last executing test programs: 15m9.549138282s ago: executing program 2 (id=4939): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) sendto$inet6(r1, &(0x7f0000000180)="d6", 0x1, 0x40800, &(0x7f0000000280)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f85ce2aa524aaaaaaaa5059f7e3bbcc3cd9e04bc8885c4691baaabb81004000", @ANYRESHEX=0x0, @ANYRES8=r0], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x10) socket$igmp(0x2, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) close(0x3) 15m9.499071906s ago: executing program 2 (id=4940): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000008a80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000008b00)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005"], 0x5c}}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[]) socket$inet(0x2, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'batadv0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "445d5c946392e300cd4053e10727cff1fcaf6c56b3226d906a8a09f217ed2082", "51b6a326352262d99fa8bc4ef712fd54f7fbd668a17d10e6c931bbf6c3f5f2dc", "6064aba63f16bb9fc88ca1c7464d9e17b65aa7dbe94fd755f71ae3fffe17e4e2", "de0daf6a9701f2fbc3467d84f9173c07153e2a25d74e33c0861b28db0a8bea51", "6bf9e20cd9abd1aeeee22c4bf0fd60e6586ba9e628550ad98adfdb9c60225b35", "af889ceb40797eab0ef40d52", 0x9a, 0xefa, 0x6, 0x1, 0x4}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'comedi_bond\x00', [0x4, 0x80000e, 0x8, 0xfffffffb, 0x1000, 0x101, 0x6623, 0x6, 0x8b, 0x8005d08, 0xfffffffa, 0x2, 0xfffffffe, 0x8, 0x6, 0x7, 0x1, 0x7, 0x4, 0xa261, 0x10, 0x5, 0x9, 0x9, 0x5, 0x4, 0x1, 0xc005, 0x59, 0x7, 0x4]}) 15m8.618762596s ago: executing program 2 (id=4942): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2}}]}]}, 0x16c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 15m8.546583042s ago: executing program 2 (id=4943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)=0x3) r8 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r8) 15m7.447579761s ago: executing program 2 (id=4947): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db090000a1000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0xe0, 0x0, 0x0, @time={0x5, 0x6}, {0x40, 0xff}, {0x0, 0xa}, @note={0x3, 0xe, 0x0, 0xc0, 0x4d3b}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0x1}, {}, {0x80}, @queue={0xf2, {0x6, 0x4}}}], 0x38) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r1) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 15m7.399399489s ago: executing program 2 (id=4948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 9) 14m53.669155814s ago: executing program 0 (id=5010): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000440)=0x100000, 0x4) listen(r0, 0x0) r3 = socket(0x28, 0x4, 0x0) connect$vsock_stream(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = openat$nmem0(0xffffff9c, &(0x7f00000000c0), 0x200240, 0x0) r5 = accept4$unix(r4, 0x0, 0x0, 0x80000) syz_io_uring_setup(0x3a87, &(0x7f0000000500)={0x0, 0xfad6, 0x100, 0xfffffffd, 0x11b, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000340)) syz_open_procfs(0x0, &(0x7f0000000480)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f00000002c0)=r4, 0x1) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040043000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup(r7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_emit_ethernet(0x66, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd02922a252df9be8220a7ccb2600000080030cb9d52915b77973c0253fffe8000000000000000000000000000aaff020000000000000000000000000001870000fe8000000000000000000000000000aa8bd2d5cf852748f31f8fd096d6276b2e0e0200"], 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @random}]}) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x5bcf40, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x2, 0x0, 0x0, 0x9, 0x1, 0xfffffedf, 0x8, 0xe6c9, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) 14m53.449205063s ago: executing program 0 (id=5011): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000008a80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000008b00)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005"], 0x5c}}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[]) r4 = socket$inet(0x2, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'batadv0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "445d5c946392e300cd4053e10727cff1fcaf6c56b3226d906a8a09f217ed2082", "51b6a326352262d99fa8bc4ef712fd54f7fbd668a17d10e6c931bbf6c3f5f2dc", "6064aba63f16bb9fc88ca1c7464d9e17b65aa7dbe94fd755f71ae3fffe17e4e2", "de0daf6a9701f2fbc3467d84f9173c07153e2a25d74e33c0861b28db0a8bea51", "6bf9e20cd9abd1aeeee22c4bf0fd60e6586ba9e628550ad98adfdb9c60225b35", "af889ceb40797eab0ef40d52", 0x9a, 0xefa, 0x6, 0x1, 0x4}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r6}, 0xc) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000180)={'comedi_bond\x00', [0x4, 0x80000e, 0x8, 0xfffffffb, 0x1000, 0x101, 0x6623, 0x6, 0x8b, 0x8005d08, 0xfffffffa, 0x2, 0xfffffffe, 0x8, 0x6, 0x7, 0x1, 0x7, 0x4, 0xa261, 0x10, 0x5, 0x9, 0x9, 0x5, 0x4, 0x1, 0xc005, 0x59, 0x7, 0x4]}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000840)={0x0, 0x0, r9, r10, 0xd, 0x14, 0x3219, 0x3ff, {0x3606, 0x30, 0x6cde, 0x0, 0xfffe, 0x7, 0xd, 0xfb62, 0xfb62, 0xfb62, 0x7, 0x100002, 0x53d3, 0xfffffe01, "e10a2be47a666d3d42404ecfe5569fdc470ca9bd6cf42e33e5df01a3841470bb"}}) openat$vmci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) 14m53.277327658s ago: executing program 0 (id=5013): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') open_by_handle_at(r0, &(0x7f0000000400)=@ceph_nfs_fh={0x8, 0x1, {0xf405}}, 0x420b40) preadv(r0, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x80, 0xffffffff, 0x40001c8, 0x0, r1}, &(0x7f0000002840), &(0x7f0000002880)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x1d, r3, 0x0, {0x2, 0x0, 0x1a817ff3f912f618}, 0x2}, 0x18, &(0x7f0000000580)={&(0x7f00000004c0)="ed66840fccf783ef3768a8", 0xb}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x343201) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000240), 0x4000, 0x0) r7 = syz_io_uring_setup(0x2744, &(0x7f0000000500)={0x0, 0x4736, 0x10100, 0x0, 0x24d, 0x0, r6}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) madvise(&(0x7f0000464000/0x2000)=nil, 0x2000, 0x4) r10 = gettid() sched_setaffinity(r10, 0x8, &(0x7f0000000180)=0x3) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f00000002c0)=0x8) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x1202}, 0x1}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2006c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e905", 0x9b) set_mempolicy(0x8006, 0x0, 0x8) io_uring_enter(r7, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x37, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x2, &(0x7f00000001c0)) timer_create(0x3, 0x0, &(0x7f00000003c0)) timer_delete(0x0) tee(r12, r11, 0x3, 0x4) 14m52.359238162s ago: executing program 0 (id=5015): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = memfd_secret(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/11) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m52.358935825s ago: executing program 32 (id=4948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 9) 14m52.30750827s ago: executing program 0 (id=5023): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f72c9fed53ff16910000008003950323030302e75"], 0x15) r1 = dup(r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x4) write$uinput_user_dev(r3, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfff], [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x868]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = gettid() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0xffffffffdf001fff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x7, 0x4}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x1906) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000000c0)="3f8602d925b120cfc2a623e7692105761baa1e21df734500c5d687885a3b54c1224cfaa4a79206cb71777095b7ba0e3d650c98af2428de84b98b7fd5462e", 0x3e) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6e0000899f2fa1dc426e77d2186076c25733075fe2976ade1b9272090534a2e182183cbbd0577b7cf9270bf4c9a1585ba2cc99613b26bcb1fbac4f9dfedddfa075669838e97ce45a6c4aff84b7961cc4c56e52a5a34cf7f5a0eb8715192788c1f6f1688bc453050444012abffe26a8df4ee2e32740b2517caacec82d25f6ef513d6af697c6e0696f03fd9f062ee2beb3", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x3001, 0x0) ioctl$FBIOPUT_CON2FBMAP(r9, 0x4610, &(0x7f0000000180)={0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f0000000600)={0x7, 0x1, 0x2, {0x2, @win={{0x5c1, 0x6, 0x0, 0x44c9}, 0x3, 0xf7, &(0x7f0000002280)={{0x3, 0x40, 0xc, 0xf}, &(0x7f0000002240)={{0x7, 0x7, 0x7, 0x3c0e}, &(0x7f0000002200)={{0x2, 0x7, 0xda, 0x4}}}}, 0x7, &(0x7f00000022c0)="ecf97d0fbfdc740613bb465e002c7a5809e5c4788f3284b6d777c13440a9f954c75921d1384be5436c097d9dbe24ac96ca6522080c1e4108ee7c774f9e16d340f396a7e7058d48c3cf04ee405503912d36da21f9daf2c28e750eec2d480a0f858b9734a0c2ee1ce58dee7af34a6b8a83537684c5060eeffa37b464db9d0ed0a5d5225397ff497990", 0x9}}, 0x3}) ioctl$FBIOPUT_CON2FBMAP(r9, 0x4610, &(0x7f0000000000)={0x1, 0x1}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x21, 0x1000, 0x40, 0x81, 0x1005, 0x0, 0xc, 0x0, 0x0, 0x80}}, 0x50) 14m51.669018139s ago: executing program 0 (id=5018): arch_prctl$ARCH_GET_GS(0x1004, 0x0) unshare(0x20000600) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000ecff0000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) close(r2) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r2, 0x0, 0x0}, 0x10) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_io_uring_submit(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) 14m51.648107964s ago: executing program 33 (id=5018): arch_prctl$ARCH_GET_GS(0x1004, 0x0) unshare(0x20000600) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000ecff0000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) close(r2) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r2, 0x0, 0x0}, 0x10) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_io_uring_submit(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) 13m21.842131152s ago: executing program 1 (id=5453): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="f80000005500080026bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00030300fe8000000000000000000000000000bb86dd000020000100", @ANYRES32=r5, @ANYBLOB="00020400e00000010000000000000000000000000800000020000100", @ANYRES32=r3, @ANYBLOB="01000300ffffffff0000000000000000000000000000000020000100", @ANYRES32=r10, @ANYBLOB="010001000000000000000000000000000000000086dd000020000100", @ANYRES32=r5, @ANYBLOB="00020200ac1414bb00000000000000000000000086dd000020000100", @ANYRES32=r3, @ANYBLOB="0000020000000000800000000000000000000000c5b3000020000100", @ANYRES32=r7, @ANYBLOB="00010200fc01000000000000000000000000000086dd0000"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0) 13m21.545962736s ago: executing program 1 (id=5456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x2}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x810) r4 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, 0x0, 0x0) listen(r6, 0xfffffffc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000400), 0x7385412d, 0x101000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) syz_open_pts(0xffffffffffffffff, 0x22000) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000005280)=@newtaction={0x5500, 0x31, 0x103, 0x2, 0x25dfdbfc, {}, [{0x149c, 0x1, [@m_mirred={0xac, 0x3, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x6d99cd5e5f997cd8, 0x6, 0xffffffff}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x1, 0xbc2, 0x4}, 0x2}}]}, {0x3d, 0x6, "77161853899e5fc78c8c6e7da6107ef69b281cbec415c829b58490d5511eaf0c6a39ad2cdc58d9daa927fbc0f70fe00e7bca98f66c452603db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x5c, 0x8, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xa2f, 0x4}}]}, {0x23, 0x6, "0d44beeb073d217a34258c1f82793be915341a6829fb31b329c5a1a62db913"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x11c, 0x1b, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x81}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x40, 0x8, 0x1ff, 0x23}}]}, {0xae, 0x6, "648b7d2c674071a3ad9f0c219fdf6d3fcc54a9ddec52952c0791af0d8f76f90f4dbf15c847414606583d56156a65cbe0eb579554888d1ed345a4a1b825f507c99d874b86d290f5c673947e7b87a3f663a20a6c4588e22511283508c39ab84d8b58b6f06ba6e2adfaac1f2093f69cc065305be2360a15282e5c9ad7dd780ba827203dda3c13df0745595cb45e07fe4c27b729f97c04c3278bd6ea994823b1d0b9281786b507838e03703d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x1c4, 0x17, 0x0, 0x0, {{0x7}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfff}, @TCA_IPT_INDEX={0x8, 0x3, 0x664}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3f}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x800}]}, {0xf5, 