860e4207cdd3a021563bcd53e1bb54d2eb0ccf9b5833b323a1d4f2dc9253bcd59bb352811c63ea18cfc867fd9cf3d2a01734d75cdd6ab19a277b5ff36577c06389291f945eeb0359ef1b74c3967c713c0b5eb569344513ae4d03dcf41f1ee5bed4b691b5630aa083a964dda406685d63f6a3cfc5bd781fc7398589d7d612433e1ee7c770a230d3c815c726328412dbc36b5b30c6a124d3e83223b6a83600e4ab9cad9e2df8be7dc2fc26fb81ab0698b067af8f9cdd5804f5f70823e888ad4a61fed1378ffd10bc1d5d1fda54eee467a026d7fd2a7332e852a7f92cb50b98aa49be556ea1a104e7ea2a1dffc82d104242c6c38fb767b28a08c6e79f209dc25a235e41857ff625d2260cb04b5002dd6a5a4d82915ccaa2c2f81edea1427347fccd29c5f3fded8758c30b292ec283b083bd92e0443b20325fc64dd866cbd82c476adcb7d81fc6b99cfc51b306f4120c7486b87e30445a9bb54d33d1f2cdb4323151b2e0a1eb0ba4b6ffd328ce841e1c58ede63878e12cdd986f264c1593d2f501abe0e85687cad5401adbc971f78c6d5d44ed", 0xff1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="4c0000000000000007000000441c490000000e5e0000000300000005000000060000000f00000002442487a3ac1e0101000000066401010000000004ac1414aa000000000000000000000009800000000000000007000000070b80ac1414bbac14143f000001"], 0xcc}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x100) read(r5, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335}) 17m16.713234187s ago: executing program 1 (id=1333): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8, 0x267, 0x7, 0x8, 0x4, 0xeaa, 0x5}, 0x1c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x1410, 0x1, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4011}, 0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, 0x0) chdir(&(0x7f0000000280)='./file0\x00') (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) syz_emit_ethernet(0x3a4, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], 0x0) 17m16.692128803s ago: executing program 1 (id=1336): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02005d000005000000dbae960000000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000a2ffffb7020000080000001823"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$addseals(r0, 0x409, 0x7) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r5}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r0, 0x0, 0x0, 0x2000}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000290000003600000067000000000000001400000029000000360000003300000000000000aa4ebaef0f188bb469e23440b9034ba76a38ccffe09437dff9887a41d051dd03b3ebfb29f06dc5ef66af8807ddff656152d19d5bfa9368ad358122dfcfcb1598bb344064006a66fcea6a13"], 0x28}}], 0x1, 0x20000045) 17m5.017503846s ago: executing program 1 (id=1339): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x2f) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$binfmt_script(r2, 0x0, 0x0) 17m4.973171859s ago: executing program 33 (id=1339): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x2f) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$binfmt_script(r2, 0x0, 0x0) 14m51.151262797s ago: executing program 3 (id=2211): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = eventfd2(0x5bb, 0x80801) read$eventfd(r1, &(0x7f0000000080), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000540)={0x101, 0x3, "fa6123f6fa7e9aaf68221e6cd07d3e6534ff1c58a0a53b609b72eea22482940d", 0x5, 0x6, 0x4, 0xffffffff, 0x140}) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/nfs', 0x0, 0x0) mknodat(r9, &(0x7f0000000280)='./file0\x00', 0x800, 0x80000800) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x4}) 14m49.96292963s ago: executing program 3 (id=2217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f0000001300)={'nr0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) socket$unix(0x1, 0x1, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x104) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r4, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x5, 0x2, 0x1, 0x7f, 0x800006, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x10005, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xceb, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x5, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f00000000c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r8 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r8}}, 0x3c) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000018110000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', r11, 0x0, 0x8, 0x39, 0x10001, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x8000, 0x8, 0x4, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl0\x00', r12, 0x4, 0x5, 0x3, 0xfffffffe, 0x20, @dev={0xfe, 0x80, '\x00', 0x2a}, @local, 0x80, 0x0, 0x3, 0x80000001}}) 14m49.763528877s ago: executing program 3 (id=2218): r0 = syz_open_dev$hidraw(&(0x7f0000000440), 0x243c2917, 0x14a042) write$hidraw(r0, &(0x7f0000000040)='F', 0xfffffe41) (async) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000480)={0x465, "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"}) (async) r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x243c2917, 0x18a843) write$hidraw(r1, 0x0, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0x78, 0x2a8201) 14m49.683241581s ago: executing program 3 (id=2220): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x80000001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x2, 0x400000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x2000, 0x0, r2, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0)={0x0, 0xff37, 0x2, 0x1, 0x152}, &(0x7f0000000280)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x381b, 0x0, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff11"], 0x30}}, 0x0) 14m49.593205698s ago: executing program 3 (id=2221): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xb00, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x2}}}}}}, 0x0) 14m48.942066414s ago: executing program 3 (id=2225): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = eventfd2(0x5bb, 0x80801) read$eventfd(r1, &(0x7f0000000080), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000540)={0x101, 0x3, "fa6123f6fa7e9aaf68221e6cd07d3e6534ff1c58a0a53b609b72eea22482940d", 0x5, 0x6, 0x4, 0xffffffff, 0x140}) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/nfs', 0x0, 0x0) mknodat(r9, &(0x7f0000000280)='./file0\x00', 0x800, 0x80000800) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x4}) 14m48.875217956s ago: executing program 34 (id=2225): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = eventfd2(0x5bb, 0x80801) read$eventfd(r1, &(0x7f0000000080), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000540)={0x101, 0x3, "fa6123f6fa7e9aaf68221e6cd07d3e6534ff1c58a0a53b609b72eea22482940d", 0x5, 0x6, 0x4, 0xffffffff, 0x140}) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/nfs', 0x0, 0x0) mknodat(r9, &(0x7f0000000280)='./file0\x00', 0x800, 0x80000800) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x4}) 9m47.92006049s ago: executing program 2 (id=4031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010004b04000000eafcffffff7a000000", @ANYRES32=r2, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e0000000000f4e25b2a"], 0x40}}, 0x8080) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010004b04000000eafcffffff7a000000", @ANYRES32=r2, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e0000000000f4e25b2a"], 0x40}}, 0x8080) (async) 9m47.87071594s ago: executing program 2 (id=4032): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0x2, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) 9m47.870469192s ago: executing program 2 (id=4033): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000d14000/0x4000)=nil, 0x4000, 0x16) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x1, @time}) tkill(r2, 0x7) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000100)={{0x7}, 0x0, 0xfffffffd, 0x9, {0x0, 0x44}, 0x7}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f00000032c0)=""/4103, &(0x7f0000000040)=0x1007) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) 9m47.68017524s ago: executing program 2 (id=4035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="66d6000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'batadv_slave_1\x00', 0x1000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x40002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000018001301180000000000000002000000000fff000000000008001e0007000000"], 0x24}}, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f00000000c0)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights], 0xfffffdc8}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r5, &(0x7f0000000000), 0x2000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) read(r6, &(0x7f0000000000), 0x2000) close(r6) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x8914, 0x20000000) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='qdisc_reset\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) 9m47.610201118s ago: executing program 2 (id=4036): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 9m47.609864525s ago: executing program 2 (id=4037): mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0xd02320}], 0x1, 0x3}) 9m47.515542053s ago: executing program 35 (id=4037): mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0xd02320}], 0x1, 0x3}) 9m26.839334411s ago: executing program 4 (id=4133): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) sendto$l2tp6(r0, 0x0, 0x0, 0x4048814, &(0x7f0000000100)={0xa, 0x0, 0x3, @private1, 0x0, 0x40000000}, 0x20) 9m26.732440838s ago: executing program 4 (id=4134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x1002, 0xff03, 0x3d8, 0x1ec, 0x0, 0xf00, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1ec}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010102, @rand_addr=0x64010101, 0x4, 0x1}}}, {{@arp={@remote, @remote, 0xff000000, 0x80800000, 0x6, 0x4, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x19}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000008440)=""/102392, 0x18ff8}], 0x1, 0xfffffe01, 0x0) r3 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000001280)=0x478d, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='.\\'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f000000e0c0), 0x10010) 9m26.13037521s ago: executing program 4 (id=4137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000005000005000400000000000900020073797a3100000000050001"], 0x5c}}, 0x0) 9m26.00016115s ago: executing program 4 (id=4139): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x1, 0x0, 0x0, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xf1f6, 0x13580, 0x0, 0x101}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x40047438, 0x20001400) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x84, 0x80, 0x100000}, 0x20) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) io_uring_enter(r3, 0x54, 0x0, 0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 9m25.976516289s ago: executing program 4 (id=4140): r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x80000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) 9m25.68894379s ago: executing program 4 (id=4144): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) (async) r0 = socket$inet6(0xa, 0x80002, 0x1f0ea) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 9m25.601334412s ago: executing program 36 (id=4144): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) (async) r0 = socket$inet6(0xa, 0x80002, 0x1f0ea) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 8m12.030259343s ago: executing program 7 (id=4573): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x2, 0x2}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x4043) r2 = getpid() r3 = socket$packet(0x11, 0x2, 0x300) flistxattr(r3, &(0x7f0000000040)=""/7, 0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000300)={{0x9, 0x2, 0x10, 0x0, 'syz0\x00', 0xfffffffd}, 0x2, 0x10000000, 0x3e, r2, 0x0, 0x0, 'syz1\x00', 0x0}) 8m12.016825356s ago: executing program 7 (id=4576): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 8m11.951200887s ago: executing program 7 (id=4578): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) (fail_nth: 1) 8m11.808772349s ago: executing program 7 (id=4583): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) 8m11.719346397s ago: executing program 7 (id=4584): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa080500000000000000080004907800000000e000000100a60000000c907801040000"], 0x32) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x3, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x0, 0x0, 0x34324152, 0x9, 0x0, [{0xfffffffe}, {0xfffffffe}, {0x7, 0x6}, {}, {0x0, 0xfffffffd}, {}, {}, {0x1, 0xfffffff7}], 0x0, 0x0, 0x4}}) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x2000000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3091, 0x0) chdir(&(0x7f0000000280)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x1ff, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000100)={0xe, 0x4}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000007000000080000000080000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES64=r3, @ANYRES32, @ANYBLOB="0000001002000000000000ba0c6ec4112ef704cf4a8ec85c6f000000"], 0x50) getgid() 8m10.799350176s ago: executing program 7 (id=4589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) syz_io_uring_setup(0x110, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x0, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}]}, 0x20}}, 0x140) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffcfe, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x8, 0x9, 0x0, 0x1, [@typed={0x4}]}]}, 0x34}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x44040}) unshare(0x22020600) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x3}, 0x4}, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xcb9}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd1cb}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x4}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x9, 0x4}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x3c}}, 0x0) 7m55.463375622s ago: executing program 37 (id=4589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) syz_io_uring_setup(0x110, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x0, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}]}, 0x20}}, 0x140) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffcfe, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x8, 0x9, 0x0, 0x1, [@typed={0x4}]}]}, 0x34}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x44040}) unshare(0x22020600) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x3}, 0x4}, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xcb9}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd1cb}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x4}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x9, 0x4}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x3c}}, 0x0) 4m8.962028162s ago: executing program 6 (id=5734): r0 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x90102, 0x0) r1 = openat$uhid(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) pipe2$9p(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r3, &(0x7f0000001100)={0x14, 0x49, 0x1, {0x80, 0x4, 0x7}}, 0x14) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) r4 = openat$random(0xffffff9c, &(0x7f0000001140), 0x48082, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000001180)={0x3, 0x74, "99e592a3f0d61defcdf0a00741070254227fd9226a22db3b09cba4f5b2c8697b618d9be00f8dc7768afc5882552baba03dfae8a3b63d6869c311c2f8a1cc5028c33236621ee67334b32ce7c3a3547af5c239173b165ea9ac30a0da84fdcf5bb407dfef56deb0a7a0878ce999bb0bdfabb6f6a9ce"}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001280)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000001380)=0xe4) lstat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240), 0x200000, &(0x7f0000001480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@posixacl}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@cachetag}, {@privport}, {@mmap}, {@ignoreqv}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@seclabel}, {@flag='posixacl'}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/uhid\x00'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@euid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x33, 0x65, 0x0, 0x66, 0x35, 0x63, 0x33], 0x2d, [0x65, 0x64, 0x32, 0x30], 0x2d, [0x39, 0x63, 0x37, 0x30], 0x2d, [0x63, 0x30, 0x34, 0x32], 0x2d, [0x66, 0x30, 0x42, 0x4, 0x63, 0x39, 0x65, 0x36]}}}, {@euid_eq={'euid', 0x3d, r7}}]}}) stat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000016c0)={{0xa, 0x4e23, 0x200, @private1, 0x6}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0xfff3, {[0x9, 0x8, 0x3, 0x8, 0xfc, 0x7, 0x42, 0x145]}}, 0x5c) r8 = open$dir(&(0x7f0000001740)='./file0\x00', 0x101000, 0x2c) readlinkat(r8, &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)=""/210, 0xd2) setxattr$trusted_overlay_upper(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900), &(0x7f0000001940)={0x0, 0xfb, 0x4f, 0x4, 0xfc, "7915a4c1dabdc9bfd130234b7db92cf0", "a81f0656170deccb051361f21bb25f8bafffbc92c673c2768b512c9850edbf4c5928b3b724bcd79e55a33eb606288c00ed475e7cd05abb9a6fb1"}, 0x4f, 0x0) fcntl$setstatus(r2, 0x4, 0x0) r9 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f00000019c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) ioctl$BTRFS_IOC_QGROUP_CREATE(r9, 0x4010942a, &(0x7f0000001a00)={0x1, 0xd}) r10 = syz_open_dev$sg(&(0x7f0000001a40), 0x0, 0x8240) ioctl$SG_SCSI_RESET(r10, 0x2284, 0x0) r11 = creat(&(0x7f0000001a80)='./file0\x00', 0x8) ioctl$BLKTRACESTOP(r11, 0x1275, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000001ac0)={0x6, r11, 0x2}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000002340)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002300)={&(0x7f0000001b40)={0x7b4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2a}}}}, [@NL80211_ATTR_FRAME={0x5b4, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3529}, @device_b, @device_b, @initial, {0x2, 0x584}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x0, 0x4, 0x53, @val={0x10, 0x1, 0xaf}, [{0xdd, 0x5d, "8430557426318274859414db72d609ca8999543687787823ab64d720f8487963ddfb00365af7d07e9213f2f9fa5c0af371cb160562dc82e0677812341e8ed941cc85f31a20110f38b39a36442b3f43a3f42ffeff4afcf572179e82e64f"}, {0xdd, 0xca, "d20f28b3478e3d552b88c48ac8f9d14d100c8bea99c3d4acd4e2078c37a86c92af0877327e9b055aa687e835cef6fa3ef935330069a288c65c6d63947ff5088269da370f2b82e21dc58f3f3d9b3474038c9dcca38971dba61d621a2ce5b76e09fd83bfc05c66d7e7554553fe952cec80f46ac4e8fff01e12d13b7b4be131bcd72a23c5e9070141d462f4dbc9a011af7f2a041989d04a20a447d7960243f267eed4187835fa08b3907c91ac5d19c28eb22838e77931fed0d817c44b1a03ffd7f712e81525904213e8d572"}, {0xdd, 0x8e, "631a0929b447c4d846af77fc3ab0beea5e963eab1215520a376d81f3d067a870ef47f627c13def0a031ae6e732d03423e19fc345b66f11bbe9c88a5f3aa6ee9127dd18c5c428130de954397a027b9b67e2b9a906c14178f6f5a9f6e5d80f88008828089dd5f9335a2859962822f12d3d0457f9ac314995b63a48e7a54bf658264c317a799fca260adb0fa52e9dab"}, {0xdd, 0x44, "9ee73d9dc32ec213a84c7f28d3f5908bcea1ae96b4b6ac9caab8b0912a2b45220087536f39b9bd303dfc5275f147fa0b639df9cb0d9e3557b24688b08f6bd10ab22a5907"}, {0xdd, 0x9f, "2515a1768b0b7be2a5df8585b5661835a2ef346c91af4c2428402b8ed1b65e5d535dce7821cb03c2366920ff322f453641598a0a722247d9496e18cc9c77a5197779241ce3cb429a2933f1251a995b8f0f62d29500fc6beac8eecc267d3664218c77a07bfb0e430b2dac285c99edf68a340d74ef365b9e370b8aba13c6fa820add68e74d6cfb76f772d52b751cc6a35578d6106ff80c2d17dac9f58d90f019"}, {0xdd, 0x8e, "0c305e671d6c81a84b29ab309491abac60852732451854be038aa15212b447313a2df22873d14fd5aff3c8885df196bf7c2f87b50b9dfc1e7da926c93251b2f7503f98c7f9223f61fabc8770a25b45f79a69b60a713c028ecc7831da3920177577d5c8ed2b9f460d3fc826aa4d6cd0cc320390b7f03351aedc084575c27e0c894479bf90457810a8359552b9b64f"}, {0xdd, 0xce, "09f46cac357e0e9343c51c37467715bb7fe63bc25888c9991ce62547ef391cc1fcb2e60f350118070a9d509363429fdf63415e152e787a16040df66762f2648f65c6161243e225bf1171be7d399d1ce2e6e69ccd025114b46f5a8bd3c8b9556521fd2be5d48db1803d8b6fd0dbc2f9c9e1d7a07c1d5ed0f1b7cb80fa1d5e4f483f01938bff0b44ed0298bcec7d5a360b9a2c15c46cf56d84c7b2b55ffb0981ab3ca98d8f558bf8dc7034417e529a8da5553f0fb593c605bb53a359235aaa481f7331c504fe79390e2c061c26dda4"}, {0xdd, 0xe2, "5f0e31bd6e7d076b4257e41430bca31581a06bb33e2d4add8b546c61141d4c5ad686477c01f25d73bcfb225f29c53ad5a4ebd5687997fca4cf0c76e78c77b8a3fb3b67b8981c085f5164528ff8bd9e6c0f510dcd0bb323a0e0e11a6d05da934d072ec8b414879dbc70b6853552760b70138e823d6ea409e8bb6c54bbbfc0ddb030c9d849ac0224f241b6f4bf92282655082e7517706ae150e6ffa44a42de7148ed40c50e077fd69bd6e6fee03e958fc9dd428a450b2bf76eee2fa18795ffcb444d459fb8ac34a087ef8e46208ace2542f6cb4ccff7b0804ac235c03c64f0cf18381f"}, {0xdd, 