last executing test programs: 11m44.86270814s ago: executing program 32 (id=201): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x6a802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x84, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200058c0}, 0x40000) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x0, r5, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$audio(0xffffff9c, &(0x7f0000000040), 0x820c0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000000)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000300), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x1c) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x98}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x8}, {0x3fe, 0xff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x40}]}) ioctl$BTRFS_IOC_SEND(r7, 0x40449426, &(0x7f0000000240)={{r8}, 0x6, &(0x7f0000000200)=[0x5, 0xfffffffffffffffa, 0x5, 0x100000000, 0x4, 0x40], 0x0, 0x3, 0x1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r10}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000000)={0x80000000, &(0x7f00000000c0), &(0x7f0000000440)}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 9m55.963478433s ago: executing program 33 (id=632): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) socket$inet6(0xa, 0x6, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000", @ANYRES32=0x0], 0x40}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0xc0b83, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') 9m52.091534889s ago: executing program 34 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a3000f7ffff33000000030a01080000000000000000010000000900030073797a320000000008000a40000000020900010073797a3000"], 0x7c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000088089500000000000000b509", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000580)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(r6, 0x4b, &(0x7f0000000200)=0x81) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) r11 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r11, &(0x7f0000000000)='./file0\x00', 0x1, 0x10) acct(&(0x7f0000000300)='./file0\x00') sendmsg$inet(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="e1", 0x1}, {&(0x7f0000000180)}], 0x2, &(0x7f00000005c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0x10}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r5, @empty, @rand_addr=0x64010102}}}, @ip_ttl={{0x10, 0x0, 0x2, 0xfffffff3}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xad, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x3}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x44}}]}, @ssrr={0x89, 0x13, 0x9c, [@multicast1, @multicast1, @multicast2, @remote]}, @noop, @ssrr={0x89, 0x3, 0x72}, @timestamp={0x44, 0x18, 0xf0, 0x0, 0xd, [0x9, 0x400, 0x8, 0x0, 0x7c7e]}]}}}], 0x90}, 0x10) write$UHID_INPUT(r10, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) socket$key(0xf, 0x3, 0x2) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f00000002c0)={0x4, &(0x7f00000000c0)=[{0x11, 0x8}, {0x4, 0x8}, {0x5cec, 0xc616}, {0x1, 0x929}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x12e, &(0x7f0000000680)={@random="8c1d27feaee2", @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "02000b", 0xf8, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x96, 0x0, [], "ea80729e4542a35e078343733b86623c1b29138a4e0fe836a3729fd97d4b61c8a8ea660223736d75039d39f66ef5a244768251b00b149c2946ecde84c9d6744e4ffb1af01bbc36ae448da34d0f6dbb146c66b33ae1292fd308ec1c57cc53c4003c1fa45a90e5bb00ccfa7477dabe4e1ce950b7130948c8565899c6cb025d09c6c2163abfe1a00e773f18915d6179bfb2c8f4df550366"}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "08417060a8120849526c494b5db0baaae2d3a37b3a2035fd9192f7230b90"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 9m50.546126288s ago: executing program 35 (id=675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = socket(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c09425, &(0x7f00000004c0)={"f5512dbe68b9860baa2ea4f9b8654f2b", 0x0, 0x0, {0xfffffffffffffffd}, {0x4, 0x401}, 0x100, [0x9, 0x5, 0x6, 0x6, 0x6, 0x0, 0x5, 0x5, 0x4, 0x4, 0x8431, 0x100, 0x19, 0x7, 0x2, 0x100]}) getsockopt(r4, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, 0x0, 0x0, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x4a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x26f2, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mlockall(0x1) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0e05403, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x5, 0x1, 0xbf1}, 0x8897, 0xe, 'id0\x00', 'timer0\x00', 0x0, 0x9, 0x69841381, 0xb, 0x3}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000052a19e722000040"]) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000240)=0x1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f00000000c0)) r10 = timerfd_create(0x0, 0x800) timerfd_settime(r10, 0x3, &(0x7f0000000100)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r9, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getnexthop={0x18, 0x6a, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) 9m39.615910959s ago: executing program 36 (id=676): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000080)={0x0, [[0x7fff], [0xfffffffc], [0x403]], '\x00', [{0x0, 0x5}], '\x00', 0x100}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000704000/0x4000)=nil, 0x4000}}) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831b538dfd8e012e79578e51bc5af65ff7ae735ffc8191a9bb0a83099e90f4580d760551b5b342f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea086e95767d42b4e54861d0227dbfd2e6d28715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c62fd5d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc2200000000000001ff9682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e2331d01ce99a069694124d37cef099ece729aa218f9f44ad06a223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb8fc500404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99ff987900040000009feb121c49e07dbed4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39e00213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd9205218ee0200e2ff08644fb94c06003dc39050f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e906049fe86e09c58e273cd905deb28c13c1ed1c9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f891fab9d3f2e82c5f6fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935000000009c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f281e6bad1e5aa6d901c279eb156c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b4c6936531effce7115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b402bbab76fbb9d8a917df5b2e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380b3e365f84a3e5b116ae3e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627aaefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a00000000000000000000000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8d5f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c4a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d76ef45af7d87b308117a9ea24dcda2bc42cf20942c31268a400a221d7b1622585094e9dd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a420cc91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc1a170200a63a83ab25a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b47800acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7acb37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c901d99eced99b46b43016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa91811ccd7c1b1a92bac529df90000000000000000000000004000301b5557b674a86db8c4bfd58ff30000000000000000000000e8f1ed2ea68b0569be17bd73c0633ed4acaaef9e9f7d21998f55b71b26af7e284b1cc4685d740a9d106380dd8cb78f9d9c8cf59b155bc569ddd3098417286bec31896306410a60acadb0f3fb44d30b82986b792635155fa3d562d3aa09452cbb201b0dfed6412837bc2237acf7ca5997ee1898541f4a1c4031e240ccc80ee8fad036ce04409c4630821b8b99be5a3f72afc458f8417544014a67ae4ad31b15c8e13c9f0cdee4abefd0ed28a4a55dd992a748008822d05f13b1a8112d7f41e3bf28bcc1b0963798bed4e0db07d0574016276aa28a86eb33d20a5d58f58201edcef1253b02aac4c74427322ec24809bb059c41db9ee1c3e728c76c5ade17df0a7fc74229ea1a525ee42e8eac3675cb18d6c06748e93179c382f331dde2eea7eab2da71c2ea7086c0c71b6e3d837fdfdc1a5285c471b11eb3311a9f7459a57f7174d000000000000000000000000000000000000000000000008c6987f5d91d640fe5d83d4489b382fe3d3e49c23dcee2af69ba44ab575f354ed026cbf37acc05331084088093fa14152ee6d861dc27a69a9a563c0feb8b27fb7d4586b35a6f181793d5b73e231e7a2d1a6f564a06adc348b9a1c1017f908f99e136b04a0d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60df1d0000140600fe804c746d12b5421d8a00000000000000cfed00000000bbfe800000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000380)="66b9800000c00f326635001000000f300f005d003667660fc7705f67f3f2f0f71f660fe56b00260f22120f235364363636f30f099a3f00230166b91902000066b84d37350f66ba000000000f30", 0x4d}], 0x1, 0x41629dd270dd5d61, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000001b00000008009a1d00000001b41ef2c981ab8b1da7a4db63be2533ba682c3d18e391bfe62d155a28849a670f248c81ae02100b0531815b3ac317f5fd9c234d90177a1b94e347da6bb24cdfba388445b3b9dffb2fbfae8a59eb0c72c51fd5efd7f65e110efff818e62f1f36aeb5801820ba90f8759d02426062b8da1df9d802f0574ef66c9aaf4d7c6bd96a660fc7ff33f37964d922cab15bcfe3111f23a1435e2020bc0670173dcb54be54e5f11da22a001165e38c0225a2791e131df4356ee83d2b9fc6fef525717f491e16266c8e98f0456f65868622ac1c42de7068e4f735c811e622ffab4ba25783650000"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x80, 0x700, 0x1, 0x3, {{0xe, 0x4, 0x0, 0x29, 0x38, 0x65, 0x0, 0x3, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x10}, {[@noop, @timestamp_addr={0x44, 0x1c, 0xaf, 0x1, 0x7, [{@multicast2, 0x8}, {@remote}, {@rand_addr=0x64010100, 0x86}]}, @generic={0x94, 0x4, '\n('}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001a80)=@deltclass={0x14c4, 0x29, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff3, 0xfff2}, {0x8}, {0x8, 0xc}}, [@tclass_kind_options=@c_htb={{0x8}, {0x1488, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0xe, 0x2, 0xd2d, 0x432a, 0x0, 0x3}, {0x8, 0x1, 0x3, 0x5, 0x7, 0x8000}, 0x4, 0x100, 0x9, 0xf, 0x4}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x80, 0x0, 0x28a1, 0x7, 0x6, 0xe}, {0xff, 0x1, 0xf001, 0x533, 0xfffa, 0x4}, 0x6, 0x8, 0x3, 0xaff1, 0x1}}, @TCA_HTB_RATE64={0xc, 0x6, 0x9}, @TCA_HTB_CTAB={0x404, 0x3, [0x7fff, 0x4, 0x8b, 0x6, 0x8, 0x7, 0x5, 0x7, 0xffffffff, 0x3, 0x5, 0x800, 0x1810, 0xb, 0xb, 0x9, 0x100, 0x1, 0x8, 0x1, 0x1, 0x5, 0x17cea5de, 0x10000, 0x4, 0x0, 0x6, 0x5, 0x5, 0x2, 0x5, 0x3, 0x0, 0x1ff, 0x3, 0x3, 0x2, 0x9, 0xc291, 0x5, 0xfffffffd, 0x4c, 0x46c, 0x3, 0x7, 0x10, 0x9, 0x7ff, 0xe418, 0x348, 0x10, 0x4, 0x5, 0x2, 0x800, 0x3, 0x8, 0x3, 0x1, 0x24b6, 0x6, 0x20000000, 0x8001, 0x6, 0x1, 0x7, 0x8, 0x2, 0x10, 0x6, 0x1, 0x25, 0xf3, 0x6, 0x7f, 0x8, 0x6, 0xf7c7, 0x1, 0x4d68ef3, 0xff, 0x3, 0x4, 0x7, 0x40000, 0x3ff, 0xd0, 0x7fff, 0x5, 0x5, 0xb28, 0xf, 0x7, 0x7f, 0x6, 0x8, 0x6, 0x9, 0x16, 0x5, 0x0, 0x8, 0xa, 0x5, 0xff, 0x81, 0x6, 0xffff, 0x29d, 0xa, 0x4, 0x0, 0x7a9, 0x7, 0x3, 0x50, 0x8, 0x7, 0xb, 0x465, 0x2, 0x5, 0x0, 0xfffffffb, 0x5, 0x0, 0x728, 0x3f96, 0x3ec2760c, 0x0, 0xfff, 0x7, 0x4, 0x0, 0xfffffffe, 0x6, 0xb, 0x3, 0x0, 0x1, 0x1, 0x38, 0x7, 0x6, 0x5, 0xbfc, 0xffff, 0x11, 0x6ec4, 0x80000001, 0x9058, 0x8, 0x1, 0xffffffc0, 0x9, 0x7ff, 0xffff, 0x5, 0x2, 0x7fff, 0x2, 0x0, 0xa35, 0x9, 0x5, 0x6, 0x9, 0x4, 0x7, 0x8, 0x92, 0x3, 0x80000000, 0x2, 0x4, 0x9, 0x3, 0x7, 0xc2fd, 0x6, 0x9, 0x1, 0x6, 0x7, 0xb, 0x0, 0x0, 0xfffffff8, 0xd, 0x1, 0x1, 0x0, 0x5, 0x7, 0xa8, 0x8, 0x9f9, 0x70a3, 0x5, 0x200, 0x5, 0x5, 0x7, 0x8, 0x80000000, 0x0, 0x2, 0x7, 0x1, 0x83, 0x8, 0x800, 0x23, 0x200, 0xf5d, 0xfff, 0xb7b, 0x200, 0x2, 0x101, 0xc, 0x3, 0xac, 0x7fff, 0x7f, 0x7fff, 0x1, 0xac87, 0x1, 0x9, 0xf70, 0x8, 0x8, 0x1, 0x80000000, 0xffff, 0x4, 0x45, 0x7fffffff, 0xb7, 0x800, 0x7, 0xa, 0xc, 0x8000, 0x20e, 0xfffffff9, 0x3, 0x0, 0x2f0, 0x4, 0x26c8, 0x5, 0x6, 0x3, 0x40]}, @TCA_HTB_CTAB={0x404, 0x3, [0x1, 0x5c8, 0x800, 0x1, 0xfff, 0x9, 0x91, 0x7fff, 0xd0c, 0x3, 0x6, 0x5, 0x101, 0x2, 0x4, 0x6, 0x7ae2, 0x5, 0x3f08d8fb, 0x7, 0x7, 0x7e94, 0x3, 0xfffffffb, 0x4, 0x0, 0x2, 0x9, 0x8, 0x4d, 0xb6e, 0xffffffff, 0x1cb9, 0xfffffffa, 0x2f, 0x8, 0xb, 0x10001, 0x0, 0x1, 0x6, 0x22c, 0x8001, 0x4, 0x2, 0x8001, 0x3, 0xfffffff7, 0x32e, 0x1, 0x600000, 0x1, 0x6, 0xfffffffd, 0x3, 0xf4c, 0x8af2, 0x1454, 0xfb, 0x3, 0x0, 0x3, 0xf4b3, 0x8, 0xfffffffd, 0x5, 0x5, 0x40, 0x6, 0x401, 0x3701, 0xeb853667, 0x8000, 0x101, 0x1000, 0x1, 0x7, 0x2, 0xfffffffd, 0x6, 0x819, 0x2, 0x196e00, 0x1000, 0x8, 0x2, 0x9ba1, 0x1, 0x8, 0x0, 0x1f, 0x7fff, 0xcf2, 0x6, 0x9, 0xfffff1ac, 0xa320, 0x7fffffff, 0x1, 0x9, 0x5, 0x95, 0x10001, 0x3, 0x1, 0x7, 0x1, 0x7fff, 0xfff, 0x7f, 0x4, 0x1, 0x2, 0x54e1c237, 0x2, 0x1000, 0x7, 0x1, 0x7, 0x6, 0x7, 0xb, 0x1000, 0x86, 0x2, 0xa, 0x80000001, 0x8, 0x2000000, 0x4, 0xff, 0x1, 0x4c004f76, 0x1, 0x0, 0x4, 0x81, 0x3fbb, 0xfffffffd, 0x7, 0xe, 0x6, 0x5, 0xb2e7, 0x6, 0x3, 0x1c0000, 0x7fffffff, 0x82f, 0x8, 0x1000, 0x64c, 0x0, 0x40, 0x3, 0x9, 0x9, 0x2, 0x4, 0x7, 0x3, 0x401, 0xc, 0x0, 0x3ff, 0x101, 0xa, 0x6, 0x8000, 0x0, 0x9, 0x5, 0xffff, 0x1, 0x5d4, 0xf348, 0x0, 0x0, 0x55d, 0x1, 0x0, 0x7, 0x6, 0x7, 0x200, 0x80000001, 0x3, 0x3, 0x2, 0x10, 0x1, 0xfff, 0x2, 0x4000000, 0x1, 0xb6, 0x0, 0xd, 0xfffffffd, 0x3ff, 0x656, 0xfffffff2, 0x5, 0x5, 0x9, 0x80000001, 0xb, 0x6, 0x800, 0x80000, 0x6, 0xbd, 0x161b, 0x3, 0x6, 0x7, 0x74, 0x2, 0x2, 0x8c, 0xa30d, 0x7, 0x8, 0x76eb, 0x2, 0x7, 0x4, 0x6, 0xfffffff9, 0x3, 0x2f9, 0x9, 0x2, 0x3, 0x1, 0xa601, 0x9, 0x5, 0x7fff, 0x7e, 0xea, 0x80, 0x9, 0x9d, 0x7, 0x28fe338f, 0xfffffffc, 0x6, 0x1, 0x2, 0x7, 0xf7bb, 0xd4b7, 0x5, 0x4, 0x3]}, @TCA_HTB_RTAB={0x404, 0x4, [0x3, 0x4, 0x3, 0x9, 0x3, 0x3, 0xfffffffc, 0x3, 0xfffffffe, 0xffffffff, 0xc, 0x0, 0x2, 0x2, 0x10001, 0x7, 0x0, 0x9, 0x10000, 0xbbb, 0xfffffffd, 0x3, 0x7, 0x8, 0x585, 0x7, 0xc0bd, 0x7, 0x1, 0xfffffff9, 0x6, 0x3, 0x0, 0xf, 0x100, 0x10, 0x400, 0x1515, 0x3, 0xb051, 0x2, 0x6, 0xfffffbff, 0xf2ad, 0x6, 0x9, 0x6, 0x6, 0x13, 0xef, 0x401, 0x8, 0x10001, 0x5, 0xfffffff8, 0x1, 0x8, 0x101, 0x5, 0x6a9, 0x3c0d, 0x3, 0xfff, 0x7, 0x6, 0x3ce, 0x1, 0xff, 0x4, 0x6e, 0x9, 0xffff, 0x3, 0x9, 0x9, 0x893, 0x2, 0x3, 0x8, 0x8, 0x3, 0x3, 0x6, 0x1, 0xd5f4, 0x7, 0x401, 0x488, 0x101, 0x0, 0x4, 0x8, 0x80, 0x8, 0x2, 0x0, 0xffffffcb, 0x2, 0x800, 0xa, 0xdc, 0xd7da, 0x2, 0x7, 0xf, 0xffffffff, 0xfffffffa, 0xfffff7e2, 0x5, 0x8000, 0xa, 0x8001, 0x4, 0xa3d, 0x101, 0x7fffffff, 0xcf, 0x6, 0xe5, 0x8, 0x5, 0x6, 0xe47, 0x0, 0x4, 0x9, 0x8, 0x0, 0x5, 0xffffff80, 0x0, 0x8, 0x200, 0x0, 0x29e, 0x3, 0x1, 0xc8, 0x4, 0xd91a, 0x2f59b514, 0x20000000, 0x6, 0x6, 0x0, 0xd, 0xb, 0xa, 0x4, 0xfff, 0x5, 0x0, 0x5c8c, 0x4, 0xd, 0x0, 0xffff, 0x5, 0xe, 0x8, 0x93ae, 0x2, 0x6, 0x4, 0x5, 0x1, 0x91db, 0x5, 0x2, 0x4, 0x7, 0x1b, 0x3, 0x8, 0x4, 0x8001, 0x8, 0x3, 0xc02, 0x0, 0x400, 0xa, 0x7a8, 0x9, 0x2, 0x3, 0xfffffffa, 0x1, 0x3, 0x47, 0x7, 0x5, 0x1, 0x80, 0x80000001, 0x2, 0x2, 0x9, 0x0, 0x2, 0x4, 0xffffffff, 0xcc, 0x101, 0xfffffffd, 0x10001, 0xf, 0x5, 0x7, 0x2, 0x3, 0x7, 0x5, 0x6, 0x8000, 0x1, 0x0, 0x3, 0x2, 0x81, 0x3, 0x2, 0xe, 0xfffffffd, 0xfffffffd, 0xb8, 0x9, 0x96d5, 0x6, 0x0, 0x0, 0x3, 0x6, 0x1, 0xfffffffb, 0x5, 0x2, 0x3, 0x7, 0x6, 0xffffffff, 0x7, 0x10000, 0xc, 0x3, 0x3, 0x8, 0xfffffffa, 0x9, 0xbb1, 0x109, 0x3323, 0x915, 0x4, 0x8, 0x2]}, @TCA_HTB_CTAB={0x404, 0x3, [0x76e, 0x0, 0x2, 0x8, 0x80000001, 0x6, 0x80, 0x0, 0x8, 0xd, 0x800, 0x200, 0x8, 0x65e5f7f, 0x0, 0x1, 0x4, 0x9, 0x8000, 0x9e, 0x1, 0xffffff00, 0xffffffff, 0xb, 0xf, 0x2, 0x45758fa8, 0x10001, 0x8, 0xffffffff, 0x8, 0x3, 0x1, 0x101, 0x205f, 0x10, 0x0, 0x8, 0x7fffffff, 0x0, 0x4, 0x3, 0x8, 0x8, 0xa86, 0x2, 0xc26, 0x200, 0x4d, 0x7ca, 0x0, 0x9, 0x2, 0x7ff, 0x6, 0x80000000, 0x4, 0xb, 0xaab, 0x8, 0x2, 0x8700, 0x9, 0x306c3d5, 0x0, 0xffffffff, 0xfff, 0x6, 0xe, 0x6, 0x8, 0x5, 0x10001, 0x8, 0x40, 0x17, 0x6, 0x9, 0xfffffffb, 0x0, 0x9, 0xeee00000, 0x1, 0x9, 0xfff, 0xfffffff8, 0x3, 0x1000, 0x2, 0x9, 0x0, 0x3, 0x6, 0xfffffffa, 0x1, 0x7, 0xbe8, 0x5, 0x30, 0x4, 0x6, 0x9c4, 0x1ff, 0x5, 0x81, 0x6d5e, 0xffffffff, 0x3, 0x9, 0x1, 0x1ff, 0x0, 0x7fff, 0x7d1d, 0x5, 0x2, 0x24, 0x2, 0xfffffff9, 0x1, 0x5, 0xe14, 0xd, 0x56, 0x1, 0x1, 0x4, 0x872, 0x9, 0x4, 0x6, 0x100, 0x1, 0x7, 0x8, 0x0, 0x7f, 0x5, 0x1d49dc89, 0x3, 0xff, 0xa6, 0x2, 0x6, 0x1, 0x1, 0xffff, 0xc6, 0x4, 0x3, 0x38, 0x9, 0x27, 0x4, 0x43d0, 0x77d, 0x10001, 0x7fffffff, 0x7f, 0x8, 0x6, 0x5, 0x445d7440, 0xc, 0x9, 0x0, 0x5c, 0x1, 0x1, 0xfffffff9, 0x71a1, 0x4, 0x2, 0x8, 0x9, 0x8001, 0x8, 0x401, 0x3, 0x0, 0x8, 0x5f1, 0x4, 0x0, 0x3, 0x8, 0x9, 0x3, 0xf57, 0x80000001, 0x9, 0x3c4, 0x0, 0xc3, 0x2, 0x8, 0x1, 0x84, 0xf68, 0xa599, 0x80000001, 0x401, 0x6, 0xbb, 0x0, 0xe000000, 0x8, 0x4, 0x3b, 0x4ba, 0x8, 0x3, 0x3, 0x91, 0x6, 0x8, 0x3, 0xfffffff9, 0x100, 0x5, 0x3, 0xac, 0x5, 0x3, 0x3, 0x5, 0x4, 0x6, 0x5, 0x8001, 0xd, 0xff, 0x0, 0x2, 0x3, 0x9, 0x5, 0x2, 0x6, 0xc, 0x401, 0x100, 0x2, 0x2, 0x3, 0x7, 0x9, 0x536, 0x7, 0xe, 0x200, 0x3, 0x8, 0x282, 0x80000000, 0x5]}, @TCA_HTB_CTAB={0x404, 0x3, [0x2, 0x2, 0xd27d, 0xfff, 0xd, 0x3, 0xfffffff8, 0x3ff, 0x4, 0x6, 0x2, 0x1, 0xd, 0x8, 0xffffffd9, 0xfffffffe, 0x2, 0x0, 0xff, 0x5, 0xf, 0x9, 0x5, 0x6, 0x200, 0x65b2283c, 0x4, 0x3, 0xfffffc01, 0x8, 0x5, 0x5, 0x97c, 0x2, 0x8, 0x1ff, 0x7fffffff, 0x100, 0x8, 0x0, 0x0, 0xe, 0x7, 0x0, 0xc22f, 0xfffffda7, 0x1, 0x7, 0x3, 0x5, 0x1, 0x8, 0x7, 0x1, 0x0, 0x9, 0xd, 0xbd0, 0x4, 0xfffffffc, 0x3, 0x6, 0x170, 0xa6, 0x5, 0xd5f, 0xfe, 0x2, 0x3, 0xf, 0x2, 0x8, 0x2, 0x200, 0xfffffff7, 0x8, 0x9, 0x9898, 0x7fb, 0x8, 0x7, 0x100, 0xc90, 0xffffffff, 0x8, 0x6, 0x0, 0x3, 0x10000, 0x1000, 0x80000001, 0x2, 0x7302, 0x2, 0x9, 0x3ff, 0x41b7, 0x2, 0x8001, 0x6, 0x7, 0x5, 0xe58, 0x6, 0x0, 0x6, 0x2, 0x5, 0x5, 0x6, 0x9, 0x0, 0x1b91, 0x9, 0x2, 0x4, 0x7, 0x2, 0x3, 0x4, 0x1000, 0xfff, 0x3, 0x5, 0x9, 0x800, 0x8, 0x800, 0xffff47c1, 0x1, 0x10, 0x1000, 0x3b, 0x3, 0x0, 0x9, 0xc7, 0x1, 0xfffffff9, 0xffff8000, 0x8, 0xde, 0xc, 0x7, 0x0, 0x1, 0x4, 0x2, 0x3, 0x4, 0x10001, 0x264d, 0x8be, 0xa9, 0x3, 0xfeba, 0x2, 0x0, 0x0, 0xe, 0x1, 0x6, 0xeb2, 0x401, 0x0, 0x6, 0xa, 0x7, 0x80000000, 0xb, 0x800, 0x6, 0x9, 0x9, 0xb, 0x0, 0x696, 0xfffffffe, 0x5, 0x9, 0x0, 0x80, 0x401, 0x5, 0x0, 0x400, 0x81, 0x6, 0x1, 0x9, 0xfffffff4, 0x2, 0x7, 0x3, 0x1, 0x668, 0x636, 0x1, 0x4, 0x1, 0x101, 0x80, 0xfffffffe, 0x7, 0xffffff15, 0x400, 0x3, 0x400, 0x3, 0x40, 0xba5d, 0x22, 0x5, 0x81, 0x2968, 0x3, 0xfffffffe, 0x4, 0xf44, 0x5, 0x4, 0x8, 0x8, 0x6, 0x4, 0x8, 0x800, 0xb, 0x8, 0x7fffffff, 0x5, 0x401, 0x1, 0x7f, 0xfffff800, 0x8000, 0x0, 0x8, 0x10001, 0x5, 0xd, 0x40000000, 0x1, 0x1, 0x7, 0xf, 0x7ff, 0x8, 0x1cb, 0x2, 0xee, 0x0, 0x32b3fbf7, 0x4, 0x7fffffff, 0x5]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x3}}, @tclass_kind_options=@c_cbs={0x8}]}, 0x14c4}, 0x1, 0x0, 0x0, 0x2}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r4]) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125) 8m54.083635028s ago: executing program 37 (id=825): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x800}, 0x5880) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) 8m45.569334233s ago: executing program 38 (id=865): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x0, 0x70bd29, 0x0, {{'digest_null-generic\x00'}, '\x00', '\x00', 0x0, 0x2400}}, 0xe0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x1000) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="08000800070000000000200000004500032800005f53b7f74a20d49b3bfaf4b40000002f9078", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4000000090780000"], 0xfdef) 8m45.550897464s ago: executing program 39 (id=864): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe], 0x5000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x1, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001000000800000008a137a22fe0300a88e53bed923881b57f64f2425b95c729d27f05bf3130ee64af1fa72ade308d76c71bee28de1bbf9f0e82e5aeacb02f4498d5e231e55b4c7d432c9dab6ae51e1b45540e66f72b3bdd4625b9e34c87055f24b03870fd135df8ec47617ac9d3c7303181e8eb96a912cc0f03d81530a60e0b51c72f30241d32520d7d993bd46de19e9e5c50443081c08af4c2c61ad39ef", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r10}, 0x18) ioprio_get$uid(0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r11, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r11, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x530, 0x30, 0xffff, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_police={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xd91}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}, {0x4e0, 0x1, [@m_vlan={0xec, 0x6, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x7, 0x5, 0x1, 0x80000001}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x69, 0x6, "f7fc0d7508e96db4c588bcc2fa4129a2624e7fcdeb0ffc66b5e42b3daaed479e2ddaba236e0c301ef2d82bdcbcbb58fce1d4907feba77bfb2eac39db49cce3fa5f17eb36a2a15b6528e5f69260881080ee4fccc9d8015c862664181b0b6331cd090714b747"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x114, 0x16, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x7, 0x9, 0x7}, 0x80}}]}, {0xcc, 0x6, "ae1187218c006f2b64b4199108798164902cd97923dfd62d8a4ed20db07e91a064518d7aa99e02246e2100a73cb54dd2101378b2edda25d3bf67773b4895cf3b2084c5bcbe8a42affc6dbcaf855a30935d9e3489f8519678a8930b56b78e653c5ec3b93b173fc972735e9c9179de42323f4110adb64e42895af8ccfff9f31e395539a8bb1feaba2f532dc3af7c89df39e375818600bf894fa6662a69d314d10ce11e643573907ac94452deb263ea3d1289876967e55cc7736a284685fb71c84b4050ea1a67897106"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x190, 0xd, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x53b3, 0x10000000, 0x1, 0x3}}, @TCA_DEF_DATA={0xd, 0x3, '}(\\([,.-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xf04d, 0xfb0, 0x6, 0x3ff, 0xaee}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0x2, 0x1ff, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0xe60, 0x8, 0x7, 0xffffffff}}, @TCA_DEF_DATA={0xd, 0x3, '-](+#$!