last executing test programs: 3m18.191292696s ago: executing program 32 (id=218): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x14, 0x15, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac193400", "f4bd0000008019000e000000000000f400", [0x6, 0x2000000000001]}}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r7, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f00", @ANYRES32], 0x98}}, 0x200040d0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) 3m16.926498894s ago: executing program 4 (id=306): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x4, 0x4, 0x3, 0x0, r3}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) io_setup(0x6, &(0x7f0000001380)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x18, &(0x7f00000000c0)=0x40001, 0x4) connect$inet(r8, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x70) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0x1000, 0xd0, &(0x7f00000013c0)="362748699704f24874a8961dbc5e5d015e9f676fbf496971585be0e2cbcd68d699af09f4d0b3f737d5785a40b1cd491f6fcbafbc203598254b6520d56fcd81216f9f508603f20b82e390ca46a8e57691708f739c5518ee7426664a4a45190b4a029a919bd4e809da67fe820c14560ae0f4d4ea4c3d212818f3cdb87b27cb9dfe317b4ce859bc9138c650ed360088472d3a44f2f0dd4e24724d1c4ed9580e38daee7faefee0e4a4b7b810908b2aae0ac069ea718a7a29eb7fd4ad64009b128a1392d8e7bd623a0b05c1b2987a36387a7ac10c71443f7dc9f2225742047bbff6ae2a1c470fb4232c632a7ed8b667223031a75e202c86891a76d77ce3f2c956feee6c1c78bc6c7861e60cad409aa9735aa1baa9ed936def5dddb793904e338c6cf324f0497a229ab498346052b8df1ecf5ff75c62984b38e2ca7fad5641400ea0a2d2541fde4b703efbd562fcfb98f580465dd4521ce6acb54e6b36bcd7273d1b7c83ab6dbc4ccd7978ac5220b516bc1842842d6cc92f73fa3e54470ba773cf4c65e154360288859874e4cb6f8deb96cf0f7096d950d9abcb99ac079cc7c33bf76b7a09cccbc978969d3e43d6ddc68fe6a2bbd5363f8b3bc4f67d657c9d2d87c724a9285fdb5b5ba448715d3bfa39d51fb5fbdb9ad46f1ca4f1e78f483a9d0c37467f31bdce1d62fb88bedab6d7ff3f6d77c5825e98a91f0dcf826f017c8a69cdda147f9525b4f0731247960cee7507ebf2398a86e566645c87b1190ddd160b1b4f6d07c7c9ca94f35c4864264cf49b30365393c2d2d6392e44a7b794e9a39744a0c64373467e85eaebeca8e2eca7cfbe7bae29a004ce27b15da61625cbf9abafb66ea53dea20d8f429f702537935843f7a1bea1b2c05b53fd2d38c34eb827f93b1f28d213c7d26aacfb6af88bc74bdefbc309011573821aae4da05a1de5b6cb73eaec11ddc42e42eae2a774d45ac39cd68faeda622e4b7edbd04888d1cf7d1dae83c4c710a2794162bf5007290f33867bbf994759dfc8373981529d962c5d6d3513147c3f39101546a41d4c549c3e43a718b72229a1c42d548a40cb30ee5371a5bf774813f7c4ed7c5df12fb2b2b942936c5850a0f4e9f7047bfab96a700ff1a7dca2047e81f71691e3a499343169186dc5bde4c0747938615b38a68a10beb495b539ba277f5029d58c3806dfc0cd4c9ebfee76ff9d099fcc268cf9bac42a6be2a9727e60c7c2f0dbd0be7b1cf3f544c6a5f5b39abd97eb6abbd88508705a278636a65643dc7b94d74322644130a51df8a0d54266c755ff12a7d0df0c8cb1560c211506f5cc7761c8046d60039d4dbb3141301de0389f8339ae5e64e7482c8b5501368a9f2ef5e30990f243da3d80f145e16a916a17e22d36a7300a7e660409d48102f97fe2295f8576485b7c4f895e544e70a989d9f5c9a0171de9b8984bb4fb47b583deb13b3e0138b7aea7a9ecbd9d5312db30d7a4045552b5bb029b2f2b8d35f2561666af3e8e1a5faa5d07c20b5165965f5b704c46250ad838330504dd8050e18ac6a69421c44ef6a6168e179630fdeb2334c9602d120c8c4fcf765d9aedd6b940c23ea43ab435974be10b32e98f7b41e0c4c71d8b7bed618c4c8da5aa3b9712725033fcddafe10e3d4442235d9ccf72d373b77f5fef52bc60fe8ab4ef2a5ce809aa5f2604bddd260f9979789900eecb1543d8478d4c2976ca2fae5839221ba51ebffdc7d222b9c395f84f9c243d13a2f95aea82f300325440fc0236bc006ec37e694c828f28a19fbbd1ca350fcced92186d01fcd79d35d05631231b0d4940604e7db82cd0bc478bf2348c251234aa2217a22a30070e49c1997e14c79b41622a238dba2906c3a559deca3611aaeb168d4c25eeadd8bfd0b7e5d6ba65071e65d1c5886b8592ea42573cc47148bbf637730b3c9ad3e8ac151a379479ffbd45a845ff1af9a6ec8b133c4ef278c8e0f746376a35bc35a8a6aeef01cbe10ceac6318fc062cbddaf7f2086a5cda5a6037fe98be2e6c97c6e28d897985e0306b912c6799a42d3d144ec17598c21bbc743af18d3d7a6a3eee23b3ad6d0c3c3d56b42735d2bed06c9135e0a9483be14e31edf17df3fcc57d9229dfb3ecc065267226ae379f6c5c68f6a3622a6958191102f6ce5b12a45bf3b9536f9709c4893103130d1e487e4e473c4ec0a95e3f38ede4c5e795e40871d3b567f0abc734a51178a137b24b146a80d3998009dabd6ff060d7cabf3944b6fe75fbe03bfd844de4ff62bee100d3e5f4e335ef82c24355008c9559f1f6baf7e2535aa082c0fc500264403abbb51cc67d8d52163c3b1d171279d00588376c6cf0e0c3f30de3eda21a44626e9ac5dc0e4eac3c2f6494c099dfc5e405c90db40bf0202ba4758c9bad2832664617452898aeb40bd1f7ebe16659937b6fde9ae53b300f351785729027f46b52a685996165ade9317c286b7ebf6bd64e6945411e2fa924500cf86e11163bf2eb5f18a2f73b9257913ac38831e29bff3e1ddb6edae35166ecce293952046803a8c44ff5b796bc3f9625cf91a15c12c112ffbe738502c61bfee62c4b5924bb7f057f3881e3e4eff5e104290b4b2e67554adc6648fabd99b1d7bec5189ae0dbb167c302a5cd0cdff0ff15dcf91a289ee0cd3ce068d0f2b36eb693f5e6d57406d4219b5dd9d13cc5ee18d260a509bfa125afe25b36d8bfc7ed72ef2fd31d6991c790f3a8c1130efc5d1a1991fa874ebcc9f6cb435c23c6ecdaa947aec2ff66ea50ac422221946d651fc4501741d3b038e796de77ca0ed6d739755d74703281612eeeffcecf4a80a9f8c068db759a1db604dfb61c29f425c03853206c452a8e8e173a66664c6edc0aa016597655496b7773f0841e470e8f0275e41ab34868624e2c2ba6b67f9c18f8a0276267eb550e78a2f53502ca60f585dff34493dccedfb2c7e948d17d44f293fcfba82f682da856a97183733447607619d594f1e97071a08d03817bd3a463b43c1401281e32ace2d180c3d6a601c1c53260961ea0824b2cb1edeb855eb6172e012e60f1351ec258cbbbb67f654aa5f12ddec39a944b1b38435d622e70a05993606e7bcaec420dca68914f2cec781284f83d561715476b4d1f88d8cb164217a922ca2c0af118fff37fa99d38dc1977c0bfbf47111392d6147821529493918c63294fb199928845fb323477373b3c3b606debce4cc817b56219737a7bf83843d1fc68b8b52cdf0954721d03741a585efd36458ce51202719ddeb908c946dfbd430d46db0695aec2f5c99b09419cbacc272db7add5f8124a79ca487ace642f0edfb75b1caf129c39b600312f8af0aded17e408f417407f699a42098a256b70d9b70853981c23cc0c71dfaadef055b7f6c9a00b3d3b7a229ab08b96cfb88d3dbd005c583028c0fc950d3eb0ac5f0b607d332de85bac4b59da425e4bf338634a399ad33108cee5c3b370821fc3aa292d3a0a6a1f349465cd1dbf322c94f5f9f95703830d194f313ee64c1b5c68409c09f58560b5c013df651ed4151a07770918df65d89220ec1bd334fcc45b7d886c53587ad6197f84b6fb190c8b25dc384a4a38987b877dc8d417d47e58e4b7d79ebf241e7b44167ab593c95900b43f250888bd7dc1865cceb9c23a5934bc30d2d81db6f7b86abb4c391610f0e4c86ad98b1c64c5e89693226f15c94f598064a4c389ef4633d8c761d9a02a51f167977cf8ccb78e2e3d7f4960abf7dc8bc627d134fa724e9c2306e085851a389c86615d8c6daf96f103732890889a3da5c0989a1983c29df4a0ec0cf6a0af5cf786822aa3fdf4792fd617c4d9f3b084b4e1be287fc3c153706722f23f57634073049a964e8ce1771e6c4752c711b0ef3ff5023af7babe8a631a2cbad17d6a973a07e1c7f7b438f7b3c0a7f532a2bee990cb9a6dc2af0a0c439c2cb538360b7759268aee29c6e6b9e851e36bc7c3c6829edb52c9b05dce30d6d29e92103f65f30630b0ce19b56847e9a84e0892b48748039eed1c3f7f487d3d099870608fd7b37a8650c4646480e0466a034dd47e1242245b00a515c77dd1b0b6e25b3a2577e2c2d3fb5ddc075bebaeeb8df440e2f49c6ef4dbb2d556c9edd4ba23914bd249d596938f6eb1f23d7f9577299c8f477be4d4a6c7fd185995dd4e9ed86c3bdb026586208ffcc927637af91050fea83056b08e261072d79115d98224ed5743428df28e3e062998597bc9a6088445be4bc943eb52f5f04d445582835ca7c27562c23b850fae8f78b5bb1be39343ecb7678ba948e766ec2874e766df0f6cf24f0ce51c358304fdb7fc49de3e4c6a1278eba78e971cd1b31b63d050d81de64939e583f9ae32d14bc20860523ef021d0d1f68c80506f714dd70e3bc8fda9bb2e6db1899c620a16f7351ee5210f5df6b343948b9b0ff80fbd17bcde56f9c5eeb949ee8b9e6801934bf04e60f9592d7fb6730ea3d0c679aa9a1c0126d730c56642870a3cf551ae1ae43b93d48b743088dc54862b7e91c765688b67e9f5ea51c462b29f385fad3e80531a7d1e7e73e1c14881042a5be6ebc45386b86d9652c172299fd281471826a3093f8e204317026d4d033a1f18b9b5103b230aa817ecade90acad98366c94daf825efddb4785f684384b109f68fb1da9c7133b52afbccf9f398d66c48230cb1109ea1dee173cf7d345e6009199fdf3ac83c1784fba45613eaa6adc2b1b9232b31f40fddaefbc1f6fad5ae9d4c2eeb06dc8068193c36d6aaaf34e3b8ec687313668011006ef89a49feed02b9a1968fd77d8a6402b28bd3c122ee94e0ce4c299e63883fd75c7a8dd31b67d10702a79bacb44a8be7f36cbf8c08ff6d802aa017748c45085480f807fcdf9f70e523f933ecb5964831011950ca1e86c2b3aa605e28bcacc0c472f5fee9e98e0c5e25cbaade4961a984ecf34563dfb6df9e6ec2fe148a05ae2a41c82dfb5b30c946ff03cf3d9785f097cf4fd3b94b9204d0fb5ac4924c12d618a3d8f1649785246bd580c904ac8dbf3db29e55d63c0134d7526888b1a73ef76b54bc00cce4769e41752a9413de89bfff6713b294e178873f31fd8041d44dc3c42f5c2caa6fdf5331f176d8722016496805d4c64e2e5101d255ad29c40e57dc29d7657b057615adae5d7aded1e5fdce976e6fef597effbb548d09d6cfb2fd5f01e6975284e8a1991dda301934d029c544e4de48e266a9b01091e5d4b068e4c0811bd26edc891858259521a72c41fd38b4e45b93bad3baa80aab54aa935017749a51f6f8bc0e47df7c74a9e14a0a386aa6341f54ea8e8876c634a5e4ef8d4e57a92a8fdb40cb00a11caad66da7c64a180b9d5e1e8213cbd4989c09f56d8140b3395f1248517e8404bcba17d11b1b0281656758f5378fc178aa56b968de36545fa714f0aa7a5e4c43ea95b114ddea12b5d0d070c32356d1aeb2c2f784d4a7d77bb420e73a9775251a78cacd5e840414f84542fa3abd571d67999e8641d0a81ff40dd0554d19d2df5b08521787b645420d0725946f7e9e4c81e5d16a2bef7087ccb01b2ddd23b7df08c4f46c349efbca824aa64cab3d2b96645ac6fd5b5b28eff77440a6d543c815470c4f7ceca130d0fdfcc7e28d0e017cd1448e18451dac630d97ad7ea592a7d67459a13b2c182db41a272635c81baa93389dc89e4844d24a0fc720b1f260426f8f796dc052992a09365b05da0be4303890dbbcb24ae9ecceaea903954afe2194b10891dfe6ab03c981c452bfec56e84137af1d08409db7dbc7046b6632dec59c1fae760187a24fefe94c9a6a547a212deab2bd83d59ed", &(0x7f0000000700)=""/208, 0x2, 0x0, 0x1, 0x23, &(0x7f0000000280)="89", &(0x7f0000000340)="52c5aa87f4af40490762979f615d38f5f9a96da2d9c2e345ec2327b794d1a679afe5e5", 0x7, 0x0, 0x9}, 0x4c) r9 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x0, 0x80000000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000021c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r9, 0x54, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, &(0x7f0000000000)={0x1, 0x1}) 3m6.570660449s ago: executing program 0 (id=353): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) sendfile(r0, r1, &(0x7f00000001c0), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa30903, 0x8000, '\x00', @p_u8=0x0}}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000500)={{0x80, 0x40}, 'port0\x00', 0x100, 0xd1050, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x501) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000fd2b6a94e395bb11539b23ec94717b7fd0ed33564a6801a456e7536e29926aaa13ea9630e6be5b538513a97362650460dce1da0ec8f73124156db92a68be7d6041957bce281ee663d0fc70f8c7c15d609ef4b0aadf74f2cebbdcd15e8814afdfd32a17127d3efb8056c48adc0cebc8a69df4807d94dd34d1d8c0057d330756b3cd0d2856957232267a1ae6343f4b8dc4564e23d9903639e8255c84a26e66bda3775af8a66383dd157684e5a94377802886238a4e46"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3, 0x2}}}, 0x24}}, 0x0) socket$unix(0x1, 0x5, 0x0) eventfd(0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) 3m5.61603922s ago: executing program 0 (id=359): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setrlimit(0x3, &(0x7f0000000180)={0x7, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101002, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000000980)=[{&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000440)=""/108, 0x6c}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/107, 0x6b}, {&(0x7f0000000800)=""/204, 0xcc}, {&(0x7f0000000900)=""/65, 0x41}, {&(0x7f0000001a80)=""/179, 0xb3}, {&(0x7f0000001b40)=""/130, 0x82}], 0xa, &(0x7f0000001c00)=""/163, 0xa3}, 0x20000000}], 0x1, 0x12001, &(0x7f0000000280)={0x0, 0x989680}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0x8, 0x0, 0x7ffffffffffffffe, 0x0, 0xffffffff}, {0x8, 0x0, 0x1}, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x1, 0x0, 0x0, 0x2, 0x4000000}}, 0xe8) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000)) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) 3m4.699390204s ago: executing program 0 (id=364): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setrlimit(0x3, &(0x7f0000000180)={0x7, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101002, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000000980)=[{&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000440)=""/108, 0x6c}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/107, 0x6b}, {&(0x7f0000000800)=""/204, 0xcc}, {&(0x7f0000000900)=""/65, 0x41}, {&(0x7f0000001a80)=""/179, 0xb3}, {&(0x7f0000001b40)=""/130, 0x82}], 0xa, &(0x7f0000001c00)=""/163, 0xa3}, 0x20000000}], 0x1, 0x12001, &(0x7f0000000280)={0x0, 0x989680}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0x8, 0x0, 0x7ffffffffffffffe, 0x0, 0xffffffff}, {0x8, 0x0, 0x1}, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x1, 0x0, 0x0, 0x2, 0x4000000}}, 0xe8) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003180), 0x80043, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r7, 0x80045104, &(0x7f0000000000)) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) 3m4.511857609s ago: executing program 33 (id=299): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) (async) r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000500), 0x240202, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000540)={0xf0, 0x600, 0x80, 0xed8, 0x4, 0xb5, 0xf, 0x0, {0x3, 0x1ff}, {0x8, 0xff5, 0x1}, {0x0, 0x4, 0x1}, {0x9d2, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x4, 0x0, 0x2, 0x4, 0x0, 0x8, 0x9, 0x100, 0x1, 0xc}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) r4 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x42c01, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f00000000c0)) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0xbb, "8c5fd4e17f9a0161810c6dfe245f240cc27ddb3a7bc72c5a0a3c6af48d11ccaa7a359de0b28d17c6f8d389cf59ce002529c844d27dfcde0630e1f9482325804baefa53569ce8c4036536e855d9b86bfe1d4d3775b0cbf1b6a0cdc8178f1c89e3b050814219880a3f6f561e21fcc698aa2fa435fe2386b2a9b801db3c373edf1e61668dbc42d7ef9e95babce6249b4c0f3c00a4a9e3068b62c5ecf31aabbb366ff3907ec0ebdcb5e595c91203aa77f28320b86508193e319bd3384d"}, &(0x7f0000000380)=0xc3) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000400)={r6, 0x4, 0x9, 0x4}, 0x10) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) (async) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)=@newchain={0x10a8, 0x64, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x5}, {0x7, 0x8}, {0xfff2, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1068, 0x2, [@TCA_FLOW_POLICE={0xc30, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x10, 0x200, 0x400, 0x4b8a, 0xb, 0x22ae, 0x6, 0x3, 0x4, 0x2, 0xe, 0x7a4, 0x1, 0xeb, 0x9, 0x9, 0x1, 0xfffffffe, 0x6, 0x8001, 0x0, 0x3, 0x7ff, 0x1349, 0x8dd, 0x1, 0x2, 0x100, 0x10, 0x9, 0x6, 0x4, 0x2, 0x10000, 0x8, 0x2b0, 0xb9, 0x6, 0x96ac, 0x3, 0x8, 0x80000000, 0x45f, 0xd, 0x0, 0x9, 0x1, 0x1, 0x7e, 0x7, 0xccc1, 0x28e6, 0x80000000, 0x4, 0x8000, 0xff, 0x583, 0x96, 0x5, 0x2c1c, 0x800, 0x2, 0x3, 0x1, 0x4, 0x6, 0x7, 0xe, 0x8, 0xee00, 0x6, 0x2, 0x2a, 0x800, 0x80000000, 0x64000000, 0x0, 0x7d9, 0x3, 0x10000, 0x400, 0x2, 0x7c, 0x9, 0x1, 0x8, 0xfffffff7, 0x3, 0x0, 0x4, 0xb, 0x5, 0x1, 0x81, 0xd, 0x7, 0xffffff80, 0x3f80000, 0x101, 0x8000, 0xb, 0x8001, 0x0, 0xffff069d, 0x160ba4de, 0x3ff, 0x5, 0x6, 0x5, 0x4, 0x6, 0x1, 0x3, 0x92bf, 0x10001, 0xe4b, 0x2, 0x1ff, 0x0, 0x81, 0x1, 0xd9, 0x1, 0x0, 0xffffffff, 0xaf86, 0x6, 0x4, 0x3, 0x0, 0x3, 0x6ab8faf1, 0x1, 0xffff0000, 0x4, 0x808d, 0x5, 0xa, 0xd52b, 0x9, 0x9, 0xfff, 0x7f, 0x6, 0xb6, 0xe, 0x2, 0x4ca, 0xf, 0x0, 0x5, 0x4, 0xfffffff9, 0x4, 0x7f, 0x6, 0x3, 0xfffeffff, 0x8, 0x6, 0x7, 0x3, 0x6, 0x18, 0x5, 0x3, 0x4, 0x8, 0x9, 0xff, 0x8, 0x2, 0x8, 0x8, 0x1ff, 0x38c, 0x7, 0x800, 0x1, 0x4, 0x3, 0x9, 0x7fffffff, 0x8, 0x5, 0x8, 0x100, 0x4, 0x8, 0xa694, 0x6, 0x0, 0x3, 0x80000001, 0x0, 0x4, 0x8, 0x7, 0x6, 0x0, 0x40c, 0x2, 0x1, 0x6ee, 0x9, 0x8, 0x10000, 0x8000, 0x8a5, 0x2, 0x6, 0x0, 0x3ff, 0x5, 0x3, 0x8, 0xca, 0x1, 0xf5, 0x5eeb0cdf, 0x80, 0x6, 0x8, 0x7fff, 0x1, 0x2, 0x0, 0x3, 0x7, 0x1, 0x10, 0x7, 0xfc8, 0xfff, 0x4, 0x2c04, 0x10000, 0x0, 0x8, 0x5, 0x1, 0x6, 0x9, 0xfffffff8, 0x10, 0x1000, 0x1, 0xfff, 0x9, 0xa5ad, 0x4, 0x660, 0x10, 0x7, 0xc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x3, 0x4, 0xfffffffe, 0x6, 0x12000, 0x1, 0x2, 0x10001, 0x0, 0xffff, 0x5, 0x53ae913a, 0x79d, 0xfffffffd, 0x9, 0x9, 0x0, 0x2, 0xbe3, 0x703, 0x80000001, 0x10001, 0x400, 0x8001, 0xffffffff, 0xe4, 0x0, 0x1f0a, 0x3, 0x1, 0x8001, 0x0, 0x9, 0x7, 0x5, 0xc, 0x5e, 0xa8, 0xe5, 0x2, 0x2, 0x0, 0xe, 0x1, 0x4, 0x9, 0x9, 0x7fffffff, 0x400, 0xeab, 0x5, 0x5, 0xf00, 0xfffffff7, 0x7, 0x1000, 0x1, 0x9, 0x5, 0xe, 0xffff, 0x1, 0x3949d63f, 0x3ff, 0x2e2, 0x9, 0x5, 0x1ca, 0x7f, 0x9, 0x6, 0x7, 0x1ff, 0x100, 0x7, 0xef9a, 0x9, 0xe, 0x8, 0x2, 0x7, 0x5, 0x3, 0x2, 0x8, 0x3, 0x7dd0, 0xfffffbff, 0xd1be, 0x1, 0x80000001, 0x6, 0x1, 0x8, 0x5, 0xb, 0x81, 0x7, 0x4, 0x7, 0x7, 0x7, 0x1, 0xa, 0x7, 0x3, 0x48280b85, 0x79, 0x1fbfe00, 0x10, 0x5, 0x9, 0x4, 0xb, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x7, 0x3, 0x5, 0x1, 0x1, 0x3, 0x7, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1, 0xfffffffc, 0x5, 0x7, 0xffff, 0x0, 0x400, 0x100, 0x9, 0x0, 0x94d, 0x5ec, 0x6, 0x9, 0x0, 0x1, 0x1, 0x4, 0x422b, 0x18, 0x32db, 0x6, 0x7, 0x9, 0xf, 0x654c, 0x1, 0x329, 0x9, 0x5, 0x7, 0x4, 0xa17, 0xfffff52a, 0x872, 0x1d, 0x40, 0x5, 0xee3, 0x6, 0x5, 0x8000, 0x200, 0x0, 0x9, 0x9, 0x7, 0x8, 0xff, 0x9, 0x1a4d96c, 0x80000001, 0x6, 0x5, 0x101, 0x1, 0x9, 0x10, 0x1, 0x8, 0x4000, 0x0, 0xfffeffff, 0x744, 0x8000, 0x2, 0x2, 0x24, 0x57f99eb9, 0x5, 0x7ff, 0x6, 0x7fff, 0x10000, 0xbf7, 0x7fff, 0xffffffff, 0xffffffff, 0x0, 0xe3, 0x5, 0x8, 0x5, 0xb15d, 0x40, 0x4, 0x80000001, 0xf5f8, 0x5a06, 0x8, 0x7, 0x2f8, 0x4, 0x8d6, 0x8, 0x4, 0x0, 0xc5, 0x6, 0x1, 0x80000001, 0x1, 0x7, 0x800, 0xc, 0x3, 0x7, 0x2, 0x4, 0x4, 0x3, 0x2, 0x3, 0x5, 0x1, 0x3, 0x1, 0x2, 0x2c1, 0x5, 0x3, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8b9b31e6, 0x71d, 0x4, 0x6, 0x7, 0x6, 0x2, 0x2, 0x2, 0x1ff, 0x37ca, 0x2, 0xa4d, 0xf, 0x0, 0x8, 0x9, 0x9, 0x10001, 0x1, 0x101, 0xfffffffd, 0xfffff320, 0xeebb, 0x900000, 0x62ed, 0x6, 0x40, 0x8, 0xfffffffb, 0x3, 0x9, 0x81, 0x7f, 0x1, 0x0, 0x2, 0xff, 0x8, 0xa, 0x79, 0x6, 0x8, 0x10000, 0x625729b8, 0x7fff, 0xfffffff7, 0x24000, 0x4, 0xcae, 0x116, 0xffff, 0x9, 0xc0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xbaa7, 0x2, 0x0, 0xfffffffe, 0x8, 0x6, 0xc, 0xfffffe01, 0x3, 0xffff0000, 0x3, 0x7763, 0x8, 0xffff1792, 0x4, 0x7, 0x499, 0x8, 0x5, 0x1ff, 0xf115, 0x8000, 0x10, 0x58c, 0xb2, 0x6, 0x7, 0x8, 0x266, 0x2, 0x2, 0x5, 0xd, 0x5, 0xffffff11, 0x787702ef, 0x8, 0x6, 0x2, 0x800, 0x2, 0x7, 0x400, 0x2a, 0x8, 0x1000, 0x7, 0x7fffffff, 0xffe, 0x4, 0x0, 0x42da, 0x10000, 0xd, 0x6, 0xe, 0x3, 0x0, 0xffffff7f, 0x3, 0x5, 0xa8000000, 0x0, 0x0, 0x9, 0xc7f4, 0x8000, 0x7, 0x0, 0x4, 0x6, 0x2, 0x0, 0x3, 0x6, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6, 0xffff, 0x0, 0x0, 0x7, 0x5, 0xff, 0x0, 0x5b79, 0x9, 0x1ff, 0x1, 0x0, 0x2, 0x7, 0x7, 0x5, 0x1, 0xfb1, 0x9, 0xa, 0x3, 0xfffffffa, 0x8, 0x0, 0x80, 0x7bdb, 0x8000, 0x6, 0x2, 0x3, 0x6, 0x7ff, 0x10001, 0x4, 0x7eb, 0x90c, 0x61a, 0x8000, 0x0, 0xfff, 0x7, 0x9, 0x10000, 0x5, 0x7, 0x5, 0x0, 0x6, 0x4, 0x4, 0x3, 0x7, 0x9, 0x1000, 0x9, 0x2, 0x4, 0x3, 0x7fff, 0x9, 0x6, 0x4, 0x6, 0x3, 0xc40, 0x10001, 0x10000, 0x5, 0x3, 0x200, 0xa16, 0x80000000, 0xc, 0x5, 0x70, 0x4, 0x4, 0x1, 0x2, 0xb, 0x401, 0xc712, 0x5, 0xa, 0x4, 0x7, 0x5, 0x1000, 0x40, 0x8001, 0x5, 0x400, 0x60b3f3bc, 0xb, 0x3ff, 0x0, 0x1754, 0x8000, 0x6, 0x146, 0x1ff, 0x2, 0x80000001, 0x7fff, 0x7, 0x3, 0x8, 0x2b52, 0x8617, 0x0, 0x8, 0x0, 0x9, 0x6, 0x5, 0xfff]}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x400}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xfff}, @TCA_FLOW_POLICE={0x414, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1ff, 0xe3c, 0x8, 0x8, 0x3, 0x7fffffff, 0xa1b7, 0x5, 0x17, 0x7f, 0x7, 0x4, 0x10, 0xe6c, 0x5, 0x10, 0x8, 0x6, 0xff, 0x9595, 0x3, 0x5, 0x3, 0x45, 0x7fff, 0x3, 0x700000, 0x3, 0x0, 0x7000, 0x9, 0x8, 0x0, 0x4, 0x5, 0x7, 0xfffffffc, 0x80, 0x5f6f, 0x1, 0x6, 0x1, 0x3, 0xfffffffc, 0x3, 0x1fca00, 0x4, 0x2, 0x3ff, 0x0, 0x7f, 0xffffffff, 0x2, 0x9, 0x0, 0xffffffff, 0x380000, 0x2, 0x1000, 0x8, 0xfffffff8, 0x5, 0x7f, 0x1, 0x4, 0x2, 0x2, 0x9, 0x4eb2, 0xc0, 0x401, 0x8, 0x9, 0x7f, 0x1, 0x7, 0x2, 0x5, 0xfffffff9, 0x2, 0x3ff, 0xff, 0x3, 0x0, 0x5, 0xb54, 0x9, 0x3, 0xffffffff, 0x6, 0x2, 0x1, 0x4, 0x2, 0x1, 0x6, 0x57, 0x4, 0x5, 0x1, 0x1, 0xffff0000, 0x2, 0x9, 0x6, 0x2, 0x8, 0x97b, 0xc3eb, 0xfffffffd, 0x1, 0x7, 0x2, 0xf, 0x6, 0x80, 0x4, 0x400, 0x3, 0x2, 0x10000, 0x8001, 0x1, 0x6, 0x32, 0xfffffff0, 0x6, 0x5, 0xc2, 0x800, 0x10, 0x81, 0x10001, 0xc7f, 0x9, 0x6, 0x60000000, 0x400, 0x4, 0x3, 0x1, 0x0, 0x10000, 0x5, 0xd26, 0xffff, 0x8000, 0x4, 0x4, 0xb78, 0x3, 0x3, 0x2, 0x1000, 0xfff, 0x40, 0x4, 0x1, 0x40, 0x1, 0x2, 0xc, 0x4, 0x3057, 0x7, 0x2b7, 0x1, 0x74, 0x1, 0x5, 0x7e, 0x3ff, 0xfffffff7, 0x8346, 0x8000, 0x6, 0x101, 0x4, 0x0, 0x5, 0x5, 0x4, 0x7fff, 0x2, 0xcc, 0xfffff30a, 0x1, 0x1ff, 0x61, 0x8, 0x9, 0x1, 0x5, 0xb8, 0x80, 0x759, 0x8, 0x3, 0x0, 0x7, 0x100, 0x4, 0x1000, 0x6, 0x6, 0x9, 0x7, 0x0, 0x6, 0xb7, 0xe, 0x7fff, 0x1, 0x6, 0x8, 0x3, 0x3, 0x1c, 0x7, 0x40, 0x10001, 0x4, 0x3, 0x0, 0xf, 0x6, 0x4, 0x4a, 0xd30b, 0x7, 0x80000000, 0xff, 0xffffffff, 0x2, 0x4, 0x4, 0x6, 0x9, 0x7fff, 0x200, 0xa2d, 0x9, 0x3, 0x1, 0xffffff18, 0x4, 0x6, 0x80, 0x2, 0x14, 0x4c5, 0xccbc, 0xd4, 0x8, 0x6]}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}]}, 0x10a8}, 0x1, 0x0, 0x0, 0x44840}, 0x20004000) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) (async) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) r7 = socket(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) (async) sendfile(r7, r5, 0x0, 0x8010002b) 3m3.715186871s ago: executing program 0 (id=367): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) setsockopt$sock_int(r1, 0x1, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$misdntimer(0xffffff9c, 0x0, 0x4000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000340)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000480)={0x5, 0x6, {0x0}, {}, 0x8, 0x1}) r5 = syz_clone3(&(0x7f00000008c0)={0x1002000, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600), {0x25}, &(0x7f0000000640)=""/200, 0xc8, &(0x7f0000000740)=""/229, &(0x7f0000000880)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000940)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000980)={'\x00', 