0x6, "6c7dc9a18bfa9b2a52aa7623fb702b9e4c19a07b4dfa64a8420d86fcdc8668451357a90f0fa6e2f5425e59a42363682195c5f849d50c389a33841357d3001edc691a3bcfccd9355c44a00ec0b07da46346c95ffcb8647d3f7b29a55f5a9ae878f5e72fb25a23ba38fa70afa4ea7181d0dcf55b94659e7bc3464659121465b49e449f320873b882f0eaf58229eb663139ccd76b0ad8e77b6bf2e55d4f6d1f88268cce65f9af869fae05effadc05dee22d6202e29a8c3f7ab1c51e8cc8e74d9d25f6bc0a3836b41da8afeb10d378552b2ac70d28dece2fe4d7b3671832a5c9f8922fd0a3e69a6381311776176d5e12f5e568"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x1030, 0x15, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x80, 0x18, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xe1fb, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x0, 0xffffffffffffffff, 0x70b2}}]}, {0x24, 0x6, "77028ad10cdeac6a0611096a5b6cd9af73f80d8b6f74d7b7e7662cf0585d1ff4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x4050, 0x1, [@m_mirred={0xd8, 0x1c, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x0, 0x4, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x9, 0x0, 0x40, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x0, 0x0, 0x1, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x7, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6ff1, 0x1, 0x7, 0x10001}, 0x1}}]}, {0xb, 0x6, "a58f7e02c58e8c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x4c, 0x12, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x3ad0, 0x2, 0x0, 0x0, {{0xb}, {0x39bc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7, 0x0, 0xfffffff9, 0x1, 0x4, 0x4, 0x9, 0x9, 0x2, 0x3, 0x1, 0x80000000, 0x80000000, 0x5, 0x7, 0x1, 0x10001, 0x8, 0x200, 0x4, 0x756, 0x7, 0x6, 0x7, 0x800, 0x0, 0x1, 0x8, 0x4638, 0x2, 0x7ff, 0x2, 0x0, 0x3ff, 0x5, 0x0, 0xfffffffb, 0x0, 0x101, 0x0, 0x2, 0x7, 0x2, 0x5, 0x1, 0xf63, 0x92, 0x868, 0x5, 0x0, 0xa0, 0x80000000, 0x811f, 0x80000000, 0x4, 0x3ff, 0xf36c, 0x7d800000, 0x96e, 0xffffffff, 0x0, 0x5, 0x7, 0x0, 0x101, 0x40, 0x7, 0x0, 0x6, 0x5, 0xfea, 0x7, 0x5, 0x7, 0x5, 0x7fffffff, 0x3, 0x6, 0x1000, 0x0, 0x1, 0x2, 0x2, 0x4, 0x20, 0x770c612d, 0x1, 0x8, 0x8000000, 0x0, 0xffff6466, 0x0, 0x8, 0x7ff, 0x10001, 0x0, 0x85, 0x9, 0x80000000, 0x5, 0xffffd7d0, 0xffffa603, 0x5, 0x4, 0x8000, 0x1, 0x0, 0x5, 0x1, 0x7fffffff, 0x4, 0x401, 0x5e5a, 0x3, 0xfffffff7, 0x9, 0x6ff89a63, 0x7, 0x140000, 0xc3a4, 0x0, 0xcf9, 0xc84, 0x3d1b6433, 0xdfa8, 0x7fff, 0xf330, 0x7, 0x1, 0x2, 0x8001, 0x6, 0x7, 0x4390, 0x18, 0x1, 0x1, 0x0, 0xaf1a, 0x985, 0x7, 0x0, 0x400, 0x1, 0x9, 0x3, 0x1, 0x7, 0x4fe, 0x0, 0xb9b, 0x3b, 0x8, 0x10001, 0x0, 0x1f, 0xff, 0x1f, 0x32e, 0x5, 0x7f, 0x5, 0x120000, 0x7, 0x9, 0x7fff, 0x752, 0xfff, 0x1, 0x4, 0x48b5, 0x20, 0x5, 0x3, 0x7, 0x3ff, 0x6, 0x80, 0xda000000, 0x9, 0x4, 0xf23, 0x3, 0x2, 0x1f, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x7, 0x9d04, 0x7, 0x2, 0x80000001, 0x3, 0x9, 0x0, 0x0, 0x0, 0x5, 0x8, 0x2, 0x2, 0x5, 0x3, 0x245, 0x0, 0xffffffff, 0xffffff81, 0xffff, 0xd58, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1cc2, 0x1, 0x0, 0x0, 0x2, 0x1bc5, 0xff, 0x922, 0x7ff, 0xd4, 0x1, 0x5, 0x40, 0x7, 0x7, 0xffff, 0x5, 0x5, 0x1000, 0x0, 0x1, 0x1f, 0x5, 0x2, 0x7, 0xff, 0x0, 0x8, 0x0, 0xfffffffd, 0x7ff, 0xafd, 0x0, 0x0, 0x800, 0xffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3f, 0x7, 0x8000, 0x8, 0x2, 0x7b50, 0x3ff, 0xa000, 0x34151b51, 0x4, 0x9586, 0x5, 0x8000, 0x1, 0x0, 0x0, 0x9, 0x3, 0x81, 0xfffffff8, 0x5, 0xd4, 0x6, 0x6, 0x2, 0x1ff, 0x4, 0x6, 0x100000, 0x12, 0x200, 0x2, 0x2, 0x9bd4, 0x8, 0x6, 0x9, 0x8, 0x9, 0x3f, 0x228, 0x1, 0x2, 0x8, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x9403, 0x7fff, 0x0, 0xfffffc01, 0x4, 0x2, 0x40, 0x9, 0x0, 0x0, 0x0, 0x4, 0xd955, 0x0, 0x0, 0x7, 0xfff, 0x1, 0x8001, 0x101, 0x13, 0xffffffff, 0x5, 0xffff7fff, 0x1, 0x80000001, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0x10001, 0x200, 0x6db, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x80, 0x93be, 0xfffffff7, 0x451a8b0e, 0xfffffffb, 0x101, 0x901, 0x0, 0x7f, 0x76ab, 0x0, 0xde, 0x7fffffff, 0x0, 0x9, 0x0, 0x4, 0x56605298, 0x7fffffff, 0x9, 0x25, 0x8629, 0x3, 0x0, 0x0, 0x0, 0x7fc0000, 0x0, 0x5, 0x0, 0x7, 0x0, 0x80000001, 0x0, 0x8, 0x6, 0x0, 0x0, 0x25, 0x4, 0x0, 0x3, 0x5, 0x3, 0x7, 0x3, 0x4, 0x0, 0x8, 0x5, 0x0, 0x56d, 0x0, 0x7e1, 0x0, 0x3cd, 0x181, 0x2, 0x9, 0x8, 0x4, 0x1, 0x7fffffff, 0xffffff1e, 0x8000, 0x0, 0x80000000, 0x7f, 0x0, 0x1000, 0xff, 0x0, 0x1ff, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x80, 0x7f, 0x5, 0xfe5b, 0x8, 0x0, 0x0, 0x2, 0x1a9, 0x0, 0x10001, 0x81, 0x177, 0xd2b, 0x9, 0xfffffff8, 0x0, 0x2, 0x1, 0x7fffffff, 0x2, 0x1, 0x800, 0x0, 0x3a3b, 0x2, 0x4, 0xd6d9, 0x0, 0xffff, 0xfa, 0x400, 0x4, 0x9, 0xbd0, 0x3, 0x0, 0xfc68, 0x8000, 0x3ff, 0x0, 0x3, 0x1, 0x0, 0x8000, 0x9, 0xffff, 0x0, 0xffffffff, 0x2, 0x2, 0x80, 0xffff, 0x38508341, 0xefe, 0x5, 0x0, 0x400, 0x5, 0xcac, 0x9, 0x9, 0x7ff, 0x1f, 0x0, 0x0, 0x40, 0x80000000, 0xe2, 0x5, 0x0, 0x2d83, 0xb12, 0x0, 0x3, 0x1f, 0x2, 0x5, 0x2, 0x0, 0x401, 0x8, 0x0, 0x1ff, 0xfffffffb, 0xb6, 0xffff50cd, 0xb2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x80000000, 0x9, 0x0, 0x581, 0x7, 0x2, 0x2, 0x5, 0x0, 0x7, 0x0, 0x9, 0x6, 0x4, 0x2, 0x0, 0x5, 0xfff, 0x173, 0x4, 0x0, 0xc4cd, 0x7, 0x4, 0xfffffffc, 0x0, 0x0, 0x5, 0xcc7, 0x0, 0x3f, 0x0, 0x3, 0x5, 0x800cb1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x69, 0x74, 0x1, 0x3b7, 0x0, 0x1, 0x1f, 0x3f, 0x0, 0xffffffff, 0x20, 0x7, 0x81, 0xfffffffd, 0x5, 0x3, 0x1, 0x1000, 0x3, 0x1, 0x6, 0xfffffffd, 0x80000001, 0xa4ab, 0x0, 0x7fffffff, 0x8, 0x9, 0x7, 0x0, 0x3f, 0xffffffff, 0x0, 0x400, 0x1, 0x4, 0x0, 0x81, 0x80000001, 0x36b, 0x3, 0x3, 0x7, 0x6, 0x4, 0x4, 0x3, 0x0, 0x7f, 0x7ff, 0x0, 0x1000, 0x2, 0x0, 0x7, 0x5f, 0x9, 0x7, 0x6, 0x0, 0x8, 0x6, 0x800, 0x0, 0xfff, 0x4, 0x6, 0x9, 0x81, 0x4, 0x101, 0x100, 0x200, 0x1, 0xfff, 0xfd, 0x7, 0x200, 0x0, 0x4, 0x0, 0xbe, 0x3, 0xaa, 0x307b7d39, 0x2, 0x1, 0x9, 0x2, 0x2, 0xfe8, 0x80000000, 0x8, 0xfffffffe, 0x4, 0x100, 0x8000, 0x3, 0x7, 0x1800000, 0x4, 0x14, 0x1, 0xffffff7f, 0x2, 0x3f, 0x9, 0x1, 0x7, 0x5, 0x0, 0x2, 0x0, 0x0, 0x6, 0xf7, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x8, 0x7, 0x1, 0x7, 0xf46b, 0x3ff, 0x80000000, 0x2, 0x4, 0xffffe155, 0xffff, 0x4, 0x9, 0x8001, 0x7ff, 0x7f, 0x2, 0x1, 0x7, 0x36, 0xebd, 0x0, 0x5, 0x0, 0x8000, 0x0, 0x9, 0x1922, 0x0, 0xa46, 0x0, 0x1000, 0x6, 0x400, 0x6, 0x8000, 0x5, 0x1, 0x1, 0x7fff, 0x6, 0x401, 0xfb71, 0x1, 0x4270, 0x1, 0x200, 0x0, 0x2859, 0x400, 0x0, 0x2, 0x6, 0x6, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x77, 0x1, 0x5, 0x0, 0xffff, 0x1ff, 0x7, 0x1, 0xa1ca, 0x80000001, 0xffe00000, 0x7, 0x2, 0x2, 0x6, 0x5, 0x8, 0x7, 0x3, 0x1000, 0x7, 0x3, 0x7, 0x7, 0x4, 0xd72, 0x4, 0x7457f3d7, 0x3, 0x74b, 0x2, 0x14ad859b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0x0, 0x1, {0x1, 0x1, 0x0, 0x0, 0xbbd4, 0x8}, {0x6, 0x0, 0x6, 0x0, 0xffff, 0x20}, 0x3ff, 0x0, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x2, 0xfffffffb, 0x46, 0x5, 0x5, 0x1, 0xa0, 0xffffff00, 0x5, 0x200, 0x0, 0xc35c, 0x0, 0x10001, 0x3f, 0x100, 0xffffffff, 0xc4, 0xe8, 0x5, 0x1c00000, 0x9, 0x401, 0x5, 0x380, 0xfffff282, 0x5, 0x48000, 0xbd, 0x0, 0x4, 0x7, 0x4, 0x10000, 0x4, 0x7fff, 0x487f, 0x6, 0x0, 0x3, 0x80, 0xffff, 0x2, 0x8a, 0xfffffffd, 0x20, 0x5, 0x98, 0x6, 0x0, 0xfff, 0x7, 0x1ff, 0x2, 0x4, 0x4, 0x2, 0x100, 0x9, 0x100, 0xb3a9, 0x96e6, 0xffff, 0x0, 0x9, 0x4, 0x401, 0x9cc, 0x800, 0x2fa, 0x1000, 0x8000, 0x5, 0x2, 0x8, 0x8000, 0x80000001, 0x0, 0x5705, 0x0, 0x0, 0x7, 0x0, 0x7, 0x9, 0x592, 0x1, 0x0, 0x0, 0x0, 0x0, 0x96, 0x7f, 0x10000, 0x8, 0x1, 0x0, 0x9, 0x0, 0x80000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10001, 0x1a, 0x0, 0x0, 0xfff, 0x0, 0x6, 0x0, 0x2, 0x0, 0x20d40000, 0x401, 0x0, 0x6, 0x1, 0xaf57, 0x6, 0x0, 0x4, 0x200, 0x3, 0x400, 0x2, 0x10001, 0x3ff, 0x1000, 0x1f, 0x40, 0xffffffff, 0x5, 0x0, 0x0, 0x101, 0x7, 0x1f, 0x514a, 0x4, 0x6, 0x8, 0x8000, 0x81, 0x9, 0xd5d, 0x0, 0x800, 0x1, 0x6, 0x5, 0x6, 0x40, 0x72e1, 0x1, 0x4, 0x22dde8be, 0x1ee4, 0x0, 0x2, 0xffffffff, 0x3, 0x40, 0x2, 0x8, 0x71a4, 0x8, 0x4, 0xa7c, 0x3, 0x6, 0x2, 0x7, 0x1, 0x5e, 0x400, 0x400, 0x2, 0xffffffff, 0xdc21, 0x1, 0x401, 0x51f4, 0x80000001, 0xfff, 0x0, 0x7, 0xffffffff, 0x3f, 0x4, 0xffffffff, 0x52b131b2, 0xea9, 0x12a, 0xfffffffd, 0xafe, 0x7a, 0x200, 0x6, 0x0, 0xffffc1ba, 0x20, 0x2, 0x21, 0x8, 0x5, 0x1, 0x6, 0xff, 0x1f, 0x3, 0x200000, 0x498, 0x5, 0x4, 0xc8, 0x9ad8, 0x9, 0xedd, 0x3, 0x2, 0x0, 0x8001, 0xffffffc1, 0x4, 0x80000000, 0x0, 0x200, 0x5, 0x8001, 0xd9, 0x40, 0x23262b66, 0x0, 0x8000, 0x0, 0x6, 0x1, 0x0, 0x3f, 0x9, 0x1, 0x9, 0x9, 0x9, 0xfffffff7, 0x3, 0x4, 0x23d, 0x8, 0x9, 0x29]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xffffff01, 0x7, 0xff, 0x0, 0xfffffff8, 0x0, 0x9d5a, 0x7, 0x0, 0x6, 0x800, 0x9, 0x5a9b, 0x8, 0x7, 0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x10000, 0xd8e, 0x80000001, 0x0, 0xae, 0x6, 0x1, 0x84, 0x7, 0x1ff, 0x100, 0x7, 0x9, 0x0, 0x7ff, 0x5cd8, 0x3, 0x4, 0x1, 0x2, 0x0, 0x0, 0x800, 0x0, 0x8, 0xfff, 0x0, 0x55, 0x1, 0x9, 0xfe, 0x400, 0x5, 0x0, 0x1, 0xfffffffb, 0xffffffff, 0x6, 0x0, 0x0, 0x8, 0x2, 0x0, 0x1200000, 0x0, 0x2, 0x6, 0x40, 0x4, 0x327a37c5, 0x3dae, 0x726, 0x2, 0x6, 0x4, 0xe39, 0x20, 0x7, 0x800, 0x5, 0xec, 0x80, 0x7ff, 0xff, 0x800, 0x7f, 0xfffffff8, 0x8a9c, 0x87, 0x9, 0x10001, 0x9, 0x2, 0x80000000, 0x9, 0x3, 0x7511, 0x10001, 0x1, 0x7fff, 0x4, 0x2, 0x5, 0x9, 0x0, 0x7fffffff, 0x8000, 0x0, 0xfa, 0x8, 0x9, 0x0, 0x0, 0x3d, 0xa4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1000000, 0x4, 0x7ff, 0x8, 0xae, 0x3, 0x9, 0x9, 0x7, 0x7ba, 0x293, 0x7ff, 0x3, 0x6, 0x4, 0x3, 0xffff803b, 0x621a, 0x40, 0x0, 0x3, 0xa74, 0x5, 0x8, 0x1f, 0x0, 0x1, 0x9, 0x0, 0x20, 0x10001, 0x101, 0x5, 0x836, 0x1, 0x0, 0x0, 0x3, 0x2, 0x5, 0x0, 0x8, 0x4, 0x0, 0x0, 0x4033, 0x0, 0x5597, 0xb5, 0x0, 0x21, 0x8001, 0x0, 0x4, 0x618, 0x2, 0x0, 0x8, 0x1, 0x2, 0x8001, 0x9, 0x80000001, 0x0, 0x7f, 0x4e, 0x5, 0x240, 0x5f887faa, 0x101, 0x2, 0x8, 0x0, 0x5, 0x12ef, 0x9, 0x244, 0x10000, 0x1, 0x5, 0x4, 0x400, 0x8, 0x400, 0x5, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x4f93, 0x40, 0x7, 0x0, 0x0, 0x9, 0x5957, 0x2, 0xfff, 0x2, 0x2, 0x81, 0x5, 0x401, 0xfffffff8, 0x0, 0x8, 0x1000, 0x3, 0x4, 0x400000, 0x3ff, 0x1000, 0x5, 0xffffff7f, 0x8, 0xb24c, 0x0, 0x0, 0x1, 0x0, 0x1, 0x75, 0x0, 0x0, 0x7fffffff, 0x9, 0x7, 0x0, 0x1ff, 0x1, 0x9, 0x6]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x0, 0x40, 0x9, 0x3, 0x2, 0x8, 0x1, 0x0, 0xe3, 0x5, 0x5, 0x5, 0x5, 0x800, 0x81, 0x800, 0x6, 0x101, 0x4, 0x6, 0x10000, 0x8, 0x7, 0x3f, 0x1ff, 0x10001, 0x0, 0x1ff, 0x4, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x4ed, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffff9c5, 0x16b8, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff, 0x5, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x8000, 0x0, 0x0, 0xc12, 0x7fff, 0xf0b, 0x80000001, 0x0, 0x6, 0x8, 0xfffff9f0, 0x5, 0x2, 0x0, 0x8, 0x7, 0x4, 0x0, 0x9, 0x7ff, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x1, 0xeb6, 0x7, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x7, 0x73e, 0x0, 0x1f, 0xfa3, 0x0, 0x0, 0x0, 0x1, 0x32bb, 0x0, 0x7, 0x0, 0x1, 0x0, 0xffffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73cb, 0x0, 0x42, 0x0, 0x0, 0x0, 0x1b97, 0x2, 0x0, 0x0, 0x3, 0x2, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0xcc62138d, 0x7, 0x0, 0xffff, 0x95e, 0x9, 0x1, 0xffffffff, 0xffffffff, 0xbfc, 0xffffffff, 0x5, 0x0, 0x57c0, 0x8f2f, 0x0, 0x0, 0x9, 0x1f, 0x9b3ede2e, 0x3f, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x2d3, 0x0, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x200, 0x9, 0xba2, 0x7f, 0x2, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x80000000, 0x6, 0x1000, 0x9, 0x9, 0x9, 0x7f, 0x0, 0xfffff461, 0x0, 0x4, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x7f, 0x800, 0x0, 0x5, 0x872, 0x2, 0x2, 0x0, 0x9, 0x8, 0x3fe, 0x0, 0x400, 0x8, 0x377, 0x800, 0x6, 0x2, 0x0, 0x2, 0x0, 0x1, 0x9, 0x8, 0x2, 0xeff, 0x81, 0x0, 0xa00000, 0x8, 0x8, 0x4, 0x4, 0x2, 0x2, 0x2, 0x2, 0xff, 0x0, 0xf51, 0x0, 0x8, 0x8001, 0x9, 0x9, 0x1, 0x7, 0x5, 0x8, 0x1, 0x1ff, 0x1, 0x388376c7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xc, 0x3ff, 0x0, 0x5, {0x0, 0x2, 0x0, 0x1f, 0xab50, 0x92b2}, {0x0, 0x1, 0x5, 0x330, 0x8, 0x4}, 0x6, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x72d}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0xffffffe3, 0x0, 0xff, 0x3f, 0x8164, 0x20, 0x81, 0x1, 0x0, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x7fffffff, 0x1, 0x9, 0x1, 0xf58, 0x4, 0x40, 0x2, 0x9, 0xe0, 0x0, 0x7, 0x5, 0x0, 0xff, 0x1, 0x2ff, 0x7, 0xc4, 0x61b7, 0xca, 0x1, 0x0, 0x1, 0x4, 0x7ff, 0x1, 0x4, 0x8000, 0x0, 0x6, 0x3, 0x0, 0x9, 0x0, 0x5, 0x4, 0x4000000, 0x3, 0x1, 0x7f, 0x2, 0x6, 0xfd, 0x577, 0x3ff, 0x8fd, 0xfffffbdf, 0x4, 0xdc, 0x92, 0x8, 0x9, 0x7, 0x0, 0xb2d0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x862, 0xfffffe01, 0x9d, 0x4, 0x3, 0xd0, 0x2, 0x986, 0x60, 0x39, 0x2932, 0x7, 0x5, 0x73, 0x8, 0x9, 0x133, 0x8, 0x3, 0x0, 0x2, 0x2, 0x0, 0x0, 0x6, 0x7, 0x1000, 0x40, 0x10001, 0x1ff, 0x0, 0x0, 0x1000, 0xff, 0x7, 0x398, 0x0, 0x4, 0x4, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x3ff, 0x0, 0x7, 0x6, 0x0, 0x8, 0x4, 0x633a, 0x852, 0x58b5, 0x6, 0x7fffffff, 0x0, 0x3, 0x1ef, 0xffff8000, 0x6, 0x1f, 0x4, 0x8, 0x4, 0x2, 0x9, 0x6, 0x3, 0xfffffff8, 0x6, 0x44, 0x1, 0x3, 0xfffffffd, 0x0, 0x8001, 0x34b13ce8, 0x5, 0x0, 0x7, 0x4, 0x0, 0xff, 0x2, 0x0, 0x7cf5, 0x0, 0x800, 0x100, 0x5, 0x0, 0x2, 0x0, 0x8, 0x0, 0xffffff91, 0xfffffff7, 0x3, 0x0, 0x6, 0x9, 0x3, 0x3f, 0x0, 0x3, 0x58b5, 0x7fffffff, 0xec0, 0xffff77dc, 0x2, 