$&'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '*\x00'}, @TCA_DEF_DATA={0x9, 0x3, '-{+,\x00'}]}, {0xbe, 0x6, "9ee00630dda81a87afbb5eacae1fa4d001a312a3c0207aa614da4ec418b2052c68e10b84bccee3a2979139563143fb2eb50c06cad15e9dbc3acd7606fdbf778d94e6dc4a01e2f30f55adf07a707829edb5e4c5f79e3bcdf0511edfcc6b891a1464edfe0e97a1d49157f672db698727fc095c3bda7ceb8648ff04b6b2207d89f926cdcae28826b485d8b3b3cf8931145ae0bc3166301d1b66b5bb1e33803bfb20a71b3a61af0025af18d12aeb5b3b592aca86b0ea09a1651838bb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x14c, 0x7, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5ede, 0x4215, 0x2, 0x5, 0x6}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x95, 0x4, 0x7, 0x1ff}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x4, 0x6, 0x3ff, 0x9}, 0x68}}]}, {0xc9, 0x6, "e59400ff8af8dc60b0f4f57317683d3bf0f7112569b13e4a3a23716508e2db7442336bada3dcd5df57c8f3ef4ff5e1ed0941f099dc19c8bcf4a808f4a2f29494a80ac53b93c956fa10a4042e17b279de1c9ecfb7d13bd807d11a5c3c562954ad1b63202e7c109e3e056286b64a7fd1f760063ccadabcdaf13c6d0dbaa13b10129afa594bdd8a9ddb083638bb866f14bbc9fed67d8ce01bcb9c017db9242b3810f85272f67c3fc943b50cba77759c4b3b53ac421db9d5b8749b839e356ae0926cccfde21e48"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x530}}, 0x0) 8m38.565867972s ago: executing program 40 (id=877): unshare(0x68040200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)=ANY=[@ANYBLOB="3a2f08000003000001000000000045000028000000000089907800000000e000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bd09efc990780000"], 0x36) 7m48.797441543s ago: executing program 4 (id=1113): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) ptrace(0x10, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540), 0x2002, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r0, 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ptrace$poke(0x1, 0x0, &(0x7f0000000080), 0x20000000) move_pages(0x0, 0x6, &(0x7f0000000000)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000040)=[0x3ff, 0xe, 0x5, 0xfffffffd], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) 7m47.946243306s ago: executing program 4 (id=1125): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfed7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) write$vga_arbiter(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='lock '], 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 7m47.053536359s ago: executing program 4 (id=1137): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x9fd, 0x82, 0x34800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x6, 0x0, 0x3a, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x5254, 0x2}}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x85, &(0x7f0000005f40), &(0x7f0000005e80)=0xfc9e) 7m46.836881914s ago: executing program 9 (id=1142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00003904fdffffff01000000000003e4000000", @ANYRES32=0x0, @ANYBLOB="00120000653000001c0012800b00010062726964676500000c00028005002a0001000000"], 0x3c}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = openat$incfs(r3, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x1, @desc4}) r6 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix_mp={0x0, 0x0, 0xb5315258}}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0xb24923a4024dc85a, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) 7m46.777188223s ago: executing program 9 (id=1143): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x202700) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf250900000005001300080000000000150009000000050015007f000000050015000600000005001500020000000500150007000000050015000e00000042efc49cee34bafd71d2f356e0ea8ce660dd1b7363c40b3d9760b329baab110b9e7c42955287e87978346290c18c006814e958e012f7a62cb692dfd19f58e024ad8429c6c79b2ea754d1f5c823268140ab167905e1ef79ce9b1d919e12f5ddec752b6375f676e7830fd3a128affe43dfc138dcdbac81665e536864b43497dbd41b6dd3beebde58c5d9d9b8882d4a904d3e86fe"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf250900000005001300080000000000150009000000050015007f000000050015000600000005001500020000000500150007000000050015000e00000042efc49cee34bafd71d2f356e0ea8ce660dd1b7363c40b3d9760b329baab110b9e7c42955287e87978346290c18c006814e958e012f7a62cb692dfd19f58e024ad8429c6c79b2ea754d1f5c823268140ab167905e1ef79ce9b1d919e12f5ddec752b6375f676e7830fd3a128affe43dfc138dcdbac81665e536864b43497dbd41b6dd3beebde58c5d9d9b8882d4a904d3e86fe"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000983f571c6ce1836001400001fb7030000000000008500000083000000b70900000000000055090100000000007b0000000f000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) 7m46.167501741s ago: executing program 1 (id=1144): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) socket$netlink(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004380), 0x101602, 0x0) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0xffffffffffffff5c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141000, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000040)=0x200) 7m46.143979745s ago: executing program 4 (id=1145): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) timer_create(0x3, &(0x7f0000000040)={0x0, 0x2e, 0x6, @thr={&(0x7f0000000300)="c6f670f200c25293c9f397627a68f362e6e00ef17e2b2628627c463f14bd0a0c064e8e649ea7947216642fe4bad5048da6e05baf814c462095a3ebed081f72c906479b399f3b49e45eaa05bbfc07dba4916d1897733dd35dc254a37b3d1146d5fd7eb8b019e9676979", 0x0}}, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000008adcbf1d472a912b040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x213f, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb1}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000003c0)="bdcf5722ba942a31e139d8f8d79984f586440ad354177c8882da6be77b8278", 0x1f}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="6400000029000000390000002c0a00090000000010000000290000003e000000020000008c000000296a1527454a6eeb65218dd87a00000037000000040e000000000000010300000000010005020009085471ea28af473f2d9b1e52e6fb16d7cd2d17a321b6b8b2a7018959dd5a11580da2c963ce2e0adfa391910eced718f8b3a220834028b88a8f5293b9bfbd137c6fe803bcce07416117150d84bf14d30917fc37ed858a00010007100000000302f7ac0b090000000000000000940000002900000039000000872800f200000000fe8000000000000000000000000000aaff020000000000000000000000000001ff01000000"], 0x1ec}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = getpgid(r6) capset(&(0x7f00000000c0)={0x20071026, r7}, &(0x7f0000000240)={0x5, 0x101, 0xf7b, 0x7f, 0x8, 0xa61e}) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r5, 0x0, 0x36) 7m45.55324486s ago: executing program 9 (id=1146): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0xe0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x5, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 7m45.552960037s ago: executing program 9 (id=1147): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8de0688a8", 0x12, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x20, 0x8, 0x0, 0x0}) 7m45.467583404s ago: executing program 9 (id=1148): io_uring_setup(0x5240, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x126}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) r0 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000300)) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0xb5}}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x29, 0x49, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x3029044, 0x0) semget$private(0x0, 0x3, 0x8) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) 7m45.327539307s ago: executing program 1 (id=1149): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x879b}], @chandef_params]}, 0x2c}}, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x5, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 7m45.32734638s ago: executing program 1 (id=1150): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x1f, 0x6, &(0x7f0000000080), 0x4) 7m45.247461595s ago: executing program 1 (id=1151): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="9bbacbdec9dcfa8103e21caef01b55e7a90025bc408d57bb821115a5a60500e9799441b112e98f3aa93bd4e4ea9278cd3306bd58e094a32d289104d63d40e61169b6c26fad51a7", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f00000002c0)=0x1c, 0x800) (async) mknod$loop(&(0x7f00000030c0)='./bus\x00', 0xc000, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @remote, @initdev}, &(0x7f0000000340)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000ac0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000007c0)={'sit0\x00', r4, 0x20, 0x700, 0xff, 0xc784, {{0x2d, 0x4, 0x3, 0x8, 0xb4, 0x68, 0x0, 0x0, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x14, 0xa5, 0x3, 0x1, [{@empty, 0x10001}, {@broadcast, 0xe27}]}, @timestamp={0x44, 0xc, 0x9c, 0x0, 0x2, [0x1, 0x5]}, @cipso={0x86, 0x30, 0x3, [{0x6, 0x12, "2dcd558e12bca9eef9c27ab5e202d377"}, {0x1, 0x7, "eddaa2ea6a"}, {0x6, 0x2}, {0x5, 0xf, "58cdff4d0c10ac2176fd3e3ec1"}]}, @timestamp={0x44, 0x8, 0x23, 0x0, 0xb, [0x200]}, @ssrr={0x89, 0xf, 0x47, [@broadcast, @remote, @rand_addr=0x64010100]}, @generic={0x94, 0x9, "b488519be11b19"}, @cipso={0x86, 0x2e, 0x1, [{0x6, 0xd, "86b61c175ee26e7078d8b4"}, {0x1, 0xf, "6c9a90f6308b2a4af0781228e6"}, {0x7, 0x4, 'Ey'}, {0x0, 0x8, "9d4452f2d168"}]}]}}}}}) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@private=0xa010101, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e20, 0x7fff, 0x4e20, 0x2aad, 0x2, 0x0, 0xa0, 0x0, r6, r5}, {0x156, 0x1ff, 0x5, 0x8000, 0x2, 0x7, 0xd0af, 0xe}, {0x5, 0x1, 0x0, 0x8}, 0x10000, 0x6e6bb3, 0x0, 0x0, 0x0, 0x3}, {{@in=@local, 0x4d2, 0x33}, 0xa, @in=@private=0xa010100, 0x3501, 0x3, 0x1, 0xcb, 0x8f64}}, 0xe4) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) r7 = syz_open_dev$loop(&(0x7f0000000300), 0x3, 0x101000) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f0000003080)=[{{&(0x7f00000008c0)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000940)=""/185, 0xb9}, {&(0x7f0000002b00)=""/253, 0xfd}], 0x2, &(0x7f0000002c00)=""/52, 0x34}, 0x10000}, {{&(0x7f0000002c40), 0x80, &(0x7f0000002f80)=[{&(0x7f0000002cc0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/145, 0x91}, {&(0x7f0000002e00)=""/15, 0xf}, {&(0x7f0000002e40)=""/227, 0xe3}, {&(0x7f0000002f40)=""/39, 0x27}], 0x5, &(0x7f0000002fc0)=""/131, 0x83}, 0x5}], 0x2, 0x12062, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) (async) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 7m45.167244313s ago: executing program 4 (id=1152): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x9fd, 0x82, 0x34800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x6, 0x0, 0x3a, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x5254, 0x2}}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x85, &(0x7f0000005f40)={r1}, &(0x7f0000005e80)=0xfc9e) 7m45.04300254s ago: executing program 1 (id=1154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x4) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2000239, &(0x7f0000000380)={0x0, 0x800b1d1, 0x2, 0x0, 0x57}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, 0x0, 0x25, 0xc, @void}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000100)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x8, '\x00', [@padn={0x1, 0xffffff84, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r9}, 0x8) write$UHID_CREATE(r8, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x120) readv(r8, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1) 7m44.247252576s ago: executing program 4 (id=1156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x800000080010000) openat(r3, &(0x7f0000004400)='./bus\x00', 0x463142, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB="1a840000", @ANYRES16=r5, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="24000300"/36], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r4, @ANYBLOB="7bb2b6db7eff0000006c36e847059f87c2cba4dcd51668c7494bc3085c220c00003293c559b5a1f7886e69c30663292af1cfa46b33cdd882e747286c8dceeb77f8124b2095c9e5b2367eecc30058"], 0x40}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x40080) r7 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0xa00810, &(0x7f0000000240)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r6, @ANYRESHEX]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000100"/28], 0x48) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}) 7m44.246275134s ago: executing program 1 (id=1164): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x9fd, 0x82, 0x34800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x6, 0x0, 0x3a, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x5254, 0x2}}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x85, &(0x7f0000005f40)={r1}, &(0x7f0000005e80)=0xfc9e) 7m44.097567447s ago: executing program 9 (id=1157): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x2, 0xffffffffffffffff, r0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02090000000000000000000001000000800000007b422678c18e131f1bd70823314cf93002dbe393618d0387af004ead8f139881b731f7a62cef2a7cb6aeeea2f6f332b4c703385df2a9551925dcb4e3ed32343fc7fc4fe4e7bd3d626de8021c6eb760650fc7afeda3ba79e9c90360fadd8ba8f77b9190", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000001bc0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0185647, &(0x7f0000002380)={0xa00000, 0x3ff, 0x5476, r5, 0x0, &(0x7f0000002340)={0x50009, 0xc, '\x00', @string=0x0}}) 3m19.194600685s ago: executing program 41 (id=1158): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) r1 = semget$private(0x0, 0x4000, 0x764) semctl$IPC_STAT(r1, 0x0, 0x2, 0x0) semctl$SEM_STAT(r1, 0x1, 0x12, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) fchown(r7, 0x0, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000005c0)=""/144, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) fanotify_init(0x2000, 0x101000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003400)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000050000000500000009000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000004d7abfa3062b0e3c7724566371404a00"/28], 0x50) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xff, 0x2}, {0x7a36}}}}, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@private, @dev}, 0x0) 3m19.180549276s ago: executing program 42 (id=1157): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x2, 0xffffffffffffffff, r0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02090000000000000000000001000000800000007b422678c18e131f1bd70823314cf93002dbe393618d0387af004ead8f139881b731f7a62cef2a7cb6aeeea2f6f332b4c703385df2a9551925dcb4e3ed32343fc7fc4fe4e7bd3d626de8021c6eb760650fc7afeda3ba79e9c90360fadd8ba8f77b9190", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000001bc0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0185647, &(0x7f0000002380)={0xa00000, 0x3ff, 0x5476, r5, 0x0, &(0x7f0000002340)={0x50009, 0xc, '\x00', @string=0x0}}) 3m19.135055036s ago: executing program 43 (id=1164): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x9fd, 0x82, 0x34800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x6, 0x0, 0x3a, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x5254, 0x2}}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x85, &(0x7f0000005f40)={r1}, &(0x7f0000005e80)=0xfc9e) 3m19.111379178s ago: executing program 44 (id=1156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x800000080010000) openat(r3, &(0x7f0000004400)='./bus\x00', 0x463142, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB="1a840000", @ANYRES16=r5, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="24000300"/36], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r4, @ANYBLOB="7bb2b6db7eff0000006c36e847059f87c2cba4dcd51668c7494bc3085c220c00003293c559b5a1f7886e69c30663292af1cfa46b33cdd882e747286c8dceeb77f8124b2095c9e5b2367eecc30058"], 0x40}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x40080) r7 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0xa00810, &(0x7f0000000240)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r6, @ANYRESHEX]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000100"/28], 0x48) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}) 2m57.052928242s ago: executing program 0 (id=1211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) open$dir(&(0x7f00000042c0)='./file1\x00', 0x4240, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0x7fffffff, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)) getpid() syz_open_procfs(0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000400)={0x41e2, &(0x7f0000000000)=[{}]}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r8, &(0x7f00000002c0)="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", 0x2000, &(0x7f00000022c0)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x2a0022}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f000000b080)="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", 0x2000, &(0x7f0000006cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_DELETE(r8, &(0x7f00000000c0)={0x33, 0x6, 0x0, {0x1, 0x5, 0xa, 0x0, '/dev/fuse\x00'}}, 0x33) syz_fuse_handle_req(r8, &(0x7f0000004440)="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", 0x2000, &(0x7f0000002d40)={&(0x7f0000002340)={0x50, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000070000001580670f58f5d2b8af37978cea95a52f1546aa39b58be2339c118ea5b54c2593b0eceb34f3", @ANYRES32=r9, @ANYBLOB="000000000000000014001a80100004800c0009800800010000000000"], 0x34}}, 0x0) 2m56.024483517s ago: executing program 0 (id=1213): io_uring_setup(0x5240, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x126}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) r0 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000300)) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0xb5}}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x29, 0x49, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x3029044, 0x0) semget$private(0x0, 0x3, 0x8) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) 2m54.301698907s ago: executing program 0 (id=1221): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x20000000, 0x1, 0xa, 0xb}, {0x1, 0x2, 0x13, 0x4}, {0x2, 0x5, 0x5, 0x4}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x4) mmap(&(0x7f00005f1000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x4) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) write$proc_mixer(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='\"'], 0x2b) dup3(r6, r5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000300)=0xee, 0x4, 0x1) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, r7, r7}, &(0x7f0000000040)=""/207, 0xcf, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) r8 = socket(0x23, 0x5, 0x0) bind$llc(r8, &(0x7f0000000680)={0x1a, 0x310, 0x1, 0x6d, 0xc8, 0x6, @random="8f835d2ac134"}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 2m54.26805862s ago: executing program 0 (id=1222): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) fsync(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='i2c_reply\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x58, 0x140e, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x4000}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x80000000}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, r5) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)=ANY=[@ANYBLOB="674bdf3d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) 2m51.786439772s ago: executing program 0 (id=1229): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000200000000", @ANYBLOB="598d3990609efcbbc5d96cdd308034bcf5e2c0eb5cab8a9aaca90302013cacb53cb95e5caae9273e563cab3c09d29c49abf00fecbab139830302c72fc615921f3de54a5e763c249f73c64d7820b52ff0da3844e3e86833fe57b4a0861ab4942c36444d0eefc2d1fbf7d1f5930f31013d3575ba874ea442650c1cab34968b380e7e4b1ee971a03dea5ad11efa86654b5aa7e4c6ad02212fc09584388ae42a01f80cbb353ec70bc7e08f207d9c08803db3a718e277289ffb6455ec8559cf2359f671f476010dbf7cd7890320f612cb32bd57b20bad724cd2ec51d18bec40e28b2323a5b07933428c3e80a409fb25ef5b0d", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@allocspi={0x1c0, 0x16, 0xe32b7fa974c0285, 0x0, 0x0, {{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x31}}, {@in, 0x0, 0x32}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, 0x20000000}}, [@replay_thresh={0x8, 0xb, 0x8}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2b}}, @tfcpad={0x8}, @migrate={0x9c, 0x11, [{@in=@multicast2, @in6=@loopback, @in=@broadcast, @in6=@private1, 0x2b, 0x1, 0x0, 0x0, 0xa, 0xa}, {@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2b, 0x4, 0x0, 0x0, 0xa, 0x2}]}, @mark={0xc, 0x15, {0x35075b}}]}, 0x1c0}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0x60}}, 0x0) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@private, @in6=@private0, 0x0, 0x0, 0x4}]}, 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x48, 0x1, 0x0, 0x1, {0xa, 0x0, 0x6e80}, [@typed={0xffffffffffffff71, 0x0, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x2}]}, 0x20}}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0x400, 0x80082) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000040)) 2m51.524612698s ago: executing program 0 (id=1230): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) mlock2(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678bbce740629919e060e2db370b881e3a3c2") kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x94}}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) dup2(r7, r5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) close_range(r4, r0, 0x7ec7a7fd61e7cbdd) symlink(&(0x7f0000002480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2m51.434838749s ago: executing program 45 (id=1230): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) mlock2(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678bbce740629919e060e2db370b881e3a3c2") kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x94}}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) dup2(r7, r5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) close_range(r4, r0, 0x7ec7a7fd61e7cbdd) symlink(&(0x7f0000002480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2m7.757319089s ago: executing program 6 (id=1403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000019d80)={0x15c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x110, 0x8, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') fcntl$dupfd(r3, 0x0, r3) read$FUSE(r3, &(0x7f0000001c00)={0x2020}, 0x2020) 2m7.721394283s ago: executing program 6 (id=1404): io_uring_setup(0x5240, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x126}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) r0 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000300)) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0xb5}}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x29, 0x49, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x3029044, 0x0) semget$private(0x0, 0x3, 0x8) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) 2m7.084318124s ago: executing program 6 (id=1408): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x26c0, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$UHID_CREATE2(r4, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) r9 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x4) fcntl$addseals(r9, 0x409, 0x7) ioctl$FS_IOC_RESVSP(r9, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r11, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @rand_addr=0x64010101}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}, 'veth0\x00'}) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) 2m7.083097598s ago: executing program 3 (id=1418): r0 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m7.018722074s ago: executing program 3 (id=1409): r0 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x6}, {}, {}, {0xf04}], 0x0, 0x0, 0x0, 0x0, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r5) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioperm(0x0, 0x7fff, 0x15f9) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000c40), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'veth1_macvtap\x00', @multicast}) fsmount(0xffffffffffffffff, 0x1, 0x0) 2m7.011391538s ago: executing program 6 (id=1410): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) fsync(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='i2c_reply\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x58, 0x140e, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x4000}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x80000000}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, r5) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)=ANY=[@ANYBLOB="674bdf3d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) 2m6.004406772s ago: executing program 3 (id=1412): io_uring_setup(0x5240, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x126}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) r0 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000300)) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0xb5}}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x29, 0x49, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x3029044, 0x0) semget$private(0x0, 0x3, 0x8) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) 2m5.653919541s ago: executing program 6 (id=1413): io_uring_setup(0x5240, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x126}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) r0 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000300)) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0xb5}}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x29, 