0x9, 0x1, 0x7f, 0x3, 0x40, 0xffffffffffffffff}) r8 = getpgid(0x0) sched_getattr(r8, &(0x7f0000000040)={0x38}, 0x38, 0x0) r9 = openat$cgroup(r2, &(0x7f0000000a00)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000a40)={0x200000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x2}, &(0x7f00000003c0)=""/192, 0xc0, &(0x7f00000001c0)=""/13, &(0x7f00000009c0)=[0xffffffffffffffff, 0x0, r3, r4, r5, r6, r7, r8], 0x8, {r9}}, 0x58) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000280)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20000884) 3m2.784394019s ago: executing program 0 (id=371): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0xfffc, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x52, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a0400071100fe80f5ffffffffffffff0000000000bbff020000000000000000000000000001"], 0x0) 3m2.691017077s ago: executing program 0 (id=373): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x3, 0x4, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000005c0)) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000340)='./file0\x00', 0x0) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r11, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_REAPURB(r11, 0x4008550c, &(0x7f00000002c0)) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000040)={{0x10000, 0xffff1000, 0xd, 0x6, 0x1, 0xa, 0xdb, 0x4, 0x0, 0x8, 0x5a}, {0x0, 0x8080000, 0xd, 0x6, 0x3, 0x82, 0x8, 0x3e, 0x6, 0x0, 0xf, 0x8}, {0x8080000, 0x4, 0x10, 0x5b, 0xff, 0x3, 0x1, 0xfe, 0xa1, 0x1, 0x2b, 0x5}, {0x10000, 0xdddd1000, 0x0, 0x7, 0x6, 0x3, 0x3, 0x9, 0x3, 0x7f, 0x0, 0x6}, {0xeeef0000, 0x5000, 0x3, 0xfb, 0xaa, 0x1, 0x71, 0x0, 0x6, 0x8, 0x14, 0x9}, {0x3000, 0x0, 0x9, 0x1, 0xf6, 0xb, 0x2, 0x2d, 0x2, 0xfc, 0xde, 0x2}, {0xf000, 0xeeef5000, 0xe, 0xe, 0x2, 0x4, 0x7, 0x0, 0x4, 0xa0, 0x6, 0x8}, {0x6000, 0x8080000, 0x0, 0x5, 0x3, 0xff, 0x2, 0x0, 0x2, 0x7, 0xe6, 0x8}, {0x2, 0xaa6d}, {0x6000, 0x1}, 0x80000000, 0x0, 0x8080000, 0x566085, 0x8, 0x2801, 0xeeef0000, [0x0, 0x3, 0x80000000, 0x9]}) r12 = socket$nl_generic(0x10, 0x3, 0x10) finit_module(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="38000103bdbd7002fa6e1b04dbdf2507000000"], 0x14}}, 0x0) 3m1.882219814s ago: executing program 34 (id=306): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x4, 0x4, 0x3, 0x0, r3}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) io_setup(0x6, &(0x7f0000001380)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x18, &(0x7f00000000c0)=0x40001, 0x4) connect$inet(r8, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x70) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0x1000, 0xd0, &(0x7f00000013c0)="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", &(0x7f0000000700)=""/208, 0x2, 0x0, 0x1, 0x23, &(0x7f0000000280)="89", &(0x7f0000000340)="52c5aa87f4af40490762979f615d38f5f9a96da2d9c2e345ec2327b794d1a679afe5e5", 0x7, 0x0, 0x9}, 0x4c) r9 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x0, 0x80000000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000021c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r9, 0x54, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, &(0x7f0000000000)={0x1, 0x1}) 2m47.676021317s ago: executing program 35 (id=373): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x3, 0x4, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000005c0)) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000340)='./file0\x00', 0x0) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r11, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_REAPURB(r11, 0x4008550c, &(0x7f00000002c0)) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000040)={{0x10000, 0xffff1000, 0xd, 0x6, 0x1, 0xa, 0xdb, 0x4, 0x0, 0x8, 0x5a}, {0x0, 0x8080000, 0xd, 0x6, 0x3, 0x82, 0x8, 0x3e, 0x6, 0x0, 0xf, 0x8}, {0x8080000, 0x4, 0x10, 0x5b, 0xff, 0x3, 0x1, 0xfe, 0xa1, 0x1, 0x2b, 0x5}, {0x10000, 0xdddd1000, 0x0, 0x7, 0x6, 0x3, 0x3, 0x9, 0x3, 0x7f, 0x0, 0x6}, {0xeeef0000, 0x5000, 0x3, 0xfb, 0xaa, 0x1, 0x71, 0x0, 0x6, 0x8, 0x14, 0x9}, {0x3000, 0x0, 0x9, 0x1, 0xf6, 0xb, 0x2, 0x2d, 0x2, 0xfc, 0xde, 0x2}, {0xf000, 0xeeef5000, 0xe, 0xe, 0x2, 0x4, 0x7, 0x0, 0x4, 0xa0, 0x6, 0x8}, {0x6000, 0x8080000, 0x0, 0x5, 0x3, 0xff, 0x2, 0x0, 0x2, 0x7, 0xe6, 0x8}, {0x2, 0xaa6d}, {0x6000, 0x1}, 0x80000000, 0x0, 0x8080000, 0x566085, 0x8, 0x2801, 0xeeef0000, [0x0, 0x3, 0x80000000, 0x9]}) r12 = socket$nl_generic(0x10, 0x3, 0x10) finit_module(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="38000103bdbd7002fa6e1b04dbdf2507000000"], 0x14}}, 0x0) 2m45.825865285s ago: executing program 6 (id=469): r0 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000080)="580000001500add427323b472545b4562e117fffffff81000e224e237f000001925aa80020007b0009", 0x29}], 0x1) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18c2962b0a00", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x40}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180), 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 2m45.570983763s ago: executing program 6 (id=470): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000440)=""/170, 0xaa) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x3, &(0x7f0000000100)=0x7) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f04ebbee5, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) recvmmsg(r2, 0x0, 0x0, 0x40002100, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYRES64, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x0) 2m44.668604914s ago: executing program 6 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (fail_nth: 4) 2m44.45966089s ago: executing program 6 (id=473): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) (fail_nth: 11) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x400040, 0x0) dup2(r0, r1) socket$inet6(0xa, 0x5, 0xfffffff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x9602, 0x85, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x75, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 2m44.03922937s ago: executing program 6 (id=476): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}]}, @CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040400}, 0x8d0) write(r1, &(0x7f0000000000)="2d000000010001", 0x7) r3 = userfaultfd(0x80001) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x19, 0x0, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r5, 0xc008561b, &(0x7f0000000140)={0x1, 0xb}) r6 = openat$misdntimer(0xffffff9c, &(0x7f0000000100), 0x8500, 0x0) ioctl$IMDELTIMER(r6, 0x80044941, &(0x7f0000000140)=0x3) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000380)={0x379, "f800382a76ff76e3b113a72a8b880e5f7e4aa6425215713e49b532e9ace31145", 0x2}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) 2m43.961070812s ago: executing program 6 (id=478): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0xf2ff, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m40.569275415s ago: executing program 5 (id=501): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r7 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r10, 0x6, 0x9, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) close(r7) socket$nl_route(0x10, 0x3, 0x0) r12 = accept4$bt_l2cap(r6, 0x0, &(0x7f0000000200), 0x80800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r12, 0x6, 0x1, &(0x7f0000000240)={0x4, 0x7, 0x9, 0x9, 0x6, 0x5, 0x2}, 0xc) splice(r5, 0x0, r7, 0x0, 0x1100000000f336, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0xc800}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r11}, 0x8) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000239c5d61ce45cd10c2bd776b256a84d82eb139f60849d6442446dabc20e3c62dd20f9aa722045730ae582b14af002f"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r14}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) close_range(r14, 0xffffffffffffffff, 0x2) 2m39.71126748s ago: executing program 5 (id=504): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000240)={0x7f, 0x8000000000000, 0x6, 0x3, 0x6, 0x1, 0xcb, 0xf}, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 2m39.641624847s ago: executing program 5 (id=506): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000018c0)={&(0x7f0000000500), 0x14, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x4008005}, 0xe000000) 2m39.641405303s ago: executing program 5 (id=507): socket$packet(0x11, 0x3, 0x300) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) dup(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000500000004000000000d000e04000000000001000000000000"], 0x0, 0x2d}, 0x28) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 2m38.540379197s ago: executing program 5 (id=511): r0 = syz_clone(0xc182200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x4, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc1105511, &(0x7f0000000280)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7, 0xfffffff7, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1400]}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000004080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r6, 0x75e7f000) read$FUSE(r6, &(0x7f0000000680)={0x2020}, 0x2020) ppoll(&(0x7f0000000080)=[{r1, 0x194}], 0x1, 0x0, 0x0, 0x0) 2m38.451343134s ago: executing program 5 (id=512): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffffff3c}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8841) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf4166382", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m28.962797106s ago: executing program 36 (id=478): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0xf2ff, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m23.438066539s ago: executing program 37 (id=512): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffffff3c}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8841) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf4166382", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m20.229289497s ago: executing program 8 (id=586): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44fa9d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62954f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d74cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a7228dd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6bae1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc2630ba6b8ae47a942114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17e8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbdbe21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589daf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f443954a7c0bb99ca732f00fb9ea35775f7419681bfbe6f08dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0xff05) signalfd(r5, &(0x7f0000000000)={[0xfffffffe]}, 0x8) r6 = getpid() sched_getaffinity(r6, 0x8, &(0x7f00000001c0)) 2m19.796976514s ago: executing program 8 (id=588): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000440)) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000440)="5cdd30", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r1, 0x1, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 2m19.609702958s ago: executing program 8 (id=589): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2m19.506986862s ago: executing program 8 (id=591): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) membarrier(0x1, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r6 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = getpgid(r6) setpgid(0x0, r7) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m18.29126215s ago: executing program 8 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 2m17.118053777s ago: executing program 8 (id=599): socket(0x80000000000000a, 0x2, 0x0) io_setup(0x10000, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x400, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x3, 0xba2, 0x0, 0x2b, {0x8, 0xffffffff}, 0xd1, 0x9}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e20, @empty}}) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000004140)=[{{&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)=""/94, 0x5e}], 0x1, &(0x7f0000000580)=""/212, 0xd4}, 0x1}, {{&(0x7f0000000680)=@phonet, 0x80, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000000700)=""/68, 0x44}, {&(0x7f0000000880)=""/212, 0xd4}, {&(0x7f0000000240)=""/33, 0x21}, {&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000980)=""/184, 0xb8}], 0x6, &(0x7f0000000a40)=""/146, 0x92}, 0x4}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b00)=""/13, 0xd}, {&(0x7f0000000b40)=""/66, 0x42}, {&(0x7f0000000bc0)=""/84, 0x54}, {&(0x7f0000000c40)=""/91, 0x5b}, {&(0x7f0000000cc0)=""/41, 0x29}, {&(0x7f0000000d00)=""/92, 0x5c}, {&(0x7f0000000d80)=""/218, 0xda}, {&(0x7f0000000e80)=""/27, 0x1b}, {&(0x7f0000000ec0)=""/228, 0xe4}], 0x9}, 0x3}, {{&(0x7f0000001040)=@ieee802154, 0x80, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/240, 0xf0}], 0x1}, 0x2}, {{&(0x7f0000001200)=@nfc_llcp, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)}, {&(0x7f00000022c0)=""/169, 0xa9}, {&(0x7f0000002380)=""/26, 0x1a}, {&(0x7f00000023c0)=""/220, 0xdc}], 0x5, &(0x7f0000002500)=""/233, 0xe9}, 0x120000}, {{&(0x7f0000002600)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002680)=""/151, 0x97}, {&(0x7f0000002740)=""/120, 0x78}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/53, 0x35}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/96, 0x60}, {&(0x7f0000003a80)=""/195, 0xc3}], 0x7, &(0x7f0000003bc0)=""/5, 0x5}, 0x5}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000003c00)=""/193, 0xc1}, {&(0x7f0000003d00)=""/57, 0x39}, {&(0x7f0000003d40)=""/135, 0x87}, {&(0x7f0000003e00)=""/196, 0xc4}, {&(0x7f0000003f00)=""/34, 0x22}, {&(0x7f0000003f40)}, {&(0x7f0000003f80)=""/106, 0x6a}, {&(0x7f0000004000)=""/176, 0xb0}], 0x8, &(0x7f0000004100)=""/8, 0x8}, 0x7}], 0x7, 0x36120, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x3, 0x800, 0x0) 2m16.97695992s ago: executing program 38 (id=599): socket(0x80000000000000a, 0x2, 0x0) io_setup(0x10000, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x400, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x3, 0xba2, 0x0, 0x2b, {0x8, 0xffffffff}, 0xd1, 0x9}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e20, @empty}}) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000004140)=[{{&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)=""/94, 0x5e}], 0x1, &(0x7f0000000580)=""/212, 0xd4}, 0x1}, {{&(0x7f0000000680)=@phonet, 0x80, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000000700)=""/68, 0x44}, {&(0x7f0000000880)=""/212, 0xd4}, {&(0x7f0000000240)=""/33, 0x21}, {&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000980)=""/184, 0xb8}], 0x6, &(0x7f0000000a40)=""/146, 0x92}, 0x4}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b00)=""/13, 0xd}, {&(0x7f0000000b40)=""/66, 0x42}, {&(0x7f0000000bc0)=""/84, 0x54}, {&(0x7f0000000c40)=""/91, 0x5b}, {&(0x7f0000000cc0)=""/41, 0x29}, {&(0x7f0000000d00)=""/92, 0x5c}, {&(0x7f0000000d80)=""/218, 0xda}, {&(0x7f0000000e80)=""/27, 0x1b}, {&(0x7f0000000ec0)=""/228, 0xe4}], 0x9}, 0x3}, {{&(0x7f0000001040)=@ieee802154, 0x80, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/240, 0xf0}], 0x1}, 0x2}, {{&(0x7f0000001200)=@nfc_llcp, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)}, {&(0x7f00000022c0)=""/169, 0xa9}, {&(0x7f0000002380)=""/26, 0x1a}, {&(0x7f00000023c0)=""/220, 0xdc}], 0x5, &(0x7f0000002500)=""/233, 0xe9}, 0x120000}, {{&(0x7f0000002600)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002680)=""/151, 0x97}, {&(0x7f0000002740)=""/120, 0x78}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/53, 0x35}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/96, 0x60}, {&(0x7f0000003a80)=""/195, 0xc3}], 0x7, &(0x7f0000003bc0)=""/5, 0x5}, 0x5}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000003c00)=""/193, 0xc1}, {&(0x7f0000003d00)=""/57, 0x39}, {&(0x7f0000003d40)=""/135, 0x87}, {&(0x7f0000003e00)=""/196, 0xc4}, {&(0x7f0000003f00)=""/34, 0x22}, {&(0x7f0000003f40)}, {&(0x7f0000003f80)=""/106, 0x6a}, {&(0x7f0000004000)=""/176, 0xb0}], 0x8, &(0x7f0000004100)=""/8, 0x8}, 0x7}], 0x7, 0x36120, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x3, 0x800, 0x0) 2m14.374234535s ago: executing program 9 (id=615): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80) write(r1, &(0x7f00000001c0)="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", 0x1000) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000000c0)={0x0, @pix={0x1, 0x80000000, 0x34363248, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1, 0x7}}) (async) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x19, &(0x7f0000000000), 0x8) (async) r3 = syz_open_dev$video(&(0x7f0000000040), 0x3f9, 0x141842) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) (async) ioctl$FS_IOC_GETVERSION(r0, 0x5b24, 0x0) 2m13.790731108s ago: executing program 9 (id=616): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f00070000ef", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x48}}, 0x0) 2m10.019470058s ago: executing program 9 (id=618): socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0xffffaf7c}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$userio(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = dup(r2) sendmsg$GTP_CMD_GETPDP(r3, 0x0, 0x20004040) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x300, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) 2m9.086793742s ago: executing program 9 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) close(0x3) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80406409, &(0x7f0000000140)={0x1, 0x0, 0x10, 0x8, 0x10, 0x495c059b, 0x10, 0x5, 0x1, 0x2, 0x21, 0x1000, &(0x7f0000000000)=[0x3, 0x821], 0x2, 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r2, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m8.942117416s ago: executing program 9 (id=627): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) pwritev(r3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="97", 0x1}], 0x1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4000, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2m7.908324333s ago: executing program 9 (id=631): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='block_bio_remap\x00', r1}, 0x18) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x3f, 0x0) 1m52.958937271s ago: executing program 39 (id=631): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='block_bio_remap\x00', r1}, 0x18) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x3f, 0x0) 5.009430067s ago: executing program 7 (id=1351): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$inet(0x2, 0x3, 0x6) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="be631c729f55f2b8745325f2d94606fd20", 0x11}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.959699121s ago: executing program 7 (id=1357): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000000)={0x2, 0x100, 0x5, 0x5, 0x6, 0xfffffffa}) 3.420162943s ago: executing program 7 (id=1361): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4fc7fe, 0x60, 0x0) 2.689135357s ago: executing program 1 (id=1366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) 2.549235826s ago: executing program 1 (id=1367): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) accept4(r0, 0x0, 0x0, 0x0) 2.060067846s ago: executing program 2 (id=1368): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 1.950239251s ago: executing program 2 (id=1369): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.870295934s ago: executing program 3 (id=1370): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x4) recvmmsg(r0, &(0x7f0000006540)=[{{0x0, 0x0, 0x0}, 0x6b08}], 0x1, 0x10000, 0x0) 1.790291558s ago: executing program 3 (id=1371): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000001c0)="c8", &(0x7f0000000100)=@tcp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000500)='N'}, 0x20) 1.757820899s ago: executing program 3 (id=1372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x0, r3, 0x0, 0x8, 0x0) 1.754721515s ago: executing program 2 (id=1373): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000f3ffffffff4f89bde08334ed692a002c08ff1a92d4a964b11e44b0576dba48baf8c1abdabe5d40d0257a7c9d2a4039228f68cc53760cda77df6304000000cb50cc290a32f42ad54a5308345972b5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) dup(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.509550748s ago: executing program 1 (id=1374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) unshare(0x28020480) r2 = eventfd2(0x65c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x9, 0x2, r2}) r3 = eventfd2(0x65c, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x36) r4 = eventfd2(0x0, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r3, 0x80007, 0x2, r4}) 1.509344989s ago: executing program 7 (id=1375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b52, &(0x7f00000000c0)) 1.320263859s ago: executing program 1 (id=1376): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000900)={'syz1\x00', {0x8000}, 0x2000012, [0xff03, 0x6, 0x0, 0x0, 0x1, 0x420000, 0x0, 0x10000, 0x4, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x6, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0xffffffff, 0x100000, 0x3, 0x0, 0x2, 0xffffffff, 0x0, 0x3, 0x0, 0x20, 0x3, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0xc, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x1, 0x8000000, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20000000, 0x40000000, 0x0, 0x800000, 0x7fffffff, 0x0, 0x0, 0x0, 0x1, 0x5cd1c851, 0x0, 0x7, 0x8, 0x0, 0xfffffffc, 0x9, 0x8c, 0x0, 0x0, 0x5, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1b, 0x80, 0x3, 0x0, 0x8008000, 0x0, 0x0, 0x5], [0x4, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa79d, 0xfffffffd, 0x0, 0x0, 0xc, 0x0, 0x3, 0x2c, 0xffffffff, 0x10000, 0x3, 0x8000000, 0x520, 0xffffffff, 0x0, 0x0, 0x2, 0x1ff, 0x4, 0x0, 0x0, 0xfffffffc, 