0xc84, 0x0, 0x7, 0x7, 0x401, 0x9, 0x3d4a, 0x1ff, 0x0, 0xd3a, 0xa97d, 0x400, 0x7, 0x7, 0x0, 0x3ff, 0x8, 0x0, 0x1f, 0x1, 0x0, 0x0, 0x8, 0x0, 0x9, 0x2, 0x1ff, 0x8, 0x9efc, 0x4, 0x6, 0x84, 0x7ff, 0x3, 0x1, 0x2, 0x0, 0x147, 0x0, 0x14000, 0x8, 0x3, 0x1, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x7ff, 0x0, 0x3, 0x80, 0x0, 0x0, 0x3, 0x1, 0x8001, 0x370, 0x0, 0x9c, 0xc19, 0x1644, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xa6f, 0x6, 0x9, 0x3c1, 0x47, {0xff, 0x2, 0xda9f, 0x8000, 0x1}, {0x1, 0x0, 0x2, 0x6, 0x9, 0x20}, 0x2, 0xf1, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x1, 0x7f, 0x10001, 0x1, 0x4, 0x7f, 0xfc, 0x8001, 0x5, 0x2, 0x0, 0xac, 0x2, 0x9, 0x5, 0x5, 0x1, 0x413b, 0x0, 0x0, 0x3, 0x80, 0x8, 0x8, 0x1, 0x7, 0x1, 0x1000, 0x6, 0x20, 0x2, 0x4, 0x8, 0x0, 0x6, 0x3ff, 0x0, 0x7, 0x7, 0x6, 0x5, 0x2, 0x0, 0x3, 0x10000, 0x8, 0x0, 0x3, 0x7, 0x6, 0x4, 0x6, 0x7fff, 0x10000, 0x9, 0x0, 0xf38, 0x3, 0x0, 0x7fff, 0x6, 0xffff, 0xfff, 0x0, 0x5, 0x2, 0xfff, 0x800, 0x0, 0x9, 0x3f, 0x40, 0x7, 0x8001, 0x800, 0x3, 0x9, 0x7, 0x7, 0x200, 0x5, 0x2, 0x9, 0x0, 0x2, 0x8, 0x1a, 0x9, 0x3, 0x600000, 0x37, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x57, 0x0, 0x3000000, 0xdf, 0x6, 0xfffffffe, 0x400, 0x1, 0xfffffffe, 0x7f, 0x4, 0xfffffff7, 0x0, 0x6, 0x8, 0x84e, 0x1, 0x996e, 0x400, 0x698, 0x81, 0x8, 0x7, 0x1, 0x3, 0x7, 0x5, 0x0, 0xfffffffa, 0x2, 0xffffffff, 0x3, 0x2, 0x8, 0x6, 0x2, 0x3, 0x0, 0xfff, 0x0, 0x4, 0x0, 0x3f, 0x8, 0x4, 0x3, 0x40, 0x6, 0x1, 0x9, 0x7, 0x2001, 0x7fff, 0x2, 0xe00, 0x4, 0x53, 0x1, 0x2, 0x1, 0x2, 0x0, 0x7ff, 0x5, 0x5, 0x9, 0x0, 0x5, 0x81, 0x0, 0x6e, 0x200, 0x0, 0x7fff, 0x3ff8, 0x0, 0x0, 0x0, 0x56a7, 0x200040, 0x7, 0xd0, 0x2, 0x8, 0x0, 0x81, 0x200, 0x8000000, 0x8001, 0x0, 0x0, 0x90ef, 0x1f, 0x400, 0x7f, 0x6, 0x0, 0x5c2, 0x9, 0x10000, 0x0, 0x0, 0x4, 0x6, 0x80, 0x200, 0xfff, 0x2e4, 0x7, 0x0, 0x2, 0x3f, 0x81, 0x3ff, 0x81, 0x7000, 0x7, 0xfb2, 0x1, 0xa28, 0xac, 0x3, 0x4, 0xffffffff, 0x1, 0x130, 0x0, 0x3ff, 0x2, 0x2, 0x10001, 0xab, 0xfffffffb, 0x1ff, 0xfff, 0x2, 0xffffffff, 0x400, 0x0, 0x40, 0x0, 0x0, 0x3ff, 0x401, 0x10001, 0x2, 0xffffff57, 0x7, 0x3ff, 0xfffff000, 0x9, 0xffff, 0x4, 0x0, 0xf54, 0x1000, 0x0, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x7e, 0xffffff13, 0x9, 0x0, 0x6, 0x7, 0x1, 0x0, 0x8, 0x3, 0xfffffffc, 0x0, 0x5, 0x81, 0x10001, 0x5, 0xb5, 0x7, 0x5, 0x0, 0x3f, 0x5, 0x6, 0xfffffffc, 0x163, 0x4, 0x0, 0x101, 0x4, 0x3f, 0x6, 0xdf, 0xfffffffc, 0x8, 0x1, 0x6, 0x6, 0x7, 0x1, 0x6, 0x6, 0x0, 0x63, 0x6e, 0x200000, 0x6e5d, 0x101, 0x7, 0x84db, 0xb0cb, 0x6, 0x7, 0x8, 0x9, 0x80000, 0x3ff, 0x0, 0x7fff, 0x8001, 0x0, 0x38a, 0x7ff, 0xff, 0x6, 0x8, 0x80000000, 0x400, 0x0, 0x4, 0xf28, 0x7, 0x5, 0x40, 0xffff, 0x4, 0x4c000000, 0x5, 0x8, 0x89, 0x10001, 0x1ff, 0xfffffffd, 0x8, 0x0, 0x2, 0x5, 0x8001, 0xea8f, 0x3f, 0x4, 0x0, 0x268, 0xc7d, 0x10001, 0x3, 0x3, 0x0, 0x80, 0xffff0000, 0x6, 0xbc30, 0x80000000, 0x71, 0x4, 0x5, 0x5, 0x7, 0x0, 0x7fffffff, 0x130f, 0x4, 0x3, 0x7, 0x0, 0x3, 0x5, 0x3, 0x8, 0x4, 0x100, 0x7fff, 0x20, 0x4, 0x66, 0x40, 0x7f, 0xffffffff, 0x5, 0x0, 0x7, 0x7, 0x101, 0x9, 0x4, 0x9, 0x25, 0x0, 0x6, 0xbc69, 0x4dc8, 0xc63, 0x0, 0x5, 0x2, 0x1, 0x2, 0x100, 0x80, 0x10001, 0x7f, 0x401, 0x1, 0x5, 0x4, 0x800, 0x7fffffff, 0x2, 0x2, 0x0, 0x9, 0x10001, 0x1800, 0x800, 0x4, 0x800, 0x3, 0x8, 0x2, 0x8, 0xe7340b1, 0x101, 0x3, 0x4, 0x0, 0x1, 0xad, 0xa22e, 0x0, 0x3f000000, 0x4, 0x3, 0x80000000, 0x1, 0x5, 0x1ff, 0x8000, 0x1ff, 0x0, 0x6, 0x3f, 0x5, 0x5, 0x2, 0x8, 0x6c8, 0x8000, 0x6, 0x7, 0x0, 0x8000, 0x800, 0xfffffff8, 0x0, 0x6, 0x5, 0x7, 0x4, 0x0, 0x0, 0xbf2, 0x0, 0x5, 0x3, 0x3, 0x2, 0x8001, 0x3, 0x0, 0x6, 0x401, 0x17b0656f, 0x6, 0x3, 0x6, 0x1, 0x3, 0x80000000, 0xd1, 0x7, 0x20, 0x401, 0x2, 0x1e08, 0xed, 0x3b1, 0x0, 0x0, 0x3, 0x7ff, 0x1, 0x1ae, 0x0, 0x0, 0x5, 0x80, 0x2, 0x0, 0x7, 0xffff1a77, 0x7ff, 0x3, 0x1, 0x9, 0x4, 0x2]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4fc72f75}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x81, 0x1, 0x0, 0x7, 0xb34c, 0x4, 0x7, 0x4, 0x8, 0x9, 0x7, 0x0, 0x0, 0x2, 0x6, 0x7ff, 0x6, 0xf7, 0x1, 0x8001, 0x100, 0x1000, 0x8001, 0x4, 0x5, 0x0, 0xfffffff7, 0x100, 0x40, 0x4, 0x4, 0x9, 0x13, 0x40, 0x0, 0x0, 0x7, 0x4, 0x9, 0x3, 0x0, 0xa76c, 0x7, 0x2, 0x8, 0x7, 0x1, 0x2, 0x6, 0x3f, 0x101, 0x0, 0xdc29, 0x2000, 0x0, 0x0, 0x1, 0xff, 0x0, 0x3, 0x2a6, 0xffffffaa, 0x8001, 0x0, 0x5, 0x0, 0x8cf4edf, 0xdc3f, 0x1, 0x0, 0x4, 0xffff, 0x0, 0x5, 0xfff, 0x4827197d, 0x7ff, 0x4, 0x2, 0x0, 0x0, 0x3f, 0x7f, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x0, 0x7b22089, 0x0, 0xffffffff, 0x0, 0x3f, 0x20, 0xff, 0x2, 0x7fffffff, 0x2, 0x1000, 0x0, 0x5, 0x400, 0x1, 0x7fffffff, 0x9, 0xffffff93, 0x7f, 0x73a9, 0x0, 0x0, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x1, 0x100, 0xffff, 0x1, 0xe94, 0x8, 0x8, 0x80, 0x7, 0x5, 0xffffffff, 0x1, 0x0, 0x2, 0x0, 0x4, 0xfffffffe, 0x2, 0xb82, 0x800, 0x0, 0x1, 0x54, 0x800, 0x0, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x4, 0x20, 0x3f, 0x0, 0x7, 0x7f, 0x0, 0x0, 0xe61, 0x0, 0x3dca, 0xa3e9, 0x0, 0x1, 0x8000000, 0x7ff, 0x8, 0x5, 0x0, 0x3, 0x80000001, 0xde6, 0x0, 0x0, 0x4, 0xffffc000, 0x2, 0x8, 0x0, 0x138a, 0x1, 0x0, 0x0, 0x7f, 0xffffff6b, 0x0, 0x8, 0x400, 0x9, 0x4, 0x5, 0xeeb, 0x5, 0x7fffffff, 0x20, 0x5, 0x40, 0x0, 0x0, 0x9b, 0x6, 0x7, 0xffffffff, 0x71, 0x2, 0x7ff, 0x40, 0x0, 0xe641, 0x81, 0x7fffffff, 0x3ff, 0x80f, 0x200, 0xfffffffd, 0x800, 0x88b, 0x80000001, 0x400, 0x1, 0x80000000, 0x7, 0x3, 0x4, 0x3, 0x200, 0xd053, 0x8, 0x9, 0x6, 0x6a, 0x0, 0x9, 0x1, 0x10001, 0x6, 0x0, 0x0, 0x0, 0x4, 0x2, 0x2, 0x8ad7, 0x1, 0x4, 0x6, 0x40, 0xfffffffb, 0x7, 0x3, 0x215e, 0x3035, 0x401, 0x1, 0x6, 0xff, 0x9, 0xfffffff9, 0xf]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0xffffff37, 0x7, 0x80000000, {0x81, 0x0, 0x1, 0x2ec, 0x0, 0xfffffffb}, {0x0, 0x0, 0x74, 0x8, 0x1c32, 0x9}, 0x0, 0x47275cde, 0xbc5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x616}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6e3, 0x590, 0xfca, 0x0, 0x3, 0x0, 0xfff, 0x200, 0x0, 0x401, 0x2, 0x8, 0x1, 0x0, 0x75, 0x10000, 0x1, 0x4, 0x2, 0x57bf1b5c, 0x9, 0x0, 0x6, 0x40, 0x10001, 0x5a, 0x8, 0x1, 0xfffffff8, 0x5, 0xfffffffa, 0x0, 0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x7676a47a, 0x5, 0x8, 0xfff, 0x8, 0x1, 0xe37, 0x282c, 0x5, 0x6, 0x0, 0x0, 0x9, 0x6, 0x6, 0xffffffff, 0x1, 0x8, 0x0, 0x5312, 0x3, 0x9, 0x7, 0x6, 0x7565, 0x0, 0x101, 0x8000, 0x8, 0x7f, 0x7, 0x3, 0x4000, 0x4, 0x800, 0x3c938167, 0x9, 0x9, 0xffffffff, 0x5, 0x71b, 0x81, 0x1, 0x7, 0x5, 0x41, 0x7e, 0x0, 0x7e, 0x7fffffff, 0xdf, 0x400, 0x7ff, 0x0, 0x6, 0x0, 0xec, 0x0, 0xffffff7f, 0xfb, 0x40, 0x3, 0x9, 0x1, 0x4, 0x9ca, 0x40, 0x6, 0x81, 0x6, 0x5, 0x1, 0x7, 0x6, 0xff, 0x6, 0x7, 0x3, 0x5f, 0x8, 0x0, 0x8, 0x7, 0x9, 0x1, 0x9, 0x80000001, 0x6, 0x0, 0x0, 0x2, 0x80, 0x55, 0x0, 0x400, 0x0, 0x1, 0x0, 0x9, 0x7, 0x0, 0x5, 0x0, 0x1, 0x2, 0x2, 0x2, 0x8, 0x1000, 0x1, 0x0, 0x4, 0xffff, 0x276, 0x0, 0x0, 0x40, 0xffffffc1, 0x1f, 0x8000, 0x4, 0x5, 0x7ff, 0x3, 0x5, 0x5, 0x0, 0xffffffff, 0x0, 0x10000, 0x101, 0x1f, 0xfff, 0x8, 0x5, 0xfffffff8, 0x7, 0x7a4c0012, 0x2, 0x10001, 0xfffffffa, 0x1000, 0x2, 0x7fff, 0x400, 0x7, 0xfffffff7, 0x8, 0x1ee6a85a, 0x5, 0x3, 0x6, 0xfff, 0x2, 0x4, 0x0, 0x80, 0x81, 0x7a, 0x401, 0x0, 0x800, 0x9, 0x8, 0x1, 0x7, 0x16d, 0x0, 0x3f, 0x0, 0x101, 0x9, 0x10001, 0xbf, 0x4, 0xffff, 0x51, 0x0, 0x6, 0x1000, 0x1, 0x401, 0x1, 0x5, 0x5, 0x0, 0x6, 0x0, 0x1, 0xfffffffa, 0xffffffff, 0xbc2, 0xf88, 0x5, 0xfffffffb, 0x8001, 0x4a, 0x1, 0x9, 0x8000, 0x800, 0x0, 0x1437, 0x9, 0x7f800, 0xfffffffd, 0xf5, 0x26c236c5, 0x8e10, 0x3, 0x0, 0xffff974b, 0x4, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4, 0xb4e, 0x0, 0x1, 0x0, 0x6, 0x9, 0x0, 0x800, 0xff, 0x0, 0x0, 0x80000001, 0xfff, 0xffff, 0x7, 0x0, 0x67d, 0x9, 0x0, 0x400, 0x1, 0x3, 0x0, 0x8000, 0x100, 0x2, 0x4, 0x6, 0xcd, 0x40, 0x1f, 0x0, 0x0, 0x0, 0x9, 0x8, 0x5, 0x8, 0x0, 0x0, 0x3, 0x0, 0xb06e, 0xfa0, 0x0, 0x5, 0x10000, 0x8, 0x0, 0x0, 0xffffd1f5, 0xfff, 0x97, 0x1, 0x7f, 0xfff00000, 0x1, 0x1, 0x5, 0x9, 0x7, 0x0, 0x1, 0x2000, 0x5, 0x0, 0x1, 0x425c4c82, 0x1, 0x5, 0xff, 0x0, 0x0, 0x3, 0x6, 0x6, 0x620, 0xa97, 0xdd, 0x0, 0x5, 0x5, 0x2c18795a, 0x80000001, 0x0, 0x7, 0x2, 0x4, 0x3ff, 0x1f, 0x8, 0x7f, 0x4, 0x2, 0x8106, 0x7fffffff, 0xa3b, 0x3f, 0x9b6a, 0x9, 0x80000001, 0x1, 0x1, 0x5, 0x9, 0x7, 0x4, 0x9, 0x74bc6f3a, 0x3, 0x6, 0x0, 0x7, 0x2, 0x0, 0x5dc, 0x53, 0x0, 0x84, 0xfffffff8, 0x1, 0x666b2c20, 0x56, 0xffff, 0x0, 0xf8d, 0x5, 0x922d, 0x1, 0x81, 0xce4f, 0x7, 0x9, 0x80000000, 0x80, 0x1, 0x4, 0x212, 0x200, 0x1, 0x3, 0x50, 0x6, 0x7, 0xed, 0x4, 0x80, 0x5, 0x81, 0x6, 0x0, 0x4, 0x6, 0x10001, 0x4, 0x3, 0x4, 0x8, 0x3f, 0x6, 0x0, 0x5000000, 0xffffffff, 0x0, 0x0, 0x7, 0x2, 0x1, 0xaf8, 0x7, 0x5, 0x4, 0x3ff, 0x9, 0xfffffff9, 0xe9, 0x8, 0x80, 0x44, 0x81, 0x647, 0x80, 0x0, 0x0, 0xa67e, 0x1480, 0x6, 0x4b1, 0x839, 0x7f, 0x9, 0x7, 0x1, 0x0, 0xef, 0x10000, 0x4, 0x1ff, 0x3, 0x3, 0xbb2e68c, 0x1, 0x1, 0x8, 0x9d06, 0x9, 0x1, 0x10000, 0x3, 0x1, 0x80, 0x5, 0x7ff, 0x10001, 0xff, 0xffff8001, 0x85e, 0xffff, 0x10000, 0x81, 0x400, 0x309, 0x8, 0x7b, 0x8000, 0x7ff, 0x6, 0x1000, 0x5, 0xffffffe1, 0x9, 0x1f, 0x2a3, 0x6, 0x9, 0x0, 0x7f, 0x8, 0x40, 0x3, 0x1, 0x2, 0x5, 0x8, 0x4f6, 0x1, 0xc2, 0xffffffff, 0x0, 0x3, 0x4, 0x3ff, 0x6, 0x400]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7d}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x7ff, 0x5, 0x28, 0x5, 0x1, 0x7, 0x9, 0xcf, 0x8001, 0x2, 0x5, 0x401, 0x9, 0x2, 0x7, 0x10001, 0xf3, 0x5148f7dc, 0x6, 0xfb, 0xeb, 0x1, 0xe4, 0x200, 0x3, 0xe7e1471, 0xffffffff, 0x0, 0x397, 0x6, 0x1ff, 0x1, 0x1, 0x43, 0x80000000, 0xfffffffb, 0x51, 0x2, 0x3, 0x3, 0x101, 0x2, 0x7fff, 0xc08b, 0x8, 0xfb, 0x9, 0x3, 0x3f, 0x6, 0x2, 0x6d, 0x5, 0xff, 0xd1, 0x0, 0x0, 0x20, 0xfff, 0x6, 0x21cd3000, 0x401, 0xdca1, 0x3, 0xf30f, 0x7, 0x200, 0x5, 0xffff7023, 0x2, 0x0, 0x1, 0x8, 0x8, 0xffffff37, 0x1, 0x9, 0x10000, 0x101, 0xfffffffc, 0xffffffff, 0x401, 0x7, 0x4, 0x5, 0x7, 0x9, 0x3f, 0x7b266628, 0x8, 0x9, 0x7fff, 0x4, 0x101, 0x4, 0x0, 0x40, 0x5, 0x3, 0x4, 0x100, 0x100, 0x7, 0x800, 0x6409717a, 0x81, 0x0, 0x4b2, 0x7, 0x0, 0x1, 0x5, 0x0, 0x4, 0xfffffffb, 0x9, 0x8, 0x401, 0x4, 0x8, 0x800, 0xffffff00, 0x3, 0x5, 0x8, 0x200, 0x4, 0x7, 0x7, 0x9, 0x2550, 0x1, 0xa0, 0xff, 0x0, 0x101, 0x61, 0x5, 0x6000, 0x101, 0x8, 0x8, 0x401, 0x8, 0x1, 0x6, 0x9, 0x3, 0xf5, 0xb24, 0x8, 0x8d, 0x81, 0x42, 0x0, 0x20, 0x8001, 0xd656, 0x5, 0x401, 0xfffffffc, 0x401, 0x8, 0x8001, 0x80000000, 0x0, 0x7f, 0x9, 0x9, 0x8, 0x0, 0x6796, 0x6cd, 0x3, 0x2ca5761f, 0x4, 0x2, 0x2, 0x8, 0x2, 0x8, 0x4, 0xbf97, 0x9, 0x7, 0xc2c, 0x7fff, 0x1, 0x3f, 0x3ff, 0xec2b, 0x3, 0x3, 0xff, 0xcb5, 0x1, 0x6, 0x85, 0x70, 0x8, 0xe1de, 0x8, 0x1, 0x5, 0x80, 0xe57e, 0x2, 0x3ff, 0x80000001, 0x81, 0x1, 0x1, 0x400, 0x97, 0xde, 0x40, 0x7, 0x2, 0x5, 0x5, 0x9000, 0x1, 0xff, 0x1, 0xa2, 0x8001, 0x6a2, 0x3, 0x1, 0x4, 0x40000000, 0xfffffffb, 0x100, 0xffff, 0x40, 0xfffffbff, 0x387, 0x401, 0x7e7d4859, 0x5, 0x9, 0x4, 0xf3a, 0x5371, 0x20, 0x1ff, 0x101, 0x7ff, 0x100, 0x9, 0x5f, 0x5, 0x8000, 0x9]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0xe527, 0x6, 0x1, 0x5, 0xbf09, 0xff, 0x7f, 0x5480, 0x80000000, 0x80, 0x5, 0x9, 0x3ff, 0x0, 0x506b, 0x5, 0x8, 0xffffff09, 0x1fb038de, 0x1f, 0x8000, 0x4, 0x1, 0x1, 0xff, 0x1, 0x4798, 0xfff, 0xffffe1a1, 0x1, 0x5, 0xd4, 0x1, 0xffff4932, 0x9, 0x1, 0x400, 0x7fff, 0xfff, 0x2, 0x1, 0x400, 0xcfd, 0x81, 0x6, 0x9, 0xd14f, 0x3, 0x1, 0x6, 0xc9, 0x7, 0x80000001, 0x7fff, 0x0, 0xe900000, 0x1, 0xff, 0xff, 0xfff, 0xe4, 0x2, 0x0, 0x200, 0x93f5, 0x0, 0x9, 0x5e2, 0x200, 0x5, 0x7f, 0x663f, 0xb9f, 0x0, 0xff, 0x2, 0x3ff, 0xffffffff, 0x5, 0x4, 0x4, 0x3f, 0xffffff7f, 0x200, 0xffffe89b, 0x80000001, 0x0, 0x100, 0x1, 0x6, 0x0, 0xfff, 0x1f, 0x5, 0x0, 0x40000000, 0x101, 0x6, 0x7b, 0x3c, 0x7, 0x9, 0x880, 0x1000, 0xffff, 0x10001, 0x111, 0x8, 0x80000001, 0x1, 0x43, 0x1f, 0x3, 0x28, 0x5, 0x4, 0x7, 0xa304, 0x4, 0x3, 0x8, 0x380, 0x7, 0x9, 0x9, 0x1, 0x3, 0xffff, 0x5, 0x4, 0xc1, 0x3, 0x3, 0xffffffd4, 0x8, 0x800, 0x8, 0x9, 0x1, 0x1ec0, 0x5, 0x1f, 0x7f, 0x0, 0x1, 0x7, 0x5, 0x8, 0x2, 0x7, 0xf9, 0x3f, 0x2, 0x7, 0x97f, 0x3, 0x7, 0xfb2a, 0x3, 0x7, 0x1, 0x5, 0x2, 0xa85a, 0x6, 0x80000000, 0x6, 0x1, 0x9, 0x0, 0x20, 0x7, 0xffff0000, 0x81, 0x400, 0x1ff, 0x7ff, 0xfff, 0xfffff391, 0x3, 0x5, 0x8, 0x0, 0x40, 0x5, 0x6, 0x400, 0x1f, 0xff, 0x400, 0x7, 0x800, 0x9, 0x7, 0x0, 0x4, 0x6e88, 0xad, 0x0, 0x9, 0x243, 0x8, 0x2, 0x7, 0x3, 0x8, 0xfffe0000, 0x0, 0x5, 0x2, 0x2, 0x6, 0x1ff, 0x4c1b0b72, 0x445, 0x4c, 0xfffffffd, 0x3, 0x6, 0x5, 0x10000, 0x7, 0xd0000000, 0x7f, 0x80000001, 0x6, 0x7, 0x2, 0x7, 0x81, 0x101, 0x401, 0x4, 0x6, 0x7a1, 0x2, 0x1000, 0x7, 0x7355, 0x7, 0x7fff, 0x400, 0x0, 0x5, 0x8000, 0x8, 0x0, 0x100, 0x7, 0x80000000, 0x7, 0x4, 0x9, 0x100]}]]}, {0xe9, 0x6, "becb11c44d08c1bfc40bb9c68eba54ced35b87772fe75287aaf34295c5b02ffe0f7ebfd7637101813a3290b9915f31d8ecada02e5b8d4653a80c5e57b6343ebc11e673ca6459061803b55c50662896909591d42e8e8b5749646564cf22ffd7bc8a33f935ac94fa72cdafa1c6e6fd53642c191284d0ee5ac7a9b7557da8afa6f3823f8b36711cf11087c33192e6885e08a8591dd260cbdec6531ade3b7e2f85385e8b9ce9cb33e53db298f5ca0e44aa3eff5e3b78dd5bfc8a306dc70ec10ace5b534ce47a234cd93084878d8b4e18eaace234b6e7a09e02cf7adca25de2a5ba3bee18b1a533"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x174, 0x16, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xd}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x200, 0x7, 0xbcf3, 0x80}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xfff2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1c}]}, {0xe5, 0x6, "c5b62b9ef885aa2acc72679090c2372581f259871233c7ac2bb267b5130155446bca900bbe3c1dd5d5701c60322ff75aba742c752f2b895b8b3ada5d08e3b31d408a667c73053a883029e070b50cf0b3f7423b7bfc46dbd3ce14bb9b325668a156aabf41ebeded40a75afb6f1503df2fc290ecd426a82113e632da01ebbc10bd0c90dd17ff9ca9fe00986281fcd2b58b49da85261f4e8ba671efb2d36b3bdeb0102b701acdde25e6713d644faa7f210e18f39e893613a619477a4334aaf65ea5c1c78ef5cc6f4732cfe7251619e47c00a5699ff8bf0b3bc2b9b8ee57d42c6bd3fb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x12c, 0x8, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_DATA={0x19, 0x3, '!