0x49, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x3029044, 0x0) semget$private(0x0, 0x3, 0x8) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) 2m5.343984908s ago: executing program 6 (id=1421): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x9fd, 0x82, 0x34800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x6, 0x0, 0x3a, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x5254, 0x2}}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000005f40)={r4}, &(0x7f0000005e80)=0xfc9e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0xa}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f0000000180)='syzkaller\x00', 0x1000, 0x85, &(0x7f0000000800)=""/133, 0x40f00, 0x21, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x5, 0x8, 0x8}, 0x10, 0x2af43, r2, 0x0, &(0x7f00000006c0)=[r1], &(0x7f0000000700), 0x10, 0x33b, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r6, r6}, &(0x7f00000000c0)=""/28, 0x1c, &(0x7f00000001c0)={&(0x7f0000000140)={'poly1305\x00'}}) r7 = dup(r0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) 2m5.297023597s ago: executing program 46 (id=1421): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x9fd, 0x82, 0x34800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x6, 0x0, 0x3a, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x5254, 0x2}}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000005f40)={r4}, &(0x7f0000005e80)=0xfc9e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0xa}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f0000000180)='syzkaller\x00', 0x1000, 0x85, &(0x7f0000000800)=""/133, 0x40f00, 0x21, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x5, 0x8, 0x8}, 0x10, 0x2af43, r2, 0x0, &(0x7f00000006c0)=[r1], &(0x7f0000000700), 0x10, 0x33b, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r6, r6}, &(0x7f00000000c0)=""/28, 0x1c, &(0x7f00000001c0)={&(0x7f0000000140)={'poly1305\x00'}}) r7 = dup(r0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) 2m3.512638228s ago: executing program 3 (id=1425): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) fsync(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='i2c_reply\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x58, 0x140e, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x4000}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x80000000}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, r5) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)=ANY=[@ANYBLOB="674bdf3d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) 2m2.138725846s ago: executing program 3 (id=1426): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa02d34d144c41f7f5be5b29ab00001100fc0f000000000000000000000000000000000100000000000000000532000000000000fb36eeca6fad50b375a22a584d16ca5500"/134], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000008835196ed0c6a1c1d4c140e5ff0000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fcd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d372e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36d3cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f200d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000028bfaaf1dce7970ae04e33a3d130761c0c0a53997716ebfa0e03c0acdb52e4af877a339d154fea243453e69bc89bb18fc501cf3a623bb871047060234ebc21155d0dc6efa64749afb63a0f8a9c28f62861e826ddf243bd9dda895a9b24d38641856dc058040a418e15139c0b13d52258254eacf045386abe27e8756c29758330146da2e25822afd92467974f70fa71a971517be63845c1eeb1a7a39a8e01750a67925746ffbc35c0046a1d660ebe5967bbc0496d0c9ba9758f9fcf46ecbd2e07523af5e56ff1d8eee549ecc92b0d13ad2edb0149b25debe70d227afb1ad45991bfb63f7cf6a8b5bcabf504d7fe21df0a23e8615055df856d88b7379a4c4499d01221d10c286c10b12ff5c89903806eab61c18721be6edc3d0fdbe2448f130b87b375f0de009ac38fd159a9f54771388f54b50caf5caf896ceb214b298b524c6cfeca9e0343038c68de8856772de2c498e191b9da24cc2a4b722c88a0fd2cca32ea9445e06549d1b5e9c1c90f4de9ce818694c1ced8354729bbec6a828876dae455e24f0f40490aaf80825d0fcdd8620b43da6b7f94c82aac9b256a469312aff3411ac73a377f01f7329a8027d9b47212c2ae9f2038152d0e99b4622a6eb35ba206e43cfbb50ef80b84a1854208c8414b309eb8a3408050772e161beac866e7247b3dc245c9ea14965f2a1a4a97c8baa5a4dd9f8904d47"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000080)={0x3, r7}) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000240)={0x2, r3}) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) listen(r3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2m1.653566047s ago: executing program 3 (id=1427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000019d80)={0x15c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x110, 0x8, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') fcntl$dupfd(r3, 0x0, r3) read$FUSE(r3, &(0x7f0000001c00)={0x2020}, 0x2020) 2m1.653180417s ago: executing program 47 (id=1427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000019d80)={0x15c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x110, 0x8, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') fcntl$dupfd(r3, 0x0, r3) read$FUSE(r3, &(0x7f0000001c00)={0x2020}, 0x2020) 23.188746706s ago: executing program 7 (id=1922): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x74}, 0x1, 0x0, 0x0, 0xc0}, 0x4000884) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000000040)=""/233, 0xe9) socket$l2tp6(0xa, 0x2, 0x73) 23.188482199s ago: executing program 7 (id=1923): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_procfs(r0, &(0x7f0000000400)='ns\x00') munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) unlinkat(r2, &(0x7f0000000040)='./mnt\x00', 0x28c) 22.815414815s ago: executing program 7 (id=1926): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x40000000015, 0x5, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000000)=[0x9, 0x6], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x26, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000dd63180000000000186000000c0000000000000005000000d70001000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000000326500001000000d95a09000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYBLOB="98758c19ca68bc1754fd06c04839bb50c547cb675859e38f8be101cb831a75dd1ad02f738bed3a98eae70d6d19564711de5523c3aeab1aefb0dff7553ffb1124e5b608698319491684ef4c5373d3e761135a3aa8e4bad631cd8421f3665da58647fcb490facf89577d634f887131b8b8b860f6015535995050402b937621a2c7fedb45483d340a", @ANYRES32=r1], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00000d6000/0x2000)=nil, 0x2000, 0x3000001, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r7, 0x1, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423f, 0xfffffffe, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 16.121098856s ago: executing program 7 (id=1926): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x40000000015, 0x5, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000000)=[0x9, 0x6], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x26, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000dd63180000000000186000000c0000000000000005000000d70001000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000000326500001000000d95a09000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYBLOB="98758c19ca68bc1754fd06c04839bb50c547cb675859e38f8be101cb831a75dd1ad02f738bed3a98eae70d6d19564711de5523c3aeab1aefb0dff7553ffb1124e5b608698319491684ef4c5373d3e761135a3aa8e4bad631cd8421f3665da58647fcb490facf89577d634f887131b8b8b860f6015535995050402b937621a2c7fedb45483d340a", @ANYRES32=r1], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00000d6000/0x2000)=nil, 0x2000, 0x3000001, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r7, 0x1, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423f, 0xfffffffe, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 7.688469869s ago: executing program 7 (id=1926): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x40000000015, 0x5, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000000)=[0x9, 0x6], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x26, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000dd63180000000000186000000c0000000000000005000000d70001000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000000326500001000000d95a09000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYBLOB="98758c19ca68bc1754fd06c04839bb50c547cb675859e38f8be101cb831a75dd1ad02f738bed3a98eae70d6d19564711de5523c3aeab1aefb0dff7553ffb1124e5b608698319491684ef4c5373d3e761135a3aa8e4bad631cd8421f3665da58647fcb490facf89577d634f887131b8b8b860f6015535995050402b937621a2c7fedb45483d340a", @ANYRES32=r1], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00000d6000/0x2000)=nil, 0x2000, 0x3000001, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r7, 0x1, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423f, 0xfffffffe, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 4.62755304s ago: executing program 8 (id=2034): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) eventfd2(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.485479297s ago: executing program 2 (id=2038): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x9b, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fef}, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000005f00), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000012c0)=0x2) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) r1 = semget(0x3, 0x2, 0x284) semctl$IPC_RMID(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffe, 0x0, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x8, 0x7, 0x9, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000aa, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 3.402849499s ago: executing program 5 (id=2039): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x9b, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fef}, 0x0, 0x0) r0 = semget(0x3, 0x2, 0x284) semctl$IPC_RMID(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffe, 0x0, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x8, 0x7, 0x9, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000aa, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 3.237244736s ago: executing program 5 (id=2040): r0 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x6}, {}, {}, {0xf04}], 0x0, 0x0, 0x0, 0x0, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r5) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioperm(0x0, 0x7fff, 0x15f9) r6 = syz_open_dev$vbi(&(0x7f0000000c40), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, &(0x7f0000000100)={0x0, @motion_det}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'veth1_macvtap\x00', @multicast}) fsmount(0xffffffffffffffff, 0x1, 0x0) 3.171672783s ago: executing program 2 (id=2041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) pipe(&(0x7f0000000040)) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) dup(0xffffffffffffffff) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) (async) sendmsg$BATADV_CMD_TP_METER(r3, 0x0, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c4, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x520) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 2.872640535s ago: executing program 2 (id=2042): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r1}, 0x8) 2.763021304s ago: executing program 2 (id=2043): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x9fd, 0x82, 0x34800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x85, &(0x7f0000005f40)={r4}, &(0x7f0000005e80)=0xfc9e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0xa}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f0000000180)='syzkaller\x00', 0x1000, 0x85, &(0x7f0000000800)=""/133, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x5, 0x8, 0x8}, 0x10, 0x2af43, r2, 0x0, &(0x7f00000006c0)=[r1], &(0x7f0000000700), 0x10, 0x33b, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r6, r6}, &(0x7f00000000c0)=""/28, 0x1c, &(0x7f00000001c0)={&(0x7f0000000140)={'poly1305\x00'}}) r7 = dup(r0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) 2.641985859s ago: executing program 8 (id=2044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x81, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x5, 0x2, 0x3}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r4 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000040)=0x1d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="080001000000000008000200e0000002080009000e00000008000100ac1414"], 0x54}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 2.162771587s ago: executing program 5 (id=2045): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0)=0x20000801, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) creat(&(0x7f0000000140)='./file0\x00', 0x50) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x2239, &(0x7f0000000440)={0x0, 0x1ec6, 0x0, 0x4, 0x3c1}, 0x0, 0x0) pipe2$9p(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 1.803353899s ago: executing program 8 (id=2046): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file2\x00', r1, &(0x7f0000000100)='./file2\x00') 1.76792142s ago: executing program 8 (id=2047): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4010, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) write$binfmt_misc(r3, &(0x7f0000000300), 0xd00) 1.682558954s ago: executing program 8 (id=2048): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x50) syz_emit_ethernet(0x8e, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000010380)=""/47, 0x2f}], 0x4) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000300)={0xd, 0x21, 0x3, 0x19, 0x5, 0x8, 0x5, 0x4f, 0x1}) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x37) syz_emit_ethernet(0x46, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd700004000050d0000000080009000200000008000c00a60a000006"], 0x3c}, 0x1, 0x0, 0x0, 0xc100}, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00000109006e"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) 1.272793252s ago: executing program 5 (id=2049): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file2\x00', r1, &(0x7f0000000100)='./file2\x00') (fail_nth: 3) 1.272486136s ago: executing program 2 (id=2050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1.272348594s ago: executing program 2 (id=2051): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) lstat(0x0, &(0x7f00000003c0)) r1 = openat$audio1(0xffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) read$char_usb(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}]) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd29, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_usbip_server_init(0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000300)='fusectl\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) unshare(0x20020680) 1.172808527s ago: executing program 5 (id=2052): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) eventfd2(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 592.961153ms ago: executing program 8 (id=2053): r0 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x6}, {}, {}, {0xf04}], 0x0, 0x0, 0x0, 0x0, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r5) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioperm(0x0, 0x7fff, 0x15f9) r6 = syz_open_dev$vbi(&(0x7f0000000c40), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, &(0x7f0000000100)={0x0, @motion_det}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'veth1_macvtap\x00', @multicast}) fsmount(0xffffffffffffffff, 0x1, 0x0) 592.72488ms ago: executing program 7 (id=1926): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x40000000015, 0x5, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000000)=[0x9, 0x6], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x26, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000dd63180000000000186000000c0000000000000005000000d70001000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000000326500001000000d95a09000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYBLOB="98758c19ca68bc1754fd06c04839bb50c547cb675859e38f8be101cb831a75dd1ad02f738bed3a98eae70d6d19564711de5523c3aeab1aefb0dff7553ffb1124e5b608698319491684ef4c5373d3e761135a3aa8e4bad631cd8421f3665da58647fcb490facf89577d634f887131b8b8b860f6015535995050402b937621a2c7fedb45483d340a", @ANYRES32=r1], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00000d6000/0x2000)=nil, 0x2000, 0x3000001, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r7, 0x1, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423f, 0xfffffffe, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 0s ago: executing program 5 (id=2054): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4010, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) write$binfmt_misc(r3, &(0x7f0000000300), 0x4) (fail_nth: 4) kernel console output (not intermixed with test programs): 762.726358][ T1013] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 762.889513][ T1013] usb 12-1: config 1 interface 0 has no altsetting 0 [ 762.893831][ T1013] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 762.896105][ T1013] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.898687][ T1013] usb 12-1: Product: syz [ 762.899760][ T1013] usb 12-1: Manufacturer: syz [ 762.900927][ T1013] usb 12-1: SerialNumber: syz [ 763.052654][T15902] mmap: syz.8.1794 (15902): VmData 37621760 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 763.089586][T15906] 9pnet_fd: p9_fd_create_tcp (15906): problem connecting socket to 127.0.0.1 [ 763.218192][T15912] netlink: 'syz.8.1798': attribute type 1 has an invalid length. [ 763.220230][T15912] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1798'. [ 763.384274][T15912] netlink: 'syz.8.1798': attribute type 4 has an invalid length. [ 763.394586][T15917] FAULT_INJECTION: forcing a failure. [ 763.394586][T15917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.397932][T15917] CPU: 1 UID: 0 PID: 15917 Comm: syz.5.1800 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 763.400420][T15917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 763.402906][T15917] Call Trace: [ 763.403699][T15917] [ 763.404403][T15917] dump_stack_lvl+0x16c/0x1f0 [ 763.405532][T15917] should_fail_ex+0x497/0x5b0 [ 763.406647][T15917] _copy_from_iter+0x29b/0x1400 [ 763.407821][T15917] ? __pfx__copy_from_iter+0x10/0x10 [ 763.409078][T15917] ? __virt_addr_valid+0x1a4/0x590 [ 763.410284][T15917] ? __virt_addr_valid+0x5e/0x590 [ 763.411482][T15917] ? __phys_addr_symbol+0x30/0x80 [ 763.412715][T15917] ? __check_object_size+0x488/0x710 [ 763.413957][T15917] netlink_sendmsg+0x813/0xd70 [ 763.415092][T15917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.416336][T15917] ____sys_sendmsg+0x9ae/0xb40 [ 763.417467][T15917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 763.418702][T15917] ? get_compat_msghdr+0x11b/0x170 [ 763.420088][T15917] ? __pfx___lock_acquire+0x10/0x10 [ 763.421711][T15917] ___sys_sendmsg+0x135/0x1e0 [ 763.422827][T15917] ? __pfx____sys_sendmsg+0x10/0x10 [ 763.424069][T15917] ? lock_acquire+0x2f/0xb0 [ 763.425313][T15917] ? __fget_files+0x40/0x3f0 [ 763.426733][T15917] ? fdget+0x176/0x210 [ 763.427753][T15917] __sys_sendmsg+0x117/0x1f0 [ 763.428863][T15917] ? __pfx___sys_sendmsg+0x10/0x10 [ 763.430066][T15917] ? __fget_files+0x244/0x3f0 [ 763.431244][T15917] __do_fast_syscall_32+0x73/0x120 [ 763.432471][T15917] do_fast_syscall_32+0x32/0x80 [ 763.433630][T15917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 763.435138][T15917] RIP: 0023:0xf7f32579 [ 763.436119][T15917] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 763.440624][T15917] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 763.442574][T15917] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000340 [ 763.444432][T15917] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 763.446299][T15917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 763.448166][T15917] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 763.450028][T15917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 763.451881][T15917] [ 763.531688][ T1013] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 764.617883][T15957] FAULT_INJECTION: forcing a failure. [ 764.617883][T15957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.621284][T15957] CPU: 2 UID: 0 PID: 15957 Comm: syz.5.1813 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 764.624057][T15957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 764.626935][T15957] Call Trace: [ 764.627938][T15957] [ 764.628843][T15957] dump_stack_lvl+0x16c/0x1f0 [ 764.630110][T15957] should_fail_ex+0x497/0x5b0 [ 764.631344][T15957] _copy_to_user+0x32/0xd0 [ 764.632551][T15957] simple_read_from_buffer+0xd0/0x160 [ 764.633977][T15957] proc_fail_nth_read+0x198/0x270 [ 764.635354][T15957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.636898][T15957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.638353][T15957] vfs_read+0x1df/0xbe0 [ 764.639445][T15957] ? __fget_files+0x23a/0x3f0 [ 764.640682][T15957] ? fdget_pos+0x24c/0x360 [ 764.641850][T15957] ? __pfx_lock_release+0x10/0x10 [ 764.643178][T15957] ? trace_lock_acquire+0x14a/0x1d0 [ 764.644555][T15957] ? __pfx_vfs_read+0x10/0x10 [ 764.645834][T15957] ? __pfx___mutex_lock+0x10/0x10 [ 764.647205][T15957] ? __fget_files+0x244/0x3f0 [ 764.648469][T15957] ksys_read+0x12f/0x260 [ 764.649615][T15957] ? __pfx_ksys_read+0x10/0x10 [ 764.650887][T15957] __do_fast_syscall_32+0x73/0x120 [ 764.652238][T15957] do_fast_syscall_32+0x32/0x80 [ 764.653527][T15957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 764.655179][T15957] RIP: 0023:0xf7f32579 [ 764.656257][T15957] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 764.661255][T15957] RSP: 002b:00000000f56b6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 764.663415][T15957] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56b6620 [ 764.665476][T15957] RDX: 000000000000000f RSI: 00000000f73bdff4 RDI: 0000000000000000 [ 764.667583][T15957] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 764.669628][T15957] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 764.671673][T15957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 764.673729][T15957] [ 764.979156][T15975] input: syz0 as /devices/virtual/input/input24 [ 765.003742][T15975] input: syz0 as /devices/virtual/input/input25 [ 765.065201][T15977] ALSA: seq fatal error: cannot create timer (-22) [ 765.461234][T11693] usb 12-1: USB disconnect, device number 4 [ 765.466077][T11693] usblp0: removed [ 766.203710][T15998] can0: slcan on ptm0. [ 766.251974][T16004] fuse: Bad value for 'user_id' [ 766.253382][T16004] fuse: Bad value for 'user_id' [ 766.307307][T15997] can0 (unregistered): slcan off ptm0. [ 766.393062][T16010] FAULT_INJECTION: forcing a failure. [ 766.393062][T16010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.396843][T16010] CPU: 2 UID: 0 PID: 16010 Comm: syz.2.1834 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 766.399611][T16010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 766.402423][T16010] Call Trace: [ 766.403300][T16010] [ 766.404082][T16010] dump_stack_lvl+0x16c/0x1f0 [ 766.405324][T16010] should_fail_ex+0x497/0x5b0 [ 766.406553][T16010] _copy_from_iter+0x29b/0x1400 [ 766.407840][T16010] ? __pfx__copy_from_iter+0x10/0x10 [ 766.409232][T16010] ? __virt_addr_valid+0x1a4/0x590 [ 766.410583][T16010] ? __virt_addr_valid+0x5e/0x590 [ 766.411908][T16010] ? const_folio_flags.constprop.0+0x56/0x150 [ 766.413509][T16010] ? __phys_addr_symbol+0x30/0x80 [ 766.415139][T16010] ? __check_object_size+0x488/0x710 [ 766.416693][T16010] netlink_sendmsg+0x813/0xd70 [ 766.418037][T16010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.419431][T16010] ____sys_sendmsg+0x9ae/0xb40 [ 