0xa3, "b66ef836d896f728abfd9d616c278f5cbc924c43bd9d8dbbb7797eda4e3285a6c562b95d9aaed28904b1c418a527867c7208a9be540c2c456aea963df471ba89ed201366e8460320914cd30fe124449a7f9b833cef4cd4567904d39c9d0d15ca745483147167bbde27e16eae6c786946649539398a856904709367593bf153db4b7b494a2e4eea3937de2304f8611963f08fe232323492bf97f0cb00590793e6a33a5b"}]}}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8}, @broadcast, @device_a, @random="4a417f1df8d0", {0x8, 0x553}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x27, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x86}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fd}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x129, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x12fb}, @device_b, @broadcast, @initial, {0x4, 0x5c2}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x3, @random=0x7, 0x204, @void, @val={0x1, 0x2, [{0x18, 0x1}, {0x9, 0x1}]}, @val={0x3, 0x1, 0xb2}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x3c, 0x6}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0x1, 0xff, 0x40}}, @val={0x76, 0x6, {0xff, 0xf6, 0x35, 0x8}}, [{0xdd, 0xdb, "e7a465a658eff78f2c9d4be420113ec309797f781da0398ff0e4bbb0f45559a097ce910fe2a743a03c2a29e8d75bcd0a33c4eb8bf57e665d7bcfd437702947403287eedcfc0998d921d4cb0c66bdda13f350f274dd2e4df596f87bd42b971e55dbb411147adea7fd2c5e035f33a9578f65663d1782e124ac5c2d8832401e9cf3725a8c0075c9ec6dffc6a601a8b571538ac153bc488f8c7334ca594743342742fb83d0530a1bfc33352aa86710e751e45e87cbe3b8e05b20b72002b194603aa4a34832fb65b87d602351a1a8108d3bb65977c48eb6ed4e2191ed99"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x4040000}, 0x4800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)=@bridge_delvlan={0x64, 0x71, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x50, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x95, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000024c0)={r12, 0xffffffffffffffff}, 0x4) io_uring_register$IORING_REGISTER_FILES(r12, 0x2, &(0x7f0000002500)=[r9, r13, r12, r10, r12, r12], 0x6) syz_open_procfs(0x0, &(0x7f0000002580)='net/igmp6\x00') 4m8.961221058s ago: executing program 6 (id=5735): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000001480)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x40000000) 4m7.607403892s ago: executing program 6 (id=5745): bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(ccm_base(ecb(arc4)-generic,sha384-arm))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}, 0x1, 0x0, 0xc000000}, 0x0) 4m7.552929973s ago: executing program 6 (id=5748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300f90000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r5, &(0x7f0000000140)='./file0/file0\x00', 0x272) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r8], 0x90}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100028bd7000fddbdf25020000000c00060002000000000000000c000800ff010000000000000c000800020000000000000005000a00000000000c00050006000000000000000800010000000000"], 0x54}, 0x1, 0x0, 0x0, 0x5eb118f056b77fa8}, 0x40) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000540)={0x0, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000580)=[0xe], &(0x7f0000000580), &(0x7f00000005c0)}) 4m7.345224271s ago: executing program 6 (id=5750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x177f, &(0x7f0000000140)) r1 = socket(0x2b, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_setup(0x22, &(0x7f00000003c0)=0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x400000000812d000, 0x9, 0x3, 0x8, 0x8, r6, 0x0}]) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 4m7.004777574s ago: executing program 6 (id=5753): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40080, 0x0) io_setup(0x4, &(0x7f0000010440)=0x0) io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xfdfe}]) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(0x0, r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes-aesni)\x00'}, 0x58) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 4m6.933585898s ago: executing program 38 (id=5753): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40080, 0x0) io_setup(0x4, &(0x7f0000010440)=0x0) io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xfdfe}]) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(0x0, r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes-aesni)\x00'}, 0x58) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 6.76624448s ago: executing program 0 (id=6845): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b0b03c80026c07c7b85a171ad095f"], 0xe) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2000011) 6.765826077s ago: executing program 0 (id=6846): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x40}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x64}}, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e1f, 0x0, @rand_addr, 0x2}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@acquire={0x130, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in=@remote, @in6=@private0}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x130}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000000)=0x1000, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000004000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010088000003"], 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x11) 4.968338232s ago: executing program 9 (id=6860): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x70}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0x20002002}) 4.874775705s ago: executing program 9 (id=6861): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="190000000400000008000000ffffff7f00000000", @ANYRES32, @ANYBLOB="0700000000000000004bc93a1fbebec6bf4419ac0b3fc83b41d3d9436fac8635b3db4b9e34ebb71f76146c49287f7a971277bf67dde7ee1c079cb0e174367854981f26b3c4b0f7d165fb39976a7de31d18175b1da5e2c8bb57aa5b96a7ecf76cc5e2255604de7b0a6266dea348c3b3f8953753c93e817dec5cd4b2d1a984f1d720332ab14d909369d71e1a0691cdfa6bc449d8b3bd8ee052394b97aa8a93f4ef1e56", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000800) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000090002000100000000000000000200000000030005000000000002000000e00000010000000000000000ac3be9fc8e3e9a4635450cfc123b259ce69aa9e6d3807d0401843d309c0d423a0d51e6332bc7ab467f4456a34eeb69441d8c07480709c4b6af0706503e16888ff52abdb16178f61a65c8"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r6 = openat$uinput(0xffffff9c, &(0x7f0000000700), 0x0, 0x0) r7 = openat$snapshot(0xffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) ioctl$UI_GET_VERSION(r6, 0x405c5503, &(0x7f0000000780)) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x41000}, 0x24028024) syz_emit_ethernet(0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="aaffb1aaaaaaaaaaaaaaaaeaaabb001104aa7078d1d9c5fae9b31703030e9e6f70f6deef66a9b19d579ea9c012269eb930"], 0x0) 4.874247123s ago: executing program 0 (id=6862): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x38080862, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x4920e7af812c3f03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0x0, 0x2) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000200000100000a98000000060a0b0400000000000000000200fffc6c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f080001400000000034000580090001006d657461000000002400028008000240000000100800014000000012080001400000000e080002400000000e0900010073797a30000000000900020073797a32"], 0x2e0}}, 0x20000840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.934498647s ago: executing program 9 (id=6865): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x3ff, 0x100) write$UHID_INPUT(r0, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006) pipe(&(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', @random='\a\x00\x00 \x00'}) 3.804142517s ago: executing program 5 (id=6868): userfaultfd(0x1) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x3e1902, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000840)) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)="00214717a70700000000030600710a5e31163ceb9d04712000000005000000182ce0ab6d000041a15be2d9d13cd1cb0c238e61cfd6a5d7cd0eaa50e027db032ddbfe85e53b87eb950a450000000000000000", 0x52}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000440)={0x5, [0x4, 0x5, 0x1c5], [{0x94d, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xd, 0x1, 0x1, 0x1}, {0xa08, 0x6, 0x0, 0x0, 0x1}, {0x0, 0x7, 0x1}, {0xf, 0x800, 0x1}, {0x4d37, 0x400, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x400, 0x0, 0x1}, {0x500, 0x8}, {0x8001, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x7}, {0x5, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1, 0x0, 0x1}], 0x6}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaa"], 0x22) r4 = syz_io_uring_setup(0x3254, &(0x7f0000000100)={0x0, 0xae31, 0x10, 0x2000000, 0x17b}, 0x0, &(0x7f0000000180)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000740)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}) umount2(&(0x7f0000000180)='./file0\x00', 0xb) io_uring_setup(0x2004d63, &(0x7f0000000080)={0x0, 0x0, 0x410, 0xfffffffd, 0x52, 0x0, r4}) 3.68776276s ago: executing program 9 (id=6869): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x2}, {0x4, 0x5, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0xff) socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRESOCT=r5], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r6}, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, 0x0}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000300)='./bus\x00', 0x0, 0x200, &(0x7f0000000480)) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc08c5332, &(0x7f0000000400)={{0x8}, 0x1, 0x0, 0x4, {0x0, 0x4}, 0x4, 0xfffffffc}) 2.751873282s ago: executing program 9 (id=6870): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89b1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 2.711088698s ago: executing program 8 (id=6871): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xfffffffffffffd33, 0x0, &(0x7f0000000340)="e00cbd73001a000000000000a9a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x5, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x81, 0x40, 0x8, 0xff, 0x1, 0xe5, 0x81, 0x31, 0x2, 0x12, 0x1, 0xff, 0x0, 0x5}, 0xe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000b00)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) openat$nmem0(0xffffff9c, &(0x7f00000000c0), 0x101400, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000240)=r1}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/bnep\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0x1ef, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000740)}, 0x1c) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) r7 = dup(r6) write$char_usb(r7, &(0x7f0000000240)="259772bd9402000000000000008c19f3da78ce7f427cb49491881fac78851681a78c80492fb19337f4077f7ec863", 0x2e) read$FUSE(r7, &(0x7f0000003980)={0x2020}, 0x2020) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000040000000000000000030000", @ANYRES32, @ANYBLOB="ff0000000000000095e0681788e3f6771a9951faff7ae404bb20e709958bae83e02233e9ea0b02f75ca45c96076bfe38f9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000050000000900"/28], 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r9, {r9}}, './file0\x00'}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = dup(r12) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r13, 0x4068aea3, &(0x7f00000004c0)={0x8f, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x11, &(0x7f0000000880)=ANY=[@ANYBLOB="01f100000500000018110000", @ANYRESOCT=r6, @ANYBLOB="000000000000f8ffffffb7b2e08659f519b05d04a0c7fc5c00d53b56c10000000000008500000082e50000181600000000000500"/77, @ANYRES32=r2, @ANYBLOB="000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000480)='GPL\x00', 0xe71, 0xf5, &(0x7f0000000640)=""/245, 0x41100, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x5, 0xe, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r4, r5, r0, r8, r0, r9, r13], &(0x7f0000000880), 0x10, 0x9, @void, @value}, 0x94) 2.651421479s ago: executing program 9 (id=6872): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd70006a3b54166c343d1783c961000000002b0000000c00050000000000000000000a0001007770616e30000000"], 0x2c}}, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) r4 = getpid() lsm_set_self_attr(0x68, &(0x7f00000001c0)={0x67, 0x5f6, 0x18a, 0x16a, "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"}, 0x18a, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000008008e0000000000"], 0x4c}}, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r7 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r7, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r8 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r9, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r9}], 0x1, 0x4) dup2(r9, r10) fcntl$setown(r9, 0x8, r8) tkill(r8, 0x13) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) r12 = openat$full(0xffffff9c, &(0x7f0000000380), 0x80, 0x0) syz_clone3(&(0x7f00000003c0)={0x100000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f0000000280)=""/230, 0xe6, &(0x7f00000000c0)=""/122, &(0x7f0000000200)=[r2, r3, r4, r7, r8, r11], 0x6, {r12}}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000060000000000000000000850000001700000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r12) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 2.651024498s ago: executing program 0 (id=6873): write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) r0 = socket(0x2b, 0x6, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f00000006c0)=""/102400, 0x19000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="d0600b401f39b97bf93ecf49759e94b4519a0de2f87e5c417273a5dce55efb335b22dce602ca972f116438489fdab766171401f130eb1c9e78ec70db15755f97ca197fc3da0b85ea0d2f7bdffcc1caa5810430b5448f4ae272489f5c7ac1e4660c4f7b0446d5457181924a3d4dbfdfee93a14379adfe7c1effdacb69a945", 0x7e}], 0x1, 0xa, 0x6e6f2b53, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="023175fa090000020000000080000000"], 0x10}}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000020e6fac62e6a727255d52f257a293de82cbca6c4bf897400020000e51642e6f9dea92515f17fa133161bc4118edc2adec2b0ec305099ec0e8e86ab9e09b536ac19553233b1732323d0fa424675b0053e2f2fd9982de629dff76913eec87fe4a0552c0da65f0cb0ed3897c04e36ef9af0837c62ce9359cf78b21ea144a02cc24b04e6"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg$inet(r5, &(0x7f0000005240), 0x264e33, 0xff88) 2.202678887s ago: executing program 5 (id=6874): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000b40)="af9c45f82a97157ab6c83a177168e6a8531d537dfe1e4095766e2a4905b23e0cd9848897d36b102ff435255d78488e72b60f59fc566bb0cec6da92a408215be2acd2a72eafd17f351cd64ed3e05058490df7682739a13bc2cc8d4d5dfda52d8097c2249e004d52698829315be8e43fed236efe4d610058aca120", 0x7a}, {&(0x7f0000001040)="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", 0x114}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000f00)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c432193989489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="755ca9bd3fd87456466cd4ab09930a7972d7df968a6a6114f3db5548c265a1c0eadf9dc81f4de7a659bf2fd963b62ab6a3291b994ce3e68d29974cbd144ef4803bb11e49afd9e9f6c69e23d94b880d424a56af70b7b3f69ca07b85cd6fa37d39078bf235b355d36147cab8073e1818c615ae34fb38d8c92049fbd2d371eb493d8162d8836b8f9295d17e445e49134b4f94932984566c6d1d7b479a1d292cd39caf50ba08e39a6ac5b4d565b0f4eea211688dfcffad93d9c534ad1c8b2517dcf778797a45", 0xc4}], 0x1, &(0x7f0000001200)=ANY=[@ANYBLOB="800000000000000007000000070b450a010101ac1e000183073cac1e0101071b7dac1414bb64010101ac1414aaac1414bb00000000ac1414bb860916ba75d2956527442c2833ac1414bb00000003e000000100000004e0000002ffffff5dac1414bb0000cf107f000001000001ff8310bbded4a7067d627ba07946ab21900000100000000000000001000000000100000d0000000000000001000000000000000d"], 0xb0}}], 0x3, 0x4004880) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/firmware_class', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, 0x0, 0x880) 2.192506964s ago: executing program 5 (id=6875): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000001480)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x40000000) 1.644853833s ago: executing program 8 (id=6876): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02005d000005000000dbae960000000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000a2ffffb7020000080000001823"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$addseals(r0, 0x409, 0x7) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f00000003c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) close(0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x4000000000000026, 0x0, 0x0, r6}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r0, 0x0, 0x0, 0x2000}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000290000003600000067000000000000001400000029000000360000003300000000000000aa4ebaef0f188bb469e23440b9034ba76a38ccffe09437dff9887a41d051dd03b3ebfb29f06dc5ef66af8807ddff656152d19d5bfa9368ad358122dfcfcb1598bb344064006a66fcea6a13d151d4"], 0x28}}], 0x1, 0x20000045) 1.220895879s ago: executing program 0 (id=6877): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x1005, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_mr_cache\x00') io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c008800da3313f0667ac85c355f199fb52855e9beb066c4f77b7e77a61aa0d527e22739a2e0db6d42e77539675a59d9886fd41ae5aa377a914771681fef37a70ee336dd9b461b2cd05170205e1884d3c504b75c7b0be2830e9fed452203bad40dc594e1f6a017b725a7eeb2133ba0c5f9be5a05e6c6bbbc9e02b7ee0120855370a7d138f3a7fd9ebeb57012fc30fbf593ce614e35f392f1e83ecdda9cbb251483bf518ba892387a2f"]) close_range(r0, r0, 0x2) read$FUSE(r2, &(0x7f0000009800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="50010000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000060000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00group_id\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000080000000000000067726f75705f696417f580b498b2e790fb942b73eb5b2dd9085037f1daba547789f424863979a6dfafe7fc97c4f71ecc9009e47757ebafc3e3a4adbbba9c3a76cf2bb02f"], 0x0, 0x0}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e01, @remote}, 0x2, 0x2, 0x2, 0x2}}, 0x26) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r5, 0x111, 0x5, 0x0, 0x20001f00) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xa}, &(0x7f0000000280)=0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) 869.175907ms ago: executing program 5 (id=6878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x4b0}}, 0x0) r3 = dup(r1) write$binfmt_misc(r3, 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x801) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc050005000200"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 631.577225ms ago: executing program 8 (id=6879): prctl$PR_SET_MM(0x44, 0x7, &(0x7f0000fff000/0x1000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x6, 0x3, 0x4, 0x7ff, '\x00', 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$VT_WAITACTIVE(r0, 0x5607) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x2287, &(0x7f0000000000)) r3 = gettid() kcmp(r3, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000001780)={@local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "0f82d5", 0x44, 0x2f, 0x1, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0x7, 0x3, 0x1, 0x0, 0x1, 0x1}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x3, {{0x3, 0x2, 0x66, 0x1, 0x1, 0x1, 0x5, 0x5}, 0x2, {0x0, 0x12, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x7}}}}}}}, 0x0) syz_extract_tcp_res(0x0, 0x40, 0x9) prlimit64(r3, 0xa, &(0x7f00000000c0)={0x3, 0x7}, 0x0) 584.822013ms ago: executing program 8 (id=6880): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) set_thread_area(&(0x7f0000000000)={0xffffffff, 0x0, 0xfeff}) 414.101831ms ago: executing program 5 (id=6881): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) shutdown(r2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000100)) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r5, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) lseek(r6, 0xd7, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000210001000000000000000000020000000000000000000000080017"], 0x2c}}, 0x4000) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x2) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r9, &(0x7f0000000080)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r9, &(0x7f0000001780), 