{\\^\xadM[|}}{&(,:-!**}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x38, 0x2, 0x801}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x4, 0x5, 0x7fffffff, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xffff, 0x8, 0x7}}]}, {0x93, 0x6, "1cdee3ef91fc2088b281565f6d52d85c999509ebd08638a9df495db52b20ac4c0360eab3a8ac24197b8ffad0a0a6245dd964069747952cc80583e8152103daa793df2abcda782fa33467fb394c889e5e492effd430437d44186dbe3b6814e125029a34e9feb71198c4f8acf9bc4b79a8b1c05e650d21b6ccf99a45a00c451a58a47a68618516f1168ab52aaf106bd7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x148, 0x1, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x200}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x8, 0x6, 0x8, 0x8b, 0x4}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0xd0, 0x6, "2496ebf8909db6618522fd3fac8341b71dd2026139959b5a1ac2bbfdc44b9f0ae9b4410ea6164e44861a7a2b4a7c28f0ac0936480034416298264d74f4757204112e17dc7e4db3890a513f2727955dd5191caa87b2ef0ecb64fd30a3d7f171e267b8e6dc27b1a975ac9e26ea7268bcfc211fc50f0da12605189c37107a2046f484b219e1f7831cb536f81e602b460b589c8acc1b39d40bb594ebdacdb3228b869d440330b380758478efabfd87b8352a045dd6513a904bfbbf788fc8857bd9665cdace6a75dc3f7325684375"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x70, 0x1d, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x31, 0x6, "8b1e901859d33e0afb340e35b1f196173a54658ee85710aafd4bb537ed159443707261d433bb6278bb86f1d782"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x5500}}, 0x2000c888) 13m20.668424541s ago: executing program 1 (id=5461): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00') unlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x0) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='+.,-!)^-:\x00', 0xfffffffffffffffd) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 13m20.475722042s ago: executing program 1 (id=5462): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0xc, 0x3, 0x0, 0x1, [@nested={0x5, 0x149, 0x0, 0x1, [@generic="a8"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 13m20.47531842s ago: executing program 1 (id=5463): r0 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x400000013) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, &(0x7f00000001c0)=0x300000000000000, 0x4, 0xd) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x98, 0xb, 0x148, 0x0, 0x148, 0x128, 0x240, 0x240, 0x128, 0x215, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @local, 0x0, 0xff000000, 'macvtap0\x00', 'veth0_to_bond\x00'}, 0x2e8, 0x70, 0x98, 0x0, {0xff0f000000000000}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0xc16}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) vmsplice(r3, &(0x7f00000000c0), 0x0, 0xb) close(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0x80}, 0x9c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r7, &(0x7f0000000240)=[{&(0x7f0000000380)='[', 0x1}], 0x1, 0x800, 0x7f) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xa0}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f00000009c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={r6, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x7, 0x8a, 0xfffffffd}, 0x9c) r10 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000100)=@ethtool_cmd={0x1, 0x7f, 0x4, 0x1, 0x3, 0x44, 0x1, 0x2, 0x5, 0x8, 0x0, 0x1, 0x57f8, 0x7, 0xf5, 0x1ff, [0x8, 0x2]}}) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13m19.780310159s ago: executing program 5 (id=5467): ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x321d, 0xd8, 0x7f35, 0x1, "3eccd25569e20900"}) r0 = socket(0x2, 0x3, 0xff) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="e6c22b226e1c0c0d3c25561dd6e321f70f0783ee0a16", 0x16}], 0x1) 13m19.718281464s ago: executing program 5 (id=5468): socket(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000000)=0x8, 0x4) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x86, 0xae}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x1, 0x3ff, 0x7}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000001840)=""/138, 0x8a}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000040)=""/9, 0x9}], 0x6, &(0x7f0000000700)=""/68, 0x44}, 0x7}, {{&(0x7f0000000780)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000900)=""/247, 0xf7}], 0x1, &(0x7f0000000800)=""/35, 0x23}, 0x9}, {{&(0x7f0000000a00)=@hci, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000ec0)=""/43, 0x2b}], 0x1}, 0x10001}, {{&(0x7f0000000b00)=@x25, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b80)=""/9, 0x9}, {&(0x7f0000000bc0)=""/89, 0x59}, {&(0x7f0000000c40)=""/133, 0x85}, {&(0x7f0000000d00)=""/193, 0xc1}], 0x4, &(0x7f0000000e40)=""/94, 0x5e}, 0xfffffffc}, {{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/14, 0xe}, {&(0x7f0000000f80)=""/22, 0x16}, {&(0x7f0000000fc0)=""/46, 0x2e}], 0x3, &(0x7f0000001040)=""/24, 0x18}, 0x6}, {{&(0x7f0000001080)=@alg, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001100)=""/180, 0xb4}, {&(0x7f00000011c0)=""/48, 0x30}, {&(0x7f0000001200)=""/202, 0xca}, {&(0x7f0000001300)=""/159, 0x9f}], 0x4, &(0x7f0000001400)=""/218, 0xda}, 0x80000001}, {{&(0x7f0000001500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001580)=""/136, 0x88}], 0x1, &(0x7f0000001680)=""/188, 0xbc}, 0x403}], 0x7, 0x2002, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) 13m19.297436025s ago: executing program 5 (id=5470): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fsopen(&(0x7f0000000340)='zonefs\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x3a) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc044560f, 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000003c0)={0x7, 0x48524742, 0x1, @stepwise={0x3, 0x0, 0xd, 0x80007, 0x0, 0xa}}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x2, 0xa}}}, 0x24}}, 0x800) io_submit(r5, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) prlimit64(r7, 0x5, &(0x7f0000000180)={0x7, 0x4812}, &(0x7f0000000340)) syz_usbip_server_init(0x3) statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x100, &(0x7f0000000700)) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) mount$bind(0x0, 0x0, 0x0, 0x887008, 0xf6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0x1, 0x4, 0x0, 0x71e, 0x4a}, 0x0, &(0x7f0000000000)={0x3ff, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x8, 0xfffffffffffffffe}, 0x0, 0x0) 13m19.158112244s ago: executing program 5 (id=5471): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) syz_clone3(&(0x7f0000001880)={0x120000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) 13m18.998213182s ago: executing program 5 (id=5472): socket(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fgetxattr(r3, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000080)=""/237, 0xed) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0xc, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0xbe85, 0x0, 0x8, @mcast2}, {0xa, 0x0, 0x7, @remote}, r6}}, 0x48) 13m11.563508879s ago: executing program 5 (id=5475): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000004e00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@hopopts={{0x14, 0x29, 0x34, {0x5e}}}], 0x14}}], 0x1, 0x8814) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x7ff, 0x2, 0x1, 0xb9, 0x8d], 0x10000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8], 0x7c}}, 0x80) 13m11.503482759s ago: executing program 34 (id=5475): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000004e00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@hopopts={{0x14, 0x29, 0x34, {0x5e}}}], 0x14}}], 0x1, 0x8814) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x7ff, 0x2, 0x1, 0xb9, 0x8d], 0x10000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8], 0x7c}}, 0x80) 13m11.287581894s ago: executing program 1 (id=5476): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0xe, 0x0, [], [0x2b8, 0x80000], [0x106, 0x4, 0x1000], [0x80000000]}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x0) (async) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) sync() (async) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x7f, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x1, 0x0, 0x0, 0x7, 0x6, 0x0, 0x10000}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) (async) socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private}}}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x90}}, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000180)=""/47, 0x2f}], 0x4b, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) 13m11.138082102s ago: executing program 35 (id=5476): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0xe, 0x0, [], [0x2b8, 0x80000], [0x106, 0x4, 0x1000], [0x80000000]}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x0) (async) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) sync() (async) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x7f, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x1, 0x0, 0x0, 0x7, 0x6, 0x0, 0x10000}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) (async) socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private}}}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x90}}, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000180)=""/47, 0x2f}], 0x4b, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) 9m49.436179323s ago: executing program 3 (id=6534): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) pwritev(r4, &(0x7f0000000500)=[{&(0x7f00000002c0)='2', 0x1}], 0x1, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r6, 0x80047437, &(0x7f0000000140)=0x10) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, 0x0, 0x1) gettid() 9m48.506581178s ago: executing program 3 (id=6540): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1b, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 9m48.506366062s ago: executing program 3 (id=6541): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf6}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 9m48.186169393s ago: executing program 3 (id=6542): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r1, 0x4004092b, 0x47ffffffff) (async) ioctl$TIOCGPTPEER(r1, 0x4004092b, 0x47ffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) (async) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300627269", @ANYRESDEC], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r1, 0x40140921, 0x7) (async) ioctl$TIOCGPTPEER(r1, 0x40140921, 0x7) 9m48.060009689s ago: executing program 3 (id=6546): arch_prctl$ARCH_GET_GS(0x1004, 0x0) unshare(0x20000600) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) utime(0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000ecff0000000000009500"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) close(r3) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r3, 0x0, 0x0}, 0x10) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, 0x0, 0x0) 9m47.965696405s ago: executing program 3 (id=6549): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) rseq(0x0, 0x0, 0x400000000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x200) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0xfffffffffffffd2f}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x884) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x20000000) 9m47.886550556s ago: executing program 36 (id=6549): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) rseq(0x0, 0x0, 0x400000000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x200) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0xfffffffffffffd2f}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x884) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x20000000) 5.507267185s ago: executing program 6 (id=9681): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000008600000018130000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e80000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x96, &(0x7f0000000300)=""/150, 0x41100, 0x12, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x0, 0x6, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x2, 0x5, 0xf}, {0x2, 0x5, 0xc, 0x7}, {0x3, 0x5, 0xf, 0x8}, {0x3, 0x4, 0xc, 0x8}, {0x2, 0x1, 0x8, 0x3}, {0x4, 0x4, 0xa, 0x1}], 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x10000) epoll_create1(0x0) r5 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f000062f000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0xfffff000) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsmount(r3, 