766.420716][T16010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.422104][T16010] ? get_compat_msghdr+0x11b/0x170 [ 766.423448][T16010] ? __pfx___lock_acquire+0x10/0x10 [ 766.425096][T16010] ___sys_sendmsg+0x135/0x1e0 [ 766.426650][T16010] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.428038][T16010] ? lock_acquire+0x2f/0xb0 [ 766.429249][T16010] ? __fget_files+0x40/0x3f0 [ 766.430466][T16010] ? fdget+0x176/0x210 [ 766.431544][T16010] __sys_sendmsg+0x117/0x1f0 [ 766.432761][T16010] ? __pfx___sys_sendmsg+0x10/0x10 [ 766.434110][T16010] ? __fget_files+0x244/0x3f0 [ 766.435487][T16010] __do_fast_syscall_32+0x73/0x120 [ 766.436838][T16010] do_fast_syscall_32+0x32/0x80 [ 766.438148][T16010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 766.439795][T16010] RIP: 0023:0xf7fc3579 [ 766.440873][T16010] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 766.445935][T16010] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 766.448131][T16010] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 766.450203][T16010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 766.452263][T16010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 766.454331][T16010] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 766.456393][T16010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 766.458463][T16010] [ 767.159034][T16028] relay: one or more items not logged [item size (56) > sub-buffer size (6)] [ 767.368342][T16033] FAULT_INJECTION: forcing a failure. [ 767.368342][T16033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.372605][T16033] CPU: 2 UID: 0 PID: 16033 Comm: syz.2.1842 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 767.375392][T16033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 767.378189][T16033] Call Trace: [ 767.379075][T16033] [ 767.379856][T16033] dump_stack_lvl+0x16c/0x1f0 [ 767.381109][T16033] should_fail_ex+0x497/0x5b0 [ 767.382349][T16033] _copy_from_iter+0x4a5/0x1400 [ 767.383634][T16033] ? __pfx__copy_from_iter+0x10/0x10 [ 767.385028][T16033] ? __virt_addr_valid+0x1a4/0x590 [ 767.386373][T16033] ? __virt_addr_valid+0x5e/0x590 [ 767.387743][T16033] ? const_folio_flags.constprop.0+0x56/0x150 [ 767.389356][T16033] ? __phys_addr_symbol+0x30/0x80 [ 767.390676][T16033] ? __check_object_size+0x488/0x710 [ 767.392062][T16033] virtio_transport_alloc_skb+0x67d/0xe50 [ 767.393595][T16033] virtio_transport_send_pkt_info+0x7d9/0x1000 [ 767.395306][T16033] ? find_held_lock+0x2d/0x110 [ 767.396587][T16033] virtio_transport_stream_enqueue+0xbc/0x100 [ 767.398187][T16033] ? __pfx_virtio_transport_stream_enqueue+0x10/0x10 [ 767.399931][T16033] ? lock_acquire+0x2f/0xb0 [ 767.401169][T16033] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 767.402705][T16033] ? lockdep_hardirqs_on+0x7c/0x110 [ 767.404084][T16033] vsock_connectible_sendmsg+0xe5c/0x12b0 [ 767.405589][T16033] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 767.407220][T16033] ? find_held_lock+0x2d/0x110 [ 767.408501][T16033] ? __pfx_aa_sk_perm+0x10/0x10 [ 767.409793][T16033] ? __pfx_woken_wake_function+0x10/0x10 [ 767.411267][T16033] ? __pfx_lock_release+0x10/0x10 [ 767.412602][T16033] ? trace_lock_acquire+0x14a/0x1d0 [ 767.413978][T16033] sock_write_iter+0x4fe/0x5b0 [ 767.415271][T16033] ? __pfx_sock_write_iter+0x10/0x10 [ 767.416681][T16033] ? copy_compat_iovec_from_user+0x140/0x180 [ 767.418257][T16033] do_iter_readv_writev+0x532/0x7f0 [ 767.419644][T16033] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 767.421165][T16033] ? bpf_lsm_file_permission+0x9/0x10 [ 767.422578][T16033] ? security_file_permission+0x71/0x210 [ 767.424052][T16033] vfs_writev+0x363/0xdd0 [ 767.425197][T16033] ? find_held_lock+0x2d/0x110 [ 767.426461][T16033] ? __pfx_vfs_writev+0x10/0x10 [ 767.427748][T16033] ? find_held_lock+0x2d/0x110 [ 767.429032][T16033] ? __pfx_lock_release+0x10/0x10 [ 767.430375][T16033] ? trace_lock_acquire+0x14a/0x1d0 [ 767.431748][T16033] ? __fget_files+0x244/0x3f0 [ 767.432998][T16033] ? do_writev+0x289/0x370 [ 767.434173][T16033] do_writev+0x289/0x370 [ 767.435291][T16033] ? __pfx_do_writev+0x10/0x10 [ 767.436560][T16033] __do_fast_syscall_32+0x73/0x120 [ 767.437899][T16033] do_fast_syscall_32+0x32/0x80 [ 767.439186][T16033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 767.440842][T16033] RIP: 0023:0xf7fc3579 [ 767.441918][T16033] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 767.446942][T16033] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 767.449127][T16033] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200002c0 [ 767.451219][T16033] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 767.453292][T16033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 767.455359][T16033] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 767.457431][T16033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 767.459499][T16033] [ 767.460389][ T57] usb 13-1: new full-speed USB device number 8 using dummy_hcd [ 767.608368][ T57] usb 13-1: config 1 interface 0 has no altsetting 0 [ 767.611910][ T57] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 767.614298][ T57] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.616540][ T57] usb 13-1: Product: syz [ 767.617665][ T57] usb 13-1: Manufacturer: syz [ 767.618901][ T57] usb 13-1: SerialNumber: syz [ 767.717844][ T39] audit: type=1326 audit(1731497459.500:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.7.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 767.723537][ T39] audit: type=1326 audit(1731497459.500:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.7.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 767.733438][ T39] audit: type=1326 audit(1731497459.500:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.7.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 767.742679][ T39] audit: type=1326 audit(1731497459.500:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.7.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 767.748573][ T39] audit: type=1326 audit(1731497459.500:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.7.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 767.754087][ T39] audit: type=1326 audit(1731497459.500:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.7.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=355 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 767.763053][ T39] audit: type=1326 audit(1731497459.500:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.7.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 767.768757][ T39] audit: type=1326 audit(1731497459.500:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.7.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 767.774352][ T39] audit: type=1326 audit(1731497459.500:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.7.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 767.780162][ T39] audit: type=1326 audit(1731497459.500:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.7.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 768.285111][ T57] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 768.786522][T16024] FAULT_INJECTION: forcing a failure. [ 768.786522][T16024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.790758][T16024] CPU: 0 UID: 0 PID: 16024 Comm: syz.8.1838 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 768.793575][T16024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 768.797165][T16024] Call Trace: [ 768.798311][T16024] [ 768.799117][T16024] dump_stack_lvl+0x16c/0x1f0 [ 768.800316][T16024] should_fail_ex+0x497/0x5b0 [ 768.801742][T16024] _copy_to_user+0x32/0xd0 [ 768.803038][T16024] simple_read_from_buffer+0xd0/0x160 [ 768.804489][T16024] proc_fail_nth_read+0x198/0x270 [ 768.805887][T16024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 768.807353][T16024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 768.809197][T16024] vfs_read+0x1df/0xbe0 [ 768.810503][T16024] ? __fget_files+0x23a/0x3f0 [ 768.812041][T16024] ? fdget_pos+0x24c/0x360 [ 768.813572][T16024] ? __pfx_lock_release+0x10/0x10 [ 768.815116][T16024] ? trace_lock_acquire+0x14a/0x1d0 [ 768.816599][T16024] ? __pfx_vfs_read+0x10/0x10 [ 768.817844][T16024] ? __pfx___mutex_lock+0x10/0x10 [ 768.819200][T16024] ? __fget_files+0x244/0x3f0 [ 768.820442][T16024] ksys_read+0x12f/0x260 [ 768.821564][T16024] ? __pfx_ksys_read+0x10/0x10 [ 768.822828][T16024] __do_fast_syscall_32+0x73/0x120 [ 768.824206][T16024] do_fast_syscall_32+0x32/0x80 [ 768.825537][T16024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 768.827205][T16024] RIP: 0023:0xf7f70579 [ 768.828284][T16024] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 768.833310][T16024] RSP: 002b:00000000f56f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 768.835622][T16024] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f56f6620 [ 768.838123][T16024] RDX: 000000000000000f RSI: 00000000f73fdff4 RDI: 0000000000000000 [ 768.840211][T16024] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 768.842290][T16024] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 768.844351][T16024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 768.846445][T16024] [ 768.878569][ T1013] usb 13-1: USB disconnect, device number 8 [ 768.911615][ T1013] usblp0: removed [ 769.656436][ T831] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 769.806406][ T831] usb 13-1: Using ep0 maxpacket: 8 [ 769.812932][ T831] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 769.815876][ T831] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 769.818813][ T831] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 769.821391][ T831] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 769.824677][ T831] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 769.828078][ T831] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.083161][T16094] binder_alloc: 16093: binder_install_single_page failed to insert page at offset 0 with -14 [ 770.120794][T16094] netem: unknown loss type 0 [ 770.122674][T16094] netem: change failed [ 770.129080][ T831] usb 13-1: GET_CAPABILITIES returned 0 [ 770.129098][ T831] usbtmc 13-1:16.0: can't read capabilities [ 770.140997][T16094] netlink: 212424 bytes leftover after parsing attributes in process `syz.5.1860'. [ 770.184713][T16101] FAULT_INJECTION: forcing a failure. [ 770.184713][T16101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.184768][T16101] CPU: 0 UID: 0 PID: 16101 Comm: syz.5.1863 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 770.184783][T16101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 770.184798][T16101] Call Trace: [ 770.184803][T16101] [ 770.184808][T16101] dump_stack_lvl+0x16c/0x1f0 [ 770.184839][T16101] should_fail_ex+0x497/0x5b0 [ 770.184856][T16101] _copy_from_iter+0x29b/0x1400 [ 770.184872][T16101] ? __pfx__copy_from_iter+0x10/0x10 [ 770.184884][T16101] ? __virt_addr_valid+0x1a4/0x590 [ 770.184899][T16101] ? __virt_addr_valid+0x5e/0x590 [ 770.184911][T16101] ? __phys_addr_symbol+0x30/0x80 [ 770.184927][T16101] ? __check_object_size+0x488/0x710 [ 770.184943][T16101] netlink_sendmsg+0x813/0xd70 [ 770.184961][T16101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.184980][T16101] ____sys_sendmsg+0x9ae/0xb40 [ 770.184996][T16101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.185009][T16101] ? get_compat_msghdr+0x11b/0x170 [ 770.185025][T16101] ? __pfx___lock_acquire+0x10/0x10 [ 770.185043][T16101] ___sys_sendmsg+0x135/0x1e0 [ 770.185055][T16101] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.185072][T16101] ? lock_acquire+0x2f/0xb0 [ 770.185086][T16101] ? __fget_files+0x40/0x3f0 [ 770.185102][T16101] ? fdget+0x176/0x210 [ 770.185114][T16101] __sys_sendmsg+0x117/0x1f0 [ 770.185125][T16101] ? __pfx___sys_sendmsg+0x10/0x10 [ 770.185136][T16101] ? __fget_files+0x244/0x3f0 [ 770.185155][T16101] __do_fast_syscall_32+0x73/0x120 [ 770.185167][T16101] do_fast_syscall_32+0x32/0x80 [ 770.185178][T16101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 770.185190][T16101] RIP: 0023:0xf7f32579 [ 770.185199][T16101] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 770.185210][T16101] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 770.185221][T16101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 770.185228][T16101] RDX: 0000000024044894 RSI: 0000000000000000 RDI: 0000000000000000 [ 770.185235][T16101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 770.185242][T16101] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 770.185248][T16101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 770.185261][T16101] [ 770.377189][T11693] usb 13-1: USB disconnect, device number 9 [ 771.064676][T16109] netlink: 'syz.8.1866': attribute type 10 has an invalid length. [ 771.068727][T16109] netlink: 'syz.8.1866': attribute type 10 has an invalid length. [ 771.071357][T16109] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1866'. [ 771.772532][T16127] FAULT_INJECTION: forcing a failure. [ 771.772532][T16127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.784926][T16127] CPU: 3 UID: 0 PID: 16127 Comm: syz.8.1871 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 771.788454][T16127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 771.792012][T16127] Call Trace: [ 771.793158][T16127] [ 771.794152][T16127] dump_stack_lvl+0x16c/0x1f0 [ 771.795670][T16127] should_fail_ex+0x497/0x5b0 [ 771.797272][T16127] strncpy_from_user+0x3b/0x2c0 [ 771.798833][T16127] getname_flags.part.0+0x8f/0x550 [ 771.800336][T16127] getname_flags+0x93/0xf0 [ 771.801856][T16127] __ia32_sys_linkat+0xdd/0x130 [ 771.803540][T16127] __do_fast_syscall_32+0x73/0x120 [ 771.805288][T16127] do_fast_syscall_32+0x32/0x80 [ 771.806963][T16127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 771.809105][T16127] RIP: 0023:0xf7f70579 [ 771.810484][T16127] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 771.816556][T16127] RSP: 002b:00000000f56f655c EFLAGS: 00000296 ORIG_RAX: 000000000000012f [ 771.819006][T16127] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 771.821069][T16127] RDX: 0000000000000003 RSI: 0000000020000240 RDI: 0000000000000000 [ 771.823562][T16127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 771.826028][T16127] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 771.828291][T16127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 771.830900][T16127] [ 772.026983][T16130] binder_alloc: 16129: binder_install_single_page failed to insert page at offset 0 with -14 [ 772.103297][T16130] netem: unknown loss type 0 [ 772.105297][T16130] netem: change failed [ 772.112480][T16130] netlink: 212424 bytes leftover after parsing attributes in process `syz.8.1872'. [ 772.193630][T16136] FAULT_INJECTION: forcing a failure. [ 772.193630][T16136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.197793][T16136] CPU: 3 UID: 0 PID: 16136 Comm: syz.7.1873 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 772.200761][T16136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 772.203523][T16136] Call Trace: [ 772.204420][T16136] [ 772.205208][T16136] dump_stack_lvl+0x16c/0x1f0 [ 772.206454][T16136] should_fail_ex+0x497/0x5b0 [ 772.207705][T16136] _copy_from_user+0x2e/0xd0 [ 772.208883][T16136] kvm_clear_dirty_log_protect+0x463/0x900 [ 772.210345][T16136] kvm_vm_compat_ioctl+0x2d5/0x440 [ 772.211662][T16136] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 772.213136][T16136] ? trace_lock_acquire+0x14a/0x1d0 [ 772.214485][T16136] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 772.215902][T16136] __do_compat_sys_ioctl+0x259/0x2b0 [ 772.217245][T16136] __do_fast_syscall_32+0x73/0x120 [ 772.218570][T16136] do_fast_syscall_32+0x32/0x80 [ 772.219859][T16136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 772.221446][T16136] RIP: 0023:0xf7f13579 [ 772.222526][T16136] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 772.227544][T16136] RSP: 002b:00000000f567555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 772.229735][T16136] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c018aec0 [ 772.231790][T16136] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 772.233780][T16136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 772.235862][T16136] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 772.237888][T16136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 772.239942][T16136] [ 772.400992][T16148] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 772.480527][T16150] FAULT_INJECTION: forcing a failure. [ 772.480527][T16150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.483975][T16150] CPU: 0 UID: 0 PID: 16150 Comm: syz.2.1878 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 772.487081][T16150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 772.490074][T16150] Call Trace: [ 772.490998][T16150] [ 772.491800][T16150] dump_stack_lvl+0x16c/0x1f0 [ 772.493071][T16150] should_fail_ex+0x497/0x5b0 [ 772.494393][T16150] _copy_from_user+0x2e/0xd0 [ 772.495651][T16150] kvm_arch_vm_ioctl+0x1472/0x1ca0 [ 772.497065][T16150] ? __pfx___lock_acquire+0x10/0x10 [ 772.498572][T16150] ? find_held_lock+0x2d/0x110 [ 772.499862][T16150] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 772.501352][T16150] ? hlock_class+0x4e/0x130 [ 772.502574][T16150] ? mark_lock+0xb5/0xc60 [ 772.503721][T16150] ? hlock_class+0x4e/0x130 [ 772.504939][T16150] ? mark_lock+0xb5/0xc60 [ 772.506100][T16150] ? __pfx_mark_lock+0x10/0x10 [ 772.507419][T16150] ? mark_lock+0xb5/0xc60 [ 772.508579][T16150] ? hlock_class+0x4e/0x130 [ 772.509789][T16150] ? mark_lock+0xb5/0xc60 [ 772.510939][T16150] ? page_ext_get+0x34/0x310 [ 772.512169][T16150] ? __pfx_mark_lock+0x10/0x10 [ 772.513451][T16150] ? hlock_class+0x4e/0x130 [ 772.514657][T16150] ? __lock_acquire+0xbdd/0x3ce0 [ 772.515976][T16150] ? hlock_class+0x4e/0x130 [ 772.517195][T16150] ? hlock_class+0x4e/0x130 [ 772.518408][T16150] ? __pfx___lock_acquire+0x10/0x10 [ 772.519782][T16150] ? find_held_lock+0x2d/0x110 [ 772.521095][T16150] ? find_held_lock+0x2d/0x110 [ 772.522364][T16150] ? is_bpf_text_address+0x8a/0x1a0 [ 772.523741][T16150] ? __pfx_lock_release+0x10/0x10 [ 772.525090][T16150] ? trace_lock_acquire+0x14a/0x1d0 [ 772.526472][T16150] ? lock_acquire+0x2f/0xb0 [ 772.527694][T16150] ? is_bpf_text_address+0x30/0x1a0 [ 772.529272][T16150] ? bpf_ksym_find+0x124/0x1c0 [ 772.530672][T16150] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 772.532315][T16150] ? is_bpf_text_address+0x94/0x1a0 [ 772.533809][T16150] ? kernel_text_address+0x8d/0x100 [ 772.535191][T16150] ? __kernel_text_address+0xd/0x40 [ 772.536582][T16150] kvm_vm_ioctl+0x1a6f/0x3de0 [ 772.537953][T16150] ? stack_trace_save+0x95/0xd0 [ 772.539244][T16150] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 772.540618][T16150] ? __pfx_mark_lock+0x10/0x10 [ 772.541881][T16150] ? stack_depot_save_flags+0x28/0x900 [ 772.543312][T16150] ? kasan_save_stack+0x42/0x60 [ 772.544608][T16150] ? kasan_save_stack+0x33/0x60 [ 772.545878][T16150] ? kasan_save_track+0x14/0x30 [ 772.547207][T16150] ? kasan_save_free_info+0x3b/0x60 [ 772.548616][T16150] ? __kasan_slab_free+0x51/0x70 [ 772.549934][T16150] ? kfree+0x14f/0x4b0 [ 772.551022][T16150] ? tomoyo_path_number_perm+0x467/0x5b0 [ 772.552518][T16150] ? security_file_ioctl_compat+0x9b/0x240 [ 772.554061][T16150] ? __do_compat_sys_ioctl+0x52/0x2b0 [ 772.555482][T16150] ? __do_fast_syscall_32+0x73/0x120 [ 772.556955][T16150] ? do_fast_syscall_32+0x32/0x80 [ 772.558511][T16150] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 772.560263][T16150] ? kvm_arch_vm_compat_ioctl+0x2d1/0x480 [ 772.561779][T16150] ? hlock_class+0x4e/0x130 [ 772.562989][T16150] ? mark_lock+0xb5/0xc60 [ 772.564302][T16150] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 772.565977][T16150] ? __pfx_mark_lock+0x10/0x10 [ 772.567278][T16150] ? find_held_lock+0x2d/0x110 [ 772.568604][T16150] ? tomoyo_path_number_perm+0x292/0x5b0 [ 772.570173][T16150] ? __pfx_lock_release+0x10/0x10 [ 772.571537][T16150] ? tomoyo_path_number_perm+0x467/0x5b0 [ 772.573024][T16150] ? tomoyo_path_number_perm+0x190/0x5b0 [ 772.574619][T16150] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 772.576226][T16150] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 772.577845][T16150] ? do_vfs_ioctl+0x513/0x1950 [ 772.579122][T16150] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 772.580502][T16150] kvm_vm_compat_ioctl+0x399/0x440 [ 772.581867][T16150] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 772.583353][T16150] ? trace_lock_acquire+0x14a/0x1d0 [ 772.584763][T16150] ? __fget_files+0x244/0x3f0 [ 772.586035][T16150] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 772.587547][T16150] __do_compat_sys_ioctl+0x259/0x2b0 [ 772.588965][T16150] __do_fast_syscall_32+0x73/0x120 [ 772.590319][T16150] do_fast_syscall_32+0x32/0x80 [ 772.591610][T16150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 772.593282][T16150] RIP: 0023:0xf7fc3579 [ 772.594362][T16150] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 772.599389][T16150] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 772.601609][T16150] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c048aec8 [ 772.603675][T16150] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 772.605792][T16150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 772.607912][T16150] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 772.609988][T16150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 772.612059][T16150] [ 772.906563][T11693] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 773.066670][ T5315] Bluetooth: hci2: command tx timeout [ 773.706372][T11693] usb 10-1: Using ep0 maxpacket: 8 [ 773.713596][T11693] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 773.717942][T11693] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 773.720735][T11693] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 773.723538][T11693] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.727185][T11693] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 773.729911][T11693] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.802475][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1883'. [ 773.959185][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 773.959197][ T39] audit: type=1326 audit(1731497465.740:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.8.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x7ffc0000 [ 773.967407][ T39] audit: type=1326 audit(1731497465.740:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.8.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x7ffc0000 [ 773.972774][T11693] usb 10-1: GET_CAPABILITIES returned 0 [ 773.974552][T11693] usbtmc 10-1:16.0: can't read capabilities [ 773.981746][ T39] audit: type=1326 audit(1731497465.740:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.8.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f70579 code=0x7ffc0000 [ 773.987627][ T39] audit: type=1326 audit(1731497465.740:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.8.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x7ffc0000 [ 773.993342][ T39] audit: type=1326 audit(1731497465.740:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.8.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x7ffc0000 [ 773.999515][ T39] audit: type=1326 audit(1731497465.740:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.8.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f70579 code=0x7ffc0000 [ 774.005588][ T39] audit: type=1326 audit(1731497465.740:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.8.