0x2) close_range(r8, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r10, 0xf505, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r10, 0xc01064b3, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) 299.668777ms ago: executing program 8 (id=6882): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x2c, 0xade0d668f5a4bdb3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x3}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0x3ff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1a6e], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3c6, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xa]}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="180000002a00090000000000070000000400002cd9a22f3753640cb20f09eb2560071e1cf1f528c66448da7cbca24b9de2fc105f79fba2d4ee6f30403a77ce4d6e1ae121cbab17291db5210c5b0a68170564dbd560ca5c20a42b32d815d4e9cfcdaf11ff08eea4eb12b8f8e909bf4d89c9f3237bab3ae6cdc7d080548f2e73d0d3f0471bd0b820714e0129ce0f3cc2b109056da7c657ce7d9f2defe5c6e7954a3745d654885d89a92cfcc2271cf77fd4843800"], 0x18}, 0x1, 0x3000000}, 0x20000080) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) 95.731723ms ago: executing program 0 (id=6883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x4b0}}, 0x0) r2 = dup(0xffffffffffffffff) write$binfmt_misc(r2, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x801) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc050005000200"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 89.136515ms ago: executing program 8 (id=6884): pipe(&(0x7f00000001c0)) capget(0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x9d68}) r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8", 0x3, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=6885): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17c) read$FUSE(r0, &(0x7f0000000f00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, r1, {{0xfffffffffffffffe, 0x0, 0x2}}}, 0x28) (fail_nth: 9) kernel console output (not intermixed with test programs): val 1, probability 0, space 0, times 0 [ 1135.148413][T29231] CPU: 2 UID: 0 PID: 29231 Comm: syz.0.6183 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1135.152033][T29231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1135.155624][T29231] Call Trace: [ 1135.156763][T29231] [ 1135.157772][T29231] dump_stack_lvl+0x16c/0x1f0 [ 1135.159384][T29231] should_fail_ex+0x497/0x5b0 [ 1135.160984][T29231] ? fs_reclaim_acquire+0xae/0x150 [ 1135.162925][T29231] should_failslab+0xc2/0x120 [ 1135.164583][T29231] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1135.166571][T29231] ? __alloc_skb+0x2b3/0x380 [ 1135.168174][T29231] __alloc_skb+0x2b3/0x380 [ 1135.169817][T29231] ? __pfx___alloc_skb+0x10/0x10 [ 1135.171564][T29231] ? __mutex_trylock_common+0xea/0x250 [ 1135.173150][T29231] netlink_dump+0x6af/0xcc0 [ 1135.174767][T29231] ? trace_contention_end+0xea/0x140 [ 1135.176561][T29231] ? __pfx_netlink_dump+0x10/0x10 [ 1135.178281][T29231] ? find_held_lock+0x2d/0x110 [ 1135.179927][T29231] ? lock_acquire+0x2f/0xb0 [ 1135.181569][T29231] ? netlink_lookup+0x3d/0x270 [ 1135.183191][T29231] __netlink_dump_start+0x6d9/0x980 [ 1135.184970][T29231] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 1135.186663][T29231] xfrm_user_rcv_msg+0x899/0xb30 [ 1135.188345][T29231] ? kfree_skbmem+0x1a4/0x1f0 [ 1135.189937][T29231] ? find_held_lock+0x2d/0x110 [ 1135.191554][T29231] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1135.193426][T29231] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 1135.195131][T29231] ? __pfx_xfrm_dump_sa_done+0x10/0x10 [ 1135.196966][T29231] ? __lock_acquire+0x163e/0x3ce0 [ 1135.198702][T29231] ? __mutex_trylock_common+0xea/0x250 [ 1135.200559][T29231] netlink_rcv_skb+0x165/0x410 [ 1135.202192][T29231] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1135.204029][T29231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1135.205812][T29231] ? __mutex_lock+0x1a6/0x9c0 [ 1135.207455][T29231] ? netlink_deliver_tap+0x1ae/0xcf0 [ 1135.209249][T29231] xfrm_netlink_rcv+0x71/0x90 [ 1135.210866][T29231] netlink_unicast+0x53c/0x7f0 [ 1135.212501][T29231] ? __pfx_netlink_unicast+0x10/0x10 [ 1135.214295][T29231] ? __phys_addr_symbol+0x30/0x80 [ 1135.216001][T29231] ? __check_object_size+0x488/0x710 [ 1135.217784][T29231] netlink_sendmsg+0x8b8/0xd70 [ 1135.219410][T29231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1135.221197][T29231] ____sys_sendmsg+0x9ae/0xb40 [ 1135.222815][T29231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1135.224589][T29231] ? get_compat_msghdr+0x11b/0x170 [ 1135.226311][T29231] ? __pfx___lock_acquire+0x10/0x10 [ 1135.228062][T29231] ___sys_sendmsg+0x135/0x1e0 [ 1135.229664][T29231] ? __pfx____sys_sendmsg+0x10/0x10 [ 1135.231408][T29231] ? lock_acquire+0x2f/0xb0 [ 1135.232964][T29231] ? __fget_files+0x40/0x3f0 [ 1135.234538][T29231] ? fdget+0x176/0x210 [ 1135.235928][T29231] __sys_sendmsg+0x117/0x1f0 [ 1135.237487][T29231] ? __pfx___sys_sendmsg+0x10/0x10 [ 1135.239212][T29231] ? __fget_files+0x244/0x3f0 [ 1135.241010][T29231] __do_fast_syscall_32+0x73/0x120 [ 1135.242769][T29231] do_fast_syscall_32+0x32/0x80 [ 1135.244459][T29231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1135.246599][T29231] RIP: 0023:0xf745e579 [ 1135.247985][T29231] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1135.254486][T29231] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1135.257305][T29231] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1135.260014][T29231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1135.262838][T29231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1135.265517][T29231] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1135.268262][T29231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1135.271123][T29231] [ 1135.274864][T29237] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1135.557321][ T5311] Bluetooth: hci3: command tx timeout [ 1135.706924][T28591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1135.714593][T28591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.720329][T28591] bond0 (unregistering): Released all slaves [ 1135.728514][T28591] bond1 (unregistering): Released all slaves [ 1135.765260][T29237] IPVS: Unknown mcast interface: syzkaller1 [ 1135.771481][T29243] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6186'. [ 1135.848521][T28591] : left promiscuous mode [ 1135.860498][T29247] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1136.226849][T29256] lo speed is unknown, defaulting to 1000 [ 1136.741170][T28591] hsr_slave_0: left promiscuous mode [ 1136.746906][T28591] hsr_slave_1: left promiscuous mode [ 1136.750652][T28591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1136.753047][T28591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.766850][T28591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1136.773225][T28591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.872089][T28591] veth0_macvtap: left promiscuous mode [ 1136.873679][T28591] veth1_vlan: left promiscuous mode [ 1136.875171][T28591] veth0_vlan: left promiscuous mode [ 1136.969558][T28591] pimreg (unregistering): left allmulticast mode [ 1137.639262][ T5311] Bluetooth: hci3: command tx timeout [ 1139.706326][ T5311] Bluetooth: hci3: command tx timeout [ 1139.784951][T29269] lo speed is unknown, defaulting to 1000 [ 1139.788408][T29272] FAULT_INJECTION: forcing a failure. [ 1139.788408][T29272] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.793077][T29272] CPU: 2 UID: 0 PID: 29272 Comm: syz.9.6191 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1139.797107][T29272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1139.801140][T29272] Call Trace: [ 1139.802445][T29272] [ 1139.803587][T29272] dump_stack_lvl+0x16c/0x1f0 [ 1139.805403][T29272] should_fail_ex+0x497/0x5b0 [ 1139.806808][T29272] should_failslab+0xc2/0x120 [ 1139.808286][T29272] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1139.810261][T29272] ? skb_clone+0x190/0x3f0 [ 1139.811984][T29272] skb_clone+0x190/0x3f0 [ 1139.813613][T29272] netlink_deliver_tap+0xb26/0xcf0 [ 1139.815291][T29272] netlink_unicast+0x6b4/0x7f0 [ 1139.816621][T29272] ? __pfx_netlink_unicast+0x10/0x10 [ 1139.818079][T29272] ? genl_rcv_msg+0x4bd/0x800 [ 1139.819323][T29272] netlink_ack+0x6a5/0xb20 [ 1139.820529][T29272] netlink_rcv_skb+0x327/0x410 [ 1139.822057][T29272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1139.823385][T29272] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1139.824751][T29272] ? down_read+0xc9/0x330 [ 1139.825975][T29272] ? __pfx_down_read+0x10/0x10 [ 1139.827270][T29272] ? netlink_deliver_tap+0x1ae/0xcf0 [ 1139.828614][T29272] genl_rcv+0x28/0x40 [ 1139.829679][T29272] netlink_unicast+0x53c/0x7f0 [ 1139.831028][T29272] ? __pfx_netlink_unicast+0x10/0x10 [ 1139.832442][T29272] ? __phys_addr_symbol+0x30/0x80 [ 1139.834015][T29272] ? __check_object_size+0x488/0x710 [ 1139.835926][T29272] netlink_sendmsg+0x8b8/0xd70 [ 1139.837617][T29272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.839357][T29195] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1139.839623][T29272] ____sys_sendmsg+0x9ae/0xb40 [ 1139.843152][T29272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1139.845156][T29272] ? get_compat_msghdr+0x11b/0x170 [ 1139.847134][T29272] ? __pfx___lock_acquire+0x10/0x10 [ 1139.849149][T29272] ___sys_sendmsg+0x135/0x1e0 [ 1139.850973][T29272] ? __pfx____sys_sendmsg+0x10/0x10 [ 1139.852996][T29272] ? lock_acquire+0x2f/0xb0 [ 1139.854843][T29272] ? __fget_files+0x40/0x3f0 [ 1139.856665][T29272] ? fdget+0x176/0x210 [ 1139.858271][T29272] __sys_sendmsg+0x117/0x1f0 [ 1139.860043][T29272] ? __pfx___sys_sendmsg+0x10/0x10 [ 1139.862006][T29272] ? __fget_files+0x244/0x3f0 [ 1139.863849][T29272] __do_fast_syscall_32+0x73/0x120 [ 1139.865793][T29272] do_fast_syscall_32+0x32/0x80 [ 1139.867609][T29272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1139.869977][T29272] RIP: 0023:0xf742e579 [ 1139.871529][T29272] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1139.877915][T29272] RSP: 002b:00000000f571655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1139.880188][T29272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200006c0 [ 1139.882415][T29272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1139.884768][T29272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1139.887717][T29272] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1139.890718][T29272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1139.893588][T29272] [ 1139.903519][T29273] lo speed is unknown, defaulting to 1000 [ 1139.906879][T29195] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1139.924145][T29278] Cannot find add_set index 0 as target [ 1139.960866][T29278] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.6192'. [ 1139.982367][T29195] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1140.009122][T29195] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1140.119899][T29195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.155839][T29195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.163603][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.165497][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.171029][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.172928][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.241981][T29286] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1140.245378][T29286] IPv6: addrconf: prefix option has invalid lifetime [ 1140.255141][ C2] IPv6: addrconf: prefix option has invalid lifetime [ 1140.258864][ C2] IPv6: addrconf: prefix option has invalid lifetime [ 1140.309289][T29195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1140.398353][T29304] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6194'. [ 1140.431150][T29195] veth0_vlan: entered promiscuous mode [ 1140.436769][T29195] veth1_vlan: entered promiscuous mode [ 1140.446854][T29195] veth0_macvtap: entered promiscuous mode [ 1140.449906][T29195] veth1_macvtap: entered promiscuous mode [ 1140.457049][T29195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.460203][T29195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.463499][T29195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.467031][T29195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.471386][T29195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.479714][T29195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.483257][T29195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.486845][T29195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.489783][T29195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.493783][T29195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.507632][T29195] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.510163][T29195] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.512470][T29195] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.514755][T29195] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.545658][T29307] lo speed is unknown, defaulting to 1000 [ 1141.046769][T28590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.049088][T28590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.063768][T28590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.065868][T28590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.805164][ T5311] Bluetooth: hci3: command tx timeout [ 1141.945142][T29331] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1142.101725][T29328] lo speed is unknown, defaulting to 1000 [ 1143.108936][T29371] IPv6: addrconf: prefix option has invalid lifetime [ 1143.631718][T29379] lo speed is unknown, defaulting to 1000 [ 1144.267919][T29387] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1145.116760][T29403] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1146.075779][T29433] lo speed is unknown, defaulting to 1000 [ 1146.866758][T29446] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1146.915304][T29456] usb usb8: usbfs: process 29456 (syz.0.6234) did not claim interface 0 before use [ 1147.416180][T29478] IPv6: addrconf: prefix option has invalid lifetime [ 1147.485866][T29457] lo speed is unknown, defaulting to 1000 [ 1148.363975][T29490] FAULT_INJECTION: forcing a failure. [ 1148.363975][T29490] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.367345][T29490] CPU: 0 UID: 0 PID: 29490 Comm: syz.5.6242 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1148.370116][T29490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1148.372895][T29490] Call Trace: [ 1148.374109][T29490] [ 1148.375371][T29490] dump_stack_lvl+0x16c/0x1f0 [ 1148.377364][T29490] should_fail_ex+0x497/0x5b0 [ 1148.378628][T29490] should_failslab+0xc2/0x120 [ 1148.379896][T29490] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1148.381332][T29490] ? skb_clone+0x190/0x3f0 [ 1148.382506][T29490] skb_clone+0x190/0x3f0 [ 1148.383622][T29490] netlink_deliver_tap+0xb26/0xcf0 [ 1148.384973][T29490] netlink_unicast+0x6b4/0x7f0 [ 1148.386286][T29490] ? __pfx_netlink_unicast+0x10/0x10 [ 1148.387673][T29490] ? genl_rcv_msg+0x4bd/0x800 [ 1148.388914][T29490] netlink_ack+0x6a5/0xb20 [ 1148.392728][T29490] netlink_rcv_skb+0x327/0x410 [ 1148.392754][T29490] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1148.392767][T29490] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1148.392787][T29490] ? down_read+0xc9/0x330 [ 1148.392799][T29490] ? __pfx_down_read+0x10/0x10 [ 1148.392811][T29490] ? netlink_deliver_tap+0x1ae/0xcf0 [ 1148.392827][T29490] genl_rcv+0x28/0x40 [ 1148.392842][T29490] netlink_unicast+0x53c/0x7f0 [ 1148.392858][T29490] ? __pfx_netlink_unicast+0x10/0x10 [ 1148.392873][T29490] ? __phys_addr_symbol+0x30/0x80 [ 1148.392886][T29490] ? __check_object_size+0x488/0x710 [ 1148.392903][T29490] netlink_sendmsg+0x8b8/0xd70 [ 1148.392919][T29490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1148.392939][T29490] ____sys_sendmsg+0x9ae/0xb40 [ 1148.392955][T29490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1148.392970][T29490] ? get_compat_msghdr+0x11b/0x170 [ 1148.392986][T29490] ? __pfx___lock_acquire+0x10/0x10 [ 1148.393004][T29490] ___sys_sendmsg+0x135/0x1e0 [ 1148.393017][T29490] ? __pfx____sys_sendmsg+0x10/0x10 [ 1148.393035][T29490] ? lock_acquire+0x2f/0xb0 [ 1148.393049][T29490] ? __fget_files+0x40/0x3f0 [ 1148.393066][T29490] ? fdget+0x176/0x210 [ 1148.393078][T29490] __sys_sendmsg+0x117/0x1f0 [ 1148.393090][T29490] ? __pfx___sys_sendmsg+0x10/0x10 [ 1148.393102][T29490] ? __fget_files+0x244/0x3f0 [ 1148.393121][T29490] __do_fast_syscall_32+0x73/0x120 [ 1148.393134][T29490] do_fast_syscall_32+0x32/0x80 [ 1148.393146][T29490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1148.393158][T29490] RIP: 0023:0xf7f51579 [ 1148.393168][T29490] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1148.393179][T29490] RSP: 002b:00000000f56d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1148.393191][T29490] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200006c0 [ 1148.393198][T29490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1148.393205][T29490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1148.393211][T29490] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1148.393218][T29490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1148.393230][T29490] [ 1148.589305][T29507] usb usb8: usbfs: process 29507 (syz.0.6244) did not claim interface 0 before use [ 1148.616600][T29505] lo speed is unknown, defaulting to 1000 [ 1149.359696][T29521] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input79 [ 1149.362027][T29520] syzkaller0: entered promiscuous mode [ 1149.364551][T29520] syzkaller0: entered allmulticast mode [ 1149.365106][T29522] IPv6: addrconf: prefix option has invalid lifetime [ 1149.414735][ T40] audit: type=1326 audit(1731666291.464:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.0.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 1149.431900][ T40] audit: type=1326 audit(1731666291.464:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.0.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 1149.483188][ T40] audit: type=1326 audit(1731666291.484:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.0.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 1149.503095][ T40] audit: type=1326 audit(1731666291.484:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.0.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 1149.509592][ T40] audit: type=1326 audit(1731666291.484:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.0.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 1149.523419][ T40] audit: type=1326 audit(1731666291.524:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.0.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 1149.531037][ T40] audit: type=1326 audit(1731666291.524:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.0.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 1149.543739][ T40] audit: type=1326 audit(1731666291.524:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.0.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 1149.565314][ T40] audit: type=1326 audit(1731666291.614:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.0.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 1149.586779][T29523] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1149.588543][T29523] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1149.597310][ T40] audit: type=1326 audit(1731666291.614:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.0.