0x0, 0x0) 5.422640085s ago: executing program 6 (id=9682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x40001, 0x0, [0xca9, 0x3, 0x2, 0xffffffffffff98c3, 0x5, 0x4, 0x7, 0x8]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x2, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 5.332218281s ago: executing program 6 (id=9684): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d7669c81200ff7874656e642c616363e573733d616e792c636163bd653d667363616368652c76657273696f6e3d3970323030302e7584e5ef00000000"]) chdir(&(0x7f0000000300)='./file0\x00') mkdir(0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) sendto$inet6(r0, 0x0, 0x0, 0x40891, &(0x7f0000000080)={0xa, 0x4624, 0x0, @local}, 0x1c) 4.374466571s ago: executing program 6 (id=9695): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x40007, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f00000006c0)={{0x7fff, 0x0, 0x5, 0x3, 'syz1\x00', 0xa67}, 0x1, [0x1, 0xa2d, 0x8, 0x3, 0x8, 0x6, 0x3, 0xf, 0x1, 0x101, 0x40, 0xffff, 0x90b, 0x4, 0x6, 0x1, 0x4, 0x4, 0x8001, 0x81, 0x1, 0x0, 0x1, 0x7, 0x3, 0x200, 0x2, 0x40, 0x7, 0x2, 0x3, 0x5, 0x81, 0x8001, 0x1, 0x1, 0x7, 0x2b30, 0x8, 0x7ff, 0xf, 0x0, 0x800, 0xe, 0x1, 0x9, 0x2, 0xadd, 0x2, 0x6, 0x1, 0xffe00000, 0x4, 0xc, 0x3, 0x7ee0, 0xd, 0xba9c, 0x6, 0x3, 0x6f03, 0x5, 0x9, 0x9, 0x668c, 0x1, 0x7, 0x675, 0x5, 0x3, 0xfffffff2, 0xffff, 0x81, 0x6, 0x9, 0xf03, 0x6, 0x0, 0x76b121e0, 0xff, 0x3, 0x3, 0xa3d9, 0x4, 0x2, 0xe, 0xf76, 0x10001, 0x2f5, 0x5, 0x3, 0x0, 0x3, 0xfffffffb, 0x1, 0x4, 0x1, 0x9, 0x9, 0xd9b, 0x6, 0x7, 0x8, 0xfffffffe, 0x4, 0x0, 0x3, 0x9, 0x8, 0x2, 0x5, 0x48, 0x0, 0x3, 0x2c5fe90f, 0x0, 0x6ae, 0xfffffffd, 0x4b2, 0xea9, 0x7ff, 0x9, 0x78, 0x80000, 0x2, 0x8, 0x764d, 0x57]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000100000000000800040001000000", 0x24) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f00000000c0)) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xce06, 0x8, 0x3, 0x36f, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r11, 0x0, r10, 0x0, 0x3, 0x0) 3.155130195s ago: executing program 7 (id=9704): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) openat$ptmx(0xffffff9c, 0x0, 0x200, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f0000001500)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0xfffe, 0x8001, 0xd6f57b8a, 0x1, 0x47b7f43b}}, 0x118) io_uring_enter(r3, 0x627, 0x4c1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) 3.154601435s ago: executing program 4 (id=9705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r5, 0x1, 0x80700, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}}, 0x0) 2.288649036s ago: executing program 7 (id=9706): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x42) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a45321, &(0x7f0000000180)={{0x80, 0x5}, 'port0\x00', 0x178, 0x120010, 0x8000, 0x5, 0x8, 0x7, 0xfffffa07, 0x0, 0x1, 0x3}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000340)=r7) (async) umount2(&(0x7f0000000240)='./file0\x00', 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x18) (async) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 2.182398154s ago: executing program 7 (id=9707): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) pwrite64(r3, &(0x7f0000000540)="933045315ba86f0bc6282549ada0d50fb75483269ae91dc74147723fb059943935428d18cf42a4c4f320dbea4164878204e65355b28e4cba5a575432369ce75ad76a4a967198c74bf912201360f553f7e99c8811c48230542069c6e8e0c9f4e9cabc50fc81559c544fe5b04e4efb3caad03c7e88970358bea08ceb59129aba158cb5019105945834386bcd4bcd4bfb380cba3c4e0304ac6040c1dd5b09b8ee61483656960408e06bd023e637dfbdf15bce8f98994d69f6944d660cc035080c1747a7f0d35902fa10bc40498a983dbe56036399658fffc7abf529cfff2f7c971d9d470f815004c4c281d49083f4021ee6", 0xf0, 0x6a) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000500)=0x1000000, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40891, &(0x7f0000000080)={0xa, 0x4624, 0x0, @local}, 0x1c) 1.859927072s ago: executing program 8 (id=9709): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff04) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x27, 0xe80, 0x0, &(0x7f0000001100)="52e111e89f1a3b7a479dd8bd86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101202, 0x0) r5 = syz_io_uring_setup(0x180f, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000200)) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc040) r6 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r6, 0x80785659, &(0x7f00000017c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) 1.858674079s ago: executing program 4 (id=9717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef) 1.620659071s ago: executing program 4 (id=9710): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000008600000018130000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e80000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x96, &(0x7f0000000300)=""/150, 0x41100, 0x12, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x0, 0x6, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x2, 0x5, 0xf}, {0x2, 0x5, 0xc, 0x7}, {0x3, 0x5, 0xf, 0x8}, {0x3, 0x4, 0xc, 0x8}, {0x2, 0x1, 0x8, 0x3}, {0x4, 0x4, 0xa, 0x1}], 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x10000) epoll_create1(0x0) r5 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsmount(r3, 0x0, 0x0) 1.620092223s ago: executing program 4 (id=9711): setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x7f00) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6"}, 0x11b) 1.505679595s ago: executing program 8 (id=9712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) write(r2, &(0x7f0000000500)="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", 0x6c0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f00000001c0)={0xd91b, 0x2, 0x3}, 0x2e, 0x0) landlock_restrict_self(r6, 0x0) (async) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r5, 0x0) (async) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x0, 0x0, 0x4) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r10], 0x50}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r14], 0x50}}, 0x2) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r15}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.335506842s ago: executing program 8 (id=9713): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0406", @ANYRES8], 0x8) 1.335089598s ago: executing program 7 (id=9714): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="d2cf4071eedf8b7b757a8a7286590f3b2b73e4d6501d0dcc9ade7118283ba63b6a59c5d5b4171e791290e0ed52580ccb12807717e072cf88cfb3c53a48a6dbff03000000000000c3540370d05aadfd82ee3d47b93dc852cea8715c826bf5c6b35e41f12c3e8347784e01e2e8666080b9d0f0461cc15d5724ba4ac41a7de92272a0c00dd240c18e9a6b2e060b87280e0453f4bd19193e2607e3efe6da34614c9ea45c38f3942252f7292f22b062ecd5351ee10b6d3c589f64abe3b959aaa5b7f093e2077a6b9889eddbd8d4c5d42daa980500"/219, 0xdb}, {&(0x7f0000002440)="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", 0x166}], 0x2}}], 0x1, 0x4000001) r3 = dup(r2) r4 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r6 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) fstatfs(r6, &(0x7f00000003c0)=""/146) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x34, r1, 0x1, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) 1.333901997s ago: executing program 8 (id=9715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xdddd0000, 0x100000, 0x4, 0x8, 0x3, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x9}, {}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x3, 0x2]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f00000002c0)='mounts\x00') pread64(r4, &(0x7f0000000480)=""/177, 0xb1, 0xa6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001540)={0x14, r6, 0x715, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x68, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x54}) 1.256277308s ago: executing program 6 (id=9716): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@remote, @mcast2, @mcast1, 0x3, 0xe2, 0x5, 0x400, 0x6, 0x420022, r2}) socket(0x2a, 0x80000, 0x80) syz_emit_ethernet(0x7d, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaa0200000000000000dd60f53a0400433a00fe8000000000000000000000000000bbff0200000000000000000000000000018b009078e7b700650000000080000000acbf8380d04e578b52d8dd61f71da16249c3ac84c335bb98819a765c4e69b2c92aa8f76f1b7910359d1ecfa6aa0a5885cfd8f5006f345ac7dedb6a2f00a89db9e19ecfd98532a25545214016da104e8bdd869132c0301cdd7d9574981623672a7a8081b36be259175f65a90877e37ff86a898a3f475de6aa11cedc28fc354f374cc32f159bb1d499ecd0567ba6a40b9e2e8e55d696136ab25d8fb367055c242579227d044d163403c3"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce", 0x7d}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r4 = syz_io_uring_setup(0x7028, &(0x7f0000000340)={0x0, 0xb5be, 0x800, 0xffd, 0x20c}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x100090, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xdb, "c686756ba1bda56c669991d2e1150fee74425091aa728ec899fd283c869f9dab381098ae1f68bacf71be2b42530f261803223883a0e634e89141b0a4e6ce42590bd47c277c0a4e71998ccf100b45dcec7463a4c0a23179fcadc8b5ab00f84ca98c80c4f07c2d60e70a77484374b8b2245e181e709ea19e227c3b785724ed0c5c35728a149a7985f0d5dc5592e8fcb0301c26dc2f9d4e7b1a26c3578fe9c44b6f01ed43d14533a294a3fdd4d85dbcb22f136a5ec7048bc016f4d057197ff58cdf94f1309f19e6c9aa9e71e7d7598fdd3aadded8306d2682e175e743"}, &(0x7f0000000000)=0xe3) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000200)={r7, @in={{0x2, 0x4e20, @empty}}}, 0x84) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000200)=[{&(0x7f0000000240)="12", 0x1}], 0x1, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000002060500000000000000ffff000000000900020073797a32000000000001000000000000"], 0x28}}, 0x0) 1.211908505s ago: executing program 6 (id=9718): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d5", 0x1c) socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_setup(0x66ad, &(0x7f0000000140)={0x0, 0x8c63, 0x0, 0x1, 0xfffffdfc}, &(0x7f0000000040), &(0x7f0000000280)) set_mempolicy(0x1, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) chdir(0x0) 1.159874314s ago: executing program 7 (id=9719): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff04) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x27, 0xe80, 0x0, &(0x7f0000001100)="52e111e89f1a3b7a479dd8bd86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101202, 0x0) r4 = syz_io_uring_setup(0x180f, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000200)) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc040) r5 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r5, 0x80785659, &(0x7f00000017c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) 1.059961474s ago: executing program 8 (id=9720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100"/68], 0xfdef) 665.083941ms ago: executing program 4 (id=9721): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000008600000018130000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e80000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x96, &(0x7f0000000300)=""/150, 0x41100, 0x12, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x0, 0x6, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x2, 0x5, 0xf}, {0x2, 0x5, 0xc, 0x7}, {0x3, 0x5, 0xf, 0x8}, {0x3, 0x4, 0xc, 0x8}, {0x2, 0x1, 0x8, 0x3}, {0x4, 0x4, 0xa, 0x1}], 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x10000) epoll_create1(0x0) r5 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsmount(r3, 0x0, 0x0) 58.263005ms ago: executing program 7 (id=9722): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30}, 0x30) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_REAPURB(r1, 0x4008550d, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x40afc, 0x0, 0x8011}, 0x0) epoll_create1(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone3(0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000740)) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) close(0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x51}}, 0x0, 0x1a, 0x0, 0x1, 0x6}, 0x28) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x9066, 0x0, 0x4000002, 0x180000}, &(0x7f0000000340), &(0x7f0000000000)) 57.601347ms ago: executing program 4 (id=9723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r2, 0x701, 0x0, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}]}, 0x2c}}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0xffff, 0x80600}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r8, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 0s ago: executing program 8 (id=9724): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x8a301, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000746000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000680)={0x2, @pix_mp={0x101, 0x0, 0x38416761, 0x2, 0x6, [{0x5, 0x6}, {0x6, 0x7}, {0x6, 0xffffffff}, {0x9, 0x6}, {0xe6, 0xd}, {0x400007f, 0x80000}, {0x6, 0x17}, {0x2000, 0xfffffff3}], 0xfa, 0x4, 0x8, 