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x7ffc0000 [ 774.011550][ T39] audit: type=1326 audit(1731497465.740:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.8.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x7ffc0000 [ 774.017392][ T39] audit: type=1326 audit(1731497465.740:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.8.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f70579 code=0x7ffc0000 [ 774.022856][ T39] audit: type=1326 audit(1731497465.750:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.8.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x7ffc0000 [ 774.249089][T16185] FAULT_INJECTION: forcing a failure. [ 774.249089][T16185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.253390][T16185] CPU: 3 UID: 0 PID: 16185 Comm: syz.8.1889 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 774.256311][T16185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 774.261937][T16185] Call Trace: [ 774.261951][T16185] [ 774.261956][T16185] dump_stack_lvl+0x16c/0x1f0 [ 774.261974][T16185] should_fail_ex+0x497/0x5b0 [ 774.261988][T16185] _copy_from_user+0x2e/0xd0 [ 774.262002][T16185] kstrtouint_from_user+0xd7/0x1c0 [ 774.262017][T16185] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 774.262037][T16185] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 774.262055][T16185] proc_fail_nth_write+0x84/0x250 [ 774.262070][T16185] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 774.262086][T16185] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 774.262099][T16185] vfs_write+0x24c/0x1150 [ 774.262111][T16185] ? __fget_files+0x23a/0x3f0 [ 774.262122][T16185] ? fdget_pos+0x24c/0x360 [ 774.262132][T16185] ? __pfx_lock_release+0x10/0x10 [ 774.262146][T16185] ? trace_lock_acquire+0x14a/0x1d0 [ 774.262159][T16185] ? __pfx_vfs_write+0x10/0x10 [ 774.262173][T16185] ? __pfx___mutex_lock+0x10/0x10 [ 774.262188][T16185] ? __fget_files+0x244/0x3f0 [ 774.262205][T16185] ksys_write+0x12f/0x260 [ 774.262216][T16185] ? __pfx_ksys_write+0x10/0x10 [ 774.262231][T16185] __do_fast_syscall_32+0x73/0x120 [ 774.262243][T16185] do_fast_syscall_32+0x32/0x80 [ 774.262254][T16185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 774.262266][T16185] RIP: 0023:0xf7f70579 [ 774.292903][T11693] usb 10-1: USB disconnect, device number 7 [ 774.293441][T16185] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 774.302824][T16185] RSP: 002b:00000000f56f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 774.305016][T16185] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56f6620 [ 774.307087][T16185] RDX: 0000000000000001 RSI: 00000000f73fdff4 RDI: 0000000000000000 [ 774.309156][T16185] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 774.311222][T16185] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 774.313442][T16185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 774.315549][T16185] [ 775.043918][T16198] FAULT_INJECTION: forcing a failure. [ 775.043918][T16198] name failslab, interval 1, probability 0, space 0, times 0 [ 775.047389][T16198] CPU: 1 UID: 0 PID: 16198 Comm: syz.8.1894 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 775.050175][T16198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 775.052946][T16198] Call Trace: [ 775.053822][T16198] [ 775.054604][T16198] dump_stack_lvl+0x16c/0x1f0 [ 775.055861][T16198] should_fail_ex+0x497/0x5b0 [ 775.057110][T16198] ? fs_reclaim_acquire+0xae/0x150 [ 775.058445][T16198] should_failslab+0xc2/0x120 [ 775.059675][T16198] __kmalloc_cache_noprof+0x6b/0x310 [ 775.061055][T16198] ? proc_do_submiturb+0x1d22/0x3b40 [ 775.062488][T16198] proc_do_submiturb+0x1d22/0x3b40 [ 775.063839][T16198] ? rcuref_put_slowpath+0x240/0x250 [ 775.065224][T16198] usbdev_ioctl+0xac5/0x3f90 [ 775.066436][T16198] ? __pfx_usbdev_ioctl+0x10/0x10 [ 775.067764][T16198] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 775.069324][T16198] ? do_vfs_ioctl+0x513/0x1950 [ 775.070578][T16198] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 775.071953][T16198] ? trace_lock_acquire+0x14a/0x1d0 [ 775.073337][T16198] ? __fget_files+0x244/0x3f0 [ 775.074568][T16198] ? __pfx_usbdev_ioctl+0x10/0x10 [ 775.075889][T16198] compat_ptr_ioctl+0x6b/0xa0 [ 775.077174][T16198] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 775.078649][T16198] __do_compat_sys_ioctl+0x259/0x2b0 [ 775.080037][T16198] __do_fast_syscall_32+0x73/0x120 [ 775.081383][T16198] do_fast_syscall_32+0x32/0x80 [ 775.082646][T16198] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 775.084271][T16198] RIP: 0023:0xf7f70579 [ 775.085344][T16198] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 775.090176][T16198] RSP: 002b:00000000f56f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 775.092316][T16198] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000802c550a [ 775.094359][T16198] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 775.096397][T16198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 775.098439][T16198] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 775.100460][T16198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 775.102464][T16198] [ 775.103296][ C1] vkms_vblank_simulate: vblank timer overrun [ 775.323980][T16207] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1893'. [ 775.771622][T16215] FAULT_INJECTION: forcing a failure. [ 775.771622][T16215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.775021][T16215] CPU: 2 UID: 0 PID: 16215 Comm: syz.2.1900 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 775.778218][T16215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 775.781101][T16215] Call Trace: [ 775.781989][T16215] [ 775.782767][T16215] dump_stack_lvl+0x16c/0x1f0 [ 775.783998][T16215] should_fail_ex+0x497/0x5b0 [ 775.785256][T16215] _copy_from_iter+0x29b/0x1400 [ 775.786544][T16215] ? __pfx__copy_from_iter+0x10/0x10 [ 775.787995][T16215] ? __virt_addr_valid+0x1a4/0x590 [ 775.789340][T16215] ? __virt_addr_valid+0x5e/0x590 [ 775.790655][T16215] ? __phys_addr_symbol+0x30/0x80 [ 775.791967][T16215] ? __check_object_size+0x488/0x710 [ 775.793360][T16215] netlink_sendmsg+0x813/0xd70 [ 775.794626][T16215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.796017][T16215] ____sys_sendmsg+0x9ae/0xb40 [ 775.797285][T16215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.798670][T16215] ? get_compat_msghdr+0x11b/0x170 [ 775.800054][T16215] ? __pfx___lock_acquire+0x10/0x10 [ 775.801423][T16215] ___sys_sendmsg+0x135/0x1e0 [ 775.802660][T16215] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.804027][T16215] ? lock_acquire+0x2f/0xb0 [ 775.805230][T16215] ? __fget_files+0x40/0x3f0 [ 775.806445][T16215] ? fdget+0x176/0x210 [ 775.807559][T16215] __sys_sendmsg+0x117/0x1f0 [ 775.808783][T16215] ? __pfx___sys_sendmsg+0x10/0x10 [ 775.810133][T16215] ? __fget_files+0x244/0x3f0 [ 775.811371][T16215] __do_fast_syscall_32+0x73/0x120 [ 775.812717][T16215] do_fast_syscall_32+0x32/0x80 [ 775.813992][T16215] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 775.815632][T16215] RIP: 0023:0xf7fc3579 [ 775.816732][T16215] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 775.821671][T16215] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 775.823849][T16215] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000380 [ 775.825921][T16215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 775.827974][T16215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 775.830027][T16215] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 775.832069][T16215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 775.834121][T16215] [ 776.040624][T16222] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1903'. [ 776.076035][T16231] xt_NFQUEUE: number of total queues is 0 [ 776.915808][T16240] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1907'. [ 777.003272][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1912'. [ 777.010998][T16248] syzkaller1: entered promiscuous mode [ 777.012507][T16248] syzkaller1: entered allmulticast mode [ 777.023846][T16251] FAULT_INJECTION: forcing a failure. [ 777.023846][T16251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.028347][T16251] CPU: 0 UID: 0 PID: 16251 Comm: syz.5.1913 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 777.031181][T16251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 777.033983][T16251] Call Trace: [ 777.034873][T16251] [ 777.035661][T16251] dump_stack_lvl+0x16c/0x1f0 [ 777.036943][T16251] should_fail_ex+0x497/0x5b0 [ 777.038192][T16251] _copy_from_iter+0x29b/0x1400 [ 777.039482][T16251] ? __pfx__copy_from_iter+0x10/0x10 [ 777.040882][T16251] ? __virt_addr_valid+0x1a4/0x590 [ 777.042499][T16251] ? __virt_addr_valid+0x5e/0x590 [ 777.043858][T16251] ? __phys_addr_symbol+0x30/0x80 [ 777.045192][T16251] ? __check_object_size+0x488/0x710 [ 777.046585][T16251] netlink_sendmsg+0x813/0xd70 [ 777.047872][T16251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.049282][T16251] ____sys_sendmsg+0x9ae/0xb40 [ 777.050636][T16251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 777.052107][T16251] ? get_compat_msghdr+0x11b/0x170 [ 777.053470][T16251] ? __pfx___lock_acquire+0x10/0x10 [ 777.054845][T16251] ___sys_sendmsg+0x135/0x1e0 [ 777.056084][T16251] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.057506][T16251] ? lock_acquire+0x2f/0xb0 [ 777.058714][T16251] ? __fget_files+0x40/0x3f0 [ 777.059946][T16251] ? fdget+0x176/0x210 [ 777.061040][T16251] __sys_sendmsg+0x117/0x1f0 [ 777.062264][T16251] ? __pfx___sys_sendmsg+0x10/0x10 [ 777.063605][T16251] ? __fget_files+0x244/0x3f0 [ 777.064864][T16251] __do_fast_syscall_32+0x73/0x120 [ 777.066219][T16251] do_fast_syscall_32+0x32/0x80 [ 777.067716][T16251] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 777.069402][T16251] RIP: 0023:0xf7f32579 [ 777.070478][T16251] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 777.075423][T16251] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 777.077535][T16251] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 777.079574][T16251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 777.081568][T16251] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 777.083582][T16251] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 777.085639][T16251] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 777.087921][T16251] [ 777.197959][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1915'. [ 778.318087][T16128] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.464697][T11459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 778.467848][T11459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 778.472718][T11459] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 778.477865][T11459] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 778.484021][T11459] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 778.488815][T11459] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 778.548718][T16128] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.618607][T16128] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.730654][T16128] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.736448][T16286] chnl_net:caif_netlink_parms(): no params data found [ 778.819816][T16286] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.822917][T16286] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.824766][T16286] bridge_slave_0: entered allmulticast mode [ 778.827263][T16286] bridge_slave_0: entered promiscuous mode [ 778.831405][T16286] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.834873][T16286] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.837033][T16286] bridge_slave_1: entered allmulticast mode [ 778.839445][T16286] bridge_slave_1: entered promiscuous mode [ 778.869103][T16286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.872675][T16286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.926079][T16286] team0: Port device team_slave_0 added [ 778.930294][T16286] team0: Port device team_slave_1 added [ 778.949870][T16128] bridge_slave_1: left allmulticast mode [ 778.951722][T16128] bridge_slave_1: left promiscuous mode [ 778.953509][T16128] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.956973][T16128] bridge_slave_0: left allmulticast mode [ 778.958454][T16128] bridge_slave_0: left promiscuous mode [ 778.959937][T16128] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.278922][T16128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.285277][T16128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.290577][T16128] bond0 (unregistering): Released all slaves [ 779.305293][T16286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.310819][T16286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.317413][T16286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.338392][T16286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.340259][T16286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.347047][T16286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.398156][T16286] hsr_slave_0: entered promiscuous mode [ 779.400124][T16286] hsr_slave_1: entered promiscuous mode [ 779.402062][T16286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.404040][T16286] Cannot create hsr debugfs directory [ 779.427929][T16306] FAULT_INJECTION: forcing a failure. [ 779.427929][T16306] name failslab, interval 1, probability 0, space 0, times 0 [ 779.431808][T16306] CPU: 3 UID: 0 PID: 16306 Comm: syz.5.1931 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 779.434497][T16306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 779.437220][T16306] Call Trace: [ 779.438076][T16306] [ 779.438869][T16306] dump_stack_lvl+0x16c/0x1f0 [ 779.440078][T16306] should_fail_ex+0x497/0x5b0 [ 779.441293][T16306] ? fs_reclaim_acquire+0xae/0x150 [ 779.442589][T16306] should_failslab+0xc2/0x120 [ 779.443798][T16306] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 779.445284][T16306] ? proc_alloc_inode+0x25/0x200 [ 779.446552][T16306] ? __pfx_proc_alloc_inode+0x10/0x10 [ 779.447926][T16306] proc_alloc_inode+0x25/0x200 [ 779.449161][T16306] alloc_inode+0x5d/0x230 [ 779.450266][T16306] new_inode+0x22/0x210 [ 779.451348][T16306] proc_pid_make_inode+0x22/0x160 [ 779.452657][T16306] proc_ns_instantiate+0x57/0x100 [ 779.453935][T16306] proc_ns_dir_lookup+0x175/0x280 [ 779.455208][T16306] lookup_one_qstr_excl+0x11d/0x190 [ 779.456545][T16306] ? mnt_want_write+0x161/0x450 [ 779.457785][T16306] do_rmdir+0x247/0x410 [ 779.458848][T16306] ? __pfx_do_rmdir+0x10/0x10 [ 779.460078][T16306] ? strncpy_from_user+0x1e6/0x2c0 [ 779.461380][T16306] ? getname_flags.part.0+0x1c5/0x550 [ 779.462731][T16306] ? __pfx_ksys_write+0x10/0x10 [ 779.463974][T16306] __ia32_sys_unlinkat+0xef/0x130 [ 779.465244][T16306] __do_fast_syscall_32+0x73/0x120 [ 779.466522][T16306] do_fast_syscall_32+0x32/0x80 [ 779.467776][T16306] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.469374][T16306] RIP: 0023:0xf7f32579 [ 779.470402][T16306] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 779.475235][T16306] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 000000000000012d [ 779.477285][T16306] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 779.479336][T16306] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.481402][T16306] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 779.483456][T16306] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 779.485538][T16306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.487641][T16306] [ 779.739452][T16128] hsr_slave_0: left promiscuous mode [ 779.741979][T16128] hsr_slave_1: left promiscuous mode [ 779.744103][T16128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.746002][T16128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.751109][T16128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.752947][T16128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.789654][T16128] veth1_macvtap: left promiscuous mode [ 779.791567][T16128] veth0_macvtap: left promiscuous mode [ 779.793030][T16128] veth1_vlan: left promiscuous mode [ 779.794396][T16128] veth0_vlan: left promiscuous mode [ 779.803029][T16309] FAULT_INJECTION: forcing a failure. [ 779.803029][T16309] name failslab, interval 1, probability 0, space 0, times 0 [ 779.806316][T16309] CPU: 3 UID: 0 PID: 16309 Comm: syz.8.1932 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 779.809005][T16309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 779.811693][T16309] Call Trace: [ 779.812570][T16309] [ 779.813335][T16309] dump_stack_lvl+0x16c/0x1f0 [ 779.814538][T16309] should_fail_ex+0x497/0x5b0 [ 779.815722][T16309] ? fs_reclaim_acquire+0xae/0x150 [ 779.817057][T16309] should_failslab+0xc2/0x120 [ 779.818269][T16309] __kmalloc_node_noprof+0xd1/0x440 [ 779.819653][T16309] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 779.821039][T16309] __kvmalloc_node_noprof+0xad/0x1a0 [ 779.822384][T16309] bpf_test_run_xdp_live+0x140/0x500 [ 779.823735][T16309] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 779.825278][T16309] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 779.826841][T16309] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 779.828646][T16309] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 779.830202][T16309] ? bpf_dispatcher_xdp+0x800/0x1000 [ 779.831578][T16309] ? bpf_dispatcher_xdp+0x800/0x1000 [ 779.832951][T16309] ? bpf_dispatcher_xdp+0x800/0x1000 [ 779.834284][T16309] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 779.835794][T16309] bpf_prog_test_run_xdp+0x827/0x1580 [ 779.837189][T16309] ? lock_acquire+0x2f/0xb0 [ 779.838372][T16309] ? __fget_files+0x40/0x3f0 [ 779.839584][T16309] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 779.841067][T16309] ? fput+0x30/0x390 [ 779.842044][T16309] ? __bpf_prog_get+0xa0/0x290 [ 779.843270][T16309] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 779.844723][T16309] __sys_bpf+0x1921/0x5780 [ 779.845839][T16309] ? ksys_write+0x21e/0x260 [ 779.847010][T16309] ? __pfx___sys_bpf+0x10/0x10 [ 779.848193][T16309] ? vfs_write+0x306/0x1150 [ 779.849367][T16309] ? __mutex_unlock_slowpath+0x164/0x650 [ 779.850762][T16309] ? fput+0x30/0x390 [ 779.851760][T16309] ? ksys_write+0x1ad/0x260 [ 779.852963][T16309] ? __pfx_ksys_write+0x10/0x10 [ 779.854221][T16309] __ia32_sys_bpf+0x76/0xe0 [ 779.855404][T16309] __do_fast_syscall_32+0x73/0x120 [ 779.856722][T16309] do_fast_syscall_32+0x32/0x80 [ 779.857981][T16309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.859663][T16309] RIP: 0023:0xf7f70579 [ 779.860752][T16309] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 779.865429][T16309] RSP: 002b:00000000f56f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 779.867528][T16309] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 779.869842][T16309] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.872672][T16309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 779.875460][T16309] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 779.878240][T16309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.881080][T16309] [ 780.111443][T16322] FAULT_INJECTION: forcing a failure. [ 780.111443][T16322] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 780.114709][T16322] CPU: 2 UID: 0 PID: 16322 Comm: syz.5.1936 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 780.117402][T16322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 780.120100][T16322] Call Trace: [ 780.120945][T16322] [ 780.121719][T16322] dump_stack_lvl+0x16c/0x1f0 [ 780.122953][T16322] should_fail_ex+0x497/0x5b0 [ 780.124189][T16322] ? fs_reclaim_acquire+0xae/0x150 [ 780.125488][T16322] should_fail_alloc_page+0xe7/0x130 [ 780.126818][T16322] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 780.128407][T16322] __alloc_pages_noprof+0x190/0x25a0 [ 780.129761][T16322] ? __pfx_mark_lock+0x10/0x10 [ 780.130982][T16322] ? find_held_lock+0x2d/0x110 [ 780.132203][T16322] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 780.133669][T16322] ? hlock_class+0x4e/0x130 [ 780.134823][T16322] ? mark_lock+0xb5/0xc60 [ 780.135912][T16322] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 780.137398][T16322] ? policy_nodemask+0xea/0x4e0 [ 780.138618][T16322] alloc_pages_mpol_noprof+0x2c9/0x610 [ 780.139993][T16322] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 780.141492][T16322] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 780.142893][T16322] folio_alloc_mpol_noprof+0x36/0xd0 [ 780.144222][T16322] vma_alloc_folio_noprof+0xee/0x1b0 [ 780.145522][T16322] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 780.146974][T16322] ? find_held_lock+0x2d/0x110 [ 780.148191][T16322] do_pte_missing+0x202d/0x3e70 [ 780.149407][T16322] __handle_mm_fault+0x100a/0x2a10 [ 780.150798][T16322] ? __pfx_mt_find+0x10/0x10 [ 780.152004][T16322] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 780.153454][T16322] ? __pfx___handle_mm_fault+0x10/0x10 [ 780.154857][T16322] ? find_vma+0xc0/0x140 [ 780.155938][T16322] ? __pfx_find_vma+0x10/0x10 [ 780.157189][T16322] handle_mm_fault+0x3fa/0xaa0 [ 780.158449][T16322] do_user_addr_fault+0x7a3/0x13f0 [ 780.159780][T16322] exc_page_fault+0x5c/0xc0 [ 780.160978][T16322] asm_exc_page_fault+0x26/0x30 [ 780.162227][T16322] RIP: 0010:_copy_to_user+0xb6/0xd0 [ 780.163566][T16322] Code: 89 ee 48 89 ef e8 da f3 02 fd 4d 85 ff 75 a8 e8 20 f2 02 fd 89 de 4c 89 e7 e8 a6 5d 64 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 80 66 2e 0f 1f 84 00 00 00 00 [ 780.168386][T16322] RSP: 0018:ffffc900048d7ca8 EFLAGS: 00050246 [ 780.169938][T16322] RAX: 0000000000000001 RBX: 0000000000000040 RCX: 0000000000000040 [ 780.172083][T16322] RDX: fffff5200091afa8 RSI: ffffc900048d7d00 RDI: 00000000200028c0 [ 780.174264][T16322] RBP: 00000000200028c0 R08: 0000000000000000 R09: fffff5200091afa7 [ 780.176413][T16322] R10: ffffc900048d7d3f R11: 0000000000000000 R12: ffffc900048d7d00 [ 780.178454][T16322] R13: 0000000020002900 R14: 00007fffffffefff R15: 0000000000000000 [ 780.180490][T16322] ? _copy_to_user+0xaa/0xd0 [ 780.181687][T16322] cp_compat_stat+0x562/0x840 [ 780.182894][T16322] ? __pfx_cp_compat_stat+0x10/0x10 [ 780.184234][T16322] ? proc_sys_getattr+0x281/0x340 [ 780.185547][T16322] ? fput+0x30/0x390 [ 780.186558][T16322] __do_compat_sys_newfstat+0x100/0x110 [ 780.187970][T16322] ? __pfx___do_compat_sys_newfstat+0x10/0x10 [ 780.189508][T16322] ? __pfx_ksys_write+0x10/0x10 [ 780.190743][T16322] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 780.192446][T16322] __do_fast_syscall_32+0x73/0x120 [ 780.193785][T16322] do_fast_syscall_32+0x32/0x80 [ 780.195054][T16322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 780.196656][T16322] RIP: 0023:0xf7f32579 [ 780.197731][T16322] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 780.202715][T16322] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 000000000000006c [ 780.204887][T16322] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200028c0 [ 780.206906][T16322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 780.208901][T16322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 780.210922][T16322] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 780.213015][T16322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 780.215020][T16322] [ 780.506387][ T5315] Bluetooth: hci1: command tx timeout [ 781.004171][T16128] team0 (unregistering): Port device team_slave_1 removed [ 781.099609][T16128] team0 (unregistering): Port device team_slave_0 removed [ 781.210518][T11675] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 781.368703][T11675] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.371198][T11675] usb 13-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 