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 1149.621625][T29523] vhci_hcd vhci_hcd.0: Device attached [ 1149.636689][T29521] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 1149.638380][T29521] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1149.646826][T29521] vhci_hcd vhci_hcd.0: Device attached [ 1149.756336][T29523] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 1149.758138][T29523] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1149.770281][T29523] vhci_hcd vhci_hcd.0: Device attached [ 1149.780207][T29523] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 1149.782020][T29523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1149.788103][T29523] vhci_hcd vhci_hcd.0: Device attached [ 1149.795184][T21093] vhci_hcd: vhci_device speed not set [ 1149.855103][T21093] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 1150.136240][T29534] vhci_hcd: connection closed [ 1150.136365][T29527] vhci_hcd: connection closed [ 1150.148419][T29524] vhci_hcd: connection reset by peer [ 1150.148474][T28597] vhci_hcd: stop threads [ 1150.151991][T28597] vhci_hcd: release socket [ 1150.153273][T28597] vhci_hcd: disconnect device [ 1150.154650][T28597] vhci_hcd: stop threads [ 1150.155370][T29536] vhci_hcd: connection closed [ 1150.155801][T28597] vhci_hcd: release socket [ 1150.169254][T28597] vhci_hcd: disconnect device [ 1150.170569][T28597] vhci_hcd: stop threads [ 1150.171603][T28597] vhci_hcd: release socket [ 1150.172734][T28597] vhci_hcd: disconnect device [ 1150.185862][T28597] vhci_hcd: stop threads [ 1150.186916][T28597] vhci_hcd: release socket [ 1150.188021][T28597] vhci_hcd: disconnect device [ 1150.354081][T29541] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1153.254726][T29541] IPVS: Unknown mcast interface: syzkaller1 [ 1153.332866][T29568] Cannot find add_set index 0 as target [ 1153.340254][T29568] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.6259'. [ 1153.391322][T29563] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1154.172158][T29585] netlink: 'syz.0.6263': attribute type 1 has an invalid length. [ 1154.212336][T29587] lo speed is unknown, defaulting to 1000 [ 1154.697990][T29606] FAULT_INJECTION: forcing a failure. [ 1154.697990][T29606] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.701297][T29606] CPU: 2 UID: 0 PID: 29606 Comm: syz.5.6270 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1154.704103][T29606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1154.706912][T29606] Call Trace: [ 1154.707823][T29606] [ 1154.708618][T29606] dump_stack_lvl+0x16c/0x1f0 [ 1154.709831][T29606] should_fail_ex+0x497/0x5b0 [ 1154.711015][T29606] ? fs_reclaim_acquire+0xae/0x150 [ 1154.712396][T29606] should_failslab+0xc2/0x120 [ 1154.713654][T29606] __kmalloc_node_noprof+0xd1/0x440 [ 1154.715056][T29606] ? __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 1154.716690][T29606] __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 1154.718256][T29606] ? __lruvec_stat_mod_folio+0xa4/0x370 [ 1154.719769][T29606] ? bpf_check+0x206/0xc970 [ 1154.720978][T29606] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1154.722641][T29606] ? rcu_is_watching+0x12/0xc0 [ 1154.723874][T29606] ? trace_kmalloc+0x2d/0xe0 [ 1154.725052][T29606] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 1154.726526][T29606] ? __kvmalloc_node_noprof+0x6f/0x1a0 [ 1154.727978][T29606] ? bpf_check+0x206/0xc970 [ 1154.729176][T29606] vzalloc_noprof+0x6b/0x90 [ 1154.730360][T29606] ? bpf_check+0x206/0xc970 [ 1154.731555][T29606] bpf_check+0x206/0xc970 [ 1154.732730][T29606] ? __pfx_bpf_check+0x10/0x10 [ 1154.733988][T29606] ? find_held_lock+0x2d/0x110 [ 1154.735262][T29606] ? ktime_get_with_offset+0x13a/0x240 [ 1154.736697][T29606] ? trace_lock_acquire+0x14a/0x1d0 [ 1154.738056][T29606] ? ktime_get_with_offset+0x13a/0x240 [ 1154.739471][T29606] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 1154.740940][T29606] ? lockdep_hardirqs_on+0x7c/0x110 [ 1154.742273][T29606] ? read_tsc+0x9/0x20 [ 1154.743347][T29606] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 1154.744821][T29606] ? bpf_obj_name_cpy+0x156/0x1b0 [ 1154.746122][T29606] bpf_prog_load+0xe3f/0x2670 [ 1154.747332][T29606] ? __pfx_bpf_prog_load+0x10/0x10 [ 1154.748669][T29606] ? find_held_lock+0x2d/0x110 [ 1154.749913][T29606] ? __might_fault+0x13b/0x190 [ 1154.751148][T29606] ? __might_fault+0xe3/0x190 [ 1154.752372][T29606] __sys_bpf+0x4c8c/0x5780 [ 1154.753491][T29606] ? ksys_write+0x21e/0x260 [ 1154.754611][T29606] ? __pfx___sys_bpf+0x10/0x10 [ 1154.756072][T29606] ? vfs_write+0x306/0x1150 [ 1154.757556][T29606] ? __mutex_unlock_slowpath+0x164/0x650 [ 1154.759207][T29606] ? fput+0x30/0x390 [ 1154.760222][T29606] ? ksys_write+0x1ad/0x260 [ 1154.761335][T29606] ? __pfx_ksys_write+0x10/0x10 [ 1154.762536][T29606] __ia32_sys_bpf+0x76/0xe0 [ 1154.763684][T29606] __do_fast_syscall_32+0x73/0x120 [ 1154.764956][T29606] do_fast_syscall_32+0x32/0x80 [ 1154.766172][T29606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1154.767771][T29606] RIP: 0023:0xf7f51579 [ 1154.768786][T29606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1154.773479][T29606] RSP: 002b:00000000f56d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1154.775532][T29606] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000300 [ 1154.777511][T29606] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1154.779446][T29606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1154.781399][T29606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1154.783284][T29606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1154.785262][T29606] [ 1154.788291][T29606] syz.5.6270: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1154.793654][T29606] CPU: 3 UID: 0 PID: 29606 Comm: syz.5.6270 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1154.796971][T29606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1154.800279][T29606] Call Trace: [ 1154.801299][T29606] [ 1154.802046][T29606] dump_stack_lvl+0x16c/0x1f0 [ 1154.803419][T29606] warn_alloc+0x24d/0x3a0 [ 1154.804659][T29606] ? __pfx_warn_alloc+0x10/0x10 [ 1154.806221][T29606] ? dump_stack_lvl+0x197/0x1f0 [ 1154.807727][T29606] ? dump_stack_lvl+0x1a1/0x1f0 [ 1154.809285][T29606] ? should_fail_ex+0x2de/0x5b0 [ 1154.810579][T29606] ? rcu_is_watching+0x12/0xc0 [ 1154.811849][T29606] ? trace_kmalloc+0x2d/0xe0 [ 1154.813176][T29606] ? __kmalloc_node_noprof+0x22f/0x440 [ 1154.814801][T29606] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 1154.816375][T29606] ? __lruvec_stat_mod_folio+0xa4/0x370 [ 1154.817813][T29606] ? bpf_check+0x206/0xc970 [ 1154.819009][T29606] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1154.820660][T29606] ? rcu_is_watching+0x12/0xc0 [ 1154.822264][T29606] ? trace_kmalloc+0x2d/0xe0 [ 1154.824031][T29606] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 1154.825616][T29606] ? __kvmalloc_node_noprof+0x6f/0x1a0 [ 1154.827212][T29606] ? bpf_check+0x206/0xc970 [ 1154.828664][T29606] vzalloc_noprof+0x6b/0x90 [ 1154.830102][T29606] ? bpf_check+0x206/0xc970 [ 1154.831304][T29606] bpf_check+0x206/0xc970 [ 1154.832635][T29606] ? __pfx_bpf_check+0x10/0x10 [ 1154.833957][T29606] ? find_held_lock+0x2d/0x110 [ 1154.835167][T29606] ? ktime_get_with_offset+0x13a/0x240 [ 1154.836562][T29606] ? trace_lock_acquire+0x14a/0x1d0 [ 1154.838173][T29606] ? ktime_get_with_offset+0x13a/0x240 [ 1154.839600][T29606] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 1154.841403][T29606] ? lockdep_hardirqs_on+0x7c/0x110 [ 1154.843005][T29606] ? read_tsc+0x9/0x20 [ 1154.844356][T29606] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 1154.846239][T29606] ? bpf_obj_name_cpy+0x156/0x1b0 [ 1154.847886][T29606] bpf_prog_load+0xe3f/0x2670 [ 1154.849147][T29606] ? __pfx_bpf_prog_load+0x10/0x10 [ 1154.850837][T29606] ? find_held_lock+0x2d/0x110 [ 1154.852411][T29606] ? __might_fault+0x13b/0x190 [ 1154.853674][T29606] ? __might_fault+0xe3/0x190 [ 1154.854916][T29606] __sys_bpf+0x4c8c/0x5780 [ 1154.856285][T29606] ? ksys_write+0x21e/0x260 [ 1154.857755][T29606] ? __pfx___sys_bpf+0x10/0x10 [ 1154.858978][T29606] ? vfs_write+0x306/0x1150 [ 1154.860322][T29606] ? __mutex_unlock_slowpath+0x164/0x650 [ 1154.862173][T29606] ? fput+0x30/0x390 [ 1154.863335][T29606] ? ksys_write+0x1ad/0x260 [ 1154.864510][T29606] ? __pfx_ksys_write+0x10/0x10 [ 1154.865712][T29606] __ia32_sys_bpf+0x76/0xe0 [ 1154.866819][T29606] __do_fast_syscall_32+0x73/0x120 [ 1154.868132][T29606] do_fast_syscall_32+0x32/0x80 [ 1154.869353][T29606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1154.870902][T29606] RIP: 0023:0xf7f51579 [ 1154.871951][T29606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1154.876785][T29606] RSP: 002b:00000000f56d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1154.878857][T29606] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000300 [ 1154.880990][T29606] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1154.883060][T29606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1154.885052][T29606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1154.887035][T29606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1154.889012][T29606] [ 1154.890857][T29606] Mem-Info: [ 1154.891711][T29606] active_anon:4826 inactive_anon:619 isolated_anon:0 [ 1154.891711][T29606] active_file:11212 inactive_file:3442 isolated_file:0 [ 1154.891711][T29606] unevictable:768 dirty:375 writeback:0 [ 1154.891711][T29606] slab_reclaimable:6393 slab_unreclaimable:72685 [ 1154.891711][T29606] mapped:22939 shmem:3676 pagetables:1369 [ 1154.891711][T29606] sec_pagetables:348 bounce:0 [ 1154.891711][T29606] kernel_misc_reclaimable:0 [ 1154.891711][T29606] free:49949 free_pcp:3486 free_cma:0 [ 1154.903712][T29607] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1154.904097][T29606] Node 0 active_anon:656kB inactive_anon:4kB active_file:300kB inactive_file:52kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:852kB dirty:20kB writeback:0kB shmem:2748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9776kB pagetables:1440kB sec_pagetables:1220kB all_unreclaimable? yes [ 1154.914958][T29606] Node 1 active_anon:18648kB inactive_anon:2472kB active_file:44548kB inactive_file:13716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90904kB dirty:1480kB writeback:0kB shmem:11956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5636kB pagetables:4036kB sec_pagetables:172kB all_unreclaimable? no [ 1154.922869][T29606] Node 0 DMA free:2948kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:676kB local_pcp:208kB free_cma:0kB [ 1154.929953][T29606] lowmem_reserve[]: 0 273 0 0 0 [ 1154.931200][T29606] Node 0 DMA32 free:22240kB boost:4096kB min:18000kB low:21476kB high:24952kB reserved_highatomic:4096KB active_anon:656kB inactive_anon:4kB active_file:300kB inactive_file:48kB unevictable:1536kB writepending:20kB present:1032196kB managed:306284kB mlocked:0kB bounce:0kB free_pcp:1496kB local_pcp:532kB free_cma:0kB [ 1154.938801][T29606] lowmem_reserve[]: 0 0 0 0 0 [ 1154.940119][T29606] Node 1 DMA32 free:179392kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB active_anon:18636kB inactive_anon:2472kB active_file:44548kB inactive_file:13716kB unevictable:1536kB writepending:1480kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:7220kB local_pcp:976kB free_cma:0kB [ 1154.948718][T29606] lowmem_reserve[]: 0 0 0 0 0 [ 1154.949999][T29606] Node 0 DMA: 57*4kB (U) 68*8kB (U) 62*16kB (U) 35*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2948kB [ 1154.953636][T29606] Node 0 DMA32: 434*4kB (UMEH) 259*8kB (UMH) 100*16kB (UMH) 200*32kB (UMH) 73*64kB (UMH) 27*128kB (UMH) 5*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 22240kB [ 1154.958272][T29606] Node 1 DMA32: 334*4kB (UEH) 183*8kB (UEH) 100*16kB (UMEH) 287*32kB (UMEH) 100*64kB (UEH) 258*128kB (UMEH) 123*256kB (UMH) 69*512kB (UME) 28*1024kB (UMEH) 13*2048kB (M) 1*4096kB (U) = 179216kB [ 1154.964192][T29606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1154.966863][T29606] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1154.969266][T29606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1154.971571][T29606] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1154.974762][T29606] 19107 total pagecache pages [ 1154.976000][T29606] 777 pages in swap cache [ 1154.977121][T29606] Free swap = 94416kB [ 1154.978180][T29606] Total swap = 124996kB [ 1154.979253][T29606] 524155 pages RAM [ 1154.980268][T29606] 0 pages HighMem/MovableOnly [ 1154.981478][T29606] 206681 pages reserved [ 1154.982558][T29606] 0 pages cma reserved [ 1154.986999][T29607] IPVS: Unknown mcast interface: syzkaller1 [ 1154.987328][T21093] vhci_hcd: vhci_device speed not set [ 1154.998823][T29607] overlayfs: missing 'lowerdir' [ 1155.364291][T29610] lo speed is unknown, defaulting to 1000 [ 1156.038231][T29618] lo speed is unknown, defaulting to 1000 [ 1156.888960][T29626] lo speed is unknown, defaulting to 1000 [ 1157.237510][T29642] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input80 [ 1157.281539][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 1157.281754][ T40] audit: type=1326 audit(1731666299.335:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29641 comm="syz.9.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 1157.294298][T29642] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 1157.295269][ T40] audit: type=1326 audit(1731666299.335:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29641 comm="syz.9.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 1157.296439][T29642] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1157.302462][ T40] audit: type=1326 audit(1731666299.335:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29641 comm="syz.9.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 1157.316253][ T40] audit: type=1326 audit(1731666299.335:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29641 comm="syz.9.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 1157.319430][T29642] vhci_hcd vhci_hcd.0: Device attached [ 1157.322092][ T40] audit: type=1326 audit(1731666299.335:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29641 comm="syz.9.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 1157.334691][T29642] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(11) [ 1157.336426][T29642] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1157.338368][T29642] vhci_hcd vhci_hcd.0: Device attached [ 1157.347741][T29642] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(15) [ 1157.349423][T29642] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1157.349475][ T40] audit: type=1326 audit(1731666299.335:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29641 comm="syz.9.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 1157.354000][T29642] vhci_hcd vhci_hcd.0: Device attached [ 1157.360234][ T40] audit: type=1326 audit(1731666299.335:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29641 comm="syz.9.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 1157.367129][ T40] audit: type=1326 audit(1731666299.335:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29641 comm="syz.9.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 1157.372623][ T40] audit: type=1326 audit(1731666299.335:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29641 comm="syz.9.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 1157.378102][ T40] audit: type=1326 audit(1731666299.335:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29641 comm="syz.9.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 1157.383967][T29642] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(17) [ 1157.385863][T29642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1157.389471][T29642] vhci_hcd vhci_hcd.0: Device attached [ 1157.409286][T29649] vhci_hcd: connection closed [ 1157.409529][T28594] vhci_hcd: stop threads [ 1157.412495][T28594] vhci_hcd: release socket [ 1157.414546][T29644] vhci_hcd: connection closed [ 1157.414728][T29646] vhci_hcd: connection closed [ 1157.416601][T29652] vhci_hcd: connection closed [ 1157.419030][T28594] vhci_hcd: disconnect device [ 1157.422928][T28594] vhci_hcd: stop threads [ 1157.424948][T28594] vhci_hcd: release socket [ 1157.426159][T28594] vhci_hcd: disconnect device [ 1157.427583][T28594] vhci_hcd: stop threads [ 1157.428800][T28594] vhci_hcd: release socket [ 1157.430243][T28594] vhci_hcd: disconnect device [ 1157.431748][T28594] vhci_hcd: stop threads [ 1157.432899][T28594] vhci_hcd: release socket [ 1157.434679][T28594] vhci_hcd: disconnect device [ 1158.022703][T29664] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1158.027722][T29664] FAULT_INJECTION: forcing a failure. [ 1158.027722][T29664] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.033070][T29664] CPU: 0 UID: 0 PID: 29664 Comm: syz.5.6284 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1158.037865][T29664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1158.041516][T29664] Call Trace: [ 1158.042666][T29664] [ 1158.043693][T29664] dump_stack_lvl+0x16c/0x1f0 [ 1158.045304][T29664] should_fail_ex+0x497/0x5b0 [ 1158.046902][T29664] ? fs_reclaim_acquire+0xae/0x150 [ 1158.048649][T29664] should_failslab+0xc2/0x120 [ 1158.050260][T29664] __kmalloc_cache_noprof+0x6b/0x310 [ 1158.052068][T29664] ? ovl_iterate+0x7b5/0xe40 [ 1158.053654][T29664] ovl_iterate+0x7b5/0xe40 [ 1158.055213][T29664] ? down_read_killable+0xcc/0x380 [ 1158.056974][T29664] ? __pfx_down_read_killable+0x10/0x10 [ 1158.058854][T29664] ? __pfx_ovl_iterate+0x10/0x10 [ 1158.060551][T29664] wrap_directory_iterator+0x9f/0xe0 [ 1158.062349][T29664] iterate_dir+0x52f/0xb40 [ 1158.063584][T29664] __ia32_compat_sys_getdents+0x14c/0x2d0 [ 1158.065088][T29664] ? __pfx___ia32_compat_sys_getdents+0x10/0x10 [ 1158.066724][T29664] ? __pfx_compat_filldir+0x10/0x10 [ 1158.068114][T29664] __do_fast_syscall_32+0x73/0x120 [ 1158.069425][T29664] do_fast_syscall_32+0x32/0x80 [ 1158.070660][T29664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1158.072274][T29664] RIP: 0023:0xf7f51579 [ 1158.073311][T29664] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1158.078281][T29664] RSP: 002b:00000000f56d655c EFLAGS: 00000296 ORIG_RAX: 000000000000008d [ 1158.080443][T29664] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 1158.082493][T29664] RDX: 00000000000000ad RSI: 0000000000000000 RDI: 0000000000000000 [ 1158.084536][T29664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1158.086600][T29664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1158.088674][T29664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1158.090737][T29664] [ 1158.416676][T29668] IPVS: Unknown mcast interface: syzkaller1 [ 1158.424492][T29668] overlayfs: missing 'lowerdir' [ 1158.497273][T29667] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1159.428364][T29686] Cannot find add_set index 0 as target [ 1159.456550][T29686] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.6289'. [ 1161.301816][T29705] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1161.477553][T29715] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1161.488376][T29715] IPVS: Unknown mcast interface: syzkaller1 [ 1161.503275][T29715] overlayfs: missing 'lowerdir' [ 1162.043674][T29719] usb usb8: usbfs: process 29719 (syz.8.6298) did not claim interface 0 before use [ 1162.377646][T29730] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1162.399664][T29730] IPVS: Unknown mcast interface: syzkaller1 [ 1163.260820][T29745] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6304'. [ 1163.472229][T29754] IPv6: addrconf: prefix option has invalid lifetime [ 1163.656310][T29756] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1164.197513][T29760] /dev/sr0: Can't open blockdev [ 1164.354125][T29763] /dev/sr0: Can't open blockdev [ 1164.389770][T29768] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1164.394495][T29768] IPVS: Unknown mcast interface: syzkaller1 [ 1164.399178][T29768] overlayfs: missing 'lowerdir' [ 1164.536267][T29777] Cannot find add_set index 0 as target [ 1164.564822][T29777] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.6313'. [ 1165.368512][T29787] lo speed is unknown, defaulting to 1000 [ 1165.584667][T29794] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1165.587869][T29794] IPv6: addrconf: prefix option has invalid lifetime [ 1165.591921][ C2] IPv6: addrconf: prefix option has invalid lifetime [ 1165.593943][ C2] IPv6: addrconf: prefix option has invalid lifetime [ 1166.037242][T29797] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6318'. [ 1166.054582][T29797] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6318'. [ 1166.170984][T29807] @: renamed from vlan0 (while UP) [ 1166.268434][T29804] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1166.545018][T29819] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1166.624762][T29819] overlayfs: missing 'lowerdir' [ 1166.798712][T29818] IPVS: Unknown mcast interface: syzkaller1 [ 1166.998503][T29824] lo speed is unknown, defaulting to 1000 [ 1167.008548][T29828] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6327'. [ 1167.066219][T29830] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6328'. [ 1167.312090][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 1167.312102][ T40] audit: type=1800 audit(1731666309.367:749): pid=29835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6329" name="file0" dev="9p" ino=40632369 