0x2}}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000600)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000ecff1fbcee5504dd6052370606458301010000901100fe80000000000000000000c68600000000bbfe8000000000000000000000000000aa00030e2200199078820700000000f5ffb969cbb120bb6921b464827c648f1db89cb6b9dd11c0fe89f5c3c1a33f827bacf2"], 0x0) kernel console output (not intermixed with test programs): ][ T9099] Call Trace: [ 2015.152244][ T9099] [ 2015.152248][ T9099] dump_stack_lvl+0x16c/0x1f0 [ 2015.152263][ T9099] warn_alloc+0x248/0x3a0 [ 2015.152275][ T9099] ? __pfx_warn_alloc+0x10/0x10 [ 2015.152288][ T9099] ? kfree+0x2b4/0x4d0 [ 2015.152306][ T9099] ? __get_vm_area_node+0x208/0x330 [ 2015.152325][ T9099] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 2015.152343][ T9099] ? rcu_read_unlock+0x17/0x60 [ 2015.152358][ T9099] ? bpf_check+0x1e4/0xb4f0 [ 2015.152375][ T9099] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2015.152392][ T9099] ? rcu_is_watching+0x12/0xc0 [ 2015.152405][ T9099] ? rcu_is_watching+0x12/0xc0 [ 2015.152418][ T9099] ? bpf_check+0x1e4/0xb4f0 [ 2015.152430][ T9099] __vmalloc_node_noprof+0xad/0xf0 [ 2015.152446][ T9099] ? bpf_check+0x1e4/0xb4f0 [ 2015.152464][ T9099] bpf_check+0x1e4/0xb4f0 [ 2015.152476][ T9099] ? __mutex_trylock_common+0xe9/0x250 [ 2015.152494][ T9099] ? __mutex_trylock_common+0xe9/0x250 [ 2015.152515][ T9099] ? __pfx_bpf_check+0x10/0x10 [ 2015.152531][ T9099] ? css_rstat_updated+0x9d/0xd30 [ 2015.152545][ T9099] ? __lock_acquire+0xb8a/0x1c90 [ 2015.152566][ T9099] ? find_held_lock+0x2b/0x80 [ 2015.152578][ T9099] ? rcu_is_watching+0x12/0xc0 [ 2015.152589][ T9099] ? ktime_get_with_offset+0x26e/0x3b0 [ 2015.152604][ T9099] ? __asan_memset+0x23/0x50 [ 2015.152620][ T9099] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 2015.152638][ T9099] bpf_prog_load+0xe41/0x2490 [ 2015.152658][ T9099] ? __pfx_bpf_prog_load+0x10/0x10 [ 2015.152687][ T9099] __sys_bpf+0x4d1a/0x4ea0 [ 2015.152699][ T9099] ? __pfx___sys_bpf+0x10/0x10 [ 2015.152708][ T9099] ? ksys_write+0x190/0x250 [ 2015.152721][ T9099] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2015.152741][ T9099] ? fput+0x70/0xf0 [ 2015.152753][ T9099] ? ksys_write+0x1ac/0x250 [ 2015.152763][ T9099] ? __pfx_ksys_write+0x10/0x10 [ 2015.152775][ T9099] __ia32_sys_bpf+0x76/0xe0 [ 2015.152786][ T9099] __do_fast_syscall_32+0x7c/0x3a0 [ 2015.152800][ T9099] do_fast_syscall_32+0x32/0x80 [ 2015.152811][ T9099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2015.152825][ T9099] RIP: 0023:0xf7f54579 [ 2015.152834][ T9099] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2015.152845][ T9099] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2015.152855][ T9099] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 2015.152862][ T9099] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000000 [ 2015.152868][ T9099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2015.152875][ T9099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2015.152881][ T9099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2015.152894][ T9099] [ 2015.152899][ T9099] Mem-Info: [ 2015.250651][ T9099] active_anon:872 inactive_anon:676 isolated_anon:0 [ 2015.250651][ T9099] active_file:8732 inactive_file:4634 isolated_file:0 [ 2015.250651][ T9099] unevictable:1768 dirty:572 writeback:0 [ 2015.250651][ T9099] slab_reclaimable:6345 slab_unreclaimable:65222 [ 2015.250651][ T9099] mapped:22335 shmem:1768 pagetables:1735 [ 2015.250651][ T9099] sec_pagetables:349 bounce:0 [ 2015.250651][ T9099] kernel_misc_reclaimable:0 [ 2015.250651][ T9099] free:65390 free_pcp:6970 free_cma:0 [ 2015.264694][ T9099] Node 0 active_anon:540kB inactive_anon:288kB active_file:116kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5304kB dirty:128kB writeback:0kB shmem:3544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7792kB pagetables:1740kB sec_pagetables:1224kB all_unreclaimable? no Balloon:0kB [ 2015.276087][ T9099] Node 1 active_anon:2948kB inactive_anon:2416kB active_file:34812kB inactive_file:18336kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:84036kB dirty:2160kB writeback:0kB shmem:3528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8396kB pagetables:5200kB sec_pagetables:172kB all_unreclaimable? yes Balloon:0kB [ 2015.286138][ T9099] Node 0 DMA free:2092kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:392kB local_pcp:32kB free_cma:0kB [ 2015.294773][ T9099] lowmem_reserve[]: 0 289 289 289 289 [ 2015.296500][ T9099] Node 0 DMA32 free:20184kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:540kB inactive_anon:280kB active_file:116kB inactive_file:200kB unevictable:3536kB writepending:128kB present:1032196kB managed:295992kB mlocked:0kB bounce:0kB free_pcp:10168kB local_pcp:3068kB free_cma:0kB [ 2015.307959][ T9099] lowmem_reserve[]: 0 0 0 0 0 [ 2015.310027][ T9099] Node 1 DMA32 free:239284kB boost:106068kB min:153212kB low:164996kB high:176780kB reserved_highatomic:10240KB free_highatomic:4704KB active_anon:2948kB inactive_anon:2416kB active_file:34812kB inactive_file:18336kB unevictable:3536kB writepending:2160kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:17532kB local_pcp:12116kB free_cma:0kB [ 2015.323543][ T9099] lowmem_reserve[]: 0 0 0 0 0 [ 2015.325680][ T9099] Node 0 DMA: 3*4kB (UM) 34*8kB (UM) 5*16kB (UM) 12*32kB (UM) 1*64kB (M) 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2092kB [ 2015.331506][ T9099] Node 0 DMA32: 418*4kB (ME) 326*8kB (UME) 188*16kB (UME) 143*32kB (UM) 61*64kB (UM) 22*128kB (UM) 6*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20120kB [ 2015.336412][ T9099] Node 1 DMA32: 1249*4kB (UEH) 1006*8kB (UEH) 1026*16kB (UMEH) 673*32kB (UMEH) 524*64kB (UMEH) 203*128kB (UMH) 233*256kB (UMH) 133*512kB (UMH) 1*1024kB (M) 0*2048kB 0*4096kB = 239284kB [ 2015.342162][ T9099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2015.345145][ T9099] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2015.348034][ T9099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2015.351197][ T9099] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2015.354115][ T9099] 16333 total pagecache pages [ 2015.355669][ T9099] 1203 pages in swap cache [ 2015.357141][ T9099] Free swap = 93856kB [ 2015.358523][ T9099] Total swap = 124996kB [ 2015.359900][ T9099] 524155 pages RAM [ 2015.361510][ T9099] 0 pages HighMem/MovableOnly [ 2015.363588][ T9099] 209246 pages reserved [ 2015.365311][ T9099] 0 pages cma reserved [ 2016.205740][ T4296] usb 12-1: USB disconnect, device number 35 [ 2016.217977][ T4296] usblp0: removed [ 2016.268156][ T9124] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2016.836222][T32606] Bluetooth: hci3: command 0x0406 tx timeout [ 2017.379283][ T54] usb 12-1: new full-speed USB device number 36 using dummy_hcd [ 2017.534186][ T54] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2017.538704][ T54] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2017.545950][ T54] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2017.549606][ T54] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2017.553487][ T54] usb 12-1: Product: syz [ 2017.555256][ T54] usb 12-1: Manufacturer: syz [ 2017.557234][ T54] usb 12-1: SerialNumber: syz [ 2017.669897][ T9166] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2017.757450][ T54] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2018.283069][ T9175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2018.286347][ T9175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2018.921403][ T9189] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2019.132952][ T9196] overlayfs: failed to resolve './file0': -2 [ 2020.035158][ T54] usb 12-1: USB disconnect, device number 36 [ 2020.040666][ T54] usblp0: removed [ 2020.084386][ T9211] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2021.484807][T17358] usb 13-1: new full-speed USB device number 32 using dummy_hcd [ 2021.649981][T17358] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2021.654235][T17358] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2021.662490][T17358] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2021.665834][T17358] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2021.668472][T17358] usb 13-1: Product: syz [ 2021.669875][T17358] usb 13-1: Manufacturer: syz [ 2021.671475][T17358] usb 13-1: SerialNumber: syz [ 2021.871263][T17358] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2022.096983][ T9251] overlayfs: failed to resolve './file0': -2 [ 2022.146740][ T9249] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2022.404138][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2022.406949][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2023.128670][ T9266] fuse: Bad value for 'group_id' [ 2023.130280][ T9266] fuse: Bad value for 'group_id' [ 2023.831639][ T9282] overlayfs: failed to resolve './file0': -2 [ 2024.123567][T17358] usb 13-1: USB disconnect, device number 32 [ 2024.128169][T17358] usblp0: removed [ 2024.226316][ T9287] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2025.328982][ T9308] FAULT_INJECTION: forcing a failure. [ 2025.328982][ T9308] name failslab, interval 1, probability 0, space 0, times 0 [ 2025.332924][ T9308] CPU: 3 UID: 0 PID: 9308 Comm: syz.8.9132 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2025.332941][ T9308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2025.332949][ T9308] Call Trace: [ 2025.332953][ T9308] [ 2025.332957][ T9308] dump_stack_lvl+0x16c/0x1f0 [ 2025.332988][ T9308] should_fail_ex+0x512/0x640 [ 2025.333014][ T9308] ? fs_reclaim_acquire+0xae/0x150 [ 2025.333031][ T9308] ? tomoyo_encode2+0x100/0x3e0 [ 2025.333042][ T9308] should_failslab+0xc2/0x120 [ 2025.333055][ T9308] __kmalloc_noprof+0xd2/0x510 [ 2025.333067][ T9308] ? d_absolute_path+0x136/0x1a0 [ 2025.333083][ T9308] tomoyo_encode2+0x100/0x3e0 [ 2025.333096][ T9308] tomoyo_encode+0x29/0x50 [ 2025.333105][ T9308] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2025.333120][ T9308] tomoyo_path_number_perm+0x245/0x580 [ 2025.333135][ T9308] ? tomoyo_path_number_perm+0x237/0x580 [ 2025.333152][ T9308] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2025.333183][ T9308] ? find_held_lock+0x2b/0x80 [ 2025.333195][ T9308] ? hook_file_ioctl_common+0x145/0x410 [ 2025.333212][ T9308] ? __fget_files+0x20e/0x3c0 [ 2025.333229][ T9308] ? __fput_deferred+0x480/0x480 [ 2025.333245][ T9308] security_file_ioctl_compat+0x9b/0x240 [ 2025.333263][ T9308] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2025.333280][ T9308] __do_fast_syscall_32+0x7c/0x3a0 [ 2025.333294][ T9308] do_fast_syscall_32+0x32/0x80 [ 2025.333306][ T9308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2025.333319][ T9308] RIP: 0023:0xf7f54579 [ 2025.333332][ T9308] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2025.333344][ T9308] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2025.333355][ T9308] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000007ac [ 2025.333362][ T9308] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 2025.333368][ T9308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2025.333375][ T9308] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2025.333381][ T9308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2025.333395][ T9308] [ 2025.402640][ T9308] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2025.647455][ T54] usb 13-1: new high-speed USB device number 33 using dummy_hcd [ 2025.792383][ T54] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 528 [ 2025.795473][ T54] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2025.802107][ T54] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2025.805168][ T54] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.807684][ T54] usb 13-1: Product: syz [ 2025.809314][ T54] usb 13-1: Manufacturer: syz [ 2025.811158][ T54] usb 13-1: SerialNumber: syz [ 2025.816659][ T9308] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2025.962264][T17358] usb 11-1: new full-speed USB device number 48 using dummy_hcd [ 2026.011387][ T54] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2026.134846][T17358] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2026.138064][T17358] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2026.144284][T17358] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2026.147146][T17358] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2026.149606][T17358] usb 11-1: Product: syz [ 2026.150966][T17358] usb 11-1: Manufacturer: syz [ 2026.152636][T17358] usb 11-1: SerialNumber: syz [ 2026.225516][ T54] usb 13-1: USB disconnect, device number 33 [ 2026.229572][ T54] usblp0: removed [ 2026.285116][ T9323] overlayfs: failed to resolve './file0': -2 [ 2026.355489][T17358] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2026.761707][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9137'. [ 2026.884669][ T9330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2026.887614][ T9330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.984412][ T9329] loop6: detected capacity change from 0 to 524287999 [ 2027.037514][ T9337] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2028.464486][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9146'. [ 