781.373938][T11675] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.377787][T11675] usb 13-1: config 0 descriptor?? [ 781.383309][T11675] usbhid 13-1:0.0: can't add hid device: -22 [ 781.384867][T11675] usbhid 13-1:0.0: probe with driver usbhid failed with error -22 [ 781.461316][T16334] fuse: Unknown parameter 'grlùŒ¤5™eÌÍËÏ6oup_id' [ 781.495618][T16334] netfs: Couldn't get user pages (rc=-14) [ 781.502986][T16334] netfs: Zero-sized read [R=11] [ 781.510727][T16334] dlm: no local IP address has been set [ 781.513000][T16334] dlm: cannot start dlm midcomms -107 [ 781.584812][T11675] usb 13-1: USB disconnect, device number 10 [ 781.844466][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 781.848872][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 782.085547][T16286] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 782.094685][T16286] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 782.102922][T16286] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 782.107509][T16286] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 782.149428][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1945'. [ 782.162903][T16353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input26 [ 782.196042][T16286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.219170][T16286] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.228882][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.230717][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.243977][ T1248] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.245960][ T1248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.395417][T16286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.585652][T16286] veth0_vlan: entered promiscuous mode [ 782.591139][T16286] veth1_vlan: entered promiscuous mode [ 782.596643][ T5315] Bluetooth: hci1: command tx timeout [ 782.611545][T16286] veth0_macvtap: entered promiscuous mode [ 782.615587][T16286] veth1_macvtap: entered promiscuous mode [ 782.623345][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.626046][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.628698][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.631290][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.633723][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.636428][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.638867][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.641455][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.644626][T16286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.659292][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.661922][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.664592][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.670423][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.672912][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.675636][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.678754][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.681514][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.684750][T16286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.692534][T16286] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.694748][T16286] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.697167][T16286] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.699447][T16286] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.745609][T14155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.747866][T14155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.772968][T14155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.775116][T14155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.863058][T16388] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 783.916868][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1952'. [ 783.920684][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1952'. [ 783.925411][T16390] FAULT_INJECTION: forcing a failure. [ 783.925411][T16390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.929116][T16390] CPU: 2 UID: 0 PID: 16390 Comm: syz.8.1952 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 783.932083][T16390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 783.934885][T16390] Call Trace: [ 783.935763][T16390] [ 783.936563][T16390] dump_stack_lvl+0x16c/0x1f0 [ 783.937811][T16390] should_fail_ex+0x497/0x5b0 [ 783.939060][T16390] _copy_from_user+0x2e/0xd0 [ 783.940296][T16390] kstrtouint_from_user+0xd7/0x1c0 [ 783.941646][T16390] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 783.943143][T16390] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 783.944647][T16390] proc_fail_nth_write+0x84/0x250 [ 783.945969][T16390] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 783.947452][T16390] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 783.948932][T16390] vfs_write+0x24c/0x1150 [ 783.950113][T16390] ? __fget_files+0x23a/0x3f0 [ 783.951351][T16390] ? fdget_pos+0x24c/0x360 [ 783.952530][T16390] ? __pfx_lock_release+0x10/0x10 [ 783.953859][T16390] ? trace_lock_acquire+0x14a/0x1d0 [ 783.955221][T16390] ? __pfx_vfs_write+0x10/0x10 [ 783.956488][T16390] ? __pfx___mutex_lock+0x10/0x10 [ 783.957815][T16390] ? __fget_files+0x244/0x3f0 [ 783.959052][T16390] ksys_write+0x12f/0x260 [ 783.960186][T16390] ? __pfx_ksys_write+0x10/0x10 [ 783.961474][T16390] __do_fast_syscall_32+0x73/0x120 [ 783.962823][T16390] do_fast_syscall_32+0x32/0x80 [ 783.964115][T16390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 783.965763][T16390] RIP: 0023:0xf7f70579 [ 783.966844][T16390] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 783.971799][T16390] RSP: 002b:00000000f56f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 783.973968][T16390] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f56f6620 [ 783.976014][T16390] RDX: 0000000000000001 RSI: 00000000f73fdff4 RDI: 0000000000000000 [ 783.978086][T16390] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 783.980139][T16390] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 783.982195][T16390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 783.984264][T16390] [ 784.348838][T16403] FAULT_INJECTION: forcing a failure. [ 784.348838][T16403] name failslab, interval 1, probability 0, space 0, times 0 [ 784.352718][T16403] CPU: 2 UID: 0 PID: 16403 Comm: syz.5.1956 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 784.355553][T16403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 784.358338][T16403] Call Trace: [ 784.359310][T16403] [ 784.360082][T16403] dump_stack_lvl+0x16c/0x1f0 [ 784.361298][T16403] should_fail_ex+0x497/0x5b0 [ 784.362528][T16403] ? fs_reclaim_acquire+0xae/0x150 [ 784.363866][T16403] should_failslab+0xc2/0x120 [ 784.365163][T16403] __kmalloc_noprof+0xcb/0x410 [ 784.366418][T16403] ? __pfx_d_absolute_path+0x10/0x10 [ 784.367811][T16403] tomoyo_encode2+0x100/0x3e0 [ 784.369061][T16403] ? rcu_is_watching+0x12/0xc0 [ 784.370317][T16403] tomoyo_realpath_from_path+0x1a7/0x710 [ 784.371785][T16403] tomoyo_path_perm+0x273/0x480 [ 784.373073][T16403] ? tomoyo_path_perm+0x25f/0x480 [ 784.374406][T16403] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 784.375921][T16403] ? __pfx___lock_acquire+0x10/0x10 [ 784.377318][T16403] ? lock_acquire.part.0+0x11b/0x380 [ 784.378709][T16403] tomoyo_path_rmdir+0x92/0xe0 [ 784.379960][T16403] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 784.381413][T16403] ? d_lookup+0xe9/0x180 [ 784.382518][T16403] security_path_rmdir+0x145/0x2b0 [ 784.383851][T16403] do_rmdir+0x2b5/0x410 [ 784.385019][T16403] ? __might_fault+0xe3/0x190 [ 784.386239][T16403] ? __pfx_do_rmdir+0x10/0x10 [ 784.387473][T16403] ? getname_flags.part.0+0x1c5/0x550 [ 784.388874][T16403] __ia32_sys_rmdir+0xc4/0x110 [ 784.390122][T16403] __do_fast_syscall_32+0x73/0x120 [ 784.391446][T16403] do_fast_syscall_32+0x32/0x80 [ 784.392716][T16403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 784.394337][T16403] RIP: 0023:0xf7f32579 [ 784.395799][T16403] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 784.402373][T16403] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000028 [ 784.404681][T16403] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 0000000000000000 [ 784.406752][T16403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 784.408751][T16403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 784.410757][T16403] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 784.412749][T16403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 784.414913][T16403] [ 784.417737][T16403] ERROR: Out of memory at tomoyo_realpath_from_path. [ 784.531654][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 784.531665][ T39] audit: type=1800 audit(1731497476.310:354): pid=16406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1957" name="file1" dev="overlay" ino=678 res=0 errno=0 [ 784.547554][ T39] audit: type=1804 audit(1731497476.320:355): pid=16406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1957" name="/newroot/123/bus/file1" dev="overlay" ino=678 res=1 errno=0 [ 784.555299][ T39] audit: type=1800 audit(1731497476.320:356): pid=16406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1957" name="file1" dev="overlay" ino=678 res=0 errno=0 [ 784.990688][T16414] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 785.075367][ T102] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.159296][T11459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 785.163575][T11459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 785.166255][T11459] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 785.170411][T11459] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 785.172638][T11459] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 785.174618][T11459] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 785.245122][T16419] chnl_net:caif_netlink_parms(): no params data found [ 785.316021][T16419] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.318205][T16419] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.321265][T16419] bridge_slave_0: entered allmulticast mode [ 785.323332][T16419] bridge_slave_0: entered promiscuous mode [ 785.327529][T16419] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.330074][T16419] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.332054][T16430] FAULT_INJECTION: forcing a failure. [ 785.332054][T16430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.332466][T16419] bridge_slave_1: entered allmulticast mode [ 785.335607][T16430] CPU: 2 UID: 0 PID: 16430 Comm: syz.8.1961 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 785.340520][T16430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 785.341252][T16419] bridge_slave_1: entered promiscuous mode [ 785.343279][T16430] Call Trace: [ 785.343285][T16430] [ 785.346584][T16430] dump_stack_lvl+0x16c/0x1f0 [ 785.347827][T16430] should_fail_ex+0x497/0x5b0 [ 785.349071][T16430] _copy_from_iter+0x29b/0x1400 [ 785.350348][T16430] ? __pfx__copy_from_iter+0x10/0x10 [ 785.351720][T16430] ? __virt_addr_valid+0x1a4/0x590 [ 785.353071][T16430] ? __virt_addr_valid+0x5e/0x590 [ 785.354398][T16430] ? __phys_addr_symbol+0x30/0x80 [ 785.355714][T16430] ? __check_object_size+0x488/0x710 [ 785.357102][T16430] pppoe_sendmsg+0x4b3/0x7c0 [ 785.358313][T16430] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 785.359650][T16430] ____sys_sendmsg+0x9ae/0xb40 [ 785.360911][T16430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.362287][T16430] ? get_compat_msghdr+0x11b/0x170 [ 785.363622][T16430] ? __pfx___lock_acquire+0x10/0x10 [ 785.364986][T16430] ___sys_sendmsg+0x135/0x1e0 [ 785.366215][T16430] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.367586][T16430] ? lock_acquire+0x2f/0xb0 [ 785.368790][T16430] ? __fget_files+0x40/0x3f0 [ 785.370005][T16430] ? fdget+0x176/0x210 [ 785.371074][T16430] __sys_sendmsg+0x117/0x1f0 [ 785.372294][T16430] ? __pfx___sys_sendmsg+0x10/0x10 [ 785.373625][T16430] ? __fget_files+0x244/0x3f0 [ 785.374862][T16430] __do_fast_syscall_32+0x73/0x120 [ 785.376197][T16430] do_fast_syscall_32+0x32/0x80 [ 785.377477][T16430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 785.379157][T16430] RIP: 0023:0xf7f70579 [ 785.380231][T16430] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 785.385212][T16430] RSP: 002b:00000000f56f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 785.387395][T16430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200019c0 [ 785.389462][T16430] RDX: 0000000010004025 RSI: 0000000000000000 RDI: 0000000000000000 [ 785.391515][T16430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 785.393571][T16430] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 785.395617][T16430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 785.397681][T16430] [ 785.445927][T16419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.449729][T16419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.473194][T11704] kernel write not supported for file /snd/midiC2D0 (pid: 11704 comm: kworker/2:7) [ 785.520048][T16419] team0: Port device team_slave_0 added [ 785.523972][T16419] team0: Port device team_slave_1 added [ 785.571283][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1962'. [ 785.578512][T16419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.580500][T16419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.587466][T16419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.601726][T16419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.603730][T16419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.616025][T16419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.644084][T16451] FAULT_INJECTION: forcing a failure. [ 785.644084][T16451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.647673][T16451] CPU: 0 UID: 0 PID: 16451 Comm: syz.2.1965 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 785.650471][T16451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 785.653250][T16451] Call Trace: [ 785.654133][T16451] [ 785.654902][T16451] dump_stack_lvl+0x16c/0x1f0 [ 785.656143][T16451] should_fail_ex+0x497/0x5b0 [ 785.657393][T16451] _copy_from_iter+0x29b/0x1400 [ 785.658685][T16451] ? __pfx__copy_from_iter+0x10/0x10 [ 785.660078][T16451] ? __virt_addr_valid+0x1a4/0x590 [ 785.661440][T16451] ? __virt_addr_valid+0x5e/0x590 [ 785.662768][T16451] ? __phys_addr_symbol+0x30/0x80 [ 785.664093][T16451] ? __check_object_size+0x488/0x710 [ 785.665501][T16451] netlink_sendmsg+0x813/0xd70 [ 785.666779][T16451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.668173][T16451] ____sys_sendmsg+0x9ae/0xb40 [ 785.669450][T16451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.670840][T16451] ? get_compat_msghdr+0x11b/0x170 [ 785.672191][T16451] ? __pfx___lock_acquire+0x10/0x10 [ 785.673565][T16451] ___sys_sendmsg+0x135/0x1e0 [ 785.674809][T16451] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.676186][T16451] ? lock_acquire+0x2f/0xb0 [ 785.677414][T16451] ? __fget_files+0x40/0x3f0 [ 785.678634][T16451] ? fdget+0x176/0x210 [ 785.679703][T16451] __sys_sendmsg+0x117/0x1f0 [ 785.680925][T16451] ? __pfx___sys_sendmsg+0x10/0x10 [ 785.682265][T16451] ? __fget_files+0x244/0x3f0 [ 785.683511][T16451] __do_fast_syscall_32+0x73/0x120 [ 785.684860][T16451] do_fast_syscall_32+0x32/0x80 [ 785.686138][T16451] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 785.687803][T16451] RIP: 0023:0xf7fc3579 [ 785.688891][T16451] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 785.693885][T16451] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 785.696061][T16451] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 785.698132][T16451] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 785.700170][T16451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 785.702235][T16451] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 785.704297][T16451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 785.706364][T16451] [ 785.726375][T16419] hsr_slave_0: entered promiscuous mode [ 785.730453][T16419] hsr_slave_1: entered promiscuous mode [ 786.998287][ T102] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.063323][ T102] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.078467][T16478] xt_cgroup: invalid path, errno=-2 [ 787.145867][ T102] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.226441][ T5315] Bluetooth: hci1: command tx timeout [ 787.267590][ T102] bridge_slave_1: left allmulticast mode [ 787.269153][ T102] bridge_slave_1: left promiscuous mode [ 787.270678][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.285022][ T102] bridge_slave_0: left allmulticast mode [ 787.288402][ T102] bridge_slave_0: left promiscuous mode [ 787.290051][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.692646][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.698294][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.701898][ T102] bond0 (unregistering): Released all slaves [ 788.348311][ T102] hsr_slave_0: left promiscuous mode [ 788.356762][ T102] hsr_slave_1: left promiscuous mode [ 788.361185][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.363430][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.370193][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.372505][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.409125][ T102] veth1_macvtap: left promiscuous mode [ 788.410736][ T102] veth0_macvtap: left promiscuous mode [ 788.412378][ T102] veth1_vlan: left promiscuous mode [ 788.413909][ T102] veth0_vlan: left promiscuous mode [ 788.568629][T16515] FAULT_INJECTION: forcing a failure. [ 788.568629][T16515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.572094][T16515] CPU: 0 UID: 0 PID: 16515 Comm: syz.2.1983 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 788.574871][T16515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 788.577648][T16515] Call Trace: [ 788.578528][T16515] [ 788.579319][T16515] dump_stack_lvl+0x16c/0x1f0 [ 788.580577][T16515] should_fail_ex+0x497/0x5b0 [ 788.581823][T16515] _copy_to_user+0x32/0xd0 [ 788.583005][T16515] simple_read_from_buffer+0xd0/0x160 [ 788.584426][T16515] proc_fail_nth_read+0x198/0x270 [ 788.585754][T16515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.587420][T16515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.588886][T16515] vfs_read+0x1df/0xbe0 [ 788.590001][T16515] ? __fget_files+0x23a/0x3f0 [ 788.591240][T16515] ? fdget_pos+0x24c/0x360 [ 788.592423][T16515] ? __pfx_lock_release+0x10/0x10 [ 788.593747][T16515] ? trace_lock_acquire+0x14a/0x1d0 [ 788.595116][T16515] ? __pfx_vfs_read+0x10/0x10 [ 788.596375][T16515] ? __pfx___mutex_lock+0x10/0x10 [ 788.597860][T16515] ? __fget_files+0x244/0x3f0 [ 788.599103][T16515] ksys_read+0x12f/0x260 [ 788.600230][T16515] ? __pfx_ksys_read+0x10/0x10 [ 788.601499][T16515] __do_fast_syscall_32+0x73/0x120 [ 788.602848][T16515] do_fast_syscall_32+0x32/0x80 [ 788.604143][T16515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.605819][T16515] RIP: 0023:0xf7fc3579 [ 788.606924][T16515] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 788.611930][T16515] RSP: 002b:00000000f5746590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 788.614122][T16515] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5746620 [ 788.616190][T16515] RDX: 000000000000000f RSI: 00000000f744dff4 RDI: 0000000000000000 [ 788.618272][T16515] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 788.620345][T16515] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 788.622414][T16515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 788.624496][T16515] [ 788.625417][ C0] vkms_vblank_simulate: vblank timer overrun [ 788.751809][T16524] FAULT_INJECTION: forcing a failure. [ 788.751809][T16524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.755295][T16524] CPU: 1 UID: 0 PID: 16524 Comm: syz.2.1987 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 788.758064][T16524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 788.760839][T16524] Call Trace: [ 788.761713][T16524] [ 788.762502][T16524] dump_stack_lvl+0x16c/0x1f0 [ 788.763729][T16524] should_fail_ex+0x497/0x5b0 [ 788.764977][T16524] strncpy_from_user+0x3b/0x2c0 [ 788.766265][T16524] getname_flags.part.0+0x8f/0x550 [ 788.767968][T16524] getname_flags+0x93/0xf0 [ 788.769464][T16524] user_path_at+0x24/0x60 [ 788.770963][T16524] __ia32_sys_utime32+0x1c7/0x2d0 [ 788.772659][T16524] ? __pfx___ia32_sys_utime32+0x10/0x10 [ 788.774558][T16524] ? ksys_write+0x1ad/0x260 [ 788.776081][T16524] __do_fast_syscall_32+0x73/0x120 [ 788.778064][T16524] do_fast_syscall_32+0x32/0x80 [ 788.779661][T16524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.781763][T16524] RIP: 0023:0xf7fc3579 [ 788.783167][T16524] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 788.788974][T16524] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 000000000000001e [ 788.791283][T16524] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 0000000000000000 [ 788.793971][T16524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 788.796673][T16524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 788.799295][T16524] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 788.801419][T16524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 788.803465][T16524] [ 789.316399][ T5315] Bluetooth: hci1: command tx timeout [ 789.436532][ T102] team0 (unregistering): Port device team_slave_1 removed [ 789.575709][ T102] team0 (unregistering): Port device team_slave_0 removed [ 789.807385][T16534] FAULT_INJECTION: forcing a failure. [ 789.807385][T16534] name failslab, interval 1, probability 0, space 0, times 0 [ 789.810632][T16534] CPU: 2 UID: 0 PID: 16534 Comm: syz.2.1991 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 789.813415][T16534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 789.816185][T16534] Call Trace: [ 789.817122][T16534] [ 789.817903][T16534] dump_stack_lvl+0x16c/0x1f0 [ 789.819145][T16534] should_fail_ex+0x497/0x5b0 [ 789.820410][T16534] ? fs_reclaim_acquire+0xae/0x150 [ 789.821743][T16534] should_failslab+0xc2/0x120 [ 789.822972][T16534] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 789.824379][T16534] ? security_file_alloc+0x34/0x2b0 [ 789.825728][T16534] ? rcu_is_watching+0x12/0xc0 [ 789.826995][T16534] security_file_alloc+0x34/0x2b0 [ 789.828314][T16534] init_file+0x93/0x230 [ 789.829425][T16534] alloc_empty_file+0x91/0x1e0 [ 789.830671][T16534] path_openat+0xe1/0x2d60 [ 789.831844][T16534] ? arch_stack_walk+0xa7/0x100 [ 789.833121][T16534] ? __pfx_path_openat+0x10/0x10 [ 789.834409][T16534] ? stack_trace_save+0x95/0xd0 [ 789.835685][T16534] ? __pfx_stack_trace_save+0x10/0x10 [ 789.837125][T16534] ? stack_depot_save_flags+0x28/0x900 [ 789.838541][T16534] do_filp_open+0x1dc/0x430 [ 789.839728][T16534] ? __pfx_do_filp_open+0x10/0x10 [ 789.841056][T16534] ? find_held_lock+0x2d/0x110 [ 789.842307][T16534] do_open_execat+0xfa/0x330 [ 789.843512][T16534] ? __pfx_do_open_execat+0x10/0x10 [ 789.844876][T16534] ? lock_acquire+0x2f/0xb0 [ 789.846062][T16534] ? __might_fault+0xe3/0x190 [ 789.847304][T16534] ? __might_fault+0xe3/0x190 [ 789.848538][T16534] alloc_bprm+0x2b/0xc50 [ 789.849650][T16534] ? strncpy_from_user+0x1e6/0x2c0 [ 789.850992][T16534] do_execveat_common.isra.0+0x1cd/0x630 [ 789.852463][T16534] __ia32_compat_sys_execve+0x90/0xc0 [ 789.853857][T16534] __do_fast_syscall_32+0x73/0x120 [ 789.855187][T16534] do_fast_syscall_32+0x32/0x80 [ 789.856486][T16534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 789.858133][T16534] RIP: 0023:0xf7fc3579 [ 789.859200][T16534] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 789.864130][T16534] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 