res=0 errno=0 [ 1167.382605][T29837] netlink: 'syz.5.6329': attribute type 4 has an invalid length. [ 1167.386476][T29837] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.6329'. [ 1168.245882][T24644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1168.251491][T24644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1168.255258][T24644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1168.260737][T24644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1168.264147][T24644] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1168.271419][T24644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1168.315070][T29854] lo speed is unknown, defaulting to 1000 [ 1168.377000][T29859] Invalid ELF header type: 3 != 1 [ 1168.399448][T29854] chnl_net:caif_netlink_parms(): no params data found [ 1168.445421][T28590] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.448528][T28590] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1168.521905][T29854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.523992][T29854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.525912][T29854] bridge_slave_0: entered allmulticast mode [ 1168.528058][T29854] bridge_slave_0: entered promiscuous mode [ 1168.532167][T29854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.534681][T29854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.536665][T29854] bridge_slave_1: entered allmulticast mode [ 1168.538785][T29854] bridge_slave_1: entered promiscuous mode [ 1168.565079][T29854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.568752][T29854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.597660][T28590] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.600240][T28590] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1168.643253][T29867] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1168.655250][T29854] team0: Port device team_slave_0 added [ 1168.662281][T29867] IPVS: Unknown mcast interface: syzkaller1 [ 1168.668216][T28590] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.668329][T29867] overlayfs: missing 'lowerdir' [ 1168.670839][T28590] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1168.693025][T29854] team0: Port device team_slave_1 added [ 1168.725463][T29854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.727320][T29854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.735335][T29854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.739117][T29854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.741022][T29854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.748275][T29854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.753658][T28590] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.756270][T28590] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1168.812503][T29854] hsr_slave_0: entered promiscuous mode [ 1168.819606][T29854] hsr_slave_1: entered promiscuous mode [ 1168.836216][T29854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1168.838317][T29854] Cannot create hsr debugfs directory [ 1169.122389][T28590] bridge_slave_1: left allmulticast mode [ 1169.124244][T28590] bridge_slave_1: left promiscuous mode [ 1169.128356][T28590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.136243][T28590] bridge_slave_0: left allmulticast mode [ 1169.137902][T28590] bridge_slave_0: left promiscuous mode [ 1169.139856][T28590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.312235][T29875] Cannot find add_set index 0 as target [ 1169.334940][T29875] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.6340'. [ 1169.389102][T29878] Cannot find add_set index 0 as target [ 1169.400242][T29878] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.6341'. [ 1170.010785][T28590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.027717][T28590] bond0 (unregistering): Released all slaves [ 1170.260901][T28590] bond1 (unregistering): Released all slaves [ 1170.323938][T28590] : left promiscuous mode [ 1170.344532][ T5311] Bluetooth: hci2: command tx timeout [ 1170.456569][T28590] tipc: Left network mode [ 1170.704923][T28590] hsr_slave_0: left promiscuous mode [ 1170.709125][T28590] hsr_slave_1: left promiscuous mode [ 1170.774738][T28590] veth0_macvtap: left promiscuous mode [ 1170.776314][T28590] veth1_vlan: left promiscuous mode [ 1170.777721][T28590] veth0_vlan: left promiscuous mode [ 1171.374604][T29915] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1171.492696][T29917] overlayfs: missing 'workdir' [ 1172.132518][T29920] fuse: Unknown parameter '&' [ 1172.422508][ T5311] Bluetooth: hci2: command tx timeout [ 1172.607710][T28590] team0 (unregistering): Port device team_slave_1 removed [ 1172.793533][T28590] team0 (unregistering): Port device team_slave_0 removed [ 1173.544129][ T5311] Bluetooth: hci1: command 0x0406 tx timeout [ 1174.107240][T29915] IPVS: Unknown mcast interface: syzkaller1 [ 1174.110201][T29919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6350'. [ 1174.148767][T29854] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1174.159999][T29854] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1174.227539][T29854] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1174.237174][T29927] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1174.243125][T29854] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1174.281309][T29925] syzkaller0: entered promiscuous mode [ 1174.282905][T29925] syzkaller0: entered allmulticast mode [ 1174.397627][T29854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.431419][T29854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.452484][T18715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.454695][T18715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.471402][T18715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.474042][T18715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.502245][T24644] Bluetooth: hci2: command tx timeout [ 1174.751098][T29854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.576800][T29948] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6357'. [ 1175.591766][T29950] Cannot find add_set index 0 as target [ 1175.607889][T29950] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.6356'. [ 1175.681247][T29952] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6357'. [ 1176.584406][T24644] Bluetooth: hci2: command tx timeout [ 1178.277755][T29948] netlink: 876 bytes leftover after parsing attributes in process `syz.9.6357'. [ 1178.310431][T28590] IPVS: stop unused estimator thread 0... [ 1178.327654][T29854] veth0_vlan: entered promiscuous mode [ 1178.332205][T29854] veth1_vlan: entered promiscuous mode [ 1178.343743][T29854] veth0_macvtap: entered promiscuous mode [ 1178.346873][T29854] veth1_macvtap: entered promiscuous mode [ 1178.354022][T29854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.356835][T29854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.359384][T29854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.364533][T29854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.367096][T29854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.369806][T29854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.374019][T29854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.378926][T29854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1178.383167][T29854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.385816][T29854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1178.388496][T29854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.391015][T29854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1178.393926][T29854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.397358][T29854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.400749][T29854] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.404858][T29854] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.407161][T29854] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.409463][T29854] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.457254][T28597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.459304][T28597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.469723][T28594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.472733][T28594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.536630][T29974] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1178.541549][T29974] IPVS: Unknown mcast interface: syzkaller1 [ 1178.546196][T29974] overlayfs: missing 'workdir' [ 1178.637285][T29973] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1178.661892][T14674] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1178.824673][T14674] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1178.827185][T14674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.829469][T14674] usb 5-1: Product: syz [ 1178.830629][T14674] usb 5-1: Manufacturer: syz [ 1178.832105][T14674] usb 5-1: SerialNumber: syz [ 1178.838446][T14674] usb 5-1: config 0 descriptor?? [ 1179.132933][T29969] FAT-fs (sr0): bogus number of reserved sectors [ 1179.134913][T29969] FAT-fs (sr0): Can't find a valid FAT filesystem [ 1179.226737][T14674] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1179.231143][T14674] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1179.234355][T14674] usb 5-1: USB disconnect, device number 10 [ 1179.447695][T29993] usb usb8: usbfs: process 29993 (syz.8.6365) did not claim interface 0 before use [ 1180.774048][T30021] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1180.835296][T30019] IPVS: Unknown mcast interface: syzkaller1 [ 1180.907137][T30021] overlayfs: failed to resolve './file1': -2 [ 1181.402782][T30023] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1182.329830][T30051] openvswitch: netlink: Actions may not be safe on all matching packets [ 1182.671005][T30058] netlink: 'syz.9.6382': attribute type 1 has an invalid length. [ 1182.722151][T30058] bond1: entered promiscuous mode [ 1182.724870][T30058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1182.740418][T30061] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6383'. [ 1182.748728][T30061] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6383'. [ 1182.794588][T30067] usb usb8: usbfs: process 30067 (syz.9.6385) did not claim interface 0 before use [ 1182.879142][T30070] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1182.882395][T30070] IPv6: addrconf: prefix option has invalid lifetime [ 1182.884413][ C2] IPv6: addrconf: prefix option has invalid lifetime [ 1182.886371][ C2] IPv6: addrconf: prefix option has invalid lifetime [ 1182.991194][ T30] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 1183.211193][ T30] usb 13-1: Using ep0 maxpacket: 32 [ 1183.216414][ T30] usb 13-1: config index 0 descriptor too short (expected 29220, got 36) [ 1183.218763][ T30] usb 13-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1183.221197][ T30] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1183.223629][ T30] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1183.231262][ T30] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1183.241554][ T30] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1183.265412][ T30] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1183.280770][ T30] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.343993][ T30] usb 13-1: config 0 descriptor?? [ 1183.574929][ T30] usblp 13-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1183.584635][ T30] usb 13-1: USB disconnect, device number 13 [ 1183.635293][ T30] usblp0: removed [ 1185.753554][T30108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6395'. [ 1185.778446][T30108] netlink: 876 bytes leftover after parsing attributes in process `syz.0.6395'. [ 1185.825162][T30108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6395'. [ 1185.891960][T30114] IPv6: addrconf: prefix option has invalid lifetime [ 1186.094872][T30120] 9pnet_fd: Insufficient options for proto=fd [ 1186.655845][T30129] 9pnet_fd: Insufficient options for proto=fd [ 1186.907762][T30139] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.6403'. [ 1186.910399][T30139] FAULT_INJECTION: forcing a failure. [ 1186.910399][T30139] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.914732][T30139] CPU: 0 UID: 0 PID: 30139 Comm: syz.9.6403 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1186.917565][T30139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1186.920384][T30139] Call Trace: [ 1186.921319][T30139] [ 1186.922156][T30139] dump_stack_lvl+0x16c/0x1f0 [ 1186.923413][T30139] should_fail_ex+0x497/0x5b0 [ 1186.924656][T30139] should_failslab+0xc2/0x120 [ 1186.925903][T30139] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1186.927352][T30139] ? skb_clone+0x190/0x3f0 [ 1186.928541][T30139] skb_clone+0x190/0x3f0 [ 1186.929696][T30139] netlink_deliver_tap+0xb26/0xcf0 [ 1186.931046][T30139] netlink_unicast+0x6b4/0x7f0 [ 1186.932326][T30139] ? __pfx_netlink_unicast+0x10/0x10 [ 1186.933713][T30139] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 1186.935085][T30139] netlink_ack+0x6a5/0xb20 [ 1186.936278][T30139] netlink_rcv_skb+0x327/0x410 [ 1186.937576][T30139] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1186.939028][T30139] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1186.940652][T30139] ? netlink_deliver_tap+0x1ae/0xcf0 [ 1186.942075][T30139] netlink_unicast+0x53c/0x7f0 [ 1186.943373][T30139] ? __pfx_netlink_unicast+0x10/0x10 [ 1186.944798][T30139] ? const_folio_flags.constprop.0+0x56/0x150 [ 1186.946455][T30139] ? __phys_addr_symbol+0x30/0x80 [ 1186.947808][T30139] ? __check_object_size+0x488/0x710 [ 1186.949255][T30139] netlink_sendmsg+0x8b8/0xd70 [ 1186.950593][T30139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1186.952084][T30139] sock_sendmsg+0x369/0x410 [ 1186.953365][T30139] ? pipe_lock+0x64/0x80 [ 1186.954595][T30139] ? __pfx_sock_sendmsg+0x10/0x10 [ 1186.956011][T30139] splice_to_socket+0xaac/0x1040 [ 1186.957326][T30139] ? find_held_lock+0x2d/0x110 [ 1186.958634][T30139] ? __pfx_splice_to_socket+0x10/0x10 [ 1186.960095][T30139] ? apparmor_file_permission+0x251/0x400 [ 1186.961605][T30139] ? bpf_lsm_file_permission+0x9/0x10 [ 1186.963026][T30139] ? security_file_permission+0x71/0x210 [ 1186.964513][T30139] ? rw_verify_area+0xd0/0x700 [ 1186.965780][T30139] ? __pfx_splice_to_socket+0x10/0x10 [ 1186.967238][T30139] do_splice+0x145c/0x1f60 [ 1186.968433][T30139] ? find_held_lock+0x2d/0x110 [ 1186.969737][T30139] ? __pfx_do_splice+0x10/0x10 [ 1186.970970][T30139] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1186.972471][T30139] ? trace_lock_acquire+0x14a/0x1d0 [ 1186.973850][T30139] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1186.975449][T30139] __do_splice+0x327/0x360 [ 1186.976630][T30139] ? __pfx___do_splice+0x10/0x10 [ 1186.977951][T30139] __ia32_sys_splice+0x1ce/0x270 [ 1186.979280][T30139] __do_fast_syscall_32+0x73/0x120 [ 1186.980635][T30139] do_fast_syscall_32+0x32/0x80 [ 1186.981921][T30139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1186.983623][T30139] RIP: 0023:0xf742e579 [ 1186.984702][T30139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1186.989827][T30139] RSP: 002b:00000000f56f555c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 1186.992004][T30139] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1186.994099][T30139] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe2 [ 1186.996169][T30139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1186.998235][T30139] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1187.000305][T30139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1187.002492][T30139] [ 1187.649069][T30154] IPv6: addrconf: prefix option has invalid lifetime [ 1189.027391][T30184] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1189.091285][T30184] IPVS: Unknown mcast interface: syzkaller1 [ 1189.105521][T30181] overlayfs: missing 'lowerdir' [ 1189.557176][T30194] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.6419'. [ 1189.560260][T30194] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 1189.561366][T30189] tipc: Started in network mode [ 1189.564511][T30189] tipc: Node identity ac1414aa, cluster identity 4711 [ 1189.566565][T30189] tipc: Enabled bearer , priority 10 [ 1189.618062][T30201] IPv6: addrconf: prefix option has invalid lifetime [ 1190.110069][T30220] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1190.164902][T30219] IPVS: Unknown mcast interface: syzkaller1 [ 1190.179510][T30219] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1190.185657][T30219] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1190.692669][T23436] tipc: Node number set to 2886997162 [ 1190.945351][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.948701][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.950976][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.952848][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.954665][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.956405][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.958137][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.959899][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.961889][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.963869][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.965647][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.967494][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.969245][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.972996][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.975275][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.977027][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.978762][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.981319][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.983180][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.984950][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.986669][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.988398][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.990390][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.992139][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.992248][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1190.995604][T30236] 9pnet_fd: Insufficient options for proto=fd [ 1192.511384][T30259] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1192.521627][T30259] IPVS: Unknown mcast interface: syzkaller1 [ 1192.533777][T30259] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1192.537359][T30259] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1193.971396][T30294] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1195.844468][T30326] Cannot find add_set index 0 as target [ 1195.851485][T30326] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.6457'. [ 1196.140331][T30337] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1196.150180][T30337] IPVS: Unknown mcast interface: syzkaller1 [ 1196.152477][T30337] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1196.155410][T30337] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1196.345073][T30339] can0: slcan on ttyS3. [ 1197.669944][T30338] can0 (unregistered): slcan off ttyS3. [ 1197.997505][T30395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6470'. [ 1198.002855][T30395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6470'. [ 1198.221420][T30403] syzkaller0: entered promiscuous mode [ 1198.222948][T30403] syzkaller0: entered allmulticast mode [ 1198.289656][T21093] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1198.459587][T21093] usb 10-1: Using ep0 maxpacket: 32 [ 1198.462908][T21093] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1198.465231][T21093] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1198.467509][T21093] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1198.479444][ T30] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1198.479512][T21093] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1198.484281][T21093] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1198.486754][T21093] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1198.490781][T21093] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1198.493184][T21093] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.496169][T21093] usb 10-1: config 0 descriptor?? [ 1198.639656][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.642394][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1198.645586][ T30] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1198.647857][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.652833][ T30] usb 5-1: config 0 descriptor?? [ 1198.703108][T21093] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1198.712783][T21093] usb 10-1: USB disconnect, device number 47 [ 1198.716010][T21093] usblp0: removed [ 1199.105268][ T30] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1199.109878][ T30] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1199.124071][ T30] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 1199.141989][ T30] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1199.173163][T30409] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1199.401511][ T30] usb 5-1: USB disconnect, device number 11 [ 1201.358121][T30432] loop6: detected capacity change from 0 to 53 [ 1201.972094][T30437] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1202.639359][T30443] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1202.725979][T30443] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1202.728240][T30443] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1203.275767][T30442] IPVS: Unknown mcast interface: syzkaller1 [ 1203.309223][T30450] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1203.488327][T30453] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1203.607495][T30467] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6489'. [ 1204.370817][T30476] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1205.171523][T30490] Cannot find add_set index 0 as target [ 1205.176526][T30490] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.6495'. [ 1206.044347][T30507] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6500'. [ 1206.047496][T30507] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6500'. [ 1206.061257][T30506] delete_channel: no stack [ 1206.342902][T30517] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1206.621993][T30522] Cannot find add_set index 0 as target [ 1206.627509][T30522] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6504'. [ 1208.118570][T30557] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.6516'. [ 1208.169896][T30559] 9pnet_fd: Insufficient options for proto=fd [ 1208.209929][T30553] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1208.861086][T30574] usb usb8: usbfs: process 30574 (syz.9.6520) did not claim interface 0 before use [ 1208.917892][T30576] binder: 30575:30576 ioctl c0306201 20000180 returned -22 [ 1211.304821][ T40] audit: type=1326 audit(1731666353.362:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30613 comm="syz.0.6530" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x0 [ 1213.059846][T30639] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1213.062978][T30639] IPv6: addrconf: prefix option has invalid lifetime [ 1213.064939][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 1213.066844][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 1213.906571][T30681] IPv6: addrconf: prefix option has invalid lifetime [ 1214.685993][T30690] netlink: 'syz.0.6554': attribute type 1 has an invalid length. [ 1214.688236][T30690] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6554'. [ 1214.792774][T30699] IPv6: addrconf: prefix option has invalid lifetime [ 1214.910233][ T9] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 1215.279348][ T9] usb 13-1: device descriptor read/64, error -71 [ 1216.716796][ T9] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 1216.773215][T30723] IPv6: addrconf: prefix option has invalid lifetime [ 1217.007393][ T9] usb 13-1: device descriptor read/64, error -71 [ 1217.029370][T30725] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1217.118336][ T9] usb usb13-port1: attempt power cycle [ 1217.477463][ T9] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 1217.497724][ T9] usb 13-1: device descriptor read/8, error -71 [ 1218.549363][T30753] IPv6: addrconf: prefix option has invalid lifetime [ 1219.392732][T30768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6574'. [ 1219.425750][T30773] tmpfs: Bad value for 'mpol' [ 1219.427205][T23436] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1219.682132][T23436] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1220.001262][T23436] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1220.003632][T23436] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1220.006447][T23436] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1220.009325][T23436] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1220.012270][T23436] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1220.015613][T23436] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1220.023100][T23436] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1220.026053][T23436] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1220.029479][T23436] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1220.035228][T23436] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1220.037812][T23436] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1220.040727][T23436] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1220.046862][T23436] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1220.049609][T23436] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1220.052524][T23436] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1220.055177][T23436] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1220.060829][T23436] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1220.063808][T23436] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1220.071664][T23436] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1220.074911][T23436] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1220.079518][T23436] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1220.084462][T23436] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1220.087007][T23436] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1220.089908][T23436] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1220.099141][T23436] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1220.101546][T23436] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1220.103718][T23436] usb 5-1: Product: syz [ 1220.104833][T23436] usb 5-1: Manufacturer: syz [ 1220.106091][T23436] usb 5-1: SerialNumber: syz [ 1220.117656][T23436] usb 5-1: config 0 descriptor?? [ 1220.119805][T23436] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1220.384374][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 1220.385059][T10679] usb 5-1: USB disconnect, device number 12 [ 1220.396269][T10679] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1220.417472][T14674] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1220.495442][T30786] syzkaller0: entered promiscuous mode [ 1220.497277][T30786] syzkaller0: entered allmulticast mode [ 1223.614249][T30834] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6587'. [ 1223.617561][T30834] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6587'. [ 1223.621397][T30834] gtp0: entered promiscuous mode [ 1223.622734][T30834] gtp0: entered allmulticast mode [ 1223.673348][T30820] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.675833][T30820] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.678383][T30820] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.680655][T30820] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.682983][T30820] vxlan0: entered promiscuous mode [ 1223.684331][T30820] vxlan0: entered allmulticast mode [ 1223.707187][T30820] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.709549][T30820] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.711876][T30820] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.714196][T30820] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.442157][ T6256] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 1224.939436][ T6256] usb 14-1: too many configurations: 9, using maximum allowed: 8 [ 1224.950350][ T6256] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1224.954493][ T6256] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1224.958822][ T6256] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1224.965124][ T6256] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1224.968968][ T6256] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1224.973070][ T6256] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1224.980137][ T6256] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1224.983512][ T6256] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1224.986618][ T6256] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1224.990382][ T6256] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1224.992751][ T6256] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1224.995645][ T6256] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1224.999068][ T6256] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1225.001660][ T6256] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1225.004563][ T6256] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1225.008918][ T6256] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1225.011756][ T6256] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1225.014786][ T6256] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1225.017955][ T6256] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1225.020759][ T6256] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1225.023675][ T6256] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1225.026680][ T6256] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1225.029118][ T6256] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1225.032171][ T6256] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1225.036426][ T6256] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1225.039367][ T6256] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1225.041730][ T6256] usb 14-1: Product: syz [ 1225.042939][ T6256] usb 14-1: Manufacturer: syz [ 1225.044334][ T6256] usb 14-1: SerialNumber: syz [ 1225.048398][ T6256] usb 14-1: config 0 descriptor?? [ 1225.053102][ T6256] yurex 14-1:0.0: USB YUREX device now attached to Yurex #0 [ 1225.318202][ C0] usb 14-1: yurex_control_callback - control failed: -71 [ 1225.318379][T10679] usb 14-1: USB disconnect, device number 7 [ 1225.323054][T10679] yurex 14-1:0.0: USB YUREX #0 now disconnected [ 1230.439567][T30884] IPv6: addrconf: prefix option has invalid lifetime [ 1231.826107][T30901] 9pnet_rdma: rdma_create_trans (30901): problem binding to privport: 13 [ 1231.946175][T30901] /dev/sr0: Can't open blockdev [ 1232.385681][ T1446] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1232.599028][ T1446] usb 10-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 1232.601807][ T1446] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.603866][ T1446] usb 10-1: Product: syz [ 1232.604999][ T1446] usb 10-1: Manufacturer: syz [ 1232.606847][ T1446] usb 10-1: SerialNumber: syz [ 1232.609036][ T1446] usb 10-1: config 0 descriptor?? [ 1232.611801][ T1446] pn533_usb 10-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1232.815923][T30908] netlink: 'syz.5.6601': attribute type 4 has an invalid length. [ 1232.852656][ T828] usb 10-1: USB disconnect, device number 48 [ 1233.785874][ T828] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1233.849707][T30930] syzkaller0: entered promiscuous mode [ 1233.851189][T30930] syzkaller0: entered allmulticast mode [ 1234.046005][T30949] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1234.049101][T30949] IPv6: addrconf: prefix option has invalid lifetime [ 1234.051110][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 1234.053835][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 1238.392649][T30994] FAULT_INJECTION: forcing a failure. [ 1238.392649][T30994] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.401145][T30994] CPU: 3 UID: 0 PID: 30994 Comm: syz.8.6617 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1238.404207][T30994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1238.407258][T30994] Call Trace: [ 1238.408450][T30994] [ 1238.409497][T30994] dump_stack_lvl+0x16c/0x1f0 [ 1238.411212][T30994] should_fail_ex+0x497/0x5b0 [ 1238.412900][T30994] ? fs_reclaim_acquire+0xae/0x150 [ 1238.414523][T30994] should_failslab+0xc2/0x120 [ 1238.415852][T30994] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1238.417750][T30994] ? security_inode_alloc+0x3b/0x2b0 [ 1238.419340][T30994] security_inode_alloc+0x3b/0x2b0 [ 1238.420898][T30994] inode_init_always_gfp+0xc5f/0xfb0 [ 1238.422498][T30994] alloc_inode+0x82/0x230 [ 1238.423700][T30994] path_from_stashed+0x55f/0xec0 [ 1238.424996][T30994] ? do_raw_spin_lock+0x12d/0x2c0 [ 1238.426745][T30994] ? __pfx_path_from_stashed+0x10/0x10 [ 1238.428739][T30994] ? netns_get+0x21/0x150 [ 1238.430325][T30994] ? do_raw_spin_unlock+0x172/0x230 [ 1238.432215][T30994] ns_get_path+0x5f/0x80 [ 1238.433740][T30994] proc_ns_get_link+0x122/0x260 [ 1238.435431][T30994] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1238.437355][T30994] ? __pfx___might_resched+0x10/0x10 [ 1238.439064][T30994] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1238.440518][T30994] step_into+0x1aed/0x2230 [ 1238.441720][T30994] ? __pfx_step_into+0x10/0x10 [ 1238.442981][T30994] ? __pfx___up_read+0x10/0x10 [ 1238.444268][T30994] path_openat+0x74c/0x2d60 [ 1238.445545][T30994] ? __pfx_path_openat+0x10/0x10 [ 1238.446932][T30994] ? __pfx___lock_acquire+0x10/0x10 [ 1238.448323][T30994] do_filp_open+0x1dc/0x430 [ 1238.449545][T30994] ? __pfx_do_filp_open+0x10/0x10 [ 1238.451138][T30994] ? find_held_lock+0x2d/0x110 [ 1238.452851][T30994] ? _raw_spin_unlock+0x28/0x50 [ 1238.454666][T30994] ? alloc_fd+0x2d7/0x6c0 [ 1238.456057][T30994] do_sys_openat2+0x17a/0x1e0 [ 1238.457380][T30994] ? __pfx_do_sys_openat2+0x10/0x10 [ 1238.459067][T30994] ? __fget_files+0x244/0x3f0 [ 1238.460547][T30994] __ia32_compat_sys_openat+0x16e/0x210 [ 1238.462128][T30994] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1238.463793][T30994] ? ksys_write+0x1ad/0x260 [ 1238.465009][T30994] __do_fast_syscall_32+0x73/0x120 [ 1238.466439][T30994] do_fast_syscall_32+0x32/0x80 [ 1238.468202][T30994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1238.470430][T30994] RIP: 0023:0xf7fc2579 [ 1238.471874][T30994] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1238.478687][T30994] RSP: 002b:00000000f57464f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 1238.481016][T30994] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7322172 [ 1238.483065][T30994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f744dff4 [ 1238.485241][T30994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1238.488034][T30994] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1238.492132][T30994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1238.492165][T30994] [ 1238.492310][ C3] vkms_vblank_simulate: vblank timer overrun [ 1249.548906][T31048] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1249.552382][T31048] IPv6: addrconf: prefix option has invalid lifetime [ 1249.556342][ C3] IPv6: addrconf: prefix option has invalid lifetime [ 1249.558368][ C3] IPv6: addrconf: prefix option has invalid lifetime [ 1250.221760][T31053] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6628'. [ 1250.501236][T31066] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1250.504461][T31066] IPv6: addrconf: prefix option has invalid lifetime [ 1250.506608][ C2] IPv6: addrconf: prefix option has invalid lifetime [ 1250.508473][ C2] IPv6: addrconf: prefix option has invalid lifetime [ 1251.082090][T31069] IPv6: addrconf: prefix option has invalid lifetime [ 1252.024184][T31083] netlink: 'syz.0.6637': attribute type 3 has an invalid length. [ 1252.026477][T31083] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6637'. [ 1252.109652][T31081] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1252.842423][T31090] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1253.611374][T31101] vivid-007: disconnect [ 1253.933875][T31105] overlayfs: failed to resolve 'uuid=auto': -2 [ 1253.973929][T31105] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1254.449782][T31100] vivid-007: reconnect [ 1254.535178][T31118] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1254.610672][T31122] netlink: 'syz.9.6646': attribute type 5 has an invalid length. [ 1255.385096][T31135] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6649'. [ 1255.389341][T31129] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1255.666210][T31142] netlink: 'syz.9.6651': attribute type 3 has an invalid length. [ 1255.668796][T31142] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.6651'. [ 1256.154451][T31152] program syz.9.6654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1256.587217][T31157] sp0: Synchronizing with TNC [ 1256.593620][T31157] netlink: 'syz.8.6655': attribute type 16 has an invalid length. [ 1256.595856][T31157] netlink: 'syz.8.6655': attribute type 3 has an invalid length. [ 1256.597882][T31157] netlink: 64066 bytes leftover after parsing attributes in process `syz.8.6655'. [ 1257.369634][T31172] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1257.372845][T31172] IPv6: addrconf: prefix option has invalid lifetime [ 1257.374772][ C2] IPv6: addrconf: prefix option has invalid lifetime [ 1257.376699][ C2] IPv6: addrconf: prefix option has invalid lifetime [ 1258.220842][T31183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6660'. [ 1258.482098][T31186] Cannot find add_set index 0 as target [ 1258.506705][T31186] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.6661'. [ 1258.636937][T31194] IPv6: addrconf: prefix option has invalid lifetime [ 1259.761112][T31209] FAULT_INJECTION: forcing a failure. [ 1259.761112][T31209] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.764763][T31209] CPU: 3 UID: 0 PID: 31209 Comm: syz.8.6671 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1259.767994][T31209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1259.771368][T31209] Call Trace: [ 1259.772238][T31209] [ 1259.773174][T31209] dump_stack_lvl+0x16c/0x1f0 [ 1259.774766][T31209] should_fail_ex+0x497/0x5b0 [ 1259.776289][T31209] ? fs_reclaim_acquire+0xae/0x150 [ 1259.777982][T31209] should_failslab+0xc2/0x120 [ 1259.779406][T31209] __kmalloc_cache_node_noprof+0x6e/0x360 [ 1259.781205][T31209] ? __alloc_workqueue+0x506/0x1810 [ 1259.782925][T31209] __alloc_workqueue+0x506/0x1810 [ 1259.784634][T31209] alloc_workqueue+0xd3/0x200 [ 1259.786081][T31209] ? __pfx_alloc_workqueue+0x10/0x10 [ 1259.787705][T31209] ? __pfx___debug_object_init+0x10/0x10 [ 1259.789201][T31209] nci_register_device+0x397/0xb80 [ 1259.790663][T31209] ? __pfx_nci_register_device+0x10/0x10 [ 1259.792118][T31209] virtual_ncidev_open+0x141/0x220 [ 1259.793562][T31209] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1259.795343][T31209] misc_open+0x35a/0x420 [ 1259.796554][T31209] ? __pfx_misc_open+0x10/0x10 [ 1259.798124][T31209] chrdev_open+0x237/0x6a0 [ 1259.799556][T31209] ? __pfx_chrdev_open+0x10/0x10 [ 1259.801289][T31209] ? security_file_open+0x62a/0x9d0 [ 1259.803105][T31209] do_dentry_open+0x6ca/0x1530 [ 1259.804743][T31209] ? __pfx_chrdev_open+0x10/0x10 [ 1259.806434][T31209] ? inode_permission+0xdd/0x5f0 [ 1259.808151][T31209] vfs_open+0x82/0x3f0 [ 1259.809424][T31209] ? may_open+0x1f2/0x400 [ 1259.810813][T31209] path_openat+0x1e6a/0x2d60 [ 1259.812360][T31209] ? __pfx_path_openat+0x10/0x10 [ 1259.813673][T31209] ? __pfx___lock_acquire+0x10/0x10 [ 1259.815342][T31209] do_filp_open+0x1dc/0x430 [ 1259.816690][T31209] ? __pfx_do_filp_open+0x10/0x10 [ 1259.818019][T31209] ? find_held_lock+0x2d/0x110 [ 1259.819294][T31209] ? _raw_spin_unlock+0x28/0x50 [ 1259.820553][T31209] ? alloc_fd+0x2d7/0x6c0 [ 1259.821815][T31209] do_sys_openat2+0x17a/0x1e0 [ 1259.823155][T31209] ? __pfx_do_sys_openat2+0x10/0x10 [ 1259.824852][T31209] ? __fget_files+0x244/0x3f0 [ 1259.826458][T31209] __ia32_compat_sys_openat+0x16e/0x210 [ 1259.827939][T31209] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1259.829540][T31209] ? ksys_write+0x1ad/0x260 [ 1259.830715][T31209] __do_fast_syscall_32+0x73/0x120 [ 1259.832064][T31209] do_fast_syscall_32+0x32/0x80 [ 1259.833267][T31209] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1259.834883][T31209] RIP: 0023:0xf7fc2579 [ 1259.835953][T31209] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1259.840855][T31209] RSP: 002b:00000000f572555c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1259.842985][T31209] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000080 [ 1259.845015][T31209] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1259.847021][T31209] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1259.849101][T31209] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1259.851107][T31209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1259.853137][T31209] [ 1259.957150][T31214] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6673'. [ 1260.202381][ T56] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1260.405660][ T56] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1260.408439][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 1260.422436][ T56] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1260.426736][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1260.430748][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1260.443292][ T56] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1260.446019][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 1260.448821][ T56] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1260.451926][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1260.455049][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1260.459768][ T56] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1260.462111][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 1260.466366][ T56] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1260.470530][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1260.474842][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1260.481334][ T56] usb 5-1: string descriptor 0 read error: -22 [ 1260.484271][ T56] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1260.487531][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.496484][ T56] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1260.558286][ T5995] hid-generic 0005:046D:FFF9.0016: item fetching failed at offset 0/1 [ 1260.560520][ T5995] hid-generic 0005:046D:FFF9.0016: probe with driver hid-generic failed with error -22 [ 1260.836341][T18716] Bluetooth: hci4: Frame reassembly failed (-84) [ 1260.838792][T31250] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1260.841300][T18716] Bluetooth: hci4: Frame reassembly failed (-84) [ 1261.433708][T31254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6685'. [ 1261.768083][T31260] FAULT_INJECTION: forcing a failure. [ 1261.768083][T31260] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.771950][T31260] CPU: 1 UID: 0 PID: 31260 Comm: syz.9.6687 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1261.774786][T31260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1261.777553][T31260] Call Trace: [ 1261.778428][T31260] [ 1261.779213][T31260] dump_stack_lvl+0x16c/0x1f0 [ 1261.780447][T31260] should_fail_ex+0x497/0x5b0 [ 1261.781674][T31260] ? fs_reclaim_acquire+0xae/0x150 [ 1261.783021][T31260] should_failslab+0xc2/0x120 [ 1261.784237][T31260] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1261.785623][T31260] ? getname_flags.part.0+0x4c/0x550 [ 1261.787021][T31260] getname_flags.part.0+0x4c/0x550 [ 1261.788369][T31260] getname_flags+0x93/0xf0 [ 1261.789541][T31260] __ia32_sys_rename+0x57/0xa0 [ 1261.790914][T31260] __do_fast_syscall_32+0x73/0x120 [ 1261.792248][T31260] do_fast_syscall_32+0x32/0x80 [ 1261.793546][T31260] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1261.795199][T31260] RIP: 0023:0xf742e579 [ 1261.796278][T31260] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1261.801345][T31260] RSP: 002b:00000000f56d455c EFLAGS: 00000296 ORIG_RAX: 0000000000000026 [ 1261.803514][T31260] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 0000000020000140 [ 1261.805565][T31260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1261.807627][T31260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1261.809672][T31260] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1261.811712][T31260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1261.813755][T31260] [ 1262.734463][T20745] usb 5-1: USB disconnect, device number 13 [ 1262.892155][T24644] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1262.892707][ T5311] Bluetooth: hci4: command 0x1003 tx timeout [ 1263.003404][T31272] FAULT_INJECTION: forcing a failure. [ 1263.003404][T31272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.008398][T31272] CPU: 3 UID: 0 PID: 31272 Comm: syz.0.6691 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1263.012649][T31272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1263.016582][T31272] Call Trace: [ 1263.017929][T31272] [ 1263.019067][T31272] dump_stack_lvl+0x16c/0x1f0 [ 1263.020803][T31272] should_fail_ex+0x497/0x5b0 [ 1263.022538][T31272] _copy_to_iter+0x4a5/0x1400 [ 1263.024329][T31272] ? __pfx__copy_to_iter+0x10/0x10 [ 1263.026191][T31272] ? __up_read+0x1fb/0x760 [ 1263.027843][T31272] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 1263.029975][T31272] ? down_read+0xc9/0x330 [ 1263.031585][T31272] ? __pfx___up_read+0x10/0x10 [ 1263.033357][T31272] copy_page_to_iter+0xf1/0x180 [ 1263.035083][T31272] process_vm_rw_core.constprop.0+0x5c9/0x9f0 [ 1263.037408][T31272] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 1263.039799][T31272] ? rcu_is_watching+0x12/0xc0 [ 1263.041552][T31272] process_vm_rw+0x301/0x360 [ 1263.043280][T31272] ? __pfx_process_vm_rw+0x10/0x10 [ 1263.045152][T31272] ? ksys_write+0x21e/0x260 [ 1263.046835][T31272] ? __pfx_lock_release+0x10/0x10 [ 1263.048696][T31272] ? ksys_write+0x1ad/0x260 [ 1263.050368][T31272] ? __pfx_ksys_write+0x10/0x10 [ 1263.052256][T31272] __ia32_sys_process_vm_readv+0xdf/0x1b0 [ 1263.054208][T31272] ? lockdep_hardirqs_on+0x7c/0x110 [ 1263.056010][T31272] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1263.058235][T31272] __do_fast_syscall_32+0x73/0x120 [ 1263.060002][T31272] do_fast_syscall_32+0x32/0x80 [ 1263.061679][T31272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1263.063868][T31272] RIP: 0023:0xf745e579 [ 1263.065260][T31272] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1263.071948][T31272] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 000000000000015b [ 1263.074793][T31272] RAX: ffffffffffffffda RBX: 00000000000002e5 RCX: 0000000020008400 [ 1263.077478][T31272] RDX: 0000000000000002 RSI: 0000000020008640 RDI: 0000000000000286 [ 1263.080310][T31272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1263.083011][T31272] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1263.085711][T31272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1263.088380][T31272] [ 1263.123679][T31275] random: crng reseeded on system resumption [ 1263.134666][T31275] Unrecognized hibernate image header format! [ 1263.138278][T31275] PM: hibernation: Image mismatch: architecture specific data [ 1263.452240][T20745] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1263.601967][T20745] usb 5-1: Using ep0 maxpacket: 8 [ 1263.604572][T20745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1263.604596][T20745] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1263.604608][T20745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.605699][T20745] usb 5-1: config 0 descriptor?? [ 1263.810858][T20745] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1264.101508][T20745] usb 5-1: USB disconnect, device number 14 [ 1264.104909][T20745] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 1265.338583][T31309] IPv6: addrconf: prefix option has invalid lifetime [ 1265.546189][T31312] Cannot find add_set index 0 as target [ 1265.618485][T31313] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.6704'. [ 1265.636764][T31315] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6705'. [ 1265.639476][T31315] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1266.416724][T31326] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6709'. [ 1266.419977][T31326] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6709'. [ 1266.423089][T31326] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6709'. [ 1266.455420][T31328] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6710'. [ 1266.670158][T31323] FAULT_INJECTION: forcing a failure. [ 1266.670158][T31323] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1266.674250][T31323] CPU: 1 UID: 0 PID: 31323 Comm: syz.8.6708 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1266.677308][T31323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1266.680257][T31323] Call Trace: [ 1266.681500][T31323] [ 1266.682518][T31323] dump_stack_lvl+0x16c/0x1f0 [ 1266.684122][T31323] should_fail_ex+0x497/0x5b0 [ 1266.685353][T31323] ? fs_reclaim_acquire+0xae/0x150 [ 1266.686635][T31323] should_fail_alloc_page+0xe7/0x130 [ 1266.688014][T31323] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1266.689616][T31323] ? mark_lock+0xb5/0xc60 [ 1266.690945][T31323] __alloc_pages_noprof+0x190/0x25a0 [ 1266.692311][T31323] ? psi_task_switch+0x203/0x8e0 [ 1266.693610][T31323] ? find_held_lock+0x2d/0x110 [ 1266.694880][T31323] ? finish_task_switch.isra.0+0x212/0xcc0 [ 1266.696384][T31323] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1266.697876][T31323] ? mark_held_locks+0x9f/0xe0 [ 1266.699139][T31323] ? lockdep_hardirqs_on+0x7c/0x110 [ 1266.700829][T31323] ? finish_task_switch.isra.0+0x217/0xcc0 [ 1266.703160][T31323] ? __switch_to+0x749/0x1180 [ 1266.704757][T31323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1266.706560][T31323] ? policy_nodemask+0xea/0x4e0 [ 1266.707848][T31323] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1266.709262][T31323] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1266.710833][T31323] ? __pfx___schedule+0x10/0x10 [ 1266.712102][T31323] pte_alloc_one+0x20/0x390 [ 1266.713298][T31323] __pte_alloc+0x6e/0x3b0 [ 1266.714415][T31323] ? __pfx___pte_alloc+0x10/0x10 [ 1266.715697][T31323] ? irqentry_exit+0x3b/0x90 [ 1266.716892][T31323] ? lockdep_hardirqs_on+0x7c/0x110 [ 1266.718229][T31323] do_pte_missing+0x280b/0x3e70 [ 1266.719499][T31323] ? __handle_mm_fault+0x86/0x2a10 [ 1266.721150][T31323] __handle_mm_fault+0x100a/0x2a10 [ 1266.723036][T31323] ? __pfx_mt_find+0x10/0x10 [ 1266.724390][T31323] ? hlock_class+0x4e/0x130 [ 1266.725559][T31323] ? __pfx___handle_mm_fault+0x10/0x10 [ 1266.726963][T31323] handle_mm_fault+0x3fa/0xaa0 [ 1266.728210][T31323] __get_user_pages+0x8d9/0x3b50 [ 1266.729498][T31323] ? __pfx___get_user_pages+0x10/0x10 [ 1266.730927][T31323] ? down_read_killable+0xcc/0x380 [ 1266.732250][T31323] ? __pfx_down_read_killable+0x10/0x10 [ 1266.733756][T31323] ? mark_lock+0xb5/0xc60 [ 1266.734940][T31323] ? __pfx___lock_acquire+0x10/0x10 [ 1266.736346][T31323] __gup_longterm_locked+0x211/0x1870 [ 1266.737777][T31323] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1266.739299][T31323] ? gup_fast_fallback+0x1218/0x2690 [ 1266.740938][T31323] ? __pfx_lock_release+0x10/0x10 [ 1266.742564][T31323] ? sanity_check_pinned_pages+0x23/0x11c0 [ 1266.744364][T31323] gup_fast_fallback+0x1802/0x2690 [ 1266.745696][T31323] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1266.747122][T31323] ? __pfx_mark_lock+0x10/0x10 [ 1266.748371][T31323] pin_user_pages_fast+0xa8/0x100 [ 1266.749682][T31323] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1266.751266][T31323] iov_iter_extract_pages+0x397/0x1f30 [ 1266.752773][T31323] ? irqentry_exit+0x3b/0x90 [ 1266.754110][T31323] ? lockdep_hardirqs_on+0x7c/0x110 [ 1266.755606][T31323] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1266.757302][T31323] ? poly1305_core_blocks+0x358/0x470 [ 1266.758885][T31323] ? poly1305_core_blocks+0x3bc/0x470 [ 1266.760397][T31323] extract_iter_to_sg+0xf74/0x20b0 [ 1266.762262][T31323] ? crypto_poly1305_update+0xb1/0x1d0 [ 1266.764075][T31323] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1266.765495][T31323] ? gup_put_folio+0x71/0x2a0 [ 1266.766727][T31323] ? __pfx_unpin_user_page+0x10/0x10 [ 1266.768107][T31323] ? af_alg_free_sg+0xa1/0x260 [ 1266.769343][T31323] hash_sendmsg+0x43b/0x1180 [ 1266.770732][T31323] __sys_sendto+0x479/0x4d0 [ 1266.771895][T31323] ? __pfx___sys_sendto+0x10/0x10 [ 1266.773212][T31323] ? ksys_write+0x1ad/0x260 [ 1266.774397][T31323] ? __pfx_ksys_write+0x10/0x10 [ 1266.775680][T31323] __ia32_sys_sendto+0xdd/0x1b0 [ 1266.776938][T31323] ? lockdep_hardirqs_on+0x7c/0x110 [ 1266.778287][T31323] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1266.779999][T31323] __do_fast_syscall_32+0x73/0x120 [ 1266.781844][T31323] do_fast_syscall_32+0x32/0x80 [ 1266.783629][T31323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1266.785482][T31323] RIP: 0023:0xf7fc2579 [ 1266.786607][T31323] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1266.791724][T31323] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 1266.793881][T31323] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000340 [ 1266.795821][T31323] RDX: 00000000fffffff2 RSI: 0000000000008041 RDI: 0000000000000000 [ 1266.797867][T31323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1266.800094][T31323] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1266.803181][T31323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1266.805990][T31323] [ 1267.886562][T31344] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 1268.455914][T31359] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6718'. [ 1268.458509][T31359] unsupported nlmsg_type 40 [ 1268.514126][T31362] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1268.590891][T31364] binder: 31363:31364 ioctl c0306201 20000480 returned -14 [ 1269.181338][T31360] orangefs_mount: mount request failed with -4 [ 1269.582780][T31387] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1269.970232][T31393] xt_socket: unknown flags 0x10 [ 1270.070516][T31402] loop2: detected capacity change from 0 to 7 [ 1270.072711][T31402] Dev loop2: unable to read RDB block 7 [ 1270.074269][T31402] loop2: unable to read partition table [ 1270.075931][T31402] loop2: partition table beyond EOD, truncated [ 1270.077996][T31402] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1273.075594][T31459] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1273.078840][T31459] IPv6: addrconf: prefix option has invalid lifetime [ 1273.080792][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 1273.082740][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 1273.319222][T31451] kAFS: Can only specify source 'none' with -o dyn [ 1275.146018][T31493] 9pnet_fd: Insufficient options for proto=fd [ 1275.230872][T31496] UBIFS error (pid: 31496): cannot open "./file0", error -22 [ 1275.657759][T31515] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1275.662918][T31515] IPv6: addrconf: prefix option has invalid lifetime [ 1275.664945][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 1275.666816][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 1276.439516][T31524] Cannot find add_set index 0 as target [ 1276.507469][T31525] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6764'. [ 1276.766642][T31532] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6767'. [ 1277.081831][T31547] input: syz0 as /devices/virtual/input/input83 [ 1277.273932][T31551] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6772'. [ 1277.311488][T31547] team0 (unregistering): Port device team_slave_0 removed [ 1277.319002][T31547] team0 (unregistering): Port device team_slave_1 removed [ 1277.343925][T31551] loop2: detected capacity change from 0 to 7 [ 1277.355836][T31551] Dev loop2: unable to read RDB block 7 [ 1277.359093][T31551] loop2: unable to read partition table [ 1277.361043][T31551] loop2: partition table beyond EOD, truncated [ 1277.362980][T31551] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 1277.687107][T31564] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1277.738307][T31564] program syz.9.6777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1277.778724][ T40] audit: type=1326 audit(1731666419.486:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31568 comm="syz.5.6778" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x0 [ 1278.060062][T31577] netlink: 'syz.9.6779': attribute type 10 has an invalid length. [ 1278.209912][ T828] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1278.390893][ T828] usb 10-1: Using ep0 maxpacket: 32 [ 1278.402379][ T828] usb 10-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 1278.405216][ T828] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.407892][ T828] usb 10-1: Product: syz [ 1278.409287][ T828] usb 10-1: Manufacturer: syz [ 1278.422674][ T828] usb 10-1: SerialNumber: syz [ 1278.426599][ T828] usb 10-1: config 0 descriptor?? [ 1278.430067][ T828] ftdi_sio 10-1:0.0: Ignoring interface reserved for JTAG [ 1278.573464][T31581] overlay: Unknown parameter '/dev/snd/pcmC#D#p' [ 1278.587301][T31581] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1278.729088][ T1446] usb 10-1: USB disconnect, device number 49 [ 1278.870860][T31590] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6782'. [ 1278.881296][T31590] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1282.084487][T31658] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6800'. [ 1282.201471][T31660] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1282.330843][T31664] Cannot find add_set index 0 as target [ 1283.105854][T31680] FAULT_INJECTION: forcing a failure. [ 1283.105854][T31680] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.109285][T31680] CPU: 0 UID: 0 PID: 31680 Comm: syz.8.6809 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1283.112115][T31680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1283.114937][T31680] Call Trace: [ 1283.115863][T31680] [ 1283.116657][T31680] dump_stack_lvl+0x16c/0x1f0 [ 1283.117914][T31680] should_fail_ex+0x497/0x5b0 [ 1283.119184][T31680] should_failslab+0xc2/0x120 [ 1283.120451][T31680] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1283.121979][T31680] ? skb_clone+0x190/0x3f0 [ 1283.123164][T31680] skb_clone+0x190/0x3f0 [ 1283.124291][T31680] bpf_clone_redirect+0xb2/0x3d0 [ 1283.125617][T31680] bpf_prog_973cd02a7a0e8181+0x5f/0x64 [ 1283.127079][T31680] ? find_held_lock+0x2d/0x110 [ 1283.128361][T31680] ? ktime_get+0xd9/0x1a0 [ 1283.129514][T31680] ? __pfx_lock_release+0x10/0x10 [ 1283.130889][T31680] ? trace_lock_acquire+0x14a/0x1d0 [ 1283.132268][T31680] ? ktime_get+0xd9/0x1a0 [ 1283.133446][T31680] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 1283.134958][T31680] ? lockdep_hardirqs_on+0x7c/0x110 [ 1283.136363][T31680] ? read_tsc+0x9/0x20 [ 1283.137444][T31680] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 1283.138950][T31680] ? bpf_test_run+0x3a4/0xa90 [ 1283.140200][T31680] ? __pfx___cant_migrate+0x10/0x10 [ 1283.141571][T31680] ? bpf_test_timer_continue+0x150/0x3d0 [ 1283.143056][T31680] bpf_test_run+0x49d/0xa90 [ 1283.144255][T31680] ? __pfx_bpf_test_run+0x10/0x10 [ 1283.145588][T31680] ? krealloc_noprof+0xff/0x130 [ 1283.146865][T31680] bpf_prog_test_run_skb+0xb8b/0x2140 [ 1283.148272][T31680] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1283.149798][T31680] ? fput+0x30/0x390 [ 1283.150843][T31680] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1283.152360][T31680] __sys_bpf+0x1921/0x5780 [ 1283.153546][T31680] ? ksys_write+0x21e/0x260 [ 1283.154753][T31680] ? __pfx___sys_bpf+0x10/0x10 [ 1283.156006][T31680] ? vfs_write+0x306/0x1150 [ 1283.157205][T31680] ? __mutex_unlock_slowpath+0x164/0x650 [ 1283.158686][T31680] ? fput+0x30/0x390 [ 1283.159753][T31680] ? ksys_write+0x1ad/0x260 [ 1283.160984][T31680] ? __pfx_ksys_write+0x10/0x10 [ 1283.162276][T31680] __ia32_sys_bpf+0x76/0xe0 [ 1283.163486][T31680] __do_fast_syscall_32+0x73/0x120 [ 1283.164831][T31680] do_fast_syscall_32+0x32/0x80 [ 1283.166119][T31680] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1283.167780][T31680] RIP: 0023:0xf7fc2579 [ 1283.168866][T31680] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1283.173825][T31680] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1283.176005][T31680] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080 [ 1283.178250][T31680] RDX: 000000000000002c RSI: 0000000000000000 RDI: 0000000000000000 [ 1283.180456][T31680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1283.182580][T31680] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1283.184703][T31680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1283.186817][T31680] [ 1283.187782][ C0] vkms_vblank_simulate: vblank timer overrun [ 1283.419776][ T40] audit: type=1326 audit(1731666424.767:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31691 