0xaf, 0x10001, 0x9, 0x1, 0x0, 0x3, 0xfffffffe, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0x0, 0x3, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8], [0xfffffffe, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xe17, 0xe, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x8000001, 0x1, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x2, 0x1, 0x0, 0x5, 0x4, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x0, 0x5f, 0x0, 0x0, 0x1000008, 0x7, 0xd86, 0x0, 0x10000, 0x80000000, 0x1000000]}, 0x45c) 1.320087977s ago: executing program 1 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) 880.222912ms ago: executing program 3 (id=1378): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x1000, 0xffffffff, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x8daf, 0x0, 0x0, 0x0) 780.298645ms ago: executing program 2 (id=1379): unshare(0x62040200) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8001) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x480000000102, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 619.787306ms ago: executing program 2 (id=1380): socket$kcm(0x2, 0xa, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e22, @empty}, {0x0, @remote}, 0x48, {0x2, 0x0, @empty}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @empty}, {0x0, @multicast}, 0xa, {0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 'veth0_to_batadv\x00'}) 619.527656ms ago: executing program 2 (id=1381): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x240, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0x10}) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) msgsnd(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x8, 0x0) msgget(0x1, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000000c0)=[0x4f0, 0x0, 0x4, 0x3, 0x401, 0xe0, 0xe, 0x9]) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 567.786376ms ago: executing program 7 (id=1382): socket$rds(0x15, 0x5, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x121041, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 567.493166ms ago: executing program 7 (id=1383): syz_io_uring_setup(0x66c0, &(0x7f0000000080)={0x0, 0xfffffffe, 0x8, 0x3}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @empty}, 0x27) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 310.001482ms ago: executing program 1 (id=1384): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 208.75µs ago: executing program 3 (id=1385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) 0s ago: executing program 3 (id=1386): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x240, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0x10}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f00000000c0)=[0x4f0, 0x0, 0x4, 0x3, 0x401, 0xe0, 0xe, 0x9]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): oc_node_noprof+0x1d5/0x3b0 [ 205.356929][ T9464] ? __get_vm_area_node+0x1ca/0x330 [ 205.356948][ T9464] ? __vmalloc_node_noprof+0xad/0xf0 [ 205.356968][ T9464] ? bpf_prog_calc_tag+0x110/0x700 [ 205.356990][ T9464] ? resolve_pseudo_ldimm64+0xd3/0x1a90 [ 205.357006][ T9464] ? bpf_check+0x610c/0xb4f0 [ 205.357023][ T9464] ? bpf_prog_load+0xe41/0x2490 [ 205.357047][ T9464] ? __sys_bpf+0x433c/0x4d80 [ 205.357061][ T9464] ? __ia32_sys_bpf+0x76/0xe0 [ 205.357085][ T9464] alloc_pages_bulk_noprof+0x71c/0x1410 [ 205.357110][ T9464] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.357138][ T9464] ? policy_nodemask+0xea/0x4e0 [ 205.357158][ T9464] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 205.357185][ T9464] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 205.357213][ T9464] kasan_populate_vmalloc+0xf1/0x1f0 [ 205.357244][ T9464] alloc_vmap_area+0x959/0x29c0 [ 205.357278][ T9464] ? __pfx_alloc_vmap_area+0x10/0x10 [ 205.357304][ T9464] __get_vm_area_node+0x1ca/0x330 [ 205.357329][ T9464] __vmalloc_node_range_noprof+0x271/0x14b0 [ 205.357352][ T9464] ? bpf_prog_calc_tag+0x110/0x700 [ 205.357374][ T9464] ? unwind_get_return_address+0x59/0xa0 [ 205.357401][ T9464] ? arch_stack_walk+0xa6/0x100 [ 205.357423][ T9464] ? bpf_prog_calc_tag+0x110/0x700 [ 205.357452][ T9464] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 205.357483][ T9464] ? bpf_prog_calc_tag+0x110/0x700 [ 205.357505][ T9464] __vmalloc_node_noprof+0xad/0xf0 [ 205.357526][ T9464] ? bpf_prog_calc_tag+0x110/0x700 [ 205.357552][ T9464] bpf_prog_calc_tag+0x110/0x700 [ 205.357578][ T9464] ? __pfx_bpf_prog_calc_tag+0x10/0x10 [ 205.357619][ T9464] ? __sort_r+0x4d/0x660 [ 205.357653][ T9464] ? __pfx_cmp_subprogs+0x10/0x10 [ 205.357667][ T9464] ? sort+0x97/0xd0 [ 205.357693][ T9464] resolve_pseudo_ldimm64+0xd3/0x1a90 [ 205.357709][ T9464] ? find_containing_subprog+0x175/0x1d0 [ 205.357728][ T9464] ? __pfx_resolve_pseudo_ldimm64+0x10/0x10 [ 205.357745][ T9464] ? check_subprogs+0x5e2/0x850 [ 205.357768][ T9464] bpf_check+0x610c/0xb4f0 [ 205.357786][ T9464] ? __mutex_trylock_common+0xe9/0x250 [ 205.357824][ T9464] ? __pfx_bpf_check+0x10/0x10 [ 205.357847][ T9464] ? css_rstat_updated+0x9d/0xd30 [ 205.357866][ T9464] ? __lock_acquire+0xb8a/0x1c90 [ 205.357895][ T9464] ? find_held_lock+0x2b/0x80 [ 205.357912][ T9464] ? rcu_is_watching+0x12/0xc0 [ 205.357926][ T9464] ? ktime_get_with_offset+0x26e/0x3b0 [ 205.357948][ T9464] ? __asan_memset+0x23/0x50 [ 205.357966][ T9464] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 205.357993][ T9464] bpf_prog_load+0xe41/0x2490 [ 205.358021][ T9464] ? __pfx_bpf_prog_load+0x10/0x10 [ 205.358067][ T9464] __sys_bpf+0x433c/0x4d80 [ 205.358085][ T9464] ? __pfx___sys_bpf+0x10/0x10 [ 205.358099][ T9464] ? ksys_write+0x190/0x250 [ 205.358126][ T9464] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 205.358165][ T9464] ? fput+0x70/0xf0 [ 205.358180][ T9464] ? ksys_write+0x1ac/0x250 [ 205.358203][ T9464] ? __pfx_ksys_write+0x10/0x10 [ 205.358229][ T9464] __ia32_sys_bpf+0x76/0xe0 [ 205.358246][ T9464] __do_fast_syscall_32+0x7c/0x3a0 [ 205.358277][ T9464] do_fast_syscall_32+0x32/0x80 [ 205.358302][ T9464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.358323][ T9464] RIP: 0023:0xf709e579 [ 205.358336][ T9464] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 205.358352][ T9464] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 205.358368][ T9464] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 205.358379][ T9464] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.358390][ T9464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.358399][ T9464] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 205.358409][ T9464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.358432][ T9464] [ 205.358575][ T9464] syz.3.729: vmalloc error: size 192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 205.528487][ T9464] CPU: 1 UID: 0 PID: 9464 Comm: syz.3.729 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 205.528512][ T9464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.528523][ T9464] Call Trace: [ 205.528529][ T9464] [ 205.528535][ T9464] dump_stack_lvl+0x16c/0x1f0 [ 205.528565][ T9464] warn_alloc+0x248/0x3a0 [ 205.528593][ T9464] ? __pfx_warn_alloc+0x10/0x10 [ 205.528621][ T9464] ? kfree+0x2b4/0x4d0 [ 205.528647][ T9464] ? __get_vm_area_node+0x208/0x330 [ 205.528673][ T9464] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 205.528696][ T9464] ? unwind_get_return_address+0x59/0xa0 [ 205.528723][ T9464] ? arch_stack_walk+0xa6/0x100 [ 205.528745][ T9464] ? bpf_prog_calc_tag+0x110/0x700 [ 205.528775][ T9464] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 205.528806][ T9464] ? bpf_prog_calc_tag+0x110/0x700 [ 205.528827][ T9464] __vmalloc_node_noprof+0xad/0xf0 [ 205.528849][ T9464] ? bpf_prog_calc_tag+0x110/0x700 [ 205.528875][ T9464] bpf_prog_calc_tag+0x110/0x700 [ 205.528902][ T9464] ? __pfx_bpf_prog_calc_tag+0x10/0x10 [ 205.528925][ T9464] ? __sort_r+0x4d/0x660 [ 205.528959][ T9464] ? __pfx_cmp_subprogs+0x10/0x10 [ 205.528975][ T9464] ? sort+0x97/0xd0 [ 205.529001][ T9464] resolve_pseudo_ldimm64+0xd3/0x1a90 [ 205.529019][ T9464] ? find_containing_subprog+0x175/0x1d0 [ 205.529037][ T9464] ? __pfx_resolve_pseudo_ldimm64+0x10/0x10 [ 205.529055][ T9464] ? check_subprogs+0x5e2/0x850 [ 205.529080][ T9464] bpf_check+0x610c/0xb4f0 [ 205.529100][ T9464] ? __mutex_trylock_common+0xe9/0x250 [ 205.529140][ T9464] ? __pfx_bpf_check+0x10/0x10 [ 205.529164][ T9464] ? css_rstat_updated+0x9d/0xd30 [ 205.529184][ T9464] ? __lock_acquire+0xb8a/0x1c90 [ 205.529214][ T9464] ? find_held_lock+0x2b/0x80 [ 205.529231][ T9464] ? rcu_is_watching+0x12/0xc0 [ 205.529246][ T9464] ? ktime_get_with_offset+0x26e/0x3b0 [ 205.529267][ T9464] ? __asan_memset+0x23/0x50 [ 205.529287][ T9464] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 205.529321][ T9464] bpf_prog_load+0xe41/0x2490 [ 205.529352][ T9464] ? __pfx_bpf_prog_load+0x10/0x10 [ 205.529398][ T9464] __sys_bpf+0x433c/0x4d80 [ 205.529416][ T9464] ? __pfx___sys_bpf+0x10/0x10 [ 205.529433][ T9464] ? ksys_write+0x190/0x250 [ 205.529459][ T9464] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 205.529497][ T9464] ? fput+0x70/0xf0 [ 205.529512][ T9464] ? ksys_write+0x1ac/0x250 [ 205.529532][ T9464] ? __pfx_ksys_write+0x10/0x10 [ 205.529559][ T9464] __ia32_sys_bpf+0x76/0xe0 [ 205.529576][ T9464] __do_fast_syscall_32+0x7c/0x3a0 [ 205.529602][ T9464] do_fast_syscall_32+0x32/0x80 [ 205.529626][ T9464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.529645][ T9464] RIP: 0023:0xf709e579 [ 205.529658][ T9464] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 205.529672][ T9464] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 205.529688][ T9464] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 205.529699][ T9464] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.529708][ T9464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.529718][ T9464] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 205.529728][ T9464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.529750][ T9464] [ 205.529756][ T9464] Mem-Info: [ 205.657386][ T9464] active_anon:3993 inactive_anon:2968 isolated_anon:0 [ 205.657386][ T9464] active_file:2423 inactive_file:737 isolated_file:0 [ 205.657386][ T9464] unevictable:1768 dirty:411 writeback:0 [ 205.657386][ T9464] slab_reclaimable:6227 slab_unreclaimable:67795 [ 205.657386][ T9464] mapped:37013 shmem:4733 pagetables:1968 [ 205.657386][ T9464] sec_pagetables:317 bounce:0 [ 205.657386][ T9464] kernel_misc_reclaimable:0 [ 205.657386][ T9464] free:44213 free_pcp:10843 free_cma:0 [ 205.672966][ T8393] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 205.674866][ T9464] Node 0 active_anon:8kB inactive_anon:112kB active_file:0kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:14388kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8176kB pagetables:1364kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB [ 205.687240][ T9464] Node 1 active_anon:15664kB inactive_anon:11760kB active_file:9692kB inactive_file:2940kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:133064kB dirty:1636kB writeback:0kB shmem:15396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7320kB pagetables:6508kB sec_pagetables:136kB all_unreclaimable? no Balloon:0kB [ 205.695730][ T8393] usb 7-1: device descriptor read/8, error -71 [ 205.698578][ T9464] Node 0 DMA free:1816kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:292kB local_pcp:16kB free_cma:0kB [ 205.709973][ T9464] lowmem_reserve[]: 0 288 288 288 288 [ 205.711795][ T9464] Node 0 DMA32 free:15328kB boost:2048kB min:15268kB low:18572kB high:21876kB reserved_highatomic:4096KB free_highatomic:656KB active_anon:8kB inactive_anon:112kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:8kB present:1032196kB managed:295892kB mlocked:0kB bounce:0kB free_pcp:11588kB local_pcp:2496kB free_cma:0kB [ 205.722604][ T9464] lowmem_reserve[]: 0 0 0 0 0 [ 205.724601][ T9464] Node 1 DMA32 free:159408kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:1968KB active_anon:15864kB inactive_anon:11760kB active_file:9692kB inactive_file:2940kB unevictable:3536kB writepending:1636kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:33136kB local_pcp:12960kB free_cma:0kB [ 205.735428][ T9464] lowmem_reserve[]: 0 0 0 0 0 [ 205.737112][ T9464] Node 0 DMA: 2*4kB (M) 2*8kB (M) 2*16kB (M) 5*32kB (UM) 3*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1816kB [ 205.742590][ T9464] Node 0 DMA32: 36*4kB (MH) 106*8kB (UMEH) 70*16kB (MEH) 91*32kB (UMEH) 57*64kB (UMEH) 24*128kB (UM) 12*256kB (UM) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 15328kB [ 205.748023][ T9464] Node 1 DMA32: 548*4kB (UMEH) 184*8kB (UMEH) 454*16kB (UME) 52*32kB (MH) 110*64kB (UMEH) 72*128kB (UMEH) 52*256kB (UMEH) 83*512kB (UMH) 47*1024kB (UM) 11*2048kB (UM) 1*4096kB (M) = 159408kB [ 205.755331][ T9464] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.758505][ T9464] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.762366][ T9464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.766951][ T9464] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.770815][ T9464] 8499 total pagecache pages [ 205.772922][ T9464] 610 pages in swap cache [ 205.775089][ T9464] Free swap = 102756kB [ 205.776931][ T9464] Total swap = 124996kB [ 205.778733][ T9464] 524155 pages RAM [ 205.780407][ T9464] 0 pages HighMem/MovableOnly [ 205.782420][ T9464] 209271 pages reserved [ 205.784374][ T9464] 0 pages cma reserved [ 205.933023][ T8393] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 205.949501][ T9492] tipc: New replicast peer: 0.0.0.0 [ 205.951732][ T9492] tipc: Enabled bearer , priority 10 [ 205.954645][ T9492] tipc: New replicast peer: 172.20.20.170 [ 205.963788][ T8393] usb 7-1: device descriptor read/8, error -71 [ 206.073675][ T8393] usb usb7-port1: unable to enumerate USB device [ 207.064323][ T6052] tipc: Node number set to 1935906057 [ 207.272999][ T5972] Bluetooth: hci3: command tx timeout [ 207.892768][ T53] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 208.042935][ T53] usb 12-1: Using ep0 maxpacket: 16 [ 208.046381][ T53] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 208.052876][ T53] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 208.056046][ T53] usb 12-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 208.141677][ T53] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.153146][ T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.156457][ T53] usb 12-1: SerialNumber: syz [ 208.165955][ T9540] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 208.888562][ T53] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -22 [ 208.895718][ T53] usb 12-1: USB disconnect, device number 4 [ 209.309272][ T9616] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 209.311383][ T9616] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 209.324285][ T9616] vhci_hcd vhci_hcd.0: Device attached [ 209.328378][ T9618] vhci_hcd: connection closed [ 209.328580][ T13] vhci_hcd: stop threads [ 209.331538][ T13] vhci_hcd: release socket [ 209.346471][ T13] vhci_hcd: disconnect device [ 214.804908][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 217.583198][ T9694] siw: device registration error -23 [ 217.933078][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 217.936682][ T9693] bridge_slave_1: left allmulticast mode [ 217.939464][ T9693] bridge_slave_1: left promiscuous mode [ 217.943559][ T9693] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.274792][ T9693] bridge_slave_0: left allmulticast mode [ 218.276989][ T9693] bridge_slave_0: left promiscuous mode [ 218.279836][ T9693] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.383201][ T6057] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 220.484353][ T9697] sp0: Synchronizing with TNC [ 220.542885][ T6057] usb 8-1: device descriptor read/64, error -71 [ 220.796221][ T6057] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 221.003325][ T6057] usb 8-1: device descriptor read/64, error -71 [ 221.088283][ T9740] Bluetooth: MGMT ver 1.23 [ 221.127452][ T6057] usb usb8-port1: attempt power cycle [ 221.220727][ T9746] FAULT_INJECTION: forcing a failure. [ 221.220727][ T9746] name failslab, interval 1, probability 0, space 0, times 0 [ 221.228698][ T9746] CPU: 3 UID: 0 PID: 9746 Comm: syz.3.752 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 221.228714][ T9746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.228721][ T9746] Call Trace: [ 221.228725][ T9746] [ 221.228729][ T9746] dump_stack_lvl+0x16c/0x1f0 [ 221.228749][ T9746] should_fail_ex+0x512/0x640 [ 221.228764][ T9746] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 221.228782][ T9746] should_failslab+0xc2/0x120 [ 221.228792][ T9746] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 221.228808][ T9746] ? __alloc_skb+0x2b2/0x380 [ 221.228824][ T9746] __alloc_skb+0x2b2/0x380 [ 221.228838][ T9746] ? __pfx___alloc_skb+0x10/0x10 [ 221.228851][ T9746] ? __pfx_tc_new_tfilter+0x10/0x10 [ 221.228867][ T9746] netlink_ack+0x15d/0xb80 [ 221.228883][ T9746] netlink_rcv_skb+0x332/0x420 [ 221.228893][ T9746] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.228911][ T9746] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.228933][ T9746] ? netlink_deliver_tap+0x1ae/0xd30 [ 221.228952][ T9746] netlink_unicast+0x58a/0x850 [ 221.228964][ T9746] ? __pfx_netlink_unicast+0x10/0x10 [ 221.228978][ T9746] netlink_sendmsg+0x8d1/0xdd0 [ 221.228991][ T9746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.229002][ T9746] ? __import_iovec+0x1dd/0x650 [ 221.229015][ T9746] ____sys_sendmsg+0xa98/0xc70 [ 221.229028][ T9746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.229038][ T9746] ? get_compat_msghdr+0x11a/0x170 [ 221.229060][ T9746] ___sys_sendmsg+0x134/0x1d0 [ 221.229076][ T9746] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.229098][ T9746] ? find_held_lock+0x2b/0x80 [ 221.229117][ T9746] __sys_sendmsg+0x16d/0x220 [ 221.229132][ T9746] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.229152][ T9746] ? rcu_is_watching+0x12/0xc0 [ 221.229165][ T9746] __do_fast_syscall_32+0x7c/0x3a0 [ 221.229182][ T9746] do_fast_syscall_32+0x32/0x80 [ 221.229198][ T9746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.229212][ T9746] RIP: 0023:0xf709e579 [ 221.229220][ T9746] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 221.229230][ T9746] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 221.229240][ T9746] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 221.229247][ T9746] RDX: 0000000020000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.229253][ T9746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.229259][ T9746] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 221.229265][ T9746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.229277][ T9746] [ 221.314921][ C3] vkms_vblank_simulate: vblank timer overrun [ 221.428506][ T9751] misc userio: The device must be registered before sending interrupts [ 221.591016][ T6011] syz_tun: tun_net_xmit 110 [ 221.603057][ T9753] bridge_slave_0: left allmulticast mode [ 221.604857][ T9753] bridge_slave_0: left promiscuous mode [ 221.606948][ T9753] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.799850][ T9753] bridge_slave_1: left allmulticast mode [ 221.801716][ T9753] bridge_slave_1: left promiscuous mode [ 221.804871][ T9753] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.029629][ T9753] bond0: (slave bond_slave_0): Releasing backup interface [ 222.083258][ T9753] bond0: (slave bond_slave_1): Releasing backup interface [ 222.093810][ T9753] team0: Port device team_slave_0 removed [ 222.125282][ T9753] team0: Port device team_slave_1 removed [ 222.132748][ T9753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.135711][ T9753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.150213][ T9753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.158090][ T9753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.433852][ T9753] batadv1: left allmulticast mode [ 222.435485][ T9753] batadv1: left promiscuous mode [ 222.437093][ T9753] bridge0: port 3(batadv1) entered disabled state [ 222.439835][ T6011] syz_tun: tun_net_xmit 110 [ 222.446180][ T9753] bond1: (slave bond2): Releasing backup interface [ 222.448247][ T9753] bond1: (slave bond2): the permanent HWaddr of slave - d2:bb:17:92:b9:b4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 222.454453][ T9753] bond1: (slave gretap1): making interface the new active one [ 222.469390][ T9753] bond1: (slave gretap1): Releasing backup interface [ 222.517271][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'. [ 222.613274][ T9763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'. [ 223.112975][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 223.123019][ T5972] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 223.238315][ T9775] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 223.243172][ T9775] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 223.245146][ T9775] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 223.271463][ T9775] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 223.297420][ T9775] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 223.305653][ T9775] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 223.315784][ T9775] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 223.322077][ T9775] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 223.327785][ T9775] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 223.339863][ T9775] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 223.354700][ T9775] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.358198][ T9775] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 223.372159][ T9775] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 223.378004][ T9775] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.381035][ T9775] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 223.391641][ T9775] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 