000000000000000b [ 789.866298][T16534] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000000000 [ 789.868356][T16534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 789.870392][T16534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 789.872436][T16534] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 789.874472][T16534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 789.876591][T16534] [ 790.601916][T16419] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 790.608101][T16419] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 790.610042][T16543] FAULT_INJECTION: forcing a failure. [ 790.610042][T16543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.619001][T16419] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 790.619544][T16543] CPU: 1 UID: 0 PID: 16543 Comm: syz.8.1994 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 790.623517][T16543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 790.626311][T16543] Call Trace: [ 790.626318][T16543] [ 790.626323][T16543] dump_stack_lvl+0x16c/0x1f0 [ 790.626338][T16543] should_fail_ex+0x497/0x5b0 [ 790.630552][T16543] _copy_from_iter+0x29b/0x1400 [ 790.631843][T16543] ? __pfx__copy_from_iter+0x10/0x10 [ 790.633234][T16543] ? __virt_addr_valid+0x1a4/0x590 [ 790.634587][T16543] ? __virt_addr_valid+0x5e/0x590 [ 790.635911][T16543] ? __phys_addr_symbol+0x30/0x80 [ 790.637275][T16543] ? __check_object_size+0x488/0x710 [ 790.638663][T16543] netlink_sendmsg+0x813/0xd70 [ 790.639939][T16543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.641331][T16543] ____sys_sendmsg+0x9ae/0xb40 [ 790.642584][T16543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 790.643971][T16543] ? get_compat_msghdr+0x11b/0x170 [ 790.645317][T16543] ? __pfx___lock_acquire+0x10/0x10 [ 790.646693][T16543] ___sys_sendmsg+0x135/0x1e0 [ 790.647929][T16543] ? __pfx____sys_sendmsg+0x10/0x10 [ 790.649302][T16543] ? lock_acquire+0x2f/0xb0 [ 790.650492][T16543] ? __fget_files+0x40/0x3f0 [ 790.651692][T16543] ? fdget+0x176/0x210 [ 790.652773][T16543] __sys_sendmsg+0x117/0x1f0 [ 790.653983][T16543] ? __pfx___sys_sendmsg+0x10/0x10 [ 790.655322][T16543] ? __fget_files+0x244/0x3f0 [ 790.656557][T16543] __do_fast_syscall_32+0x73/0x120 [ 790.657909][T16543] do_fast_syscall_32+0x32/0x80 [ 790.659180][T16543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 790.660826][T16543] RIP: 0023:0xf7f70579 [ 790.661893][T16543] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 790.666884][T16543] RSP: 002b:00000000f56f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 790.669048][T16543] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000640 [ 790.671122][T16543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 790.673311][T16543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 790.675406][T16543] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 790.677464][T16543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 790.679519][T16543] [ 790.691476][T16419] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 790.783584][T16419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.793369][T16419] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.798696][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.800571][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.806220][T16555] FAULT_INJECTION: forcing a failure. [ 790.806220][T16555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.809891][T16555] CPU: 3 UID: 0 PID: 16555 Comm: syz.2.1999 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 790.812776][T16555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 790.815509][T16555] Call Trace: [ 790.816368][T16555] [ 790.817138][T16555] dump_stack_lvl+0x16c/0x1f0 [ 790.818379][T16555] should_fail_ex+0x497/0x5b0 [ 790.819585][T16555] _copy_from_iter+0x29b/0x1400 [ 790.820825][T16555] ? __pfx__copy_from_iter+0x10/0x10 [ 790.822285][T16555] ? __virt_addr_valid+0x1a4/0x590 [ 790.822833][T16419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 790.823847][T16555] ? __virt_addr_valid+0x5e/0x590 [ 790.827028][T16419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.828358][T16555] ? __phys_addr_symbol+0x30/0x80 [ 790.832346][T16555] ? __check_object_size+0x488/0x710 [ 790.833722][T16555] netlink_sendmsg+0x813/0xd70 [ 790.834971][T16555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.836343][T16555] ____sys_sendmsg+0x9ae/0xb40 [ 790.837590][T16555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 790.838961][T16555] ? get_compat_msghdr+0x11b/0x170 [ 790.840296][T16555] ? __pfx___lock_acquire+0x10/0x10 [ 790.841650][T16555] ___sys_sendmsg+0x135/0x1e0 [ 790.843285][T16555] ? __pfx____sys_sendmsg+0x10/0x10 [ 790.845189][T16555] ? lock_acquire+0x2f/0xb0 [ 790.846644][T16555] ? __fget_files+0x40/0x3f0 [ 790.847045][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.847849][T16555] ? fdget+0x176/0x210 [ 790.849688][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.850724][T16555] __sys_sendmsg+0x117/0x1f0 [ 790.853788][T16555] ? __pfx___sys_sendmsg+0x10/0x10 [ 790.855118][T16555] ? __fget_files+0x244/0x3f0 [ 790.856382][T16555] __do_fast_syscall_32+0x73/0x120 [ 790.857783][T16555] do_fast_syscall_32+0x32/0x80 [ 790.859056][T16555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 790.860758][T16555] RIP: 0023:0xf7fc3579 [ 790.861821][T16555] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 790.867252][T16555] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 790.869400][T16555] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 790.871420][T16555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 790.873511][T16555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 790.875540][T16555] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 790.877578][T16555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 790.879615][T16555] [ 790.947339][T16562] tipc: Enabled bearer , priority 10 [ 791.019223][T16419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.240316][T16419] veth0_vlan: entered promiscuous mode [ 791.258371][T16419] veth1_vlan: entered promiscuous mode [ 791.303031][T16419] veth0_macvtap: entered promiscuous mode [ 791.318498][T16419] veth1_macvtap: entered promiscuous mode [ 791.332917][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.335715][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.346924][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.349727][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.352310][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.355034][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.376443][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.379187][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.383139][T16419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.386340][ T5315] Bluetooth: hci1: command tx timeout [ 791.399098][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.401839][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.404372][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.407741][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.410358][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.412989][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.415634][T16419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.436432][T16419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.440060][T16419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.447535][T16419] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.449856][T16419] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.452129][T16419] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.454414][T16419] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.562548][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.564835][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.589062][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.591116][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.093798][T16581] overlay: Unknown parameter '/dev/snd/pcmC#D#p' [ 792.381445][T16588] 9pnet_fd: Insufficient options for proto=fd [ 792.477007][T16590] FAULT_INJECTION: forcing a failure. [ 792.477007][T16590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.480976][T16590] CPU: 0 UID: 0 PID: 16590 Comm: syz.8.2005 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 792.483740][T16590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 792.486500][T16590] Call Trace: [ 792.487385][T16590] [ 792.488165][T16590] dump_stack_lvl+0x16c/0x1f0 [ 792.489413][T16590] should_fail_ex+0x497/0x5b0 [ 792.490645][T16590] _copy_from_iter+0x29b/0x1400 [ 792.491928][T16590] ? __pfx__copy_from_iter+0x10/0x10 [ 792.493313][T16590] ? __virt_addr_valid+0x1a4/0x590 [ 792.494650][T16590] ? __virt_addr_valid+0x5e/0x590 [ 792.495970][T16590] ? __phys_addr_symbol+0x30/0x80 [ 792.497297][T16590] ? __check_object_size+0x488/0x710 [ 792.498678][T16590] netlink_sendmsg+0x813/0xd70 [ 792.499935][T16590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.501321][T16590] ____sys_sendmsg+0x9ae/0xb40 [ 792.502572][T16590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.503951][T16590] ? get_compat_msghdr+0x11b/0x170 [ 792.505297][T16590] ? __pfx___lock_acquire+0x10/0x10 [ 792.506667][T16590] ___sys_sendmsg+0x135/0x1e0 [ 792.507902][T16590] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.509273][T16590] ? lock_acquire+0x2f/0xb0 [ 792.510463][T16590] ? __fget_files+0x40/0x3f0 [ 792.511673][T16590] ? fdget+0x176/0x210 [ 792.512746][T16590] __sys_sendmsg+0x117/0x1f0 [ 792.513956][T16590] ? __pfx___sys_sendmsg+0x10/0x10 [ 792.515284][T16590] ? __fget_files+0x244/0x3f0 [ 792.516524][T16590] __do_fast_syscall_32+0x73/0x120 [ 792.517860][T16590] do_fast_syscall_32+0x32/0x80 [ 792.519135][T16590] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.520790][T16590] RIP: 0023:0xf7f70579 [ 792.521860][T16590] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 792.526844][T16590] RSP: 002b:00000000f56f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 792.529249][T16590] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 792.531324][T16590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 792.533371][T16590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.535414][T16590] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 792.537472][T16590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.539525][T16590] [ 792.583303][T16592] netlink: 'syz.8.2006': attribute type 1 has an invalid length. [ 792.585346][T16592] netlink: 112860 bytes leftover after parsing attributes in process `syz.8.2006'. [ 792.588823][T16592] netlink: 'syz.8.2006': attribute type 1 has an invalid length. [ 793.152533][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 793.510334][ T1248] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.532015][T16627] FAULT_INJECTION: forcing a failure. [ 793.532015][T16627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.535508][T16627] CPU: 2 UID: 0 PID: 16627 Comm: syz.8.2016 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 793.538302][T16627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 793.541083][T16627] Call Trace: [ 793.541963][T16627] [ 793.542746][T16627] dump_stack_lvl+0x16c/0x1f0 [ 793.543993][T16627] should_fail_ex+0x497/0x5b0 [ 793.545249][T16627] _copy_from_iter+0x29b/0x1400 [ 793.546554][T16627] ? __pfx__copy_from_iter+0x10/0x10 [ 793.547948][T16627] ? __virt_addr_valid+0x1a4/0x590 [ 793.549308][T16627] ? __virt_addr_valid+0x5e/0x590 [ 793.550636][T16627] ? __phys_addr_symbol+0x30/0x80 [ 793.551968][T16627] ? __check_object_size+0x488/0x710 [ 793.553370][T16627] netlink_sendmsg+0x813/0xd70 [ 793.554638][T16627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.556043][T16627] ____sys_sendmsg+0x9ae/0xb40 [ 793.557315][T16627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 793.558709][T16627] ? get_compat_msghdr+0x11b/0x170 [ 793.560063][T16627] ? __pfx___lock_acquire+0x10/0x10 [ 793.561433][T16627] ___sys_sendmsg+0x135/0x1e0 [ 793.562669][T16627] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.564038][T16627] ? lock_acquire+0x2f/0xb0 [ 793.565242][T16627] ? __fget_files+0x40/0x3f0 [ 793.566462][T16627] ? fdget+0x176/0x210 [ 793.567551][T16627] __sys_sendmsg+0x117/0x1f0 [ 793.568769][T16627] ? __pfx___sys_sendmsg+0x10/0x10 [ 793.570111][T16627] ? __fget_files+0x244/0x3f0 [ 793.571355][T16627] __do_fast_syscall_32+0x73/0x120 [ 793.572704][T16627] do_fast_syscall_32+0x32/0x80 [ 793.573981][T16627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 793.575623][T16627] RIP: 0023:0xf7f70579 [ 793.576701][T16627] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 793.581654][T16627] RSP: 002b:00000000f56f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 793.583472][T11459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 793.583789][T16627] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 793.583799][T16627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 793.588143][T11459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 793.589963][T16627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 793.592794][T11459] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 793.593812][T16627] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 793.597701][T16627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 793.598248][T11459] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 793.599752][T16627] [ 793.602244][T11459] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 793.604784][T11459] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 793.646423][T16634] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.2017'. [ 793.718220][T16629] chnl_net:caif_netlink_parms(): no params data found [ 793.800966][T16629] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.802876][T16629] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.804854][T16629] bridge_slave_0: entered allmulticast mode [ 793.807476][T16629] bridge_slave_0: entered promiscuous mode [ 793.810147][T16629] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.812082][T16629] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.814026][T16629] bridge_slave_1: entered allmulticast mode [ 793.816158][T16629] bridge_slave_1: entered promiscuous mode [ 793.842654][T16629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.846207][T16629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.875085][T16629] team0: Port device team_slave_0 added [ 793.880347][T16629] team0: Port device team_slave_1 added [ 793.901098][T16629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.902990][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.910524][T16629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.914103][T16629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.916144][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.923047][T16629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.950165][T16629] hsr_slave_0: entered promiscuous mode [ 793.952190][T16629] hsr_slave_1: entered promiscuous mode [ 793.954400][T16629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 793.957560][T16629] Cannot create hsr debugfs directory [ 794.120599][T16649] sp0: Synchronizing with TNC [ 794.291107][ T39] audit: type=1326 audit(1731497486.070:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16652 comm="syz.5.2022" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x0 [ 794.291165][T16654] 9pnet_fd: Insufficient options for proto=fd [ 794.390014][T16659] FAULT_INJECTION: forcing a failure. [ 794.390014][T16659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.393395][T16659] CPU: 3 UID: 0 PID: 16659 Comm: syz.5.2023 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 794.396173][T16659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 794.398948][T16659] Call Trace: [ 794.399827][T16659] [ 794.400611][T16659] dump_stack_lvl+0x16c/0x1f0 [ 794.401844][T16659] should_fail_ex+0x497/0x5b0 [ 794.403076][T16659] _copy_from_iter+0x29b/0x1400 [ 794.404359][T16659] ? __pfx__copy_from_iter+0x10/0x10 [ 794.405744][T16659] ? __virt_addr_valid+0x1a4/0x590 [ 794.407530][T16659] ? __virt_addr_valid+0x5e/0x590 [ 794.407569][T16659] ? __phys_addr_symbol+0x30/0x80 [ 794.407581][T16659] ? __check_object_size+0x488/0x710 [ 794.412081][T16659] file_tty_write.constprop.0+0x48d/0x9a0 [ 794.412106][T16659] vfs_write+0x5ae/0x1150 [ 794.412118][T16659] ? __pfx_tty_write+0x10/0x10 [ 794.416013][T16659] ? trace_lock_acquire+0x14a/0x1d0 [ 794.416029][T16659] ? __pfx_vfs_write+0x10/0x10 [ 794.416042][T16659] ? __fget_files+0x40/0x3f0 [ 794.416060][T16659] ksys_write+0x12f/0x260 [ 794.421313][T16659] ? __pfx_ksys_write+0x10/0x10 [ 794.421332][T16659] __do_fast_syscall_32+0x73/0x120 [ 794.421345][T16659] do_fast_syscall_32+0x32/0x80 [ 794.425245][T16659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 794.425260][T16659] RIP: 0023:0xf7f32579 [ 794.425270][T16659] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 794.425280][T16659] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 794.432989][T16659] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 794.432997][T16659] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 794.433003][T16659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 794.433010][T16659] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 794.433016][T16659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 794.433031][T16659] [ 794.946803][ T5955] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 795.033466][T16680] sp0: Synchronizing with TNC [ 795.104388][ T1248] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.106844][ T5955] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 795.110406][ T5955] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.121819][ T5955] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.124673][ T5955] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.127141][ T39] audit: type=1326 audit(1731497486.910:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16681 comm="syz.8.2031" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f70579 code=0x0 [ 795.127614][ T5955] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.134967][ T5955] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.137898][ T5955] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.140399][ T5955] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.142792][ T5955] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.145619][ T5955] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.148283][ T5955] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.150650][ T5955] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.153518][ T5955] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.155982][ T5955] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.158513][ T5955] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.161433][ T5955] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.164045][ T5955] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.166729][ T5955] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.169552][ T5955] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.174867][ T5955] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.175184][ T1248] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.177441][ T5955] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.183770][ T5955] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.186448][ T5955] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.188925][ T5955] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.191782][ T5955] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.195043][ T5955] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 795.197555][ T5955] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 795.199753][ T5955] usb 10-1: Product: syz [ 795.200936][ T5955] usb 10-1: Manufacturer: syz [ 795.202193][ T5955] usb 10-1: SerialNumber: syz [ 795.204275][ T5955] usb 10-1: config 0 descriptor?? [ 795.210613][ T5955] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 795.259502][ T1248] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.292961][ T39] audit: type=1326 audit(1731497487.070:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16684 comm="syz.2.2032" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x0 [ 795.336715][ T1248] bridge_slave_1: left allmulticast mode [ 795.338198][ T1248] bridge_slave_1: left promiscuous mode [ 795.342136][ T1248] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.345316][ T1248] bridge_slave_0: left allmulticast mode [ 795.348740][ T1248] bridge_slave_0: left promiscuous mode [ 795.350260][ T1248] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.415585][ T5955] usb 10-1: USB disconnect, device number 8 [ 795.433671][ T5955] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 795.641690][ T5315] Bluetooth: hci1: command tx timeout [ 795.664503][ T1248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.668509][ T1248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.672547][ T1248] bond0 (unregistering): Released all slaves [ 796.086525][ T1248] hsr_slave_0: left promiscuous mode [ 796.089067][ T1248] hsr_slave_1: left promiscuous mode [ 796.091874][ T1248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.093988][ T1248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.096643][ T1248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.098757][ T1248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.125164][ T1248] veth1_macvtap: left promiscuous mode [ 796.126731][ T1248] veth0_macvtap: left promiscuous mode [ 796.128214][ T1248] veth1_vlan: left promiscuous mode [ 796.129599][ T1248] veth0_vlan: left promiscuous mode [ 797.001242][ T1248] team0 (unregistering): Port device team_slave_1 removed [ 797.113840][ T1248] team0 (unregistering): Port device team_slave_0 removed [ 797.716850][ T5315] Bluetooth: hci1: command tx timeout [ 797.893048][T16710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.895090][T16710] IPv6: NLM_F_CREATE should be set when creating new route [ 797.897942][T16712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.899948][T16712] IPv6: NLM_F_CREATE should be set when creating new route [ 797.983311][ T39] audit: type=1326 audit(1731497489.760:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16717 comm="syz.2.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 797.996634][ T39] audit: type=1326 audit(1731497489.760:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16717 comm="syz.2.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 798.005920][ T39] audit: type=1326 audit(1731497489.770:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16717 comm="syz.2.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 798.016318][ T39] audit: type=1326 audit(1731497489.770:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16717 comm="syz.2.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 798.023203][ T39] audit: type=1326 audit(1731497489.770:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16717 comm="syz.2.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 798.025779][T16629] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 798.041348][ T39] audit: type=1326 audit(1731497489.770:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16717 comm="syz.2.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 798.066816][ T39] audit: type=1326 audit(1731497489.770:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16717 comm="syz.2.