comm="syz.9.6814" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x0 [ 1283.712825][T20745] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1283.798203][ T1446] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1283.883790][T20745] usb 5-1: Using ep0 maxpacket: 16 [ 1283.887208][T20745] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.891200][T20745] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1283.894909][T20745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.899663][T20745] usb 5-1: config 0 descriptor?? [ 1283.969120][ T1446] usb 10-1: Using ep0 maxpacket: 8 [ 1283.972697][ T1446] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.975390][ T1446] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1283.978454][ T1446] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1283.982127][ T1446] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1283.985524][ T1446] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1283.988418][ T1446] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.994888][ T1446] hub 10-1:1.0: bad descriptor, ignoring hub [ 1283.997016][ T1446] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1283.999845][ T1446] cdc_wdm 10-1:1.0: skipping garbage [ 1284.001790][ T1446] cdc_wdm 10-1:1.0: skipping garbage [ 1284.004520][ T1446] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1284.006237][ T1446] cdc_wdm 10-1:1.0: Unknown control protocol [ 1284.126279][T20745] usb 5-1: string descriptor 0 read error: -71 [ 1284.134055][T20745] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input84 [ 1284.142094][ T5354] bcm5974 5-1:0.0: could not read from device [ 1284.145466][ T5354] bcm5974 5-1:0.0: could not read from device [ 1284.148546][T20745] usb 5-1: USB disconnect, device number 15 [ 1284.151233][ T5354] bcm5974 5-1:0.0: could not read from device [ 1284.153315][ T5354] bcm5974 5-1:0.0: could not read from device [ 1284.419997][T31709] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6819'. [ 1284.422150][T31709] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6819'. [ 1284.642171][T20745] usb 13-1: new full-speed USB device number 18 using dummy_hcd [ 1284.706200][T31712] Cannot find add_set index 0 as target [ 1284.758347][T31718] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1284.816394][T20745] usb 13-1: not running at top speed; connect to a high speed hub [ 1284.820021][T20745] usb 13-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1284.822888][T20745] usb 13-1: config 1 interface 0 has no altsetting 0 [ 1284.826925][T20745] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1284.829299][T20745] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.831870][T20745] usb 13-1: Product: syz [ 1284.834309][T20745] usb 13-1: Manufacturer: ⳣᩓ“빒햯㤱⯬ꡝ굦ꕍ蒭︜罹ꂚﮐ듄뉱ᴃꄾᴚ衒俥漺㍧埑ꈁ祎ɏ伻음ᭊ䥝챓낏블鮤ặ蘎䈤ɛ럔蚾弻咍纊᪪瓾ﳋ⋽玖◃쀵阤ヅல튨⺪ዉي㏕窄⽪ಥ똤颔븈춾໰嘋ۗ儍⟐骇䃝甥⏞詻㼤ﳝ⢢τ䎇 [ 1284.841863][T20745] usb 13-1: SerialNumber: syz [ 1284.844377][T31704] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1284.943870][T31723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6825'. [ 1284.974365][T31698] usb 10-1: reset high-speed USB device number 50 using dummy_hcd [ 1285.735606][ T9] usb 10-1: USB disconnect, device number 50 [ 1286.314022][T31741] fuse: Unknown parameter 'd' [ 1286.780995][T31735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1287.121268][ T5311] Bluetooth: hci3: command 0x0406 tx timeout [ 1287.518972][T31757] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6837'. [ 1287.523428][T31757] : entered promiscuous mode [ 1287.876695][T31769] xt_cgroup: invalid path, errno=-2 [ 1287.956015][T20745] usblp 13-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 2 proto 3 vid 0x0525 pid 0xA4A8 [ 1287.987937][T20745] usb 13-1: USB disconnect, device number 18 [ 1288.100039][T20745] usblp0: removed [ 1288.189403][ T56] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1288.236937][T31774] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6841'. [ 1288.349790][ T56] usb 10-1: Using ep0 maxpacket: 8 [ 1288.355820][ T56] usb 10-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 1288.358215][ T56] usb 10-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 1288.367360][ T56] usb 10-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 1288.369936][ T56] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.373170][ T56] usb 10-1: Product: syz [ 1288.374371][ T56] usb 10-1: Manufacturer: syz [ 1288.375624][ T56] usb 10-1: SerialNumber: syz [ 1288.380535][ T56] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 1288.481213][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 1288.501414][ T56] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1288.504744][ T56] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 1288.507850][ T56] usb 10-1: media controller created [ 1288.514369][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1288.541229][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 1288.543099][ T56] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 1288.553215][ T56] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input85 [ 1288.556939][ T56] dvb-usb: schedule remote query interval to 150 msecs. [ 1288.558814][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 1288.581766][ T56] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 1288.613940][T31789] can0: slcan on pts0. [ 1288.703124][T31789] can0 (unregistered): slcan off pts0. [ 1288.724352][ T56] dvb-usb: bulk message failed: -22 (1/0) [ 1288.727061][ T56] dvb-usb: error while querying for an remote control event. [ 1288.822061][T31800] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6849'. [ 1288.894750][ T56] dvb-usb: bulk message failed: -22 (1/0) [ 1288.896778][ T56] dvb-usb: error while querying for an remote control event. [ 1289.068215][ T56] dvb-usb: bulk message failed: -22 (1/0) [ 1289.070342][ T56] dvb-usb: error while querying for an remote control event. [ 1289.091211][T20745] usb 10-1: USB disconnect, device number 51 [ 1289.098713][ T40] audit: type=1804 audit(1731666430.074:753): pid=31816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.6851" name="/newroot/125/bus/file0" dev="overlay" ino=711 res=1 errno=0 [ 1289.146923][T20745] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 1289.494716][T31832] netlink: 'syz.8.6853': attribute type 3 has an invalid length. [ 1289.647601][T31836] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1289.877185][T31839] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1290.042446][T31842] netlink: 'syz.9.6857': attribute type 9 has an invalid length. [ 1290.045397][T31842] netlink: 399 bytes leftover after parsing attributes in process `syz.9.6857'. [ 1290.861719][ T5995] usb 13-1: new full-speed USB device number 19 using dummy_hcd [ 1291.035308][ T5995] usb 13-1: config 1 interface 0 has no altsetting 0 [ 1291.038625][ T5995] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1291.041203][ T5995] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.043753][ T5995] usb 13-1: Product: syz [ 1291.045014][ T5995] usb 13-1: Manufacturer: syz [ 1291.046690][ T5995] usb 13-1: SerialNumber: syz [ 1291.324695][T31859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1291.326363][T31859] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1291.328635][T31859] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1291.330622][T31859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1291.333778][T31859] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1291.338127][T31859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1291.339779][T31859] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1291.342319][T31859] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1291.733569][ T5995] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1291.948627][T31857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.950956][T31857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.955872][ T5995] usb 13-1: USB disconnect, device number 19 [ 1291.958802][ T5995] usblp0: removed [ 1292.919733][T31897] hub 2-0:1.0: USB hub found [ 1292.921922][T31897] hub 2-0:1.0: 6 ports detected [ 1293.128652][ T9] usb 2-1: new high-speed USB device number 8 using ehci-pci [ 1293.191772][ T5311] Bluetooth: hci1: command 0x0406 tx timeout [ 1293.330124][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 1293.335601][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 1293.338081][ T9] usb 2-1: Product: QEMU USB Tablet [ 1293.339669][ T9] usb 2-1: Manufacturer: QEMU [ 1293.341664][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 1293.386245][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0017/input/input87 [ 1293.467867][ T9] hid-generic 0003:0627:0001.0017: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 1293.533820][T24644] Bluetooth: hci3: command 0x0406 tx timeout [ 1293.535974][ T5311] Bluetooth: hci2: command 0x0c1a tx timeout [ 1294.665872][T31916] IPv6: addrconf: prefix option has invalid lifetime [ 1294.704266][T31918] loop8: detected capacity change from 0 to 7 [ 1294.711661][T31918] Dev loop8: unable to read RDB block 7 [ 1294.713238][T31918] loop8: unable to read partition table [ 1294.714806][T31918] loop8: partition table beyond EOD, truncated [ 1294.716438][T31918] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 1294.716438][T31918] ) failed (rc=-5) [ 1294.992311][T31923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6881'. [ 1295.065380][T31927] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6882'. [ 1295.322878][T31933] FAULT_INJECTION: forcing a failure. [ 1295.322878][T31933] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.326848][T31933] CPU: 0 UID: 0 PID: 31933 Comm: syz.5.6885 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1295.329616][T31933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1295.333027][T31933] Call Trace: [ 1295.333902][T31933] [ 1295.334686][T31933] dump_stack_lvl+0x16c/0x1f0 [ 1295.335913][T31933] should_fail_ex+0x497/0x5b0 [ 1295.337137][T31933] ? fs_reclaim_acquire+0xae/0x150 [ 1295.338479][T31933] should_failslab+0xc2/0x120 [ 1295.339713][T31933] __kmalloc_cache_noprof+0x6b/0x310 [ 1295.341541][T31933] ? __pfx___folio_start_writeback+0x10/0x10 [ 1295.343491][T31933] ? netfs_buffer_make_space+0x432/0x6b0 [ 1295.345105][T31933] netfs_buffer_make_space+0x432/0x6b0 [ 1295.346568][T31933] netfs_buffer_append_folio+0x298/0x360 [ 1295.348040][T31933] netfs_write_folio+0x540/0x1930 [ 1295.349388][T31933] netfs_writepages+0x29a/0x9d0 [ 1295.350966][T31933] ? __pfx_netfs_writepages+0x10/0x10 [ 1295.352418][T31933] ? __pfx___lock_acquire+0x10/0x10 [ 1295.353931][T31933] ? __pfx_netfs_writepages+0x10/0x10 [ 1295.355392][T31933] do_writepages+0x1a3/0x7f0 [ 1295.356630][T31933] ? __pfx_do_writepages+0x10/0x10 [ 1295.357998][T31933] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1295.359396][T31933] ? do_raw_spin_lock+0x12d/0x2c0 [ 1295.360887][T31933] ? do_raw_spin_unlock+0x172/0x230 [ 1295.362830][T31933] ? _raw_spin_unlock+0x28/0x50 [ 1295.364146][T31933] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 1295.365843][T31933] filemap_fdatawrite_wbc+0x148/0x1c0 [ 1295.367274][T31933] __filemap_fdatawrite_range+0xb3/0xf0 [ 1295.368735][T31933] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1295.370590][T31933] ? __pfx_inode_needs_update_time+0x10/0x10 [ 1295.372642][T31933] ? __pfx_generic_write_checks+0x10/0x10 [ 1295.374173][T31933] filemap_write_and_wait_range+0xa3/0x130 [ 1295.375751][T31933] netfs_unbuffered_write_iter+0x272/0x6d0 [ 1295.377305][T31933] v9fs_file_write_iter+0xbf/0x100 [ 1295.378849][T31933] vfs_write+0x5ae/0x1150 [ 1295.380028][T31933] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 1295.381644][T31933] ? trace_lock_acquire+0x14a/0x1d0 [ 1295.383027][T31933] ? __pfx_vfs_write+0x10/0x10 [ 1295.384307][T31933] ? __pfx___mutex_lock+0x10/0x10 [ 1295.385631][T31933] ksys_write+0x12f/0x260 [ 1295.386776][T31933] ? __pfx_ksys_write+0x10/0x10 [ 1295.388065][T31933] __do_fast_syscall_32+0x73/0x120 [ 1295.389409][T31933] do_fast_syscall_32+0x32/0x80 [ 1295.390970][T31933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1295.392629][T31933] RIP: 0023:0xf7f51579 [ 1295.393736][T31933] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1295.398734][T31933] RSP: 002b:00000000f56d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1295.400895][T31933] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 1295.402966][T31933] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 1295.405020][T31933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1295.407216][T31933] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1295.409306][T31933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1295.411409][T31933] [ 1295.412345][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.417984][T21586] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 1295.421411][T21586] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1295.424726][T21586] CPU: 1 UID: 0 PID: 21586 Comm: kworker/u32:30 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 1295.426124][ T5311] Bluetooth: hci1: command 0x0406 tx timeout [ 1295.428759][T21586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1295.428771][T21586] Workqueue: events_unbound netfs_write_collection_worker [ 1295.435684][T21586] RIP: 0010:netfs_write_collection_worker+0x1c97/0x4780 [ 1295.437478][T21586] Code: 4c 39 fb 0f 83 25 04 00 00 e8 85 16 55 ff 44 8b 2c 24 41 83 fd 1e 0f 87 77 23 00 00 4a 8d 44 ed 08 48 89 44 24 30 48 c1 e8 03 <42> 80 3c 30 00 0f 85 4f 23 00 00 4a 8b 5c ed 08 48 89 df e8 d1 da [ 1295.442391][T21586] RSP: 0018:ffffc90007d3faf0 EFLAGS: 00010202 [ 1295.444003][T21586] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff82379b55 [ 1295.446060][T21586] RDX: ffff88804e4e4880 RSI: ffffffff82379dfb RDI: 0000000000000005 [ 1295.448143][T21586] RBP: 0000000000000000 R08: ffff88804391e900 R09: 000000000000001e [ 1295.450163][T21586] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000002c [ 1295.452260][T21586] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88804391e8fa [ 1295.454330][T21586] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 1295.456649][T21586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1295.458502][T21586] CR2: 00000000f51168a9 CR3: 000000000086c000 CR4: 0000000000352ef0 [ 1295.460597][T21586] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1295.462688][T21586] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1295.464749][T21586] Call Trace: [ 1295.465629][T21586] [ 1295.466427][T21586] ? die_addr+0x3b/0xa0 [ 1295.467524][T21586] ? exc_general_protection+0x155/0x230 [ 1295.469062][T21586] ? asm_exc_general_protection+0x26/0x30 [ 1295.470567][T21586] ? netfs_write_collection_worker+0x19d5/0x4780 [ 1295.472209][T21586] ? netfs_write_collection_worker+0x1c7b/0x4780 [ 1295.473888][T21586] ? netfs_write_collection_worker+0x1c97/0x4780 [ 1295.475562][T21586] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 1295.477252][T21586] ? rcu_is_watching+0x12/0xc0 [ 1295.478518][T21586] ? trace_lock_acquire+0x14a/0x1d0 [ 1295.479819][T21586] ? process_one_work+0x8bb/0x1b30 [ 1295.481135][T21586] ? lock_acquire+0x2f/0xb0 [ 1295.482294][T21586] ? process_one_work+0x8bb/0x1b30 [ 1295.483600][T21586] process_one_work+0x958/0x1b30 [ 1295.484915][T21586] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1295.486392][T21586] ? __pfx_process_one_work+0x10/0x10 [ 1295.487820][T21586] ? assign_work+0x1a0/0x250 [ 1295.489017][T21586] worker_thread+0x6c8/0xf00 [ 1295.490210][T21586] ? __pfx_worker_thread+0x10/0x10 [ 1295.491596][T21586] kthread+0x2c1/0x3a0 [ 1295.492664][T21586] ? _raw_spin_unlock_irq+0x23/0x50 [ 1295.494034][T21586] ? __pfx_kthread+0x10/0x10 [ 1295.495258][T21586] ret_from_fork+0x45/0x80 [ 1295.496435][T21586] ? __pfx_kthread+0x10/0x10 [ 1295.497656][T21586] ret_from_fork_asm+0x1a/0x30 [ 1295.498924][T21586] [ 1295.499741][T21586] Modules linked in: [ 1295.500901][T21586] ---[ end trace 0000000000000000 ]--- [ 1295.503122][T21586] RIP: 0010:netfs_write_collection_worker+0x1c97/0x4780 [ 1295.504954][T21586] Code: 4c 39 fb 0f 83 25 04 00 00 e8 85 16 55 ff 44 8b 2c 24 41 83 fd 1e 0f 87 77 23 00 00 4a 8d 44 ed 08 48 89 44 24 30 48 c1 e8 03 <42> 80 3c 30 00 0f 85 4f 23 00 00 4a 8b 5c ed 08 48 89 df e8 d1 da [ 1295.509992][T21586] RSP: 0018:ffffc90007d3faf0 EFLAGS: 00010202 [ 1295.511698][T21586] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff82379b55 [ 1295.513999][T21586] RDX: ffff88804e4e4880 RSI: ffffffff82379dfb RDI: 0000000000000005 [ 1295.516173][T21586] RBP: 0000000000000000 R08: ffff88804391e900 R09: 000000000000001e [ 1295.518449][T21586] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000002c [ 1295.520723][T21586] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88804391e8fa [ 1295.523331][T21586] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 1295.525711][T21586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1295.527433][T21586] CR2: 00000000f51168a9 CR3: 000000004e5ac000 CR4: 0000000000352ef0 [ 1295.529488][T21586] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1295.531541][T21586] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1295.533544][T21586] Kernel panic - not syncing: Fatal exception [ 1295.535864][T21586] Kernel Offset: disabled [ 1295.537153][T21586] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:44:37 Registers: info registers vcpu 0 CPU#0 RAX=00000000032c3499 RBX=0000000000000000 RCX=ffffffff8b14ed79 RDX=0000000000000000 RSI=ffffffff8b4cc860 RDI=ffffffff8bb139e0 RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005687025 R10=ffff88802b43812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff901cf6c8 R15=0000000000000000 RIP=ffffffff8b15015f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f56d5fac CR3=00000000652f0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000002 RBX=0000000000000007 RCX=ffffffff8b0723c0 RDX=ffff88804e4e4880 RSI=0000000000000006 RDI=0000000000000001 RBP=ffffffff8cab3080 RSP=ffffc90007d3f060 R8 =0000000000000001 R9 =0000000000000006 R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000001 R14=0000000000000008 R15=0000000000000000 RIP=ffffffff818cb53c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f51168a9 CR3=000000000086c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000cd3c54 RBX=0000000000000002 RCX=ffffffff8b14ed79 RDX=ffffed10056c7026 RSI=ffffffff8bb13960 RDI=ffffffff8164138c RBP=ffffed10036ec000 RSP=ffffc90000487e08 R8 =0000000000000000 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=0000000000000001 R12=0000000000000002 R13=ffff88801b760000 R14=ffffffff901cf6c8 R15=0000000000000000 RIP=ffffffff8b15015f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055891058d000 CR3=00000000003c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffffff8c91d6e0 RCX=0000000000000000 RDX=1ffffffff1923adc RSI=ffffffff8b07233e RDI=0000000000000007 RBP=ffffffff8c91d6e0 RSP=ffffc90026a97520 R8 =0000000000000007 R9 =000000007fffffff R10=0000000000000000 R11=0000000000000001 R12=ffffc90026a97648 R13=ffff0a00ffffff05 R14=ffffc90026a97648 R15=ffffc90026a979ad RIP=ffffffff8b072353 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558910591000 CR3=0000000044e28000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=65244b8d65244b8d 65244b8d65244b8d 65244b8d65244b8d 65244b8d65244b8d 65244b8d65244b8d 65244b8d65244b8d 65244b8d65244b8d 65244b8d65244b8d ZMM22=b2b3a09cb2b3a09c b2b3a09cb2b3a09c b2b3a09cb2b3a09c b2b3a09cb2b3a09c b2b3a09cb2b3a09c b2b3a09cb2b3a09c b2b3a09cb2b3a09c b2b3a09cb2b3a09c ZMM23=8d49114c8d49114c 8d49114c8d49114c 8d49114c8d49114c 8d49114c8d49114c 8d49114c8d49114c 8d49114c8d49114c 8d49114c8d49114c 8d49114c8d49114c ZMM24=9278a4059278a405 9278a4059278a405 9278a4059278a405 9278a4059278a405 9278a4059278a405 9278a4059278a405 9278a4059278a405 9278a4059278a405 ZMM25=d49427bad49427ba d49427bad49427ba d49427bad49427ba d49427bad49427ba d49427bad49427ba d49427bad49427ba d49427bad49427ba d49427bad49427ba ZMM26=cb236d8fcb236d8f cb236d8fcb236d8f cb236d8fcb236d8f cb236d8fcb236d8f cb236d8fcb236d8f cb236d8fcb236d8f cb236d8fcb236d8f cb236d8fcb236d8f ZMM27=6cf2df326cf2df32 6cf2df326cf2df32 6cf2df326cf2df32 6cf2df326cf2df32 6cf2df326cf2df32 6cf2df326cf2df32 6cf2df326cf2df32 6cf2df326cf2df32 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4e4c00004e4c0000 4e4c00004e4c0000 4e4c00004e4c0000 4e4c00004e4c0000 4e4c00004e4c0000 4e4c00004e4c0000 4e4c00004e4c0000 4e4c00004e4c0000