223.401098][ T9775] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 223.836240][ T5961] syz_tun: tun_net_xmit 110 [ 223.888814][ T9794] FAULT_INJECTION: forcing a failure. [ 223.888814][ T9794] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 223.895120][ T9794] CPU: 1 UID: 0 PID: 9794 Comm: syz.1.764 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 223.895144][ T9794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.895154][ T9794] Call Trace: [ 223.895160][ T9794] [ 223.895167][ T9794] dump_stack_lvl+0x16c/0x1f0 [ 223.895198][ T9794] should_fail_ex+0x512/0x640 [ 223.895227][ T9794] should_fail_alloc_page+0xe7/0x130 [ 223.895246][ T9794] prepare_alloc_pages+0x3c2/0x610 [ 223.895271][ T9794] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 223.895309][ T9794] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 223.895374][ T9794] ? __lock_acquire+0x622/0x1c90 [ 223.895399][ T9794] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.895425][ T9794] ? policy_nodemask+0xea/0x4e0 [ 223.895457][ T9794] alloc_pages_mpol+0x1fb/0x550 [ 223.895473][ T9794] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 223.895486][ T9794] ? page_table_check_set+0x627/0x750 [ 223.895517][ T9794] alloc_pages_noprof+0x131/0x390 [ 223.895533][ T9794] pte_alloc_one+0x1c/0x3a0 [ 223.895547][ T9794] __pte_alloc+0x6d/0x3c0 [ 223.895563][ T9794] ? __pfx___pte_alloc+0x10/0x10 [ 223.895585][ T9794] __handle_mm_fault+0x4358/0x5490 [ 223.895615][ T9794] ? __pfx___handle_mm_fault+0x10/0x10 [ 223.895635][ T9794] ? folio_mark_accessed+0xc1/0xc00 [ 223.895653][ T9794] ? __pfx_folio_mark_accessed+0x10/0x10 [ 223.895668][ T9794] ? vm_normal_page+0x152/0x2e0 [ 223.895683][ T9794] ? find_held_lock+0x2b/0x80 [ 223.895700][ T9794] ? find_held_lock+0x2b/0x80 [ 223.895733][ T9794] handle_mm_fault+0x589/0xd10 [ 223.895760][ T9794] __get_user_pages+0x589/0x3b80 [ 223.895790][ T9794] ? __pfx___get_user_pages+0x10/0x10 [ 223.895809][ T9794] ? __pfx_down_read_killable+0x10/0x10 [ 223.895830][ T9794] ? __lock_acquire+0x622/0x1c90 [ 223.895862][ T9794] __gup_longterm_locked+0x20d/0x1840 [ 223.895891][ T9794] ? __pfx___gup_longterm_locked+0x10/0x10 [ 223.895914][ T9794] ? find_held_lock+0x2b/0x80 [ 223.895931][ T9794] ? sanity_check_pinned_pages+0x23/0x1200 [ 223.895955][ T9794] gup_fast_fallback+0x1ab3/0x29e0 [ 223.895993][ T9794] ? __pfx_gup_fast_fallback+0x10/0x10 [ 223.896019][ T9794] ? register_lock_class+0x41/0x4c0 [ 223.896039][ T9794] ? find_held_lock+0x2b/0x80 [ 223.896055][ T9794] ? ima_match_policy+0x7f9/0x22e0 [ 223.896072][ T9794] ? poly1305_core_blocks+0x3cb/0x4c0 [ 223.896100][ T9794] pin_user_pages_fast+0xa7/0xf0 [ 223.896118][ T9794] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 223.896142][ T9794] iov_iter_extract_pages+0x3a2/0x1ed0 [ 223.896170][ T9794] ? __pfx_nhpoly1305_units+0x10/0x10 [ 223.896193][ T9794] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 223.896221][ T9794] ? __local_bh_enable_ip+0xa4/0x120 [ 223.896239][ T9794] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.896275][ T9794] ? kernel_fpu_end+0x59/0x70 [ 223.896286][ T9794] ? __local_bh_enable_ip+0xa4/0x120 [ 223.896298][ T9794] ? kernel_fpu_end+0x5e/0x70 [ 223.896306][ T9794] ? nhpoly1305_sse2_update+0x8d/0xc0 [ 223.896319][ T9794] extract_iter_to_sg+0xf6e/0x20c0 [ 223.896337][ T9794] ? shash_ahash_update+0x244/0x2d0 [ 223.896350][ T9794] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 223.896363][ T9794] ? gup_put_folio+0x8d/0x260 [ 223.896374][ T9794] ? __pfx_unpin_user_page+0x10/0x10 [ 223.896392][ T9794] hash_sendmsg+0x43e/0xfb0 [ 223.896408][ T9794] ____sys_sendmsg+0xa98/0xc70 [ 223.896423][ T9794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.896433][ T9794] ? get_compat_msghdr+0x11a/0x170 [ 223.896452][ T9794] ? __pfx__kstrtoull+0x10/0x10 [ 223.896467][ T9794] ___sys_sendmsg+0x134/0x1d0 [ 223.896489][ T9794] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.896503][ T9794] ? __lock_acquire+0x622/0x1c90 [ 223.896536][ T9794] __sys_sendmmsg+0x2f9/0x420 [ 223.896559][ T9794] ? __pfx___sys_sendmmsg+0x10/0x10 [ 223.896588][ T9794] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 223.896623][ T9794] ? fput+0x70/0xf0 [ 223.896640][ T9794] ? ksys_write+0x1ac/0x250 [ 223.896665][ T9794] ? __pfx_ksys_write+0x10/0x10 [ 223.896693][ T9794] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 223.896718][ T9794] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 223.896743][ T9794] __do_fast_syscall_32+0x7c/0x3a0 [ 223.896766][ T9794] do_fast_syscall_32+0x32/0x80 [ 223.896788][ T9794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.896809][ T9794] RIP: 0023:0xf710e579 [ 223.896825][ T9794] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 223.896840][ T9794] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 223.896867][ T9794] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080004140 [ 223.896878][ T9794] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.896888][ T9794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.896897][ T9794] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 223.896907][ T9794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.896930][ T9794] [ 224.444633][ T29] syz_tun: tun_net_xmit 110 [ 224.681601][ T9808] binder: 9807:9808 ioctl c0306201 800003c0 returned -14 [ 225.067511][ T29] syz_tun: tun_net_xmit 110 [ 225.273106][ T5972] Bluetooth: hci5: command 0x0c1a tx timeout [ 225.273500][ T5975] Bluetooth: hci1: command 0x0c1a tx timeout [ 225.338300][ T9819] FAULT_INJECTION: forcing a failure. [ 225.338300][ T9819] name failslab, interval 1, probability 0, space 0, times 0 [ 225.342551][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: syz.3.772 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 225.342578][ T9819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.342586][ T9819] Call Trace: [ 225.342591][ T9819] [ 225.342617][ T9819] dump_stack_lvl+0x16c/0x1f0 [ 225.342639][ T9819] should_fail_ex+0x512/0x640 [ 225.342656][ T9819] ? __kmalloc_noprof+0xbf/0x510 [ 225.342679][ T9819] ? ethnl_perphy_start+0x15a/0x480 [ 225.342702][ T9819] should_failslab+0xc2/0x120 [ 225.342718][ T9819] __kmalloc_noprof+0xd2/0x510 [ 225.342743][ T9819] ? __pfx_ethnl_perphy_start+0x10/0x10 [ 225.342768][ T9819] ethnl_perphy_start+0x15a/0x480 [ 225.342795][ T9819] ? __pfx_ethnl_perphy_start+0x10/0x10 [ 225.342836][ T9819] genl_start+0x5fc/0x980 [ 225.342860][ T9819] __netlink_dump_start+0x60b/0x990 [ 225.342881][ T9819] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 225.342903][ T9819] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 225.342932][ T9819] ? __pfx_genl_get_cmd+0x10/0x10 [ 225.342948][ T9819] ? __pfx_genl_start+0x10/0x10 [ 225.342965][ T9819] ? __pfx_genl_dumpit+0x10/0x10 [ 225.342982][ T9819] ? __pfx_genl_done+0x10/0x10 [ 225.343005][ T9819] ? __radix_tree_lookup+0x21f/0x2c0 [ 225.343034][ T9819] genl_rcv_msg+0x46e/0x800 [ 225.343056][ T9819] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.343077][ T9819] ? __pfx_ethnl_perphy_start+0x10/0x10 [ 225.343101][ T9819] ? __pfx_ethnl_perphy_dumpit+0x10/0x10 [ 225.343130][ T9819] ? __pfx_ethnl_perphy_done+0x10/0x10 [ 225.343165][ T9819] netlink_rcv_skb+0x158/0x420 [ 225.343182][ T9819] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.343204][ T9819] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.343240][ T9819] genl_rcv+0x28/0x40 [ 225.343256][ T9819] netlink_unicast+0x58a/0x850 [ 225.343277][ T9819] ? __pfx_netlink_unicast+0x10/0x10 [ 225.343302][ T9819] netlink_sendmsg+0x8d1/0xdd0 [ 225.343325][ T9819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.343344][ T9819] ? __import_iovec+0x1dd/0x650 [ 225.343366][ T9819] ____sys_sendmsg+0xa98/0xc70 [ 225.343388][ T9819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.343406][ T9819] ? get_compat_msghdr+0x11a/0x170 [ 225.343444][ T9819] ___sys_sendmsg+0x134/0x1d0 [ 225.343472][ T9819] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.343510][ T9819] ? find_held_lock+0x2b/0x80 [ 225.343546][ T9819] __sys_sendmsg+0x16d/0x220 [ 225.343571][ T9819] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.343608][ T9819] ? rcu_is_watching+0x12/0xc0 [ 225.343630][ T9819] __do_fast_syscall_32+0x7c/0x3a0 [ 225.343659][ T9819] do_fast_syscall_32+0x32/0x80 [ 225.343685][ T9819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.343707][ T9819] RIP: 0023:0xf709e579 [ 225.343721][ T9819] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 225.343736][ T9819] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 225.343752][ T9819] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000700 [ 225.343763][ T9819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.343772][ T9819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.343782][ T9819] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 225.343792][ T9819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.343815][ T9819] [ 225.352999][ T5972] Bluetooth: hci7: command 0x0c1a tx timeout [ 225.355811][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.433117][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 225.463483][ T5972] Bluetooth: hci3: command 0x0c1a tx timeout [ 225.663008][ T9822] autofs: Unknown parameter 'comm' [ 225.727444][ T9825] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 226.527970][ T9836] netlink: 'syz.7.777': attribute type 1 has an invalid length. [ 226.546246][ T9836] bond3: entered promiscuous mode [ 226.548267][ T9836] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.623455][ T9836] bond3: (slave veth3): making interface the new active one [ 226.632145][ T9836] veth3: entered promiscuous mode [ 226.655234][ T9836] bond3: (slave veth3): Enslaving as an active interface with an up link [ 226.881756][ T9847] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 227.062959][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 227.069683][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 227.354602][ T63] Bluetooth: hci5: command 0x0c1a tx timeout [ 227.435046][ T63] Bluetooth: hci7: command 0x0c1a tx timeout [ 227.513244][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 227.513279][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 227.517405][ T5972] Bluetooth: hci2: command 0x0c1a tx timeout [ 228.126822][ T9875] fuse: Bad value for 'group_id' [ 228.128410][ T9875] fuse: Bad value for 'group_id' [ 228.935496][ T9886] syz.7.792: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 228.939940][ T9886] CPU: 2 UID: 0 PID: 9886 Comm: syz.7.792 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 228.939965][ T9886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.939973][ T9886] Call Trace: [ 228.939978][ T9886] [ 228.939983][ T9886] dump_stack_lvl+0x16c/0x1f0 [ 228.940004][ T9886] warn_alloc+0x248/0x3a0 [ 228.940022][ T9886] ? __pfx_warn_alloc+0x10/0x10 [ 228.940036][ T9886] ? __pfx_stack_trace_save+0x10/0x10 [ 228.940049][ T9886] ? stack_depot_save_flags+0x28/0xa40 [ 228.940068][ T9886] ? kasan_save_stack+0x42/0x60 [ 228.940082][ T9886] ? kasan_save_stack+0x33/0x60 [ 228.940096][ T9886] ? kasan_save_track+0x14/0x30 [ 228.940111][ T9886] ? xskq_create+0x52/0x1d0 [ 228.940123][ T9886] ? xsk_setsockopt+0x640/0x840 [ 228.940135][ T9886] ? do_sock_setsockopt+0x224/0x470 [ 228.940147][ T9886] ? xskq_create+0xfb/0x1d0 [ 228.940160][ T9886] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 228.940179][ T9886] ? xskq_create+0xfb/0x1d0 [ 228.940196][ T9886] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 228.940214][ T9886] ? xskq_create+0xfb/0x1d0 [ 228.940227][ T9886] vmalloc_user_noprof+0x9e/0xe0 [ 228.940240][ T9886] ? xskq_create+0xfb/0x1d0 [ 228.940254][ T9886] xskq_create+0xfb/0x1d0 [ 228.940269][ T9886] xsk_setsockopt+0x640/0x840 [ 228.940282][ T9886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 228.940295][ T9886] ? __pfx_aa_sk_perm+0x10/0x10 [ 228.940308][ T9886] ? errseq_sample+0x53/0x70 [ 228.940327][ T9886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 228.940340][ T9886] do_sock_setsockopt+0x224/0x470 [ 228.940351][ T9886] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 228.940371][ T9886] __sys_setsockopt+0x120/0x1a0 [ 228.940388][ T9886] __ia32_sys_setsockopt+0xbc/0x160 [ 228.940402][ T9886] ? lockdep_hardirqs_on+0x7c/0x110 [ 228.940416][ T9886] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 228.940433][ T9886] __do_fast_syscall_32+0x7c/0x3a0 [ 228.940450][ T9886] do_fast_syscall_32+0x32/0x80 [ 228.940466][ T9886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.940479][ T9886] RIP: 0023:0xf706e579 [ 228.940488][ T9886] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 228.940498][ T9886] RSP: 002b:00000000f503d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 228.940509][ T9886] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000000000011b [ 228.940515][ T9886] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 228.940521][ T9886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.940527][ T9886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.940533][ T9886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.940549][ T9886] [ 228.940568][ T9886] Mem-Info: [ 229.029726][ T9886] active_anon:1569 inactive_anon:3344 isolated_anon:7 [ 229.029726][ T9886] active_file:805 inactive_file:1679 isolated_file:0 [ 229.029726][ T9886] unevictable:1761 dirty:4 writeback:25 [ 229.029726][ T9886] slab_reclaimable:6188 slab_unreclaimable:67538 [ 229.029726][ T9886] mapped:37261 shmem:5535 pagetables:1699 [ 229.029726][ T9886] sec_pagetables:320 bounce:0 [ 229.029726][ T9886] kernel_misc_reclaimable:0 [ 229.029726][ T9886] free:55746 free_pcp:3719 free_cma:0 [ 229.042683][ T9886] Node 0 active_anon:96kB inactive_anon:112kB active_file:228kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:14388kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8176kB pagetables:1364kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB [ 229.052209][ T9886] Node 1 active_anon:7880kB inactive_anon:13264kB active_file:2992kB inactive_file:6708kB unevictable:3508kB isolated(anon):28kB isolated(file):0kB mapped:136256kB dirty:8kB writeback:100kB shmem:20204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7188kB pagetables:5432kB sec_pagetables:144kB all_unreclaimable? no Balloon:0kB [ 229.061811][ T9886] Node 0 DMA free:1992kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:140kB local_pcp:136kB free_cma:0kB [ 229.070876][ T9886] lowmem_reserve[]: 0 288 288 288 288 [ 229.072587][ T9886] Node 0 DMA32 free:24596kB boost:8192kB min:21412kB low:24716kB high:28020kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96kB inactive_anon:112kB active_file:228kB inactive_file:8kB unevictable:3536kB writepending:8kB present:1032196kB managed:295892kB mlocked:0kB bounce:0kB free_pcp:844kB local_pcp:360kB free_cma:0kB [ 229.085053][ T9886] lowmem_reserve[]: 0 0 0 0 0 [ 229.086543][ T9886] Node 1 DMA32 free:195732kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10080kB inactive_anon:13264kB active_file:2992kB inactive_file:6708kB unevictable:3508kB writepending:108kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:10120kB local_pcp:2104kB free_cma:0kB [ 229.096479][ T9886] lowmem_reserve[]: 0 0 0 0 0 [ 229.097909][ T9886] Node 0 DMA: 11*4kB (UM) 12*8kB (UM) 4*16kB (UM) 5*32kB (UM) 3*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1964kB [ 229.102251][ T9886] Node 0 DMA32: 678*4kB (UME) 180*8kB (UME) 128*16kB (UME) 176*32kB (UME) 85*64kB (UME) 33*128kB (UM) 8*256kB (UM) 2*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 24568kB [ 229.107408][ T9886] Node 1 DMA32: 2140*4kB (UME) 982*8kB (UME) 373*16kB (UME) 551*32kB (UME) 222*64kB (UME) 112*128kB (UME) 72*256kB (UME) 98*512kB (UM) 49*1024kB (UM) 4*2048kB (UM) 0*4096kB = 195536kB [ 229.112986][ T9886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.115889][ T9886] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.118687][ T9886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.121571][ T9886] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.124530][ T9886] 10329 total pagecache pages [ 229.125979][ T9886] 718 pages in swap cache [ 229.127320][ T9886] Free swap = 91700kB [ 229.128559][ T9886] Total swap = 124996kB [ 229.129831][ T9886] 524155 pages RAM [ 229.131008][ T9886] 0 pages HighMem/MovableOnly [ 229.132452][ T9886] 209271 pages reserved [ 229.133808][ T9886] 0 pages cma reserved [ 229.263768][ T9898] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 229.265997][ T9898] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 229.268685][ T9898] vhci_hcd vhci_hcd.0: Device attached [ 229.294179][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'. [ 229.432922][ T63] Bluetooth: hci5: command 0x0c1a tx timeout [ 229.457846][ T9905] nvme_fabrics: missing parameter 'transport=%s' [ 229.460234][ T9905] nvme_fabrics: missing parameter 'nqn=%s' [ 229.512904][ T63] Bluetooth: hci7: command 0x0c1a tx timeout [ 229.592990][ T5973] Bluetooth: hci2: command 0x0c1a tx timeout [ 229.594869][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 229.602957][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 229.613319][ T29] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 230.093202][ T9899] vhci_hcd: connection reset by peer [ 230.095771][ T1137] vhci_hcd: stop threads [ 230.097576][ T1137] vhci_hcd: release socket [ 230.099475][ T1137] vhci_hcd: disconnect device [ 231.682911][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 231.683189][ T5973] Bluetooth: hci3: command 0x0c1a tx timeout [ 231.756136][ T9936] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 231.759689][ T9936] tipc: Enabled bearer , priority 10 [ 231.898931][ T9939] random: crng reseeded on system resumption [ 231.925190][ T9939] Bluetooth: hci0: service_discovery: too big uuid_count value 14336 [ 232.779646][ T9968] netlink: 'syz.1.814': attribute type 2 has an invalid length. [ 232.831441][ T9970] lo speed is unknown, defaulting to 1000 [ 232.849757][ T9972] loop6: detected capacity change from 0 to 63 [ 232.860491][ T9711] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.863825][ T9711] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.866508][ T9711] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.870414][ T9711] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.873275][ T9711] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.904840][ T40] audit: type=1326 audit(1752413776.225:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 232.911605][ T40] audit: type=1326 audit(1752413776.225:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 232.920147][ T40] audit: type=1326 audit(1752413776.235:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 232.927051][ T40] audit: type=1326 audit(1752413776.235:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.816" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 232.933727][ T40] audit: type=1326 audit(1752413776.235:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.816" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 232.940266][ T40] audit: type=1326 audit(1752413776.235:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.816" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 232.947325][ T40] audit: type=1326 audit(1752413776.235:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.816" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 232.955749][ T40] audit: type=1326 audit(1752413776.235:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.816" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 232.962622][ T40] audit: type=1326 audit(1752413776.235:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.816" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 232.969163][ T40] audit: type=1326 audit(1752413776.235:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.816" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e598 code=0x7ffc0000 [ 233.051734][ T9970] netlink: 64 bytes leftover after parsing attributes in process `syz.7.816'. [ 233.549323][ T9990] loop6: detected capacity change from 0 to 63 [ 233.561167][ T5370] udevd[5370]: worker [9711] terminated by signal 33 (Unknown signal 33) [ 233.563907][ T5370] udevd[5370]: worker [9711] failed while handling '/devices/virtual/block/loop6' [ 233.705347][ T9993] netlink: 'syz.1.821': attribute type 13 has an invalid length. [ 234.153251][T10000] netlink: 36 bytes leftover after parsing attributes in process `syz.7.823'. [ 234.712942][ T29] vhci_hcd: vhci_device speed not set [ 235.352946][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 235.482889][ T24] usb 6-1: device descriptor read/64, error -71 [ 235.722911][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 235.853012][ T24] usb 6-1: device descriptor read/64, error -71 [ 235.963190][ T24] usb usb6-port1: attempt power cycle [ 236.007220][T10032] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.115996][T10032] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.190394][T10032] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.255270][T10032] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.302950][ T6052] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 236.305528][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 236.322923][ T8393] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 236.325840][ T24] usb 6-1: device descriptor read/8, error -71 [ 236.341772][T10032] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.348953][T10032] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.356182][T10032] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.362198][T10032] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.462927][ T6052] usb 7-1: Using ep0 maxpacket: 8 [ 236.473864][ T6052] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 236.477072][ T6052] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.480674][ T6052] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.484328][ T6052] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.487586][ T6052] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.491626][ T6052] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 236.494620][ T6052] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.495386][ T8393] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.500245][ T8393] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.503060][ T8393] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.507115][ T8393] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 236.511734][ T8393] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 236.515934][ T8393] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 236.519261][ T8393] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.529025][T10038] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 236.533548][ T8393] hub 8-1:1.0: bad descriptor, ignoring hub [ 236.535439][ T8393] hub 8-1:1.0: probe with driver hub failed with error -5 [ 236.538231][ T8393] cdc_wdm 8-1:1.0: skipping garbage [ 236.540322][ T8393] cdc_wdm 8-1:1.0: skipping garbage [ 236.544903][ T8393] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 236.546867][ T8393] cdc_wdm 8-1:1.0: Unknown control protocol [ 236.582941][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 236.694176][ T24] usb 6-1: device descriptor read/8, error -71 [ 236.763769][ T6052] usb 7-1: usb_control_msg returned -32 [ 236.765593][ T6052] usbtmc 7-1:16.0: can't read capabilities [ 237.158960][ T24] usb usb6-port1: unable to enumerate USB device [ 237.317510][T10038] usb 8-1: reset low-speed USB device number 14 using dummy_hcd [ 237.616095][T10038] usb 8-1: device firmware changed [ 237.620247][ T6011] usb 8-1: USB disconnect, device number 14 [ 237.620332][T10038] cdc_wdm 8-1:1.0: Error autopm - -16 [ 237.627958][T10054] cdc_wdm 8-1:1.0: Error autopm - -16 [ 237.765246][ T6011] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 237.954217][ T6011] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.957463][ T6011] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 237.960615][ T6011] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.965162][ T6011] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 237.968027][ T6011] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.972352][T10053] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 237.976662][ T6011] hub 8-1:1.0: bad descriptor, ignoring hub [ 237.978720][ T6011] hub 8-1:1.0: probe with driver hub failed with error -5 [ 237.981537][ T6011] cdc_wdm 8-1:1.0: skipping garbage [ 237.983486][ T6011] cdc_wdm 8-1:1.0: skipping garbage [ 237.985192][ T6011] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 237.998865][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.845'. [ 238.019225][T10068] random: crng reseeded on system resumption [ 238.096907][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.845'. [ 238.105757][T10069] : entered promiscuous mode [ 238.230152][T10069] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 238.293155][ T6011] usb 8-1: USB disconnect, device number 15 [ 239.115065][ T6052] usb 7-1: USB disconnect, device number 8 [ 239.546172][ T53] syz_tun: tun_net_xmit 110 [ 240.397856][ T53] syz_tun: tun_net_xmit 110 [ 240.513366][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 240.760727][T10118] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 240.762739][T10118] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 240.765471][T10118] vhci_hcd vhci_hcd.0: Device attached [ 240.962084][T10133] lo speed is unknown, defaulting to 1000 [ 241.023469][ T6011] usb 51-1: new high-speed USB device number 2 using vhci_hcd [ 241.672513][T10120] vhci_hcd: connection reset by peer [ 241.678230][ T8243] vhci_hcd: stop threads [ 241.679717][ T8243] vhci_hcd: release socket [ 241.681203][ T8243] vhci_hcd: disconnect device [ 241.972895][ T6052] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 242.112959][ T6052] usb 6-1: device descriptor read/64, error -71 [ 242.353067][ T6052] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 242.493084][ T6052] usb 6-1: device descriptor read/64, error -71 [ 242.614970][ T6052] usb usb6-port1: attempt power cycle [ 242.962995][ T6052] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 242.983381][ T6052] usb 6-1: device descriptor read/8, error -71 [ 243.233054][ T6052] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 243.253688][ T6052] usb 6-1: device descriptor read/8, error -71 [ 243.364532][ T6052] usb usb6-port1: unable to enumerate USB device [ 246.155129][ T6011] vhci_hcd: vhci_device speed not set [ 247.810505][T10168] /dev/sg0: Can't lookup blockdev [ 247.814844][T10168] ubi31: attaching mtd0 [ 247.817493][T10168] ubi31: scanning is finished [ 247.819016][T10168] ubi31: empty MTD device detected [ 247.900042][T10168] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 247.904647][T10168] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 247.907032][T10168] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 247.909899][T10168] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 247.912361][T10168] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 247.916181][T10168] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 247.918774][T10168] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 788096797 [ 247.921967][T10168] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 247.927670][T10175] ubi31: background thread "ubi_bgt31d" started, PID 10175 [ 248.887635][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 248.890718][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 249.039519][T10197] TCP: TCP_TX_DELAY enabled [ 249.232450][T10202] netlink: 'syz.3.874': attribute type 10 has an invalid length. [ 249.802295][ T5973] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 249.806055][ T5973] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 249.874436][T10229] 9pnet_fd: Insufficient options for proto=fd [ 249.952505][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 249.958809][ C2] vcan0: j1939_xtp_rx_dat: no tx connection found [ 249.961149][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.014733][T10235] wlan1: mtu greater than device maximum [ 250.115696][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'. [ 251.011039][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.893'. [ 251.014042][T10260] openvswitch: netlink: nsh attr 5 is out of range max 3 [ 251.016335][T10260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.433055][T10278] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 251.435170][T10278] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 251.437654][T10278] vhci_hcd vhci_hcd.0: Device attached [ 251.753014][ T53] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 251.952101][ T1468] IPVS: starting estimator thread 0... [ 252.054765][T10296] netlink: 'syz.7.903': attribute type 1 has an invalid length. [ 252.063012][T10286] IPVS: using max 42 ests per chain, 100800 per kthread [ 252.198295][T10304] netlink: 16 bytes leftover after parsing attributes in process `syz.7.907'. [ 252.244255][T10309] netlink: 36 bytes leftover after parsing attributes in process `syz.7.910'. [ 252.259752][T10311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.911'. [ 252.298110][T10315] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 252.394854][T10279] vhci_hcd: connection reset by peer [ 252.403028][ T1141] vhci_hcd: stop threads [ 252.404762][ T1141] vhci_hcd: release socket [ 252.406716][ T1141] vhci_hcd: disconnect device [ 252.489164][T10328] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 252.926818][T10348] 9pnet_fd: Insufficient options for proto=fd [ 252.946501][T10350] IPVS: Unknown mcast interface: vcan0 [ 253.094198][T10359] usb usb8: usbfs: process 10359 (syz.2.920) did not claim interface 0 before use [ 253.420484][T10365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.428605][T10365] 9pnet_fd: Insufficient options for proto=fd [ 253.914929][T10370] overlay: ./file1 is not a directory [ 253.916061][T10372] FAULT_INJECTION: forcing a failure. [ 253.916061][T10372] name failslab, interval 1, probability 0, space 0, times 0 [ 253.920604][T10372] CPU: 3 UID: 0 PID: 10372 Comm: syz.2.930 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 253.920619][T10372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.920625][T10372] Call Trace: [ 253.920629][T10372] [ 253.920634][T10372] dump_stack_lvl+0x16c/0x1f0 [ 253.920653][T10372] should_fail_ex+0x512/0x640 [ 253.920668][T10372] ? __kmalloc_node_noprof+0xc5/0x500 [ 253.920686][T10372] should_failslab+0xc2/0x120 [ 253.920696][T10372] __kmalloc_node_noprof+0xd8/0x500 [ 253.920712][T10372] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 253.920726][T10372] ? __pfx_crypto_acomp_extsize+0x10/0x10 [ 253.920740][T10372] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 253.920753][T10372] crypto_create_tfm_node+0x85/0x350 [ 253.920767][T10372] crypto_alloc_tfm_node+0x102/0x260 [ 253.920778][T10372] ? kasan_save_track+0x14/0x30 [ 253.920794][T10372] ipcomp_init_state+0xf0/0x330 [ 253.920810][T10372] ipcomp6_init_state+0xca/0x7e0 [ 253.920824][T10372] ? __xfrm_init_state+0x918/0x1c10 [ 253.920843][T10372] __xfrm_init_state+0x6fb/0x1c10 [ 253.920860][T10372] xfrm_init_state+0x18/0xa0 [ 253.920873][T10372] pfkey_add+0x24f8/0x2ec0 [ 253.920892][T10372] ? __pfx_pfkey_add+0x10/0x10 [ 253.920906][T10372] ? kfree_skbmem+0x1a4/0x1f0 [ 253.920918][T10372] ? sk_skb_reason_drop+0x136/0x1a0 [ 253.920935][T10372] ? pfkey_broadcast+0x2af/0x460 [ 253.920951][T10372] ? __pfx_pfkey_add+0x10/0x10 [ 253.920966][T10372] pfkey_process+0x6d9/0x840 [ 253.920983][T10372] ? __pfx_pfkey_process+0x10/0x10 [ 253.920998][T10372] ? trace_contention_end+0xdd/0x130 [ 253.921023][T10372] ? __pfx_aa_sk_perm+0x10/0x10 [ 253.921037][T10372] pfkey_sendmsg+0x435/0x850 [ 253.921054][T10372] ____sys_sendmsg+0xa98/0xc70 [ 253.921067][T10372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.921078][T10372] ? get_compat_msghdr+0x11a/0x170 [ 253.921096][T10372] ? __pfx__kstrtoull+0x10/0x10 [ 253.921111][T10372] ___sys_sendmsg+0x134/0x1d0 [ 253.921127][T10372] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.921140][T10372] ? __lock_acquire+0x622/0x1c90 [ 253.921170][T10372] __sys_sendmmsg+0x2f9/0x420 [ 253.921187][T10372] ? __pfx___sys_sendmmsg+0x10/0x10 [ 253.921206][T10372] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 253.921228][T10372] ? fput+0x70/0xf0 [ 253.921238][T10372] ? ksys_write+0x1ac/0x250 [ 253.921253][T10372] ? __pfx_ksys_write+0x10/0x10 [ 253.921269][T10372] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 253.921286][T10372] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 253.921302][T10372] __do_fast_syscall_32+0x7c/0x3a0 [ 253.921319][T10372] do_fast_syscall_32+0x32/0x80 [ 253.921335][T10372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.921349][T10372] RIP: 0023:0xf7f93579 [ 253.921357][T10372] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 253.921367][T10372] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 253.921377][T10372] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 253.921384][T10372] RDX: 000000000400008a RSI: 0000000000000000 RDI: 0000000000000000 [ 253.921390][T10372] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.921396][T10372] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 253.921401][T10372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.921426][T10372] [ 254.065796][T10374] sp0: Synchronizing with TNC [ 254.120495][ T40] kauditd_printk_skb: 443 callbacks suppressed [ 254.120511][ T40] audit: type=1326 audit(1752413797.435:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.3.931" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 254.133653][ T40] audit: type=1326 audit(1752413797.435:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.3.931" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 254.140649][ T40] audit: type=1326 audit(1752413797.445:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.3.931" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 254.164848][ T40] audit: type=1326 audit(1752413797.445:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.3.931" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 254.183223][T10377] can: request_module (can-proto-0) failed. [ 254.185442][ T40] audit: type=1326 audit(1752413797.445:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.3.931" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 254.192122][ T40] audit: type=1326 audit(1752413797.445:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.3.931" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 254.200405][T10384] lo speed is unknown, defaulting to 1000 [ 254.223222][ T40] audit: type=1326 audit(1752413797.445:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.3.931" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 254.245075][ T40] audit: type=1326 audit(1752413797.445:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.3.931" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 254.251725][ T40] audit: type=1326 audit(1752413797.445:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.3.931" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 254.276254][T10392] syz.3.936 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 254.313688][ T13] wlan1: Trigger new scan to find an IBSS to join [ 254.357946][ T40] audit: type=1326 audit(1752413797.445:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.3.931" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 254.467115][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.938'. [ 254.485280][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.7.938'. [ 255.118518][T10417] lo speed is unknown, defaulting to 1000 [ 255.119064][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.214303][T10423] FAULT_INJECTION: forcing a failure. [ 255.214303][T10423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.219300][T10423] CPU: 0 UID: 0 PID: 10423 Comm: syz.1.943 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 255.219321][T10423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.219331][T10423] Call Trace: [ 255.219338][T10423] [ 255.219344][T10423] dump_stack_lvl+0x16c/0x1f0 [ 255.219371][T10423] should_fail_ex+0x512/0x640 [ 255.219394][T10423] _copy_to_user+0x32/0xd0 [ 255.219420][T10423] bpf_test_finish.isra.0+0x570/0x6e0 [ 255.219449][T10423] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 255.219478][T10423] ? _copy_from_user+0x59/0xd0 [ 255.219504][T10423] bpf_prog_test_run_xdp+0xa0d/0x1590 [ 255.219529][T10423] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 255.219546][T10423] ? __might_fault+0x70/0x190 [ 255.219572][T10423] ? fput+0x70/0xf0 [ 255.219588][T10423] ? __bpf_prog_get+0x97/0x2a0 [ 255.219608][T10423] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 255.219623][T10423] __sys_bpf+0x1485/0x4d80 [ 255.219641][T10423] ? __pfx___sys_bpf+0x10/0x10 [ 255.219655][T10423] ? ksys_write+0x190/0x250 [ 255.219680][T10423] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 255.219717][T10423] ? fput+0x70/0xf0 [ 255.219731][T10423] ? ksys_write+0x1ac/0x250 [ 255.219752][T10423] ? __pfx_ksys_write+0x10/0x10 [ 255.219777][T10423] __ia32_sys_bpf+0x76/0xe0 [ 255.219793][T10423] __do_fast_syscall_32+0x7c/0x3a0 [ 255.219823][T10423] do_fast_syscall_32+0x32/0x80 [ 255.219861][T10423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.219882][T10423] RIP: 0023:0xf710e579 [ 255.219894][T10423] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 255.219909][T10423] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 255.219924][T10423] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000340 [ 255.219934][T10423] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.219943][T10423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.219951][T10423] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 255.219960][T10423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.219981][T10423] [ 256.070196][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.953'. [ 256.277314][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 256.286023][T10472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.960'. [ 256.377500][T10475] FAULT_INJECTION: forcing a failure. [ 256.377500][T10475] name failslab, interval 1, probability 0, space 0, times 0 [ 256.381565][T10475] CPU: 2 UID: 0 PID: 10475 Comm: syz.1.963 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 256.381580][T10475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.381587][T10475] Call Trace: [ 256.381591][T10475] [ 256.381595][T10475] dump_stack_lvl+0x16c/0x1f0 [ 256.381615][T10475] should_fail_ex+0x512/0x640 [ 256.381633][T10475] should_failslab+0xc2/0x120 [ 256.381644][T10475] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 256.381661][T10475] ? skb_clone+0x190/0x3f0 [ 256.381678][T10475] skb_clone+0x190/0x3f0 [ 256.381694][T10475] netlink_deliver_tap+0xabd/0xd30 [ 256.381714][T10475] netlink_unicast+0x702/0x850 [ 256.381727][T10475] ? __pfx_netlink_unicast+0x10/0x10 [ 256.381738][T10475] ? __pfx_nf_tables_abort+0x10/0x10 [ 256.381750][T10475] netlink_ack+0x696/0xb80 [ 256.381764][T10475] nfnetlink_rcv_batch+0x1423/0x2330 [ 256.381784][T10475] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 256.381802][T10475] ? __local_bh_enable_ip+0xa4/0x120 [ 256.381814][T10475] ? __dev_queue_xmit+0x896/0x43e0 [ 256.381827][T10475] ? __dev_queue_xmit+0x8b7/0x43e0 [ 256.381845][T10475] ? __pfx___dev_queue_xmit+0x10/0x10 [ 256.381870][T10475] ? __nla_parse+0x40/0x60 [ 256.381882][T10475] nfnetlink_rcv+0x3c1/0x430 [ 256.381895][T10475] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 256.381911][T10475] netlink_unicast+0x58a/0x850 [ 256.381923][T10475] ? __pfx_netlink_unicast+0x10/0x10 [ 256.381938][T10475] netlink_sendmsg+0x8d1/0xdd0 [ 256.381950][T10475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.381962][T10475] ? __import_iovec+0x1dd/0x650 [ 256.381975][T10475] ____sys_sendmsg+0xa98/0xc70 [ 256.381988][T10475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.381998][T10475] ? get_compat_msghdr+0x11a/0x170 [ 256.382020][T10475] ___sys_sendmsg+0x134/0x1d0 [ 256.382037][T10475] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.382058][T10475] ? find_held_lock+0x2b/0x80 [ 256.382078][T10475] __sys_sendmsg+0x16d/0x220 [ 256.382093][T10475] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.382114][T10475] ? rcu_is_watching+0x12/0xc0 [ 256.382127][T10475] __do_fast_syscall_32+0x7c/0x3a0 [ 256.382144][T10475] do_fast_syscall_32+0x32/0x80 [ 256.382160][T10475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.382174][T10475] RIP: 0023:0xf710e579 [ 256.382182][T10475] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 256.382193][T10475] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 256.382202][T10475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 256.382209][T10475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.382215][T10475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.382220][T10475] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 256.382226][T10475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.382239][T10475] [ 256.412243][T10477] overlayfs: failed to clone upperpath [ 256.610635][T10481] netlink: 44 bytes leftover after parsing attributes in process `syz.1.966'. [ 256.872947][ T53] vhci_hcd: vhci_device speed not set [ 256.902998][ T837] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 257.464362][ T837] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.468407][ T837] usb 6-1: config 1 interface 0 has no altsetting 0 [ 257.855666][ T837] usb 6-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.40 [ 257.868779][ T837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.872544][ T837] usb 6-1: Product: syz [ 257.874687][ T837] usb 6-1: Manufacturer: syz [ 257.876872][ T837] usb 6-1: SerialNumber: syz [ 257.909240][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.7.971'. [ 257.916886][T10505] netlink: 28 bytes leftover after parsing attributes in process `syz.7.971'. [ 257.936690][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.973'. [ 258.029427][T10517] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 258.067546][T10522] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.104477][ T837] usbhid 6-1:1.0: can't add hid device: -71 [ 258.106474][ T837] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 258.110667][ T837] usb 6-1: USB disconnect, device number 17 [ 258.120673][T10531] netlink: 'syz.7.979': attribute type 10 has an invalid length. [ 258.124868][T10531] netlink: 40 bytes leftover after parsing attributes in process `syz.7.979'. [ 258.147087][T10531] team0: Port device geneve0 added [ 258.182051][T10522] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.238571][T10522] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.286621][T10522] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.495670][T10522] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.507172][T10522] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.519305][T10522] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.522997][ T6052] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 258.529144][T10522] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.686213][ T6052] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.691592][ T6052] usb 6-1: config 1 interface 0 has no altsetting 0 [ 258.697730][ T6052] usb 6-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.40 [ 258.701496][ T6052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.705263][ T6052] usb 6-1: Product: syz [ 258.707166][ T6052] usb 6-1: Manufacturer: syz [ 258.709229][ T6052] usb 6-1: SerialNumber: syz [ 258.933776][ T6052] usbhid 6-1:1.0: can't add hid device: -71 [ 258.935838][ T6052] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 258.941462][ T6052] usb 6-1: USB disconnect, device number 18 [ 259.145897][T10558] input: syz0 as /devices/virtual/input/input14 [ 259.273332][ T91] wlan1: Trigger new scan to find an IBSS to join [ 259.294266][ T29] syz_tun: tun_net_xmit 110 [ 259.833176][ T29] syz_tun: tun_net_xmit 110 [ 259.901131][T10570] FAULT_INJECTION: forcing a failure. [ 259.901131][T10570] name failslab, interval 1, probability 0, space 0, times 0 [ 259.905327][T10570] CPU: 0 UID: 0 PID: 10570 Comm: syz.3.992 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 259.905341][T10570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 259.905348][T10570] Call Trace: [ 259.905352][T10570] [ 259.905356][T10570] dump_stack_lvl+0x16c/0x1f0 [ 259.905375][T10570] should_fail_ex+0x512/0x640 [ 259.905390][T10570] ? fs_reclaim_acquire+0xae/0x150 [ 259.905404][T10570] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 259.905419][T10570] should_failslab+0xc2/0x120 [ 259.905430][T10570] __kmalloc_noprof+0xd2/0x510 [ 259.905445][T10570] ? trace_kmalloc+0x2b/0xd0 [ 259.905455][T10570] ? __kmalloc_noprof+0x242/0x510 [ 259.905472][T10570] tomoyo_realpath_from_path+0xc2/0x6e0 [ 259.905488][T10570] ? tomoyo_fill_path_info+0x233/0x420 [ 259.905500][T10570] tomoyo_mount_acl+0x1ae/0x850 [ 259.905513][T10570] ? __kernel_text_address+0xd/0x40 [ 259.905523][T10570] ? unwind_get_return_address+0x59/0xa0 [ 259.905543][T10570] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 259.905574][T10570] ? tomoyo_domain+0xbb/0x150 [ 259.905589][T10570] ? tomoyo_profile+0x47/0x60 [ 259.905607][T10570] tomoyo_mount_permission+0x16d/0x420 [ 259.905620][T10570] ? tomoyo_mount_permission+0x14f/0x420 [ 259.905633][T10570] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 259.905655][T10570] security_sb_mount+0x9b/0x260 [ 259.905667][T10570] path_mount+0x128/0x2020 [ 259.905684][T10570] ? kmem_cache_free+0x2d1/0x4d0 [ 259.905699][T10570] ? __pfx_path_mount+0x10/0x10 [ 259.905714][T10570] ? getname_flags.part.0+0x1c5/0x550 [ 259.905728][T10570] ? putname+0x154/0x1a0 [ 259.905739][T10570] __ia32_sys_mount+0x28b/0x310 [ 259.905755][T10570] ? __pfx___ia32_sys_mount+0x10/0x10 [ 259.905772][T10570] ? rcu_is_watching+0x12/0xc0 [ 259.905786][T10570] __do_fast_syscall_32+0x7c/0x3a0 [ 259.905803][T10570] do_fast_syscall_32+0x32/0x80 [ 259.905819][T10570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.905832][T10570] RIP: 0023:0xf709e579 [ 259.905840][T10570] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 259.905850][T10570] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 259.905860][T10570] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000240 [ 259.905866][T10570] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000400 [ 259.905872][T10570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.905878][T10570] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 259.905884][T10570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.905897][T10570] [ 259.905901][T10570] ERROR: Out of memory at tomoyo_realpath_from_path. [ 260.015886][T10574] netlink: 12 bytes leftover after parsing attributes in process `syz.7.994'. [ 260.095539][T10577] veth1_macvtap: left promiscuous mode [ 260.227083][ T13] wlan1: Creating new IBSS network, BSSID 72:6f:d0:c3:25:dd [ 260.411833][T10589] random: crng reseeded on system resumption [ 260.727784][T10591] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 260.730576][T10591] UDF-fs: Scanning with blocksize 2048 failed [ 260.735109][T10591] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 260.737452][T10591] UDF-fs: Scanning with blocksize 4096 failed [ 261.187730][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 261.187784][ T40] audit: type=1326 audit(1752413804.505:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.1.1003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 261.208474][ T40] audit: type=1326 audit(1752413804.505:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.1.1003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 261.217892][ T40] audit: type=1326 audit(1752413804.505:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.1.1003" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 261.224728][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 261.227798][ T40] audit: type=1326 audit(1752413804.505:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.1.1003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 261.241979][ T40] audit: type=1326 audit(1752413804.505:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.1.1003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 261.248548][ T40] audit: type=1326 audit(1752413804.505:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.1.1003" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 261.254826][ T40] audit: type=1326 audit(1752413804.505:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.1.1003" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 261.260889][ T40] audit: type=1326 audit(1752413804.505:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.1.1003" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 261.270065][ T40] audit: type=1326 audit(1752413804.505:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.1.1003" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 261.277911][ T40] audit: type=1326 audit(1752413804.505:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.1.1003" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 261.325995][T10611] netlink: 'syz.3.1006': attribute type 39 has an invalid length. [ 261.422509][T10616] siw: device registration error -23 [ 261.809805][ T29] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 261.837807][ T29] hid-generic 0001:0000:0000.0004: hidraw1: HID va0000.00 Device [syz1] on syz0 [ 262.451386][T10632] random: crng reseeded on system resumption [ 263.485583][T10653] tipc: Enabled bearer , priority 0 [ 263.487883][T10654] syzkaller0: entered promiscuous mode [ 263.490135][T10654] syzkaller0: entered allmulticast mode [ 263.500784][T10655] tipc: Resetting bearer [ 263.511121][T10655] tipc: Disabling bearer [ 263.830295][T10662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.836738][T10662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.899324][T10662] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.902103][T10662] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.905587][T10662] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.906404][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 263.908336][T10662] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.939904][T10688] netlink: 200 bytes leftover after parsing attributes in process `syz.7.1031'. [ 263.971553][T10670] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 264.024248][T10690] FAULT_INJECTION: forcing a failure. [ 264.024248][T10690] name failslab, interval 1, probability 0, space 0, times 0 [ 264.038858][T10690] CPU: 2 UID: 0 PID: 10690 Comm: syz.3.1032 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 264.038885][T10690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 264.038896][T10690] Call Trace: [ 264.038903][T10690] [ 264.038910][T10690] dump_stack_lvl+0x16c/0x1f0 [ 264.038940][T10690] should_fail_ex+0x512/0x640 [ 264.038969][T10690] should_failslab+0xc2/0x120 [ 264.038987][T10690] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 264.039014][T10690] ? skb_clone+0x190/0x3f0 [ 264.039044][T10690] skb_clone+0x190/0x3f0 [ 264.039070][T10690] netlink_deliver_tap+0xabd/0xd30 [ 264.039121][T10690] netlink_unicast+0x62f/0x850 [ 264.039143][T10690] ? __pfx_netlink_unicast+0x10/0x10 [ 264.039168][T10690] netlink_sendmsg+0x8d1/0xdd0 [ 264.039191][T10690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.039211][T10690] ? __import_iovec+0x1dd/0x650 [ 264.039233][T10690] ____sys_sendmsg+0xa98/0xc70 [ 264.039256][T10690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.039273][T10690] ? get_compat_msghdr+0x11a/0x170 [ 264.039312][T10690] ___sys_sendmsg+0x134/0x1d0 [ 264.039340][T10690] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.039378][T10690] ? find_held_lock+0x2b/0x80 [ 264.039415][T10690] __sys_sendmsg+0x16d/0x220 [ 264.039441][T10690] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.039478][T10690] ? rcu_is_watching+0x12/0xc0 [ 264.039506][T10690] __do_fast_syscall_32+0x7c/0x3a0 [ 264.039535][T10690] do_fast_syscall_32+0x32/0x80 [ 264.039561][T10690] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.039583][T10690] RIP: 0023:0xf709e579 [ 264.039596][T10690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 264.039613][T10690] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 264.039630][T10690] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 264.039641][T10690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.039650][T10690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.039660][T10690] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 264.039670][T10690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.039693][T10690] [ 264.185279][T10699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.240994][ T5973] Bluetooth: hci2: unexpected event for opcode 0xff0c [ 264.303934][T10713] FAULT_INJECTION: forcing a failure. [ 264.303934][T10713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.307988][T10713] CPU: 3 UID: 0 PID: 10713 Comm: syz.3.1040 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 264.308002][T10713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 264.308009][T10713] Call Trace: [ 264.308013][T10713] [ 264.308018][T10713] dump_stack_lvl+0x16c/0x1f0 [ 264.308037][T10713] should_fail_ex+0x512/0x640 [ 264.308055][T10713] _copy_to_user+0x32/0xd0 [ 264.308073][T10713] simple_read_from_buffer+0xcb/0x170 [ 264.308088][T10713] proc_fail_nth_read+0x197/0x270 [ 264.308101][T10713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.308115][T10713] ? rw_verify_area+0xcf/0x680 [ 264.308128][T10713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.308140][T10713] vfs_read+0x1e4/0xc60 [ 264.308155][T10713] ? fdget_pos+0x2a2/0x370 [ 264.308171][T10713] ? __pfx_vfs_read+0x10/0x10 [ 264.308184][T10713] ? find_held_lock+0x2b/0x80 [ 264.308199][T10713] ? __fget_files+0x20e/0x3c0 [ 264.308217][T10713] ksys_read+0x12a/0x250 [ 264.308231][T10713] ? __pfx_ksys_read+0x10/0x10 [ 264.308246][T10713] ? rcu_is_watching+0x12/0xc0 [ 264.308259][T10713] __do_fast_syscall_32+0x7c/0x3a0 [ 264.308276][T10713] do_fast_syscall_32+0x32/0x80 [ 264.308292][T10713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.308305][T10713] RIP: 0023:0xf709e579 [ 264.308313][T10713] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 264.308323][T10713] RSP: 002b:00000000f508e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 264.308333][T10713] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f508e620 [ 264.308339][T10713] RDX: 000000000000000f RSI: 00000000f7403ff4 RDI: 0000000000000000 [ 264.308345][T10713] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 264.308351][T10713] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 264.308356][T10713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.308369][T10713] [ 264.789672][T10726] random: crng reseeded on system resumption [ 265.612755][T10746] lo speed is unknown, defaulting to 1000 [ 265.653495][T10752] netlink: 'syz.1.1052': attribute type 2 has an invalid length. [ 266.352287][T10771] netlink: 'syz.2.1059': attribute type 29 has an invalid length. [ 266.414998][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 266.415008][ T40] audit: type=1326 audit(1752413809.735:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.7.1061" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e579 code=0x0 [ 266.821729][T10786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1062'. [ 270.215214][T10867] syz.1.1093: attempt to access beyond end of device [ 270.215214][T10867] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 270.822151][T10891] netlink: 'syz.2.1100': attribute type 3 has an invalid length. [ 271.635129][T10904] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1104'. [ 271.638951][T10904] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1104'. [ 271.642794][T10904] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1104'. [ 272.260756][T10939] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 273.091577][T10970] tipc: MTU too low for tipc bearer [ 275.091264][T11024] syz_tun: tun_net_xmit 42 [ 275.093447][T11024] syz_tun: tun_net_xmit 42 [ 275.095055][T11024] syz_tun: tun_net_xmit 42 [ 275.096593][T11024] syz_tun: tun_net_xmit 42 [ 275.098204][T11024] syz_tun: tun_net_xmit 42 [ 275.100614][T11024] syz_tun: tun_net_xmit 42 [ 275.102365][T11024] syz_tun: tun_net_xmit 42 [ 275.103957][T11024] syz_tun: tun_net_xmit 42 [ 275.105447][T11024] syz_tun: tun_net_xmit 42 [ 275.106935][T11024] syz_tun: tun_net_xmit 42 [ 275.108608][T11024] syz_tun: tun_net_xmit 42 [ 275.110391][T11024] syz_tun: tun_net_xmit 42 [ 275.111876][T11024] syz_tun: tun_net_xmit 42 [ 275.113429][T11024] syz_tun: tun_net_xmit 42 [ 275.114927][T11024] syz_tun: tun_net_xmit 42 [ 275.116419][T11024] syz_tun: tun_net_xmit 42 [ 275.117921][T11024] syz_tun: tun_net_xmit 42 [ 275.119981][T11024] syz_tun: tun_net_xmit 42 [ 275.121802][T11024] syz_tun: tun_net_xmit 42 [ 275.123380][T11024] syz_tun: tun_net_xmit 42 [ 275.124895][T11024] syz_tun: tun_net_xmit 42 [ 275.126472][T11024] syz_tun: tun_net_xmit 42 [ 275.128044][T11024] syz_tun: tun_net_xmit 42 [ 275.129582][T11024] syz_tun: tun_net_xmit 42 [ 275.131120][T11024] syz_tun: tun_net_xmit 42 [ 275.132616][T11024] syz_tun: tun_net_xmit 42 [ 275.134182][T11024] syz_tun: tun_net_xmit 42 [ 275.135677][T11024] syz_tun: tun_net_xmit 42 [ 275.137175][T11024] syz_tun: tun_net_xmit 42 [ 275.138720][T11024] syz_tun: tun_net_xmit 42 [ 275.140241][T11024] syz_tun: tun_net_xmit 42 [ 275.141795][T11024] syz_tun: tun_net_xmit 42 [ 275.143414][T11024] syz_tun: tun_net_xmit 42 [ 275.144898][T11024] syz_tun: tun_net_xmit 42 [ 275.146584][T11024] syz_tun: tun_net_xmit 42 [ 275.148253][T11024] syz_tun: tun_net_xmit 42 [ 275.149927][T11024] syz_tun: tun_net_xmit 42 [ 275.151484][T11024] syz_tun: tun_net_xmit 42 [ 275.153062][T11024] syz_tun: tun_net_xmit 42 [ 275.154851][T11024] syz_tun: tun_net_xmit 42 [ 275.156441][T11024] syz_tun: tun_net_xmit 42 [ 275.157984][T11024] syz_tun: tun_net_xmit 42 [ 275.159668][T11024] syz_tun: tun_net_xmit 42 [ 275.161352][T11024] syz_tun: tun_net_xmit 42 [ 275.162939][T11024] syz_tun: tun_net_xmit 42 [ 275.164461][T11024] syz_tun: tun_net_xmit 42 [ 275.166032][T11024] syz_tun: tun_net_xmit 42 [ 275.167577][T11024] syz_tun: tun_net_xmit 42 [ 275.169351][T11024] syz_tun: tun_net_xmit 42 [ 275.170893][T11024] syz_tun: tun_net_xmit 42 [ 275.172421][T11024] syz_tun: tun_net_xmit 42 [ 275.174005][T11024] syz_tun: tun_net_xmit 42 [ 275.175580][T11024] syz_tun: tun_net_xmit 42 [ 275.177096][T11024] syz_tun: tun_net_xmit 42 [ 275.178909][T11024] syz_tun: tun_net_xmit 42 [ 275.180951][T11024] syz_tun: tun_net_xmit 42 [ 275.182491][T11024] syz_tun: tun_net_xmit 42 [ 275.184097][T11024] syz_tun: tun_net_xmit 42 [ 275.185651][T11024] syz_tun: tun_net_xmit 42 [ 275.187178][T11024] syz_tun: tun_net_xmit 42 [ 275.188788][T11024] syz_tun: tun_net_xmit 42 [ 275.190300][T11024] syz_tun: tun_net_xmit 42 [ 275.191830][T11024] syz_tun: tun_net_xmit 42 [ 275.193407][T11024] syz_tun: tun_net_xmit 42 [ 275.194923][T11024] syz_tun: tun_net_xmit 42 [ 275.196430][T11024] syz_tun: tun_net_xmit 42 [ 275.197938][T11024] syz_tun: tun_net_xmit 42 [ 275.200035][T11024] syz_tun: tun_net_xmit 42 [ 275.202019][T11024] syz_tun: tun_net_xmit 42 [ 275.203673][T11024] syz_tun: tun_net_xmit 42 [ 275.205206][T11024] syz_tun: tun_net_xmit 42 [ 275.206748][T11024] syz_tun: tun_net_xmit 42 [ 275.208637][T11024] syz_tun: tun_net_xmit 42 [ 275.210717][T11024] syz_tun: tun_net_xmit 42 [ 275.213057][T11024] syz_tun: tun_net_xmit 42 [ 275.215280][T11024] syz_tun: tun_net_xmit 42 [ 275.217524][T11024] syz_tun: tun_net_xmit 42 [ 275.219825][T11024] syz_tun: tun_net_xmit 42 [ 275.222084][T11024] syz_tun: tun_net_xmit 42 [ 275.224384][T11024] syz_tun: tun_net_xmit 42 [ 275.226646][T11024] syz_tun: tun_net_xmit 42 [ 275.228905][T11024] syz_tun: tun_net_xmit 42 [ 275.231220][T11024] syz_tun: tun_net_xmit 42 [ 275.233510][T11024] syz_tun: tun_net_xmit 42 [ 275.235786][T11024] syz_tun: tun_net_xmit 42 [ 275.238006][T11024] syz_tun: tun_net_xmit 42 [ 275.240281][T11024] syz_tun: tun_net_xmit 42 [ 275.242520][T11024] syz_tun: tun_net_xmit 42 [ 275.244868][T11024] syz_tun: tun_net_xmit 42 [ 275.247128][T11024] syz_tun: tun_net_xmit 42 [ 275.249816][T11024] syz_tun: tun_net_xmit 42 [ 275.252120][T11024] syz_tun: tun_net_xmit 42 [ 275.254474][T11024] syz_tun: tun_net_xmit 42 [ 275.256691][T11024] syz_tun: tun_net_xmit 42 [ 275.258946][T11024] syz_tun: tun_net_xmit 42 [ 275.261140][T11024] syz_tun: tun_net_xmit 42 [ 275.263483][T11024] syz_tun: tun_net_xmit 42 [ 275.265765][T11024] syz_tun: tun_net_xmit 42 [ 275.268000][T11024] syz_tun: tun_net_xmit 42 [ 275.270247][T11024] syz_tun: tun_net_xmit 42 [ 275.272504][T11024] syz_tun: tun_net_xmit 42 [ 275.274843][T11024] syz_tun: tun_net_xmit 42 [ 275.277114][T11024] syz_tun: tun_net_xmit 42 [ 275.279367][T11024] syz_tun: tun_net_xmit 42 [ 275.281151][T11024] syz_tun: tun_net_xmit 42 [ 275.283077][T11024] syz_tun: tun_net_xmit 42 [ 275.284731][T11024] syz_tun: tun_net_xmit 42 [ 275.286353][T11024] syz_tun: tun_net_xmit 42 [ 275.288003][T11024] syz_tun: tun_net_xmit 42 [ 275.289929][T11024] syz_tun: tun_net_xmit 42 [ 275.292066][T11024] syz_tun: tun_net_xmit 42 [ 275.294273][T11024] syz_tun: tun_net_xmit 42 [ 275.296445][T11024] syz_tun: tun_net_xmit 42 [ 275.298541][T11024] syz_tun: tun_net_xmit 42 [ 275.300738][T11024] syz_tun: tun_net_xmit 42 [ 275.303001][T11024] syz_tun: tun_net_xmit 42 [ 275.305665][T11024] syz_tun: tun_net_xmit 42 [ 275.307749][T11024] syz_tun: tun_net_xmit 42 [ 275.309709][T11024] syz_tun: tun_net_xmit 42 [ 275.311874][T11024] syz_tun: tun_net_xmit 42 [ 275.314029][T11024] syz_tun: tun_net_xmit 42 [ 275.316210][T11024] syz_tun: tun_net_xmit 42 [ 275.318397][T11024] syz_tun: tun_net_xmit 42 [ 275.320532][T11024] syz_tun: tun_net_xmit 42 [ 275.322554][T11024] syz_tun: tun_net_xmit 42 [ 275.324912][T11024] syz_tun: tun_net_xmit 42 [ 275.327034][T11024] syz_tun: tun_net_xmit 42 [ 275.329102][T11024] syz_tun: tun_net_xmit 42 [ 275.330794][T11024] syz_tun: tun_net_xmit 42 [ 275.332687][T11024] syz_tun: tun_net_xmit 42 [ 275.432951][T11024] syz_tun: tun_net_xmit 42 [ 275.434638][T11024] syz_tun: tun_net_xmit 42 [ 275.436172][T11024] syz_tun: tun_net_xmit 42 [ 275.437685][T11024] syz_tun: tun_net_xmit 42 [ 275.439226][T11024] syz_tun: tun_net_xmit 42 [ 275.440730][T11024] syz_tun: tun_net_xmit 42 [ 275.442120][T11024] syz_tun: tun_net_xmit 42 [ 275.443836][T11024] syz_tun: tun_net_xmit 42 [ 275.445368][T11024] syz_tun: tun_net_xmit 42 [ 275.446904][T11024] syz_tun: tun_net_xmit 42 [ 275.448424][T11024] syz_tun: tun_net_xmit 42 [ 275.449905][T11024] syz_tun: tun_net_xmit 42 [ 275.451484][T11024] syz_tun: tun_net_xmit 42 [ 275.453019][T11024] syz_tun: tun_net_xmit 42 [ 275.454741][T11024] syz_tun: tun_net_xmit 42 [ 275.456310][T11024] syz_tun: tun_net_xmit 42 [ 275.457818][T11024] syz_tun: tun_net_xmit 42 [ 275.459381][T11024] syz_tun: tun_net_xmit 42 [ 275.460887][T11024] syz_tun: tun_net_xmit 42 [ 275.462470][T11024] syz_tun: tun_net_xmit 42 [ 275.464094][T11024] syz_tun: tun_net_xmit 42 [ 275.465708][T11024] syz_tun: tun_net_xmit 42 [ 275.467240][T11024] syz_tun: tun_net_xmit 42 [ 275.468827][T11024] syz_tun: tun_net_xmit 42 [ 275.470371][T11024] syz_tun: tun_net_xmit 42 [ 275.471886][T11024] syz_tun: tun_net_xmit 42 [ 275.473473][T11024] syz_tun: tun_net_xmit 42 [ 275.475024][T11024] syz_tun: tun_net_xmit 42 [ 275.476542][T11024] syz_tun: tun_net_xmit 42 [ 275.478072][T11024] syz_tun: tun_net_xmit 42 [ 275.479605][T11024] syz_tun: tun_net_xmit 42 [ 275.481130][T11024] syz_tun: tun_net_xmit 42 [ 275.482648][T11024] syz_tun: tun_net_xmit 42 [ 275.484249][T11024] syz_tun: tun_net_xmit 42 [ 275.485763][T11024] syz_tun: tun_net_xmit 42 [ 275.487705][T11024] syz_tun: tun_net_xmit 42 [ 275.489251][T11024] syz_tun: tun_net_xmit 42 [ 275.490729][T11024] syz_tun: tun_net_xmit 42 [ 275.492281][T11024] syz_tun: tun_net_xmit 42 [ 275.493886][T11024] syz_tun: tun_net_xmit 42 [ 275.495442][T11024] syz_tun: tun_net_xmit 42 [ 275.496949][T11024] syz_tun: tun_net_xmit 42 [ 275.498482][T11024] syz_tun: tun_net_xmit 42 [ 275.500029][T11024] syz_tun: tun_net_xmit 42 [ 275.501536][T11024] syz_tun: tun_net_xmit 42 [ 275.503121][T11024] syz_tun: tun_net_xmit 42 [ 275.504715][T11024] syz_tun: tun_net_xmit 42 [ 275.506268][T11024] syz_tun: tun_net_xmit 42 [ 275.507789][T11024] syz_tun: tun_net_xmit 42 [ 275.509468][T11024] syz_tun: tun_net_xmit 42 [ 275.511134][T11024] syz_tun: tun_net_xmit 42 [ 275.512690][T11024] syz_tun: tun_net_xmit 42 [ 275.514430][T11024] syz_tun: tun_net_xmit 42 [ 275.515959][T11024] syz_tun: tun_net_xmit 42 [ 275.517441][T11024] syz_tun: tun_net_xmit 42 [ 275.616181][T11024] syz_tun: tun_net_xmit 42 [ 275.617809][T11024] syz_tun: tun_net_xmit 42 [ 275.619340][T11024] syz_tun: tun_net_xmit 42 [ 275.620970][T11024] syz_tun: tun_net_xmit 42 [ 275.622533][T11024] syz_tun: tun_net_xmit 42 [ 275.624209][T11024] syz_tun: tun_net_xmit 42 [ 275.625855][T11024] syz_tun: tun_net_xmit 42 [ 275.627391][T11024] syz_tun: tun_net_xmit 42 [ 275.628987][T11024] syz_tun: tun_net_xmit 42 [ 275.630511][T11024] syz_tun: tun_net_xmit 42 [ 275.632171][T11024] syz_tun: tun_net_xmit 42 [ 275.633862][T11024] syz_tun: tun_net_xmit 42 [ 275.635441][T11024] syz_tun: tun_net_xmit 42 [ 275.637064][T11024] syz_tun: tun_net_xmit 42 [ 275.638656][T11024] syz_tun: tun_net_xmit 42 [ 275.640166][T11024] syz_tun: tun_net_xmit 42 [ 275.641768][T11024] syz_tun: tun_net_xmit 42 [ 275.643371][T11024] syz_tun: tun_net_xmit 42 [ 275.644891][T11024] syz_tun: tun_net_xmit 42 [ 275.646565][T11024] syz_tun: tun_net_xmit 42 [ 275.648077][T11024] syz_tun: tun_net_xmit 42 [ 275.649616][T11024] syz_tun: tun_net_xmit 42 [ 275.651140][T11024] syz_tun: tun_net_xmit 42 [ 275.652664][T11024] syz_tun: tun_net_xmit 42 [ 275.654352][T11024] syz_tun: tun_net_xmit 42 [ 275.656065][T11024] syz_tun: tun_net_xmit 42 [ 275.657795][T11024] syz_tun: tun_net_xmit 42 [ 275.659474][T11024] syz_tun: tun_net_xmit 42 [ 275.660985][T11024] syz_tun: tun_net_xmit 42 [ 275.662599][T11024] syz_tun: tun_net_xmit 42 [ 275.664163][T11024] syz_tun: tun_net_xmit 42 [ 275.665706][T11024] syz_tun: tun_net_xmit 42 [ 275.667210][T11024] syz_tun: tun_net_xmit 42 [ 275.668667][T11024] syz_tun: tun_net_xmit 42 [ 275.670106][T11024] syz_tun: tun_net_xmit 42 [ 275.671623][T11024] syz_tun: tun_net_xmit 42 [ 275.673253][T11024] syz_tun: tun_net_xmit 42 [ 275.674798][T11024] syz_tun: tun_net_xmit 42 [ 275.676345][T11024] syz_tun: tun_net_xmit 42 [ 275.677856][T11024] syz_tun: tun_net_xmit 42 [ 275.679365][T11024] syz_tun: tun_net_xmit 42 [ 275.680999][T11024] syz_tun: tun_net_xmit 42 [ 275.682540][T11024] syz_tun: tun_net_xmit 42 [ 275.684117][T11024] syz_tun: tun_net_xmit 42 [ 275.685750][T11024] syz_tun: tun_net_xmit 42 [ 275.687235][T11024] syz_tun: tun_net_xmit 42 [ 275.688695][T11024] syz_tun: tun_net_xmit 42 [ 275.690232][T11024] syz_tun: tun_net_xmit 42 [ 275.691891][T11024] syz_tun: tun_net_xmit 42 [ 275.693920][T11024] syz_tun: tun_net_xmit 42 [ 275.695955][T11024] syz_tun: tun_net_xmit 42 [ 275.698182][T11024] syz_tun: tun_net_xmit 42 [ 275.700175][T11024] syz_tun: tun_net_xmit 42 [ 275.702234][T11024] syz_tun: tun_net_xmit 42 [ 275.704392][T11024] syz_tun: tun_net_xmit 42 [ 275.706471][T11024] syz_tun: tun_net_xmit 42 [ 275.708489][T11024] syz_tun: tun_net_xmit 42 [ 275.710564][T11024] syz_tun: tun_net_xmit 42 [ 275.712626][T11024] syz_tun: tun_net_xmit 42 [ 275.715607][T11024] syz_tun: tun_net_xmit 42 [ 275.717667][T11024] syz_tun: tun_net_xmit 42 [ 275.719645][T11024] syz_tun: tun_net_xmit 42 [ 275.721695][T11024] syz_tun: tun_net_xmit 42 [ 275.723781][T11024] syz_tun: tun_net_xmit 42 [ 275.725832][T11024] syz_tun: tun_net_xmit 42 [ 275.727907][T11024] syz_tun: tun_net_xmit 42 [ 275.729999][T11024] syz_tun: tun_net_xmit 42 [ 275.732007][T11024] syz_tun: tun_net_xmit 42 [ 275.734238][T11024] syz_tun: tun_net_xmit 42 [ 275.736326][T11024] syz_tun: tun_net_xmit 42 [ 275.738450][T11024] syz_tun: tun_net_xmit 42 [ 275.740530][T11024] syz_tun: tun_net_xmit 42 [ 275.742656][T11024] syz_tun: tun_net_xmit 42 [ 275.744840][T11024] syz_tun: tun_net_xmit 42 [ 275.746799][T11024] syz_tun: tun_net_xmit 42 [ 275.748320][T11024] syz_tun: tun_net_xmit 42 [ 275.749819][T11024] syz_tun: tun_net_xmit 42 [ 275.751387][T11024] syz_tun: tun_net_xmit 42 [ 275.752988][T11024] syz_tun: tun_net_xmit 42 [ 275.754551][T11024] syz_tun: tun_net_xmit 42 [ 275.756104][T11024] syz_tun: tun_net_xmit 42 [ 275.757633][T11024] syz_tun: tun_net_xmit 42 [ 275.759187][T11024] syz_tun: tun_net_xmit 42 [ 275.760900][T11024] syz_tun: tun_net_xmit 42 [ 275.762454][T11024] syz_tun: tun_net_xmit 42 [ 275.764070][T11024] syz_tun: tun_net_xmit 42 [ 275.765635][T11024] syz_tun: tun_net_xmit 42 [ 275.767164][T11024] syz_tun: tun_net_xmit 42 [ 275.768693][T11024] syz_tun: tun_net_xmit 42 [ 275.770234][T11024] syz_tun: tun_net_xmit 42 [ 275.771876][T11024] syz_tun: tun_net_xmit 42 [ 275.773429][T11024] syz_tun: tun_net_xmit 42 [ 275.775053][T11024] syz_tun: tun_net_xmit 42 [ 275.776562][T11024] syz_tun: tun_net_xmit 42 [ 275.778095][T11024] syz_tun: tun_net_xmit 42 [ 275.779675][T11024] syz_tun: tun_net_xmit 42 [ 275.781179][T11024] syz_tun: tun_net_xmit 42 [ 275.782696][T11024] syz_tun: tun_net_xmit 42 [ 275.784278][T11024] syz_tun: tun_net_xmit 42 [ 275.785802][T11024] syz_tun: tun_net_xmit 42 [ 275.787300][T11024] syz_tun: tun_net_xmit 42 [ 275.788795][T11024] syz_tun: tun_net_xmit 42 [ 275.790327][T11024] syz_tun: tun_net_xmit 42 [ 275.791842][T11024] syz_tun: tun_net_xmit 42 [ 275.793398][T11024] syz_tun: tun_net_xmit 42 [ 275.795059][T11024] syz_tun: tun_net_xmit 42 [ 275.796541][T11024] syz_tun: tun_net_xmit 42 [ 275.798043][T11024] syz_tun: tun_net_xmit 42 [ 275.799564][T11024] syz_tun: tun_net_xmit 42 [ 275.801036][T11024] syz_tun: tun_net_xmit 42 [ 275.802555][T11024] syz_tun: tun_net_xmit 42 [ 275.804148][T11024] syz_tun: tun_net_xmit 42 [ 275.806184][T11024] syz_tun: tun_net_xmit 42 [ 275.807683][T11024] syz_tun: tun_net_xmit 42 [ 275.809187][T11024] syz_tun: tun_net_xmit 42 [ 275.810696][T11024] syz_tun: tun_net_xmit 42 [ 275.812160][T11024] syz_tun: tun_net_xmit 42 [ 275.813719][T11024] syz_tun: tun_net_xmit 42 [ 275.815485][T11024] syz_tun: tun_net_xmit 42 [ 275.817007][T11024] syz_tun: tun_net_xmit 42 [ 275.818545][T11024] syz_tun: tun_net_xmit 42 [ 275.820037][T11024] syz_tun: tun_net_xmit 42 [ 275.821563][T11024] syz_tun: tun_net_xmit 42 [ 275.823129][T11024] syz_tun: tun_net_xmit 42 [ 275.824530][T11024] syz_tun: tun_net_xmit 42 [ 275.826190][T11024] syz_tun: tun_net_xmit 42 [ 275.827757][T11024] syz_tun: tun_net_xmit 42 [ 275.829282][T11024] syz_tun: tun_net_xmit 42 [ 275.830824][T11024] syz_tun: tun_net_xmit 42 [ 275.832391][T11024] syz_tun: tun_net_xmit 42 [ 275.833959][T11024] syz_tun: tun_net_xmit 42 [ 275.835511][T11024] syz_tun: tun_net_xmit 42 [ 275.837380][T11024] syz_tun: tun_net_xmit 42 [ 275.839470][T11024] syz_tun: tun_net_xmit 42 [ 275.841560][T11024] syz_tun: tun_net_xmit 42 [ 275.843719][T11024] syz_tun: tun_net_xmit 42 [ 275.845840][T11024] syz_tun: tun_net_xmit 42 [ 275.847888][T11024] syz_tun: tun_net_xmit 42 [ 275.849938][T11024] syz_tun: tun_net_xmit 42 [ 275.852043][T11024] syz_tun: tun_net_xmit 42 [ 275.854223][T11024] syz_tun: tun_net_xmit 42 [ 275.856317][T11024] syz_tun: tun_net_xmit 42 [ 275.858415][T11024] syz_tun: tun_net_xmit 42 [ 275.860382][T11024] syz_tun: tun_net_xmit 42 [ 275.862315][T11024] syz_tun: tun_net_xmit 42 [ 275.864713][T11024] syz_tun: tun_net_xmit 42 [ 275.866681][T11024] syz_tun: tun_net_xmit 42 [ 275.868183][T11024] syz_tun: tun_net_xmit 42 [ 275.869698][T11024] syz_tun: tun_net_xmit 42 [ 275.871264][T11024] syz_tun: tun_net_xmit 42 [ 275.872745][T11024] syz_tun: tun_net_xmit 42 [ 275.874363][T11024] syz_tun: tun_net_xmit 42 [ 275.876149][T11024] syz_tun: tun_net_xmit 42 [ 275.878232][T11024] syz_tun: tun_net_xmit 42 [ 275.880290][T11024] syz_tun: tun_net_xmit 42 [ 275.882334][T11024] syz_tun: tun_net_xmit 42 [ 275.884498][T11024] syz_tun: tun_net_xmit 42 [ 275.886555][T11024] syz_tun: tun_net_xmit 42 [ 275.888665][T11024] syz_tun: tun_net_xmit 42 [ 275.890695][T11024] syz_tun: tun_net_xmit 42 [ 275.892748][T11024] syz_tun: tun_net_xmit 42 [ 275.894904][T11024] syz_tun: tun_net_xmit 42 [ 275.897012][T11024] syz_tun: tun_net_xmit 42 [ 275.899055][T11024] syz_tun: tun_net_xmit 42 [ 275.901097][T11024] syz_tun: tun_net_xmit 42 [ 275.903222][T11024] syz_tun: tun_net_xmit 42 [ 275.905289][T11024] syz_tun: tun_net_xmit 42 [ 275.907351][T11024] syz_tun: tun_net_xmit 42 [ 275.909217][T11024] syz_tun: tun_net_xmit 42 [ 275.911175][T11024] syz_tun: tun_net_xmit 42 [ 275.913381][T11024] syz_tun: tun_net_xmit 42 [ 275.915640][T11024] syz_tun: tun_net_xmit 42 [ 275.917942][T11024] syz_tun: tun_net_xmit 42 [ 275.920026][T11024] syz_tun: tun_net_xmit 42 [ 275.922042][T11024] syz_tun: tun_net_xmit 42 [ 275.924201][T11024] syz_tun: tun_net_xmit 42 [ 275.926319][T11024] syz_tun: tun_net_xmit 42 [ 275.928354][T11024] syz_tun: tun_net_xmit 42 [ 275.930397][T11024] syz_tun: tun_net_xmit 42 [ 275.932470][T11024] syz_tun: tun_net_xmit 42 [ 275.934697][T11024] syz_tun: tun_net_xmit 42 [ 275.936793][T11024] syz_tun: tun_net_xmit 42 [ 275.938978][T11024] syz_tun: tun_net_xmit 42 [ 275.941438][T11024] syz_tun: tun_net_xmit 42 [ 275.943606][T11024] syz_tun: tun_net_xmit 42 [ 275.945581][T11024] syz_tun: tun_net_xmit 42 [ 275.947526][T11024] syz_tun: tun_net_xmit 42 [ 275.949452][T11024] syz_tun: tun_net_xmit 42 [ 275.951397][T11024] syz_tun: tun_net_xmit 42 [ 275.953461][T11024] syz_tun: tun_net_xmit 42 [ 275.955531][T11024] syz_tun: tun_net_xmit 42 [ 275.957552][T11024] syz_tun: tun_net_xmit 42 [ 275.959618][T11024] syz_tun: tun_net_xmit 42 [ 275.961685][T11024] syz_tun: tun_net_xmit 42 [ 275.963879][T11024] syz_tun: tun_net_xmit 42 [ 275.966260][T11024] syz_tun: tun_net_xmit 42 [ 275.968200][T11024] syz_tun: tun_net_xmit 42 [ 275.969718][T11024] syz_tun: tun_net_xmit 42 [ 275.971302][T11024] syz_tun: tun_net_xmit 42 [ 275.973364][T11024] syz_tun: tun_net_xmit 42 [ 275.975437][T11024] syz_tun: tun_net_xmit 42 [ 275.977474][T11024] syz_tun: tun_net_xmit 42 [ 275.979562][T11024] syz_tun: tun_net_xmit 42 [ 275.981666][T11024] syz_tun: tun_net_xmit 42 [ 275.983946][T11024] syz_tun: tun_net_xmit 42 [ 275.986072][T11024] syz_tun: tun_net_xmit 42 [ 275.988175][T11024] syz_tun: tun_net_xmit 42 [ 275.990272][T11024] syz_tun: tun_net_xmit 42 [ 275.992405][T11024] syz_tun: tun_net_xmit 42 [ 275.994620][T11024] syz_tun: tun_net_xmit 42 [ 275.996787][T11024] syz_tun: tun_net_xmit 42 [ 275.998922][T11024] syz_tun: tun_net_xmit 42 [ 276.000969][T11024] syz_tun: tun_net_xmit 42 [ 276.003181][T11024] syz_tun: tun_net_xmit 42 [ 276.005226][T11024] syz_tun: tun_net_xmit 42 [ 276.007003][T11024] syz_tun: tun_net_xmit 42 [ 276.008676][T11024] syz_tun: tun_net_xmit 42 [ 276.010605][T11024] syz_tun: tun_net_xmit 42 [ 276.012593][T11024] syz_tun: tun_net_xmit 42 [ 276.014635][T11024] syz_tun: tun_net_xmit 42 [ 276.016551][T11024] syz_tun: tun_net_xmit 42 [ 276.018480][T11024] syz_tun: tun_net_xmit 42 [ 276.020699][T11024] syz_tun: tun_net_xmit 42 [ 276.022563][T11024] syz_tun: tun_net_xmit 42 [ 276.024304][T11024] syz_tun: tun_net_xmit 42 [ 276.026268][T11024] syz_tun: tun_net_xmit 42 [ 276.028169][T11024] syz_tun: tun_net_xmit 42 [ 276.030076][T11024] syz_tun: tun_net_xmit 42 [ 276.032015][T11024] syz_tun: tun_net_xmit 42 [ 276.033823][T11024] syz_tun: tun_net_xmit 42 [ 276.035803][T11024] syz_tun: tun_net_xmit 42 [ 276.037564][T11024] syz_tun: tun_net_xmit 42 [ 276.039412][T11024] syz_tun: tun_net_xmit 42 [ 276.041316][T11024] syz_tun: tun_net_xmit 42 [ 276.043294][T11024] syz_tun: tun_net_xmit 42 [ 276.045805][T11024] syz_tun: tun_net_xmit 42 [ 276.047780][T11024] syz_tun: tun_net_xmit 42 [ 276.049472][T11024] syz_tun: tun_net_xmit 42 [ 276.051422][T11024] syz_tun: tun_net_xmit 42 [ 276.053482][T11024] syz_tun: tun_net_xmit 42 [ 276.055175][T11024] syz_tun: tun_net_xmit 42 [ 276.057052][T11024] syz_tun: tun_net_xmit 42 [ 276.058970][T11024] syz_tun: tun_net_xmit 42 [ 276.060651][T11024] syz_tun: tun_net_xmit 42 [ 276.062585][T11024] syz_tun: tun_net_xmit 42 [ 276.064567][T11024] syz_tun: tun_net_xmit 42 [ 276.066526][T11024] syz_tun: tun_net_xmit 42 [ 276.068692][T11024] syz_tun: tun_net_xmit 42 [ 276.070487][T11024] syz_tun: tun_net_xmit 42 [ 276.072405][T11024] syz_tun: tun_net_xmit 42 [ 276.074286][T11024] syz_tun: tun_net_xmit 42 [ 276.076224][T11024] syz_tun: tun_net_xmit 42 [ 276.078120][T11024] syz_tun: tun_net_xmit 42 [ 276.079886][T11024] syz_tun: tun_net_xmit 42 [ 276.081765][T11024] syz_tun: tun_net_xmit 42 [ 276.084690][T11024] syz_tun: tun_net_xmit 42 [ 276.084846][T11024] syz_tun: tun_net_xmit 42 [ 276.084997][T11024] syz_tun: tun_net_xmit 42 [ 276.085115][T11024] syz_tun: tun_net_xmit 42 [ 276.085228][T11024] syz_tun: tun_net_xmit 42 [ 276.085350][T11024] syz_tun: tun_net_xmit 42 [ 276.085464][T11024] syz_tun: tun_net_xmit 42 [ 276.085577][T11024] syz_tun: tun_net_xmit 42 [ 276.085699][T11024] syz_tun: tun_net_xmit 42 [ 276.085812][T11024] syz_tun: tun_net_xmit 42 [ 276.085926][T11024] syz_tun: tun_net_xmit 42 [ 276.086037][T11024] syz_tun: tun_net_xmit 42 [ 276.086185][T11024] syz_tun: tun_net_xmit 42 [ 276.086301][T11024] syz_tun: tun_net_xmit 42 [ 276.086419][T11024] syz_tun: tun_net_xmit 42 [ 276.086533][T11024] syz_tun: tun_net_xmit 42 [ 276.086655][T11024] syz_tun: tun_net_xmit 42 [ 276.086769][T11024] syz_tun: tun_net_xmit 42 [ 276.086881][T11024] syz_tun: tun_net_xmit 42 [ 276.086993][T11024] syz_tun: tun_net_xmit 42 [ 276.087107][T11024] syz_tun: tun_net_xmit 42 [ 276.087220][T11024] syz_tun: tun_net_xmit 42 [ 276.087332][T11024] syz_tun: tun_net_xmit 42 [ 276.120297][T11024] syz_tun: tun_net_xmit 42 [ 276.121788][T11024] syz_tun: tun_net_xmit 42 [ 276.123516][T11024] syz_tun: tun_net_xmit 42 [ 276.124990][T11024] syz_tun: tun_net_xmit 42 [ 276.126468][T11024] syz_tun: tun_net_xmit 42 [ 276.127934][T11024] syz_tun: tun_net_xmit 42 [ 276.129390][T11024] syz_tun: tun_net_xmit 42 [ 276.130858][T11024] syz_tun: tun_net_xmit 42 [ 276.132346][T11024] syz_tun: tun_net_xmit 42 [ 276.133901][T11024] syz_tun: tun_net_xmit 42 [ 276.135434][T11024] syz_tun: tun_net_xmit 42 [ 276.136898][T11024] syz_tun: tun_net_xmit 42 [ 276.138327][T11024] syz_tun: tun_net_xmit 42 [ 276.139809][T11024] syz_tun: tun_net_xmit 42 [ 276.141285][T11024] syz_tun: tun_net_xmit 42 [ 276.142760][T11024] syz_tun: tun_net_xmit 42 [ 276.144305][T11024] syz_tun: tun_net_xmit 42 [ 276.145832][T11024] syz_tun: tun_net_xmit 42 [ 276.147322][T11024] syz_tun: tun_net_xmit 42 [ 276.148786][T11024] syz_tun: tun_net_xmit 42 [ 276.150291][T11024] syz_tun: tun_net_xmit 42 [ 276.150409][T11024] syz_tun: tun_net_xmit 42 [ 276.150559][T11024] syz_tun: tun_net_xmit 42 [ 276.150675][T11024] syz_tun: tun_net_xmit 42 [ 276.150805][T11024] syz_tun: tun_net_xmit 42 [ 276.150950][T11024] syz_tun: tun_net_xmit 42 [ 276.159370][T11024] syz_tun: tun_net_xmit 42 [ 276.159490][T11024] syz_tun: tun_net_xmit 42 [ 276.159603][T11024] syz_tun: tun_net_xmit 42 [ 276.159715][T11024] syz_tun: tun_net_xmit 42 [ 276.165638][T11024] syz_tun: tun_net_xmit 42 [ 276.165756][T11024] syz_tun: tun_net_xmit 42 [ 276.165871][T11024] syz_tun: tun_net_xmit 42 [ 276.165997][T11024] syz_tun: tun_net_xmit 42 [ 276.166111][T11024] syz_tun: tun_net_xmit 42 [ 276.166270][T11024] syz_tun: tun_net_xmit 42 [ 276.166429][T11024] syz_tun: tun_net_xmit 42 [ 276.166580][T11024] syz_tun: tun_net_xmit 42 [ 276.166693][T11024] syz_tun: tun_net_xmit 42 [ 276.167129][T11024] syz_tun: tun_net_xmit 42 [ 276.167242][T11024] syz_tun: tun_net_xmit 42 [ 276.167369][T11024] syz_tun: tun_net_xmit 42 [ 276.167494][T11024] syz_tun: tun_net_xmit 42 [ 276.167715][T11024] syz_tun: tun_net_xmit 42 [ 276.167936][T11024] syz_tun: tun_net_xmit 42 [ 276.168089][T11024] syz_tun: tun_net_xmit 42 [ 276.168202][T11024] syz_tun: tun_net_xmit 42 [ 276.168316][T11024] syz_tun: tun_net_xmit 42 [ 276.168437][T11024] syz_tun: tun_net_xmit 42 [ 276.168561][T11024] syz_tun: tun_net_xmit 42 [ 276.168673][T11024] syz_tun: tun_net_xmit 42 [ 276.168796][T11024] syz_tun: tun_net_xmit 42 [ 276.168919][T11024] syz_tun: tun_net_xmit 42 [ 276.169032][T11024] syz_tun: tun_net_xmit 42 [ 276.169145][T11024] syz_tun: tun_net_xmit 42 [ 276.169257][T11024] syz_tun: tun_net_xmit 42 [ 276.169374][T11024] syz_tun: tun_net_xmit 42 [ 276.169496][T11024] syz_tun: tun_net_xmit 42 [ 276.169636][T11024] syz_tun: tun_net_xmit 42 [ 276.169750][T11024] syz_tun: tun_net_xmit 42 [ 276.169876][T11024] syz_tun: tun_net_xmit 42 [ 276.169994][T11024] syz_tun: tun_net_xmit 42 [ 276.170106][T11024] syz_tun: tun_net_xmit 42 [ 276.170252][T11024] syz_tun: tun_net_xmit 42 [ 276.170602][T11024] syz_tun: tun_net_xmit 42 [ 276.170726][T11024] syz_tun: tun_net_xmit 42 [ 276.170838][T11024] syz_tun: tun_net_xmit 42 [ 276.170949][T11024] syz_tun: tun_net_xmit 42 [ 276.171061][T11024] syz_tun: tun_net_xmit 42 [ 276.171173][T11024] syz_tun: tun_net_xmit 42 [ 276.171301][T11024] syz_tun: tun_net_xmit 42 [ 276.171418][T11024] syz_tun: tun_net_xmit 42 [ 276.171530][T11024] syz_tun: tun_net_xmit 42 [ 276.171663][T11024] syz_tun: tun_net_xmit 42 [ 276.171775][T11024] syz_tun: tun_net_xmit 42 [ 276.171886][T11024] syz_tun: tun_net_xmit 42 [ 276.172007][T11024] syz_tun: tun_net_xmit 42 [ 276.172119][T11024] syz_tun: tun_net_xmit 42 [ 276.172284][T11024] syz_tun: tun_net_xmit 42 [ 276.172408][T11024] syz_tun: tun_net_xmit 42 [ 276.172520][T11024] syz_tun: tun_net_xmit 42 [ 276.172748][T11024] syz_tun: tun_net_xmit 42 [ 276.173090][T11024] syz_tun: tun_net_xmit 42 [ 276.173318][T11024] syz_tun: tun_net_xmit 42 [ 276.173476][T11024] syz_tun: tun_net_xmit 42 [ 276.173589][T11024] syz_tun: tun_net_xmit 42 [ 276.173701][T11024] syz_tun: tun_net_xmit 42 [ 276.173814][T11024] syz_tun: tun_net_xmit 42 [ 276.173926][T11024] syz_tun: tun_net_xmit 42 [ 276.174064][T11024] syz_tun: tun_net_xmit 42 [ 276.174218][T11024] syz_tun: tun_net_xmit 42 [ 276.174449][T11024] syz_tun: tun_net_xmit 42 [ 276.174613][T11024] syz_tun: tun_net_xmit 42 [ 276.174728][T11024] syz_tun: tun_net_xmit 42 [ 276.174839][T11024] syz_tun: tun_net_xmit 42 [ 276.174952][T11024] syz_tun: tun_net_xmit 42 [ 276.175064][T11024] syz_tun: tun_net_xmit 42 [ 276.175185][T11024] syz_tun: tun_net_xmit 42 [ 276.175297][T11024] syz_tun: tun_net_xmit 42 [ 276.175415][T11024] syz_tun: tun_net_xmit 42 [ 276.175527][T11024] syz_tun: tun_net_xmit 42 [ 276.175729][T11024] syz_tun: tun_net_xmit 42 [ 276.175943][T11024] syz_tun: tun_net_xmit 42 [ 276.176173][T11024] syz_tun: tun_net_xmit 42 [ 276.545065][T11042] netlink: 'syz.1.1129': attribute type 2 has an invalid length. [ 276.816378][ T837] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 277.009421][ T837] usb 8-1: Using ep0 maxpacket: 16 [ 277.017535][ T837] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 277.020008][ T837] usb 8-1: config 0 has no interface number 0 [ 277.022449][ T837] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.025820][ T837] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 277.030265][ T837] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 277.033477][ T837] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 277.036880][ T837] usb 8-1: Product: syz [ 277.038690][ T837] usb 8-1: SerialNumber: syz [ 277.043003][ T837] usb 8-1: config 0 descriptor?? [ 277.059058][ T837] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 277.067377][ T837] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input15 [ 277.224983][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1143'. [ 277.276436][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 277.276623][ T8718] usb 8-1: USB disconnect, device number 16 [ 277.278534][ C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 277.289933][ T8718] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 278.084103][ T5961] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 278.243052][ T5961] usb 8-1: Using ep0 maxpacket: 8 [ 278.248534][ T5961] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.253823][ T5961] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 278.259143][ T5961] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.262295][ T5961] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.266657][ T5961] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.270712][ T5961] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.485838][ T5961] usb 8-1: GET_CAPABILITIES returned 0 [ 278.487589][ T5961] usbtmc 8-1:16.0: can't read capabilities [ 278.693120][ T8716] usb 8-1: USB disconnect, device number 17 [ 279.473038][ T8716] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 279.624394][ T8716] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.628255][ T8716] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.631418][ T8716] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.634647][ T8716] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.645984][T11100] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 279.652983][ T8716] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.852392][ T29] usb 8-1: USB disconnect, device number 18 [ 282.829034][T11179] input: syz1 as /devices/virtual/input/input16 [ 283.003000][ T5973] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 283.284154][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1185'. [ 284.284820][T11217] netlink: 384 bytes leftover after parsing attributes in process `syz.2.1194'. [ 284.829240][T11230] tipc: Started in network mode [ 284.831315][T11230] tipc: Node identity ac1414aa, cluster identity 4711 [ 284.835205][T11230] tipc: Enabled bearer , priority 10 [ 285.774936][T11259] netlink: 'syz.2.1208': attribute type 2 has an invalid length. [ 285.778152][T11259] netlink: 'syz.2.1208': attribute type 11 has an invalid length. [ 285.781188][T11259] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1208'. [ 285.832952][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 285.964460][ T60] tipc: Node number set to 2886997162 [ 286.499105][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1215'. [ 286.505303][T11280] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1215'. [ 286.568427][T11282] sctp: [Deprecated]: syz.3.1216 (pid 11282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.568427][T11282] Use struct sctp_sack_info instead [ 286.903254][ T837] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 287.031285][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 287.074385][ T837] usb 8-1: config 0 has no interfaces? [ 287.086483][ T837] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 287.089962][ T837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.093375][ T837] usb 8-1: Product: syz [ 287.095191][ T837] usb 8-1: Manufacturer: syz [ 287.097479][ T837] usb 8-1: SerialNumber: syz [ 287.105241][ T837] usb 8-1: config 0 descriptor?? [ 287.313033][ T8718] usb 8-1: USB disconnect, device number 19 [ 288.116046][T11325] input: syz1 as /devices/virtual/input/input17 [ 288.280782][T11330] af_packet: tpacket_rcv: packet too big, clamped from 10573 to 4294967272. macoff=96 [ 288.686662][T11341] ubi: mtd0 is already attached to ubi31 [ 290.302118][ T91] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 291.761532][T11394] ptrace attach of "/syz-executor exec"[11395] was attempted by "/syz-executor exec"[11394] [ 292.383045][ T8393] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 292.534258][ T8393] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 292.537325][ T8393] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.542433][ T8393] usb 7-1: config 0 descriptor?? [ 292.748444][T11401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.751549][T11401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.758107][ T8393] ath6kl: Failed to submit usb control message: -71 [ 292.760386][ T8393] ath6kl: unable to send the bmi data to the device: -71 [ 292.762528][ T8393] ath6kl: Unable to send get target info: -71 [ 292.771885][ T8393] ath6kl: Failed to init ath6kl core: -71 [ 292.778456][ T8393] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 292.783359][ T8393] usb 7-1: USB disconnect, device number 9 [ 295.455350][T11481] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1275'. [ 298.753143][ T6011] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 298.927128][ T6011] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.930312][ T6011] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 298.933125][ T6011] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 298.936005][ T6011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.939687][ T6011] usb 6-1: config 0 descriptor?? [ 298.944816][ T6011] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 298.949252][ T6011] dvb-usb: bulk message failed: -22 (3/0) [ 298.963781][ T6011] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 298.968351][ T6011] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 298.971353][ T6011] usb 6-1: media controller created [ 298.978620][ T6011] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.993702][ T6011] dvb-usb: bulk message failed: -22 (6/0) [ 298.995795][ T6011] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 298.999618][ T6011] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input19 [ 299.004952][ T6011] dvb-usb: schedule remote query interval to 150 msecs. [ 299.007331][ T6011] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 299.165373][ T6011] dvb-usb: bulk message failed: -22 (1/0) [ 299.168055][ T6011] dvb-usb: error while querying for an remote control event. [ 299.322972][ T6011] dvb-usb: bulk message failed: -22 (1/0) [ 299.325444][ T6011] dvb-usb: error while querying for an remote control event. [ 299.494154][ T6011] dvb-usb: bulk message failed: -22 (1/0) [ 299.495977][ T6011] dvb-usb: error while querying for an remote control event. [ 299.752468][ T6011] dvb-usb: bulk message failed: -22 (1/0) [ 299.755095][ T6011] dvb-usb: error while querying for an remote control event. [ 299.912965][ T6011] dvb-usb: bulk message failed: -22 (1/0) [ 299.914840][ T6011] dvb-usb: error while querying for an remote control event. [ 300.073820][ T6011] dvb-usb: bulk message failed: -22 (1/0) [ 300.077808][ T6011] dvb-usb: error while querying for an remote control event. [ 300.150672][T11562] can0: slcan on ttyS3. [ 300.225327][T11562] can0 (unregistered): slcan off ttyS3. [ 300.247520][ T6011] dvb-usb: bulk message failed: -22 (1/0) [ 300.249992][ T6011] dvb-usb: error while querying for an remote control event. [ 300.370983][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1302'. [ 300.422894][ T6011] dvb-usb: bulk message failed: -22 (1/0) [ 300.426209][ T6011] dvb-usb: error while querying for an remote control event. [ 300.555702][ T40] audit: type=1326 audit(1752413843.875:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.3.1304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7fc00000 [ 300.584436][ T5961] dvb-usb: bulk message failed: -22 (1/0) [ 300.586443][ T5961] dvb-usb: error while querying for an remote control event. [ 300.753052][ T5961] dvb-usb: bulk message failed: -22 (1/0) [ 300.755010][ T5961] dvb-usb: error while querying for an remote control event. [ 300.915239][ T5961] dvb-usb: bulk message failed: -22 (1/0) [ 300.917122][ T5961] dvb-usb: error while querying for an remote control event. [ 301.074174][ T5961] dvb-usb: bulk message failed: -22 (1/0) [ 301.076041][ T5961] dvb-usb: error while querying for an remote control event. [ 301.101714][ T6052] usb 6-1: USB disconnect, device number 19 [ 301.122118][ T6052] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 301.840853][ T40] audit: type=1326 audit(1752413845.155:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 301.849016][ T40] audit: type=1326 audit(1752413845.155:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 301.856515][ T40] audit: type=1326 audit(1752413845.155:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 301.863663][ T40] audit: type=1326 audit(1752413845.155:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 301.870603][ T40] audit: type=1326 audit(1752413845.155:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 301.878097][ T40] audit: type=1326 audit(1752413845.155:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 301.885083][ T40] audit: type=1326 audit(1752413845.155:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 301.891745][ T40] audit: type=1326 audit(1752413845.155:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 301.898450][ T40] audit: type=1326 audit(1752413845.155:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 302.792736][ T8393] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 302.962798][ T8393] usb 8-1: Using ep0 maxpacket: 16 [ 303.023636][ T8393] usb 8-1: unable to get BOS descriptor or descriptor too short [ 303.027379][ T8393] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 303.030318][ T8393] usb 8-1: can't read configurations, error -71 [ 303.119738][T11652] netlink: 'syz.2.1323': attribute type 10 has an invalid length. [ 303.150326][T11652] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 303.390845][T11660] syz.1.1326 (11660): drop_caches: 2 [ 304.102701][ T8393] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 304.378171][ T8393] usb 8-1: Using ep0 maxpacket: 16 [ 304.482171][ T8393] usb 8-1: unable to get BOS descriptor or descriptor too short [ 304.485898][ T8393] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 304.489086][ T8393] usb 8-1: can't read configurations, error -71 [ 304.491654][ T8393] usb usb8-port1: attempt power cycle [ 305.149607][ T8241] wlan1: Trigger new scan to find an IBSS to join [ 306.261789][T11730] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1346'. [ 307.376332][T11748] netlink: 'syz.2.1355': attribute type 1 has an invalid length. [ 307.404378][T11748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.424921][T11748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.433083][T11748] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 307.443426][T11748] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 307.468554][T11750] gretap1: entered promiscuous mode [ 307.472408][T11750] bond1: (slave gretap1): making interface the new active one [ 307.476048][T11750] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 307.487596][T11750] bond1: (slave vlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 308.119871][ T8241] wlan1: Trigger new scan to find an IBSS to join [ 309.424558][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.430966][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.751586][T11791] batman_adv: batadv0: Adding interface: dummy0 [ 309.757002][T11791] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.774450][T11791] batman_adv: batadv0: Interface activated: dummy0 [ 309.815652][T11791] batadv0: mtu less than device minimum [ 309.818094][T11791] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.821883][T11791] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.825802][T11791] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.829699][T11791] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.833472][T11791] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.837206][T11791] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.840928][T11791] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.844873][T11791] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.848555][T11791] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 310.167389][ T61] wlan1: Creating new IBSS network, BSSID e2:8b:b8:8c:12:c6 [ 310.861881][T11819] lo speed is unknown, defaulting to 1000 [ 310.908213][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1379'. [ 311.917422][T11827] ================================================================== [ 311.920903][T11827] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 311.924381][T11827] Read of size 1 at addr ffff888046bdccb0 by task syz.2.1381/11827 [ 311.929347][T11827] [ 311.930427][T11827] CPU: 2 UID: 0 PID: 11827 Comm: syz.2.1381 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 311.930451][T11827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.930463][T11827] Call Trace: [ 311.930470][T11827] [ 311.930479][T11827] dump_stack_lvl+0x116/0x1f0 [ 311.930508][T11827] print_report+0xcd/0x610 [ 311.930527][T11827] ? __virt_addr_valid+0x81/0x610 [ 311.930547][T11827] ? __phys_addr+0xe8/0x180 [ 311.930568][T11827] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 311.930590][T11827] kasan_report+0xe0/0x110 [ 311.930607][T11827] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 311.930632][T11827] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 311.930655][T11827] __kasan_check_byte+0x36/0x50 [ 311.930672][T11827] lock_acquire+0xfc/0x350 [ 311.930698][T11827] ? find_held_lock+0x2b/0x80 [ 311.930718][T11827] _raw_spin_lock_irqsave+0x3a/0x60 [ 311.930740][T11827] ? remove_wait_queue+0x25/0x180 [ 311.930761][T11827] remove_wait_queue+0x25/0x180 [ 311.930782][T11827] poll_freewait+0xd5/0x250 [ 311.930807][T11827] do_select+0xe52/0x17e0 [ 311.930839][T11827] ? __pfx_do_select+0x10/0x10 [ 311.930867][T11827] ? find_held_lock+0x2b/0x80 [ 311.930886][T11827] ? finish_task_switch.isra.0+0x21c/0xc10 [ 311.930908][T11827] ? __pfx_pollwake+0x10/0x10 [ 311.930932][T11827] ? __pfx_pollwake+0x10/0x10 [ 311.930954][T11827] ? __pfx_pollwake+0x10/0x10 [ 311.930977][T11827] ? __pfx_pollwake+0x10/0x10 [ 311.931000][T11827] ? __pfx_pollwake+0x10/0x10 [ 311.931023][T11827] ? __pfx_pollwake+0x10/0x10 [ 311.931045][T11827] ? __pfx_pollwake+0x10/0x10 [ 311.931069][T11827] ? __pfx_pollwake+0x10/0x10 [ 311.931090][T11827] ? __pfx_pollwake+0x10/0x10 [ 311.931116][T11827] ? find_held_lock+0x2b/0x80 [ 311.931132][T11827] ? compat_core_sys_select+0x1dd/0x880 [ 311.931157][T11827] ? compat_core_sys_select+0x685/0x880 [ 311.931180][T11827] compat_core_sys_select+0x685/0x880 [ 311.931207][T11827] ? __pfx_compat_core_sys_select+0x10/0x10 [ 311.931232][T11827] ? futex_wait+0x120/0x380 [ 311.931262][T11827] ? set_compat_user_sigmask+0x213/0x2a0 [ 311.931282][T11827] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 311.931310][T11827] __ia32_compat_sys_pselect6_time32+0x2d1/0x390 [ 311.931339][T11827] ? __pfx___ia32_compat_sys_pselect6_time32+0x10/0x10 [ 311.931369][T11827] ? rcu_is_watching+0x12/0xc0 [ 311.931390][T11827] __do_fast_syscall_32+0x7c/0x3a0 [ 311.931419][T11827] do_fast_syscall_32+0x32/0x80 [ 311.931446][T11827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.931468][T11827] RIP: 0023:0xf7f93579 [ 311.931483][T11827] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 311.931501][T11827] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000134 [ 311.931520][T11827] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00000000800001c0 [ 311.931531][T11827] RDX: 0000000000000000 RSI: 00000000800002c0 RDI: 0000000000000000 [ 311.931542][T11827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.931553][T11827] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 311.931565][T11827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.931581][T11827] [ 311.931588][T11827] [ 312.057300][T11827] Allocated by task 1: [ 312.059036][T11827] kasan_save_stack+0x33/0x60 [ 312.061053][T11827] kasan_save_track+0x14/0x30 [ 312.062984][T11827] __kasan_kmalloc+0xaa/0xb0 [ 312.064661][T11827] comedi_device_postconfig+0x2cb/0xc80 [ 312.066441][T11827] comedi_auto_config+0x1a3/0x440 [ 312.068029][T11827] comedi_test_init+0xd0/0x160 [ 312.069543][T11827] do_one_initcall+0x120/0x6e0 [ 312.071074][T11827] kernel_init_freeable+0x5c2/0x900 [ 312.072737][T11827] kernel_init+0x1c/0x2b0 [ 312.074581][T11827] ret_from_fork+0x5d7/0x6f0 [ 312.076550][T11827] ret_from_fork_asm+0x1a/0x30 [ 312.078230][T11827] [ 312.078997][T11827] Freed by task 11843: [ 312.080268][T11827] kasan_save_stack+0x33/0x60 [ 312.081754][T11827] kasan_save_track+0x14/0x30 [ 312.083284][T11827] kasan_save_free_info+0x3b/0x60 [ 312.084911][T11827] __kasan_slab_free+0x51/0x70 [ 312.086425][T11827] kfree+0x2b4/0x4d0 [ 312.087665][T11827] comedi_device_detach+0x2a4/0x9e0 [ 312.089382][T11827] do_devconfig_ioctl+0x46c/0x580 [ 312.090996][T11827] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 312.092726][T11827] comedi_compat_ioctl+0x1d0/0x910 [ 312.094587][T11827] __ia32_compat_sys_ioctl+0x23f/0x370 [ 312.096965][T11827] __do_fast_syscall_32+0x7c/0x3a0 [ 312.099137][T11827] do_fast_syscall_32+0x32/0x80 [ 312.101218][T11827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.103586][T11827] [ 312.104382][T11827] The buggy address belongs to the object at ffff888046bdcc00 [ 312.104382][T11827] which belongs to the cache kmalloc-256 of size 256 [ 312.108628][T11827] The buggy address is located 176 bytes inside of [ 312.108628][T11827] freed 256-byte region [ffff888046bdcc00, ffff888046bdcd00) [ 312.112911][T11827] [ 312.113920][T11827] The buggy address belongs to the physical page: [ 312.116585][T11827] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46bdc [ 312.120210][T11827] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 312.123469][T11827] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 312.125826][T11827] page_type: f5(slab) [ 312.127088][T11827] raw: 04fff00000000040 ffff88801b842b40 dead000000000122 0000000000000000 [ 312.129727][T11827] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 312.132295][T11827] head: 04fff00000000040 ffff88801b842b40 dead000000000122 0000000000000000 [ 312.135032][T11827] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 312.137653][T11827] head: 04fff00000000001 ffffea00011af701 00000000ffffffff 00000000ffffffff [ 312.140325][T11827] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 312.143092][T11827] page dumped because: kasan: bad access detected [ 312.145076][T11827] page_owner tracks the page as allocated [ 312.146854][T11827] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17983292326, free_ts 0 [ 312.152912][T11827] post_alloc_hook+0x1c0/0x230 [ 312.154955][T11827] get_page_from_freelist+0x1321/0x3890 [ 312.157180][T11827] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 312.159063][T11827] alloc_pages_mpol+0x1fb/0x550 [ 312.160604][T11827] new_slab+0x23b/0x330 [ 312.161931][T11827] ___slab_alloc+0xd9c/0x1940 [ 312.163437][T11827] __slab_alloc.constprop.0+0x56/0xb0 [ 312.165119][T11827] __kmalloc_cache_noprof+0xfb/0x3e0 [ 312.166790][T11827] bus_add_driver+0x92/0x690 [ 312.168640][T11827] driver_register+0x15c/0x4b0 [ 312.170620][T11827] do_one_initcall+0x120/0x6e0 [ 312.172630][T11827] kernel_init_freeable+0x5c2/0x900 [ 312.174522][T11827] kernel_init+0x1c/0x2b0 [ 312.175849][T11827] ret_from_fork+0x5d7/0x6f0 [ 312.177321][T11827] ret_from_fork_asm+0x1a/0x30 [ 312.179314][T11827] page_owner free stack trace missing [ 312.181540][T11827] [ 312.182590][T11827] Memory state around the buggy address: [ 312.184731][T11827] ffff888046bdcb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 312.187962][T11827] ffff888046bdcc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 312.190461][T11827] >ffff888046bdcc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 312.193035][T11827] ^ [ 312.194796][T11827] ffff888046bdcd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 312.197277][T11827] ffff888046bdcd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 312.200462][T11827] ================================================================== [ 312.203739][T11827] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 312.206736][T11827] CPU: 2 UID: 0 PID: 11827 Comm: syz.2.1381 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 312.211695][T11827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 312.216100][T11827] Call Trace: [ 312.217514][T11827] [ 312.218724][T11827] dump_stack_lvl+0x3d/0x1f0 [ 312.220191][T11827] panic+0x71c/0x800 [ 312.221437][T11827] ? __pfx_panic+0x10/0x10 [ 312.222885][T11827] ? __pfx__printk+0x10/0x10 [ 312.224351][T11827] ? end_report+0x4c/0x170 [ 312.225750][T11827] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 312.227432][T11827] check_panic_on_warn+0xab/0xb0 [ 312.229128][T11827] end_report+0x107/0x170 [ 312.230977][T11827] kasan_report+0xee/0x110 [ 312.232798][T11827] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 312.234785][T11827] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 312.236729][T11827] __kasan_check_byte+0x36/0x50 [ 312.238520][T11827] lock_acquire+0xfc/0x350 [ 312.240172][T11827] ? find_held_lock+0x2b/0x80 [ 312.241895][T11827] _raw_spin_lock_irqsave+0x3a/0x60 [ 312.243794][T11827] ? remove_wait_queue+0x25/0x180 [ 312.245644][T11827] remove_wait_queue+0x25/0x180 [ 312.247439][T11827] poll_freewait+0xd5/0x250 [ 312.249109][T11827] do_select+0xe52/0x17e0 [ 312.250713][T11827] ? __pfx_do_select+0x10/0x10 [ 312.252482][T11827] ? find_held_lock+0x2b/0x80 [ 312.254224][T11827] ? finish_task_switch.isra.0+0x21c/0xc10 [ 312.256341][T11827] ? __pfx_pollwake+0x10/0x10 [ 312.258073][T11827] ? __pfx_pollwake+0x10/0x10 [ 312.259796][T11827] ? __pfx_pollwake+0x10/0x10 [ 312.261523][T11827] ? __pfx_pollwake+0x10/0x10 [ 312.263263][T11827] ? __pfx_pollwake+0x10/0x10 [ 312.264989][T11827] ? __pfx_pollwake+0x10/0x10 [ 312.266725][T11827] ? __pfx_pollwake+0x10/0x10 [ 312.268453][T11827] ? __pfx_pollwake+0x10/0x10 [ 312.270210][T11827] ? __pfx_pollwake+0x10/0x10 [ 312.271943][T11827] ? find_held_lock+0x2b/0x80 [ 312.273678][T11827] ? compat_core_sys_select+0x1dd/0x880 [ 312.275711][T11827] ? compat_core_sys_select+0x685/0x880 [ 312.277722][T11827] compat_core_sys_select+0x685/0x880 [ 312.279679][T11827] ? __pfx_compat_core_sys_select+0x10/0x10 [ 312.281833][T11827] ? futex_wait+0x120/0x380 [ 312.283520][T11827] ? set_compat_user_sigmask+0x213/0x2a0 [ 312.285557][T11827] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 312.287733][T11827] __ia32_compat_sys_pselect6_time32+0x2d1/0x390 [ 312.290023][T11827] ? __pfx___ia32_compat_sys_pselect6_time32+0x10/0x10 [ 312.292496][T11827] ? rcu_is_watching+0x12/0xc0 [ 312.294274][T11827] __do_fast_syscall_32+0x7c/0x3a0 [ 312.296146][T11827] do_fast_syscall_32+0x32/0x80 [ 312.297944][T11827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.300235][T11827] RIP: 0023:0xf7f93579 [ 312.301730][T11827] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 312.308633][T11827] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000134 [ 312.311683][T11827] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00000000800001c0 [ 312.314528][T11827] RDX: 0000000000000000 RSI: 00000000800002c0 RDI: 0000000000000000 [ 312.317383][T11827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.320284][T11827] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 312.323180][T11827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.326065][T11827] [ 312.327869][T11827] Kernel Offset: disabled [ 312.329228][T11827] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:22:38 Registers: info registers vcpu 0 CPU#0 RAX=00000000006206bb RBX=0000000000000000 RCX=ffffffff8b847c69 RDX=0000000000000000 RSI=ffffffff8de2c794 RDI=ffffffff8c1578e0 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646645 R10=ffff88802b23322b R11=ffffffff9afe87e8 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a9a150 R15=0000000000000000 RIP=ffffffff8b8467cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097520000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008079c000 CR3=0000000027b35000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000a7f41d RBX=0000000000000001 RCX=ffffffff8b847c69 RDX=0000000000000000 RSI=ffffffff8de2c794 RDI=ffffffff8c1578e0 RBP=ffffed1003bdb488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801deda440 R14=ffffffff90a9a150 R15=0000000000000000 RIP=ffffffff8b8467cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097620000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080827000 CR3=0000000024162000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85584895 RDI=ffffffff9b0ac980 RBP=ffffffff9b0ac940 RSP=ffffc90002f7f020 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b0ac940 R15=ffffffff85584830 RIP=ffffffff855848bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097720000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080828000 CR3=0000000029645000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000005fb335 RBX=0000000000000003 RCX=ffffffff8b847c69 RDX=0000000000000000 RSI=ffffffff8de2c794 RDI=ffffffff8c1578e0 RBP=ffffed1003860000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a6645 R10=ffff88802b53322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801c300000 R14=ffffffff90a9a150 R15=0000000000000000 RIP=ffffffff8b8467cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080956000 CR3=0000000050a15000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000