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 798.076417][T16629] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 798.098680][T16629] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 798.125600][T16629] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 798.313042][T16629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.342570][T16629] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.349569][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.351496][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.377666][T16128] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.379610][T16128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.678152][T16629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.889459][T16733] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2044'. [ 798.972993][T16629] veth0_vlan: entered promiscuous mode [ 798.977655][T16629] veth1_vlan: entered promiscuous mode [ 798.992497][T16629] veth0_macvtap: entered promiscuous mode [ 798.997181][T16629] veth1_macvtap: entered promiscuous mode [ 799.004681][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.008211][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.010824][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.013510][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.016040][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.019691][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.023056][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.026629][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.030125][T16629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.035501][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.040729][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.043485][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.048503][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.051035][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.053889][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.059116][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.061830][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.065089][T16629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.073146][T16629] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.075555][T16629] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.078111][T16629] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.080517][T16629] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.126092][ T1248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.128461][ T1248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.150123][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.154299][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.873514][T16761] FAULT_INJECTION: forcing a failure. [ 799.873514][T16761] name failslab, interval 1, probability 0, space 0, times 0 [ 799.877349][T16761] CPU: 0 UID: 0 PID: 16761 Comm: syz.5.2049 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 799.880257][T16761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 799.883031][T16761] Call Trace: [ 799.883903][T16761] [ 799.884685][T16761] dump_stack_lvl+0x16c/0x1f0 [ 799.885911][T16761] should_fail_ex+0x497/0x5b0 [ 799.887159][T16761] ? fs_reclaim_acquire+0xae/0x150 [ 799.888411][T16766] usb 2-1: USB disconnect, device number 2 [ 799.888491][T16761] should_failslab+0xc2/0x120 [ 799.891295][T16761] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 799.892711][T16761] ? getname_flags.part.0+0x4c/0x550 [ 799.894097][T16761] getname_flags.part.0+0x4c/0x550 [ 799.895435][T16761] ? __pfx_ksys_write+0x10/0x10 [ 799.896727][T16761] getname_flags+0x93/0xf0 [ 799.897896][T16761] __ia32_sys_symlinkat+0x86/0xc0 [ 799.899222][T16761] __do_fast_syscall_32+0x73/0x120 [ 799.900562][T16761] do_fast_syscall_32+0x32/0x80 [ 799.901845][T16761] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 799.903480][T16761] RIP: 0023:0xf7f32579 [ 799.904555][T16761] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 799.909510][T16761] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000130 [ 799.911661][T16761] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 0000000000000004 [ 799.913720][T16761] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 799.915769][T16761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 799.917834][T16761] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 799.919880][T16761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 799.921935][T16761] [ 800.176432][T10680] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 800.336365][T10680] usb 7-1: Using ep0 maxpacket: 8 [ 800.339336][T10680] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 800.342145][T10680] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 800.344470][T10680] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.350741][T10680] usb 7-1: config 0 descriptor?? [ 800.600782][T10680] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 800.630532][ T1135] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.787649][T11713] usb 7-1: USB disconnect, device number 11 [ 800.796711][T11713] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected [ 801.079898][T16767] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 801.081674][T16767] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 801.084281][T16767] vhci_hcd vhci_hcd.0: Device attached [ 801.194624][T16780] FAULT_INJECTION: forcing a failure. [ 801.194624][T16780] name failslab, interval 1, probability 0, space 0, times 0 [ 801.203759][T16780] CPU: 1 UID: 0 PID: 16780 Comm: syz.5.2054 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 801.206302][T16780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 801.208803][T16780] Call Trace: [ 801.209591][T16780] [ 801.210283][T16780] dump_stack_lvl+0x16c/0x1f0 [ 801.211387][T16780] should_fail_ex+0x497/0x5b0 [ 801.212491][T16780] ? fs_reclaim_acquire+0xae/0x150 [ 801.213692][T16780] should_failslab+0xc2/0x120 [ 801.214793][T16780] __kmalloc_cache_noprof+0x6b/0x310 [ 801.216025][T16780] ? do_raw_spin_lock+0x12d/0x2c0 [ 801.217205][T16780] ? netfs_buffer_make_space+0x432/0x6b0 [ 801.218510][T16780] netfs_buffer_make_space+0x432/0x6b0 [ 801.219779][T16780] netfs_buffer_append_folio+0x298/0x360 [ 801.221098][T16780] netfs_write_folio+0x540/0x1930 [ 801.222291][T16780] netfs_writepages+0x29a/0x9d0 [ 801.223447][T16780] ? __pfx_netfs_writepages+0x10/0x10 [ 801.224717][T16780] ? __pfx___lock_acquire+0x10/0x10 [ 801.225941][T16780] ? hlock_class+0x4e/0x130 [ 801.227019][T16780] ? mark_lock+0xb5/0xc60 [ 801.228036][T16780] ? __pfx_netfs_writepages+0x10/0x10 [ 801.229299][T16780] do_writepages+0x1a3/0x7f0 [ 801.230394][T16780] ? __pfx_do_writepages+0x10/0x10 [ 801.231587][T16780] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 801.232904][T16780] ? do_raw_spin_lock+0x12d/0x2c0 [ 801.234082][T16780] ? do_raw_spin_unlock+0x172/0x230 [ 801.235300][T16780] ? _raw_spin_unlock+0x28/0x50 [ 801.236451][T16780] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 801.237861][T16780] filemap_fdatawrite_wbc+0x148/0x1c0 [ 801.239119][T16780] __filemap_fdatawrite_range+0xb3/0xf0 [ 801.240427][T16780] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 801.241920][T16780] ? filemap_dirty_folio+0xe3/0x130 [ 801.243157][T16780] ? __pfx_lock_release+0x10/0x10 [ 801.244381][T16780] file_write_and_wait_range+0xca/0x140 [ 801.245695][T16780] v9fs_file_fsync+0xdb/0x1c0 [ 801.246840][T16780] ? __pfx_v9fs_file_fsync+0x10/0x10 [ 801.248141][T16780] ? __up_read+0x1fb/0x760 [ 801.249284][T16780] ? __pfx_v9fs_file_fsync+0x10/0x10 [ 801.250569][T16780] vfs_fsync_range+0x136/0x220 [ 801.251727][T16780] netfs_file_write_iter+0x3dd/0x4f0 [ 801.252986][T16780] v9fs_file_write_iter+0x9b/0x100 [ 801.254187][T16780] vfs_write+0x5ae/0x1150 [ 801.255216][T16780] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 801.256564][T16780] ? trace_lock_acquire+0x14a/0x1d0 [ 801.257780][T16780] ? __pfx_vfs_write+0x10/0x10 [ 801.258898][T16780] ? __pfx___mutex_lock+0x10/0x10 [ 801.260118][T16780] ksys_write+0x12f/0x260 [ 801.261159][T16780] ? __pfx_ksys_write+0x10/0x10 [ 801.262347][T16780] __do_fast_syscall_32+0x73/0x120 [ 801.263557][T16780] do_fast_syscall_32+0x32/0x80 [ 801.264717][T16780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 801.266249][T16780] RIP: 0023:0xf7f32579 [ 801.267337][T16780] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 801.271814][T16780] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 801.273764][T16780] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000300 [ 801.275615][T16780] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 801.277455][T16780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 801.279293][T16780] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 801.281153][T16780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 801.282995][T16780] [ 801.286678][T16780] ------------[ cut here ]------------ [ 801.288187][T16780] WARNING: CPU: 2 PID: 16780 at lib/iov_iter.c:255 _copy_from_iter+0x39b/0x1400 [ 801.290519][T16780] Modules linked in: [ 801.292223][T16780] CPU: 2 UID: 0 PID: 16780 Comm: syz.5.2054 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 801.295963][T16780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 801.298813][T16780] RIP: 0010:_copy_from_iter+0x39b/0x1400 [ 801.300281][T16780] Code: 66 fd 0f 01 cb 4c 89 f9 4c 89 f7 48 89 de f3 a4 0f 1f 00 48 89 cb 0f 01 ca 4d 89 fc 49 29 cc e9 1d ff ff ff e8 d6 b1 04 fd 90 <0f> 0b 90 e9 ae fd ff ff e8 c8 b1 04 fd 89 de bf 01 00 00 00 e8 9c [ 801.305195][T16780] RSP: 0018:ffffc90007326f18 EFLAGS: 00010293 [ 801.306870][T16780] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8487efc8 [ 801.308909][T16780] RDX: ffff888021170000 RSI: ffffffff8487f2aa RDI: 0000000000000001 [ 801.310940][T16780] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 801.312980][T16780] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880229981a0 [ 801.315012][T16780] R13: ffff88806684e390 R14: ffff8880229981a0 R15: 0000000000000004 [ 801.317106][T16780] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f56b6b40 [ 801.319397][T16780] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 801.321108][T16780] CR2: 00000000f744275c CR3: 0000000025f78000 CR4: 0000000000352ef0 [ 801.323166][T16780] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 801.325223][T16780] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 801.328970][T16780] Call Trace: [ 801.329965][T16780] [ 801.330808][T16780] ? __warn+0xea/0x3d0 [ 801.331883][T16780] ? _copy_from_iter+0x39b/0x1400 [ 801.333199][T16780] ? report_bug+0x3c0/0x580 [ 801.334381][T16780] ? handle_bug+0x54/0xa0 [ 801.335494][T16780] ? exc_invalid_op+0x17/0x50 [ 801.336772][T16780] ? asm_exc_invalid_op+0x1a/0x20 [ 801.337630][T10680] vhci_hcd: vhci_device speed not set [ 801.338081][T16780] ? _copy_from_iter+0xb8/0x1400 [ 801.340811][T16780] ? _copy_from_iter+0x39a/0x1400 [ 801.342124][T16780] ? _copy_from_iter+0x39b/0x1400 [ 801.343450][T16780] ? _copy_from_iter+0x39a/0x1400 [ 801.344771][T16780] ? __pfx_lock_release+0x10/0x10 [ 801.346092][T16780] ? __pfx__copy_from_iter+0x10/0x10 [ 801.347552][T16780] ? __virt_addr_valid+0x1a4/0x590 [ 801.348911][T16780] ? __virt_addr_valid+0x5e/0x590 [ 801.350269][T16780] ? __phys_addr_symbol+0x30/0x80 [ 801.351581][T16780] ? __check_object_size+0x488/0x710 [ 801.352975][T16780] p9pdu_vwritef+0x2cb/0x21d0 [ 801.354214][T16780] ? p9pdu_writef+0xc4/0x100 [ 801.355431][T16780] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 801.356815][T16780] ? __pfx_p9_tag_alloc+0x10/0x10 [ 801.358127][T16780] p9_client_prepare_req+0x244/0x4d0 [ 801.359502][T16780] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 801.361026][T16780] ? hlock_class+0x4e/0x130 [ 801.362211][T16780] ? mark_lock+0xb5/0xc60 [ 801.363340][T16780] p9_client_rpc+0x1c3/0xc10 [ 801.364554][T16780] ? __pfx___lock_acquire+0x10/0x10 [ 801.365914][T16780] ? __pfx_p9_client_rpc+0x10/0x10 [ 801.367309][T16780] ? __pfx_register_lock_class+0x10/0x10 [ 801.368779][T16780] ? hlock_class+0x4e/0x130 [ 801.369970][T16780] ? __lock_acquire+0x163e/0x3ce0 [ 801.371280][T16780] p9_client_write+0x31f/0x680 [ 801.372550][T16780] ? __pfx_p9_client_write+0x10/0x10 [ 801.373921][T16780] ? lock_acquire.part.0+0x11b/0x380 [ 801.375293][T16780] ? find_held_lock+0x2d/0x110 [ 801.376614][T16780] v9fs_issue_write+0xe2/0x180 [ 801.377878][T16780] ? __pfx_v9fs_issue_write+0x10/0x10 [ 801.379273][T16780] ? rcu_is_watching+0x12/0xc0 [ 801.380528][T16780] ? trace_netfs_sreq+0x193/0x220 [ 801.381847][T16780] netfs_do_issue_write+0x92/0x110 [ 801.383178][T16780] netfs_advance_write+0x384/0xc80 [ 801.384525][T16780] netfs_write_folio+0xc19/0x1930 [ 801.385849][T16780] netfs_writepages+0x29a/0x9d0 [ 801.387288][T16780] ? __pfx_netfs_writepages+0x10/0x10 [ 801.388692][T16780] ? __pfx___lock_acquire+0x10/0x10 [ 801.390048][T16780] ? hlock_class+0x4e/0x130 [ 801.391235][T16780] ? mark_lock+0xb5/0xc60 [ 801.392375][T16780] ? __pfx_netfs_writepages+0x10/0x10 [ 801.393769][T16780] do_writepages+0x1a3/0x7f0 [ 801.394976][T16780] ? __pfx_do_writepages+0x10/0x10 [ 801.396346][T16780] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 801.397811][T16780] ? do_raw_spin_lock+0x12d/0x2c0 [ 801.399121][T16780] ? do_raw_spin_unlock+0x172/0x230 [ 801.400475][T16780] ? _raw_spin_unlock+0x28/0x50 [ 801.401748][T16780] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 801.403297][T16780] filemap_fdatawrite_wbc+0x148/0x1c0 [ 801.404695][T16780] __filemap_fdatawrite_range+0xb3/0xf0 [ 801.406135][T16780] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 801.407834][T16780] ? filemap_dirty_folio+0xe3/0x130 [ 801.409226][T16780] ? __pfx_lock_release+0x10/0x10 [ 801.410548][T16780] file_write_and_wait_range+0xca/0x140 [ 801.412000][T16780] v9fs_file_fsync+0xdb/0x1c0 [ 801.413246][T16780] ? __pfx_v9fs_file_fsync+0x10/0x10 [ 801.414631][T16780] ? __up_read+0x1fb/0x760 [ 801.415799][T16780] ? __pfx_v9fs_file_fsync+0x10/0x10 [ 801.417407][T16780] vfs_fsync_range+0x136/0x220 [ 801.418664][T16780] netfs_file_write_iter+0x3dd/0x4f0 [ 801.420040][T16780] v9fs_file_write_iter+0x9b/0x100 [ 801.421382][T16780] vfs_write+0x5ae/0x1150 [ 801.422512][T16780] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 801.423990][T16780] ? trace_lock_acquire+0x14a/0x1d0 [ 801.425347][T16780] ? __pfx_vfs_write+0x10/0x10 [ 801.426658][T16780] ? __pfx___mutex_lock+0x10/0x10 [ 801.427992][T16780] ksys_write+0x12f/0x260 [ 801.429143][T16780] ? __pfx_ksys_write+0x10/0x10 [ 801.430420][T16780] __do_fast_syscall_32+0x73/0x120 [ 801.431767][T16780] do_fast_syscall_32+0x32/0x80 [ 801.433051][T16780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 801.434702][T16780] RIP: 0023:0xf7f32579 [ 801.435773][T16780] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 801.440854][T16780] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 801.441465][T11459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 801.443013][T16780] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000300 [ 801.443024][T16780] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 801.446838][T11459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 801.447209][T16780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 801.449991][T11459] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 801.450998][T16780] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 801.454076][T11459] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 801.454808][T16780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 801.454826][T16780] [ 801.454833][T16780] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 801.454840][T16780] CPU: 2 UID: 0 PID: 16780 Comm: syz.5.2054 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 801.454852][T16780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 801.454859][T16780] Call Trace: [ 801.454863][T16780] [ 801.454867][T16780] dump_stack_lvl+0x3d/0x1f0 [ 801.454881][T16780] panic+0x71d/0x800 [ 801.454896][T16780] ? __pfx_panic+0x10/0x10 [ 801.454910][T16780] ? show_trace_log_lvl+0x29d/0x3d0 [ 801.454925][T16780] ? check_panic_on_warn+0x1f/0xb0 [ 801.454940][T16780] ? _copy_from_iter+0x39b/0x1400 [ 801.454954][T16780] check_panic_on_warn+0xab/0xb0 [ 801.454968][T16780] __warn+0xf6/0x3d0 [ 801.454983][T16780] ? _copy_from_iter+0x39b/0x1400 [ 801.454995][T16780] report_bug+0x3c0/0x580 [ 801.455013][T16780] handle_bug+0x54/0xa0 [ 801.455024][T16780] exc_invalid_op+0x17/0x50 [ 801.455036][T16780] asm_exc_invalid_op+0x1a/0x20 [ 801.455051][T16780] RIP: 0010:_copy_from_iter+0x39b/0x1400 [ 801.455064][T16780] Code: 66 fd 0f 01 cb 4c 89 f9 4c 89 f7 48 89 de f3 a4 0f 1f 00 48 89 cb 0f 01 ca 4d 89 fc 49 29 cc e9 1d ff ff ff e8 d6 b1 04 fd 90 <0f> 0b 90 e9 ae fd ff ff e8 c8 b1 04 fd 89 de bf 01 00 00 00 e8 9c [ 801.455074][T16780] RSP: 0018:ffffc90007326f18 EFLAGS: 00010293 [ 801.455082][T16780] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8487efc8 [ 801.455089][T16780] RDX: ffff888021170000 RSI: ffffffff8487f2aa RDI: 0000000000000001 [ 801.455096][T16780] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 801.455102][T16780] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880229981a0 [ 801.455108][T16780] R13: ffff88806684e390 R14: ffff8880229981a0 R15: 0000000000000004 [ 801.455119][T16780] ? _copy_from_iter+0xb8/0x1400 [ 801.455131][T16780] ? _copy_from_iter+0x39a/0x1400 [ 801.455144][T16780] ? _copy_from_iter+0x39a/0x1400 [ 801.455157][T16780] ? __pfx_lock_release+0x10/0x10 [ 801.455174][T16780] ? __pfx__copy_from_iter+0x10/0x10 [ 801.455185][T16780] ? __virt_addr_valid+0x1a4/0x590 [ 801.455200][T16780] ? __virt_addr_valid+0x5e/0x590 [ 801.455212][T16780] ? __phys_addr_symbol+0x30/0x80 [ 801.455223][T16780] ? __check_object_size+0x488/0x710 [ 801.455239][T16780] p9pdu_vwritef+0x2cb/0x21d0 [ 801.455258][T16780] ? p9pdu_writef+0xc4/0x100 [ 801.455273][T16780] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 801.455288][T16780] ? __pfx_p9_tag_alloc+0x10/0x10 [ 801.455305][T16780] p9_client_prepare_req+0x244/0x4d0 [ 801.455319][T16780] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 801.455334][T16780] ? hlock_class+0x4e/0x130 [ 801.455345][T16780] ? mark_lock+0xb5/0xc60 [ 801.455361][T16780] p9_client_rpc+0x1c3/0xc10 [ 801.455375][T16780] ? __pfx___lock_acquire+0x10/0x10 [ 801.455390][T16780] ? __pfx_p9_client_rpc+0x10/0x10 [ 801.455403][T16780] ? __pfx_register_lock_class+0x10/0x10 [ 801.455421][T16780] ? hlock_class+0x4e/0x130 [ 801.455432][T16780] ? __lock_acquire+0x163e/0x3ce0 [ 801.455451][T16780] p9_client_write+0x31f/0x680 [ 801.455470][T16780] ? __pfx_p9_client_write+0x10/0x10 [ 801.455484][T16780] ? lock_acquire.part.0+0x11b/0x380 [ 801.455498][T16780] ? find_held_lock+0x2d/0x110 [ 801.455512][T16780] v9fs_issue_write+0xe2/0x180 [ 801.455526][T16780] ? __pfx_v9fs_issue_write+0x10/0x10 [ 801.455539][T16780] ? rcu_is_watching+0x12/0xc0 [ 801.455551][T16780] ? trace_netfs_sreq+0x193/0x220 [ 801.455567][T16780] netfs_do_issue_write+0x92/0x110 [ 801.455583][T16780] netfs_advance_write+0x384/0xc80 [ 801.455602][T16780] netfs_write_folio+0xc19/0x1930 [ 801.455623][T16780] netfs_writepages+0x29a/0x9d0 [ 801.455641][T16780] ? __pfx_netfs_writepages+0x10/0x10 [ 801.455658][T16780] ? __pfx___lock_acquire+0x10/0x10 [ 801.455672][T16780] ? hlock_class+0x4e/0x130 [ 801.455684][T16780] ? mark_lock+0xb5/0xc60 [ 801.455700][T16780] ? __pfx_netfs_writepages+0x10/0x10 [ 801.455716][T16780] do_writepages+0x1a3/0x7f0 [ 801.455731][T16780] ? __pfx_do_writepages+0x10/0x10 [ 801.455742][T16780] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 801.455758][T16780] ? do_raw_spin_lock+0x12d/0x2c0 [ 801.455769][T16780] ? do_raw_spin_unlock+0x172/0x230 [ 801.455780][T16780] ? _raw_spin_unlock+0x28/0x50 [ 801.455794][T16780] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 801.455809][T16780] filemap_fdatawrite_wbc+0x148/0x1c0 [ 801.455822][T16780] __filemap_fdatawrite_range+0xb3/0xf0 [ 801.455837][T16780] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 801.455851][T16780] ? filemap_dirty_folio+0xe3/0x130 [ 801.455877][T16780] ? __pfx_lock_release+0x10/0x10 [ 801.455895][T16780] file_write_and_wait_range+0xca/0x140 [ 801.455911][T16780] v9fs_file_fsync+0xdb/0x1c0 [ 801.455924][T16780] ? __pfx_v9fs_file_fsync+0x10/0x10 [ 801.455942][T16780] ? __up_read+0x1fb/0x760 [ 801.455954][T16780] ? __pfx_v9fs_file_fsync+0x10/0x10 [ 801.455966][T16780] vfs_fsync_range+0x136/0x220 [ 801.455984][T16780] netfs_file_write_iter+0x3dd/0x4f0 [ 801.455998][T16780] v9fs_file_write_iter+0x9b/0x100 [ 801.456011][T16780] vfs_write+0x5ae/0x1150 [ 801.456023][T16780] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 801.456037][T16780] ? trace_lock_acquire+0x14a/0x1d0 [ 801.456048][T16780] ? __pfx_vfs_write+0x10/0x10 [ 801.456058][T16780] ? __pfx___mutex_lock+0x10/0x10 [ 801.456077][T16780] ksys_write+0x12f/0x260 [ 801.456088][T16780] ? __pfx_ksys_write+0x10/0x10 [ 801.456120][T16780] __do_fast_syscall_32+0x73/0x120 [ 801.456131][T16780] do_fast_syscall_32+0x32/0x80 [ 801.456141][T16780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 801.456153][T16780] RIP: 0023:0xf7f32579 [ 801.456161][T16780] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 801.456171][T16780] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 801.456181][T16780] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000300 [ 801.456187][T16780] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 801.456193][T16780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 801.456199][T16780] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 801.456206][T16780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 801.456219][T16780] [ 801.457315][T16780] Kernel Offset: disabled VM DIAGNOSIS: 11:31:32 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000000 RBX=dffffc0000000000 RCX=ffffffff81f7c8b6 RDX=ffff88801f7f4880 RSI=ffffffff81f7c8c7 RDI=0000000000000003 RBP=ffff888040c98030 RSP=ffffc900070d7770 R8 =0000000000000003 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=0000000000000001 R15=0000000000002dc2 RIP=ffffffff818ca4bb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d5004 CR3=0000000023b60000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000001849fed RBX=0000000000000001 RCX=ffffffff8b14ada9 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb13760 RBP=ffffed10036eb910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b75c880 R14=ffffffff901cf348 R15=0000000000000000 RIP=ffffffff8b14c18f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f56b5fac CR3=0000000025f78000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000e000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85047ba5 RDI=ffffffff9a644320 RBP=ffffffff9a6442e0 RSP=ffffc90007326878 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000036 R14=ffffffff85047b40 R15=0000000000000000 RIP=ffffffff85047bcf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f744275c CR3=0000000025f78000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000e000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000ca9c3d RBX=0000000000000003 RCX=ffffffff8b14ada9 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb13760 RBP=ffffed100376c488 RSP=ffffc90000497e08 R8 =0000000000000001 R9 =ffffed10056e7025 R10=ffff88802b73812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801bb62440 R14=ffffffff901cf348 R15=0000000000000000 RIP=ffffffff8b14c18f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020032000 CR3=000000005aa62000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000