2028.469211][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9146'. [ 2028.657590][ T9361] syz.7.9146: page allocation failure: order:9, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2028.662396][ T9361] CPU: 1 UID: 0 PID: 9361 Comm: syz.7.9146 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2028.662423][ T9361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2028.662431][ T9361] Call Trace: [ 2028.662436][ T9361] [ 2028.662441][ T9361] dump_stack_lvl+0x16c/0x1f0 [ 2028.662458][ T9361] warn_alloc+0x248/0x3a0 [ 2028.662472][ T9361] ? __pfx_warn_alloc+0x10/0x10 [ 2028.662482][ T9361] ? psi_memstall_leave+0x1e6/0x2d0 [ 2028.662497][ T9361] ? __alloc_pages_direct_compact+0x466/0x580 [ 2028.662511][ T9361] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 2028.662525][ T9361] ? psi_memstall_leave+0x1e6/0x2d0 [ 2028.662541][ T9361] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 2028.662559][ T9361] ? mark_held_locks+0x49/0x80 [ 2028.662575][ T9361] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2028.662587][ T9361] ? finish_task_switch.isra.0+0x221/0xc10 [ 2028.662601][ T9361] ? rcu_is_watching+0x12/0xc0 [ 2028.662614][ T9361] ? trace_sched_exit_tp+0xde/0x130 [ 2028.662631][ T9361] ? __mutex_trylock_common+0xc0/0x250 [ 2028.662647][ T9361] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2028.662667][ T9361] ? __nla_validate_parse+0x600/0x2880 [ 2028.662685][ T9361] ? tcf_em_tree_validate+0x1c8/0xd60 [ 2028.662698][ T9361] __alloc_pages_noprof+0xb/0x1b0 [ 2028.662709][ T9361] ___kmalloc_large_node+0x84/0x1e0 [ 2028.662728][ T9361] ? tcf_em_tree_validate+0x1c8/0xd60 [ 2028.662739][ T9361] __kmalloc_large_node_noprof+0x1c/0x70 [ 2028.662756][ T9361] __kmalloc_noprof.cold+0xc/0x61 [ 2028.662773][ T9361] ? __nla_parse+0x40/0x60 [ 2028.662790][ T9361] tcf_em_tree_validate+0x1c8/0xd60 [ 2028.662806][ T9361] ? __pfx_tcf_em_tree_validate+0x10/0x10 [ 2028.662821][ T9361] ? tcf_exts_validate+0x42/0x60 [ 2028.662841][ T9361] basic_change+0x3ac/0x1400 [ 2028.662858][ T9361] ? __pfx_basic_change+0x10/0x10 [ 2028.662878][ T9361] ? __pfx_basic_change+0x10/0x10 [ 2028.662891][ T9361] tc_new_tfilter+0xa32/0x2340 [ 2028.662915][ T9361] ? __pfx_tc_new_tfilter+0x10/0x10 [ 2028.662944][ T9361] ? find_held_lock+0x2b/0x80 [ 2028.662957][ T9361] ? __pfx_tc_new_tfilter+0x10/0x10 [ 2028.662970][ T9361] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 2028.662984][ T9361] ? __pfx_tc_new_tfilter+0x10/0x10 [ 2028.662999][ T9361] rtnetlink_rcv_msg+0x95b/0xe90 [ 2028.663014][ T9361] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2028.663030][ T9361] ? __lock_acquire+0x622/0x1c90 [ 2028.663049][ T9361] netlink_rcv_skb+0x158/0x420 [ 2028.663063][ T9361] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2028.663077][ T9361] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2028.663097][ T9361] ? netlink_deliver_tap+0x1ae/0xd30 [ 2028.663110][ T9361] ? is_vmalloc_addr+0x86/0xa0 [ 2028.663126][ T9361] netlink_unicast+0x58a/0x850 [ 2028.663150][ T9361] ? __pfx_netlink_unicast+0x10/0x10 [ 2028.663179][ T9361] netlink_sendmsg+0x8d1/0xdd0 [ 2028.663205][ T9361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2028.663229][ T9361] ? __import_iovec+0x1dd/0x650 [ 2028.663264][ T9361] ____sys_sendmsg+0xa95/0xc70 [ 2028.663293][ T9361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2028.663317][ T9361] ? get_compat_msghdr+0x11a/0x170 [ 2028.663342][ T9361] ? try_to_wake_up+0xa2f/0x1680 [ 2028.663367][ T9361] ___sys_sendmsg+0x134/0x1d0 [ 2028.663386][ T9361] ? __pfx____sys_sendmsg+0x10/0x10 [ 2028.663428][ T9361] ? find_held_lock+0x2b/0x80 [ 2028.663461][ T9361] __sys_sendmsg+0x16d/0x220 [ 2028.663479][ T9361] ? __pfx___sys_sendmsg+0x10/0x10 [ 2028.663496][ T9361] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 2028.663528][ T9361] ? rcu_is_watching+0x12/0xc0 [ 2028.663549][ T9361] __do_fast_syscall_32+0x7c/0x3a0 [ 2028.663570][ T9361] do_fast_syscall_32+0x32/0x80 [ 2028.663587][ T9361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2028.663608][ T9361] RIP: 0023:0xf7f81579 [ 2028.663622][ T9361] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2028.663639][ T9361] RSP: 002b:00000000f506455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2028.663655][ T9361] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000340 [ 2028.663666][ T9361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2028.663675][ T9361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2028.663684][ T9361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2028.663694][ T9361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2028.663717][ T9361] [ 2028.663926][ T9361] Mem-Info: [ 2028.806839][ T54] usb 11-1: USB disconnect, device number 48 [ 2028.810205][ T54] usblp0: removed [ 2028.951803][ T9365] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9147'. [ 2029.064377][ T9361] active_anon:4113 inactive_anon:655 isolated_anon:0 [ 2029.064377][ T9361] active_file:9984 inactive_file:4593 isolated_file:0 [ 2029.064377][ T9361] unevictable:1768 dirty:12 writeback:0 [ 2029.064377][ T9361] slab_reclaimable:6290 slab_unreclaimable:65178 [ 2029.064377][ T9361] mapped:25624 shmem:4638 pagetables:1750 [ 2029.064377][ T9361] sec_pagetables:349 bounce:0 [ 2029.064377][ T9361] kernel_misc_reclaimable:0 [ 2029.064377][ T9361] free:66761 free_pcp:859 free_cma:0 [ 2029.107291][ T9361] Node 0 active_anon:292kB inactive_anon:308kB active_file:844kB inactive_file:16kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5552kB dirty:4kB writeback:0kB shmem:3544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7968kB pagetables:1596kB sec_pagetables:1224kB all_unreclaimable? no Balloon:0kB [ 2029.117957][ T9361] Node 1 active_anon:16236kB inactive_anon:2312kB active_file:39092kB inactive_file:18356kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97120kB dirty:56kB writeback:0kB shmem:15008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8196kB pagetables:5284kB sec_pagetables:172kB all_unreclaimable? yes Balloon:0kB [ 2029.128416][ T9361] Node 0 DMA free:2484kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2029.137317][ T9361] lowmem_reserve[]: 0 289 289 289 289 [ 2029.139069][ T9361] Node 0 DMA32 free:25468kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:292kB inactive_anon:304kB active_file:844kB inactive_file:16kB unevictable:3536kB writepending:4kB present:1032196kB managed:295992kB mlocked:0kB bounce:0kB free_pcp:1824kB local_pcp:172kB free_cma:0kB [ 2029.148810][ T9361] lowmem_reserve[]: 0 0 0 0 0 [ 2029.150347][ T9361] Node 1 DMA32 free:238840kB boost:106068kB min:153212kB low:164996kB high:176780kB reserved_highatomic:4096KB free_highatomic:3228KB active_anon:16236kB inactive_anon:2312kB active_file:39092kB inactive_file:18356kB unevictable:3536kB writepending:56kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:2116kB local_pcp:1352kB free_cma:0kB [ 2029.160548][ T9361] lowmem_reserve[]: 0 0 0 0 0 [ 2029.162071][ T9361] Node 0 DMA: 31*4kB (UM) 37*8kB (UM) 5*16kB (UM) 12*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2484kB [ 2029.166697][ T9361] Node 0 DMA32: 292*4kB (UME) 360*8kB (UME) 258*16kB (UME) 213*32kB (UM) 75*64kB (UM) 22*128kB (UM) 10*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25168kB [ 2029.171646][ T9361] Node 1 DMA32: 1212*4kB (UMEH) 1155*8kB (UMEH) 765*16kB (UMEH) 663*32kB (UMEH) 493*64kB (UMEH) 208*128kB (UMH) 240*256kB (UMH) 132*512kB (UMH) 4*1024kB (UM) 0*2048kB 0*4096kB = 238840kB [ 2029.177474][ T9361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2029.180424][ T9361] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2029.184149][ T9361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2029.187329][ T9361] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2029.191162][ T9361] 20511 total pagecache pages [ 2029.193356][ T9361] 1281 pages in swap cache [ 2029.194928][ T9361] Free swap = 94164kB [ 2029.196231][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 2029.196425][ T9361] Total swap = 124996kB [ 2029.200872][ T9361] 524155 pages RAM [ 2029.202467][ T9361] 0 pages HighMem/MovableOnly [ 2029.204036][ T9361] 209246 pages reserved [ 2029.205802][ T9361] 0 pages cma reserved [ 2029.389871][ T9379] input: syz0 as /devices/virtual/input/input230 [ 2029.460537][ T9382] overlayfs: failed to resolve './file0': -2 [ 2030.904707][ T9410] FAULT_INJECTION: forcing a failure. [ 2030.904707][ T9410] name failslab, interval 1, probability 0, space 0, times 0 [ 2030.917189][ T9410] CPU: 1 UID: 0 PID: 9410 Comm: syz.8.9156 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2030.917216][ T9410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2030.917224][ T9410] Call Trace: [ 2030.917228][ T9410] [ 2030.917234][ T9410] dump_stack_lvl+0x16c/0x1f0 [ 2030.917249][ T9410] should_fail_ex+0x512/0x640 [ 2030.917261][ T9410] ? fs_reclaim_acquire+0xae/0x150 [ 2030.917278][ T9410] ? tomoyo_encode2+0x100/0x3e0 [ 2030.917288][ T9410] should_failslab+0xc2/0x120 [ 2030.917302][ T9410] __kmalloc_noprof+0xd2/0x510 [ 2030.917314][ T9410] ? d_absolute_path+0x136/0x1a0 [ 2030.917330][ T9410] tomoyo_encode2+0x100/0x3e0 [ 2030.917342][ T9410] tomoyo_encode+0x29/0x50 [ 2030.917352][ T9410] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2030.917367][ T9410] tomoyo_path_number_perm+0x245/0x580 [ 2030.917382][ T9410] ? tomoyo_path_number_perm+0x237/0x580 [ 2030.917399][ T9410] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2030.917416][ T9410] ? arch_stack_walk+0xa6/0x100 [ 2030.917430][ T9410] ? __pfx___schedule+0x10/0x10 [ 2030.917455][ T9410] ? irqentry_exit+0x3b/0x90 [ 2030.917469][ T9410] ? lockdep_hardirqs_on+0x7c/0x110 [ 2030.917495][ T9410] tomoyo_path_chown+0x173/0x1b0 [ 2030.917508][ T9410] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 2030.917521][ T9410] ? from_vfsuid+0xea/0x140 [ 2030.917534][ T9410] ? __pfx_from_vfsuid+0x10/0x10 [ 2030.917549][ T9410] security_path_chown+0x12a/0x2e0 [ 2030.917565][ T9410] chown_common+0x3d3/0x680 [ 2030.917583][ T9410] ? __pfx_chown_common+0x10/0x10 [ 2030.917596][ T9410] ? find_held_lock+0x2b/0x80 [ 2030.917612][ T9410] ? mnt_get_write_access+0x20c/0x300 [ 2030.917629][ T9410] do_fchownat+0x1a7/0x200 [ 2030.917643][ T9410] ? __pfx_do_fchownat+0x10/0x10 [ 2030.917657][ T9410] ? __pfx_ksys_write+0x10/0x10 [ 2030.917670][ T9410] __ia32_sys_lchown16+0xe6/0x120 [ 2030.917684][ T9410] __do_fast_syscall_32+0x7c/0x3a0 [ 2030.917698][ T9410] do_fast_syscall_32+0x32/0x80 [ 2030.917709][ T9410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2030.917724][ T9410] RIP: 0023:0xf7f54579 [ 2030.917734][ T9410] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2030.917745][ T9410] RSP: 002b:00000000f503455c EFLAGS: 00000296 ORIG_RAX: 0000000000000010 [ 2030.917757][ T9410] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 000000000000ee01 [ 2030.917764][ T9410] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000000000000 [ 2030.917771][ T9410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2030.917777][ T9410] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2030.917783][ T9410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2030.917797][ T9410] [ 2030.919333][ T9410] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2031.782419][ T9417] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2032.732621][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9168'. [ 2032.762473][ T9439] overlayfs: failed to resolve './file0': -2 [ 2033.726436][ T9447] /dev/sr0: Can't open blockdev [ 2035.537154][ T9489] overlayfs: failed to resolve './file0': -2 [ 2036.544887][ T9507] FAULT_INJECTION: forcing a failure. [ 2036.544887][ T9507] name failslab, interval 1, probability 0, space 0, times 0 [ 2036.550222][ T9507] CPU: 1 UID: 0 PID: 9507 Comm: syz.4.9184 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2036.550249][ T9507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2036.550256][ T9507] Call Trace: [ 2036.550261][ T9507] [ 2036.550265][ T9507] dump_stack_lvl+0x16c/0x1f0 [ 2036.550285][ T9507] should_fail_ex+0x512/0x640 [ 2036.550299][ T9507] should_failslab+0xc2/0x120 [ 2036.550313][ T9507] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2036.550331][ T9507] ? vhost_iotlb_add_range_ctx+0xf0/0xa80 [ 2036.550350][ T9507] vhost_iotlb_add_range_ctx+0xf0/0xa80 [ 2036.550366][ T9507] ? kasan_save_track+0x14/0x30 [ 2036.550378][ T9507] vhost_iotlb_add_range_ctx+0x846/0xa80 [ 2036.550394][ T9507] ? __kasan_kmalloc+0xaa/0xb0 [ 2036.550406][ T9507] vhost_dev_ioctl+0x370/0xdc0 [ 2036.550419][ T9507] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2036.550438][ T9507] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 2036.550451][ T9507] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2036.550472][ T9507] vhost_net_ioctl+0x7c3/0x1710 [ 2036.550487][ T9507] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 2036.550500][ T9507] ? hook_file_ioctl_common+0x145/0x410 [ 2036.550519][ T9507] ? __fget_files+0x20e/0x3c0 [ 2036.550535][ T9507] ? __fput_deferred+0x480/0x480 [ 2036.550549][ T9507] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 2036.550561][ T9507] compat_ptr_ioctl+0x6e/0xa0 [ 2036.550575][ T9507] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 2036.550589][ T9507] __ia32_compat_sys_ioctl+0x23f/0x370 [ 2036.550607][ T9507] __do_fast_syscall_32+0x7c/0x3a0 [ 2036.550620][ T9507] do_fast_syscall_32+0x32/0x80 [ 2036.550631][ T9507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2036.550645][ T9507] RIP: 0023:0xf70ee579 [ 2036.550654][ T9507] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2036.550665][ T9507] RSP: 002b:00000000f509c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2036.550675][ T9507] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000004008af03 [ 2036.550682][ T9507] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 2036.550688][ T9507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2036.550694][ T9507] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2036.550701][ T9507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2036.550714][ T9507] [ 2037.928088][ T9534] overlayfs: failed to resolve './file0': -2 [ 2040.603954][ T9582] overlayfs: failed to resolve './file0': -2 [ 2041.198538][ T9594] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9205'. [ 2041.826963][ T9606] FAULT_INJECTION: forcing a failure. [ 2041.826963][ T9606] name failslab, interval 1, probability 0, space 0, times 0 [ 2041.831324][ T9606] CPU: 3 UID: 0 PID: 9606 Comm: syz.6.9210 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2041.831339][ T9606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2041.831347][ T9606] Call Trace: [ 2041.831351][ T9606] [ 2041.831356][ T9606] dump_stack_lvl+0x16c/0x1f0 [ 2041.831394][ T9606] should_fail_ex+0x512/0x640 [ 2041.831409][ T9606] ? nla_strdup+0xc6/0x150 [ 2041.831420][ T9606] should_failslab+0xc2/0x120 [ 2041.831434][ T9606] __kmalloc_noprof+0xd2/0x510 [ 2041.831449][ T9606] nla_strdup+0xc6/0x150 [ 2041.831462][ T9606] nf_tables_dumpreset_rules_start+0x98/0x1d0 [ 2041.831474][ T9606] ? __asan_memset+0x23/0x50 [ 2041.831491][ T9606] __netlink_dump_start+0x60b/0x990 [ 2041.831505][ T9606] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 2041.831519][ T9606] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 2041.831533][ T9606] nf_tables_getrule_reset+0x562/0x6a0 [ 2041.831560][ T9606] ? __pfx_nf_tables_getrule_reset+0x10/0x10 [ 2041.831584][ T9606] ? __pfx_nf_tables_dumpreset_rules_start+0x10/0x10 [ 2041.831601][ T9606] ? __pfx_nf_tables_dumpreset_rules+0x10/0x10 [ 2041.831625][ T9606] ? __pfx_nf_tables_dump_rules_done+0x10/0x10 [ 2041.831655][ T9606] ? __nla_parse+0x40/0x60 [ 2041.831677][ T9606] ? __pfx_nf_tables_getrule_reset+0x10/0x10 [ 2041.831704][ T9606] nfnetlink_rcv_msg+0x580/0x1200 [ 2041.831738][ T9606] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2041.831764][ T9606] ? stack_trace_save+0x8e/0xc0 [ 2041.831784][ T9606] ? __pfx_stack_trace_save+0x10/0x10 [ 2041.831834][ T9606] netlink_rcv_skb+0x158/0x420 [ 2041.831855][ T9606] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2041.831881][ T9606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2041.831920][ T9606] ? ns_capable+0xd7/0x110 [ 2041.831945][ T9606] nfnetlink_rcv+0x1b3/0x430 [ 2041.831971][ T9606] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2041.831995][ T9606] ? netlink_deliver_tap+0x1ae/0xd30 [ 2041.832010][ T9606] ? is_vmalloc_addr+0x86/0xa0 [ 2041.832024][ T9606] netlink_unicast+0x58a/0x850 [ 2041.832039][ T9606] ? __pfx_netlink_unicast+0x10/0x10 [ 2041.832057][ T9606] netlink_sendmsg+0x8d1/0xdd0 [ 2041.832073][ T9606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2041.832088][ T9606] ? __import_iovec+0x1dd/0x650 [ 2041.832105][ T9606] ____sys_sendmsg+0xa95/0xc70 [ 2041.832122][ T9606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2041.832138][ T9606] ? get_compat_msghdr+0x11a/0x170 [ 2041.832153][ T9606] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 2041.832166][ T9606] ? rcu_is_watching+0x12/0xc0 [ 2041.832179][ T9606] ___sys_sendmsg+0x134/0x1d0 [ 2041.832192][ T9606] ? __pfx____sys_sendmsg+0x10/0x10 [ 2041.832211][ T9606] ? find_held_lock+0x2b/0x80 [ 2041.832232][ T9606] __sys_sendmsg+0x16d/0x220 [ 2041.832244][ T9606] ? __pfx___sys_sendmsg+0x10/0x10 [ 2041.832255][ T9606] ? ksys_write+0x17e/0x250 [ 2041.832272][ T9606] ? rcu_is_watching+0x12/0xc0 [ 2041.832285][ T9606] __do_fast_syscall_32+0x7c/0x3a0 [ 2041.832299][ T9606] do_fast_syscall_32+0x32/0x80 [ 2041.832310][ T9606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2041.832325][ T9606] RIP: 0023:0xf709e579 [ 2041.832334][ T9606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2041.832345][ T9606] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2041.832356][ T9606] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 2041.832363][ T9606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2041.832369][ T9606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2041.832375][ T9606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2041.832381][ T9606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2041.832395][ T9606] [ 2041.959544][ T9606] sctp: [Deprecated]: syz.6.9210 (pid 9606) Use of int in max_burst socket option deprecated. [ 2041.959544][ T9606] Use struct sctp_assoc_value instead [ 2042.156637][ T9613] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9207'. [ 2043.224907][ T9632] overlayfs: failed to resolve './file0': -2 [ 2043.277823][ T9634] netlink: 'syz.7.9218': attribute type 1 has an invalid length. [ 2043.280384][ T9634] netlink: 144 bytes leftover after parsing attributes in process `syz.7.9218'. [ 2043.283393][ T9634] netlink: 'syz.7.9218': attribute type 1 has an invalid length. [ 2043.285793][ T9634] netlink: 76 bytes leftover after parsing attributes in process `syz.7.9218'. [ 2043.293764][ T9634] netlink: 244 bytes leftover after parsing attributes in process `syz.7.9218'. [ 2043.411704][ T9637] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2044.207557][ T9649] FAULT_INJECTION: forcing a failure. [ 2044.207557][ T9649] name failslab, interval 1, probability 0, space 0, times 0 [ 2044.212058][ T9649] CPU: 0 UID: 0 PID: 9649 Comm: syz.7.9220 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2044.212080][ T9649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2044.212091][ T9649] Call Trace: [ 2044.212097][ T9649] [ 2044.212104][ T9649] dump_stack_lvl+0x16c/0x1f0 [ 2044.212130][ T9649] should_fail_ex+0x512/0x640 [ 2044.212150][ T9649] ? __kvmalloc_node_noprof+0x124/0x620 [ 2044.212182][ T9649] should_failslab+0xc2/0x120 [ 2044.212204][ T9649] __kvmalloc_node_noprof+0x137/0x620 [ 2044.212226][ T9649] ? snprintf+0xc7/0x100 [ 2044.212235][ T9649] ? alloc_netdev_mqs+0xd2/0x1570 [ 2044.212247][ T9649] ? __pfx_snprintf+0x10/0x10 [ 2044.212258][ T9649] ? __pfx_vlan_setup+0x10/0x10 [ 2044.212274][ T9649] ? alloc_netdev_mqs+0xd2/0x1570 [ 2044.212286][ T9649] alloc_netdev_mqs+0xd2/0x1570 [ 2044.212301][ T9649] vlan_ioctl_handler+0x713/0xa70 [ 2044.212315][ T9649] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 2044.212337][ T9649] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 2044.212349][ T9649] sock_ioctl+0x4b8/0x6b0 [ 2044.212366][ T9649] ? __pfx_sock_ioctl+0x10/0x10 [ 2044.212380][ T9649] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2044.212403][ T9649] compat_sock_ioctl+0x4e3/0x730 [ 2044.212420][ T9649] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2044.212435][ T9649] ? hook_file_ioctl_common+0x145/0x410 [ 2044.212453][ T9649] ? __fget_files+0x20e/0x3c0 [ 2044.212469][ T9649] ? __fput_deferred+0x480/0x480 [ 2044.212486][ T9649] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2044.212501][ T9649] __ia32_compat_sys_ioctl+0x23f/0x370 [ 2044.212518][ T9649] __do_fast_syscall_32+0x7c/0x3a0 [ 2044.212531][ T9649] do_fast_syscall_32+0x32/0x80 [ 2044.212542][ T9649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2044.212557][ T9649] RIP: 0023:0xf7f81579 [ 2044.212566][ T9649] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2044.212577][ T9649] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2044.212588][ T9649] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008983 [ 2044.212594][ T9649] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 2044.212601][ T9649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2044.212607][ T9649] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2044.212614][ T9649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2044.212627][ T9649] [ 2044.780173][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9231'. [ 2044.789756][ T9667] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9231'. [ 2044.937273][ T9670] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9224'. [ 2045.551625][ T9685] overlayfs: failed to resolve './file0': -2 [ 2045.692786][ T9689] netfs: Couldn't get user pages (rc=-14) [ 2047.104819][ T9720] FAULT_INJECTION: forcing a failure. [ 2047.104819][ T9720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2047.109448][ T9720] CPU: 3 UID: 0 PID: 9720 Comm: syz.4.9241 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2047.109473][ T9720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2047.109483][ T9720] Call Trace: [ 2047.109489][ T9720] [ 2047.109496][ T9720] dump_stack_lvl+0x16c/0x1f0 [ 2047.109518][ T9720] should_fail_ex+0x512/0x640 [ 2047.109542][ T9720] _copy_from_user+0x2e/0xd0 [ 2047.109566][ T9720] generic_map_update_batch+0x380/0x610 [ 2047.109598][ T9720] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2047.109628][ T9720] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2047.109652][ T9720] bpf_map_do_batch+0x5b1/0x680 [ 2047.109675][ T9720] __sys_bpf+0x189f/0x4ea0 [ 2047.109692][ T9720] ? __pfx___sys_bpf+0x10/0x10 [ 2047.109707][ T9720] ? ksys_write+0x190/0x250 [ 2047.109729][ T9720] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2047.109765][ T9720] ? fput+0x70/0xf0 [ 2047.109784][ T9720] ? ksys_write+0x1ac/0x250 [ 2047.109799][ T9720] ? __pfx_ksys_write+0x10/0x10 [ 2047.109818][ T9720] __ia32_sys_bpf+0x76/0xe0 [ 2047.109834][ T9720] __do_fast_syscall_32+0x7c/0x3a0 [ 2047.109853][ T9720] do_fast_syscall_32+0x32/0x80 [ 2047.109870][ T9720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2047.109890][ T9720] RIP: 0023:0xf70ee579 [ 2047.109903][ T9720] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2047.109929][ T9720] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2047.109948][ T9720] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000200 [ 2047.109959][ T9720] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 2047.109968][ T9720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2047.109978][ T9720] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2047.109987][ T9720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2047.110009][ T9720] [ 2047.199799][ C3] vkms_vblank_simulate: vblank timer overrun [ 2047.370228][ T9729] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967293 > 32) [ 2047.383233][ T9727] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9240'. [ 2047.742461][ T9738] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9239'. [ 2049.038687][ T9764] netfs: Couldn't get user pages (rc=-14) [ 2049.688938][ T9784] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9255'. [ 2050.037459][ T9790] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2050.948529][ T9805] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input231 [ 2050.971272][ T9809] Bluetooth: hci0: invalid len left 7, exp >= 195 [ 2050.986170][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9259'. [ 2051.276866][ T9826] overlayfs: failed to resolve './file0': -2 [ 2051.497559][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9267'. [ 2051.502042][ T9830] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9267'. [ 2052.266255][ T9830] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.268790][ T9830] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.271288][ T9830] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.275589][ T9830] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.278574][ T9830] geneve2: entered promiscuous mode [ 2052.280200][ T9830] geneve2: entered allmulticast mode [ 2052.366355][ T9835] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2053.403262][ T9857] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2053.623692][ T9872] FAULT_INJECTION: forcing a failure. [ 2053.623692][ T9872] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.629526][ T9872] CPU: 2 UID: 0 PID: 9872 Comm: syz.7.9278 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2053.629550][ T9872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2053.629563][ T9872] Call Trace: [ 2053.629570][ T9872] [ 2053.629577][ T9872] dump_stack_lvl+0x116/0x1f0 [ 2053.629602][ T9872] should_fail_ex+0x512/0x640 [ 2053.629623][ T9872] should_failslab+0xc2/0x120 [ 2053.629644][ T9872] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2053.629665][ T9872] ? __send_signal_locked+0x159/0x12c0 [ 2053.629695][ T9872] ? sig_get_ucounts+0x1c0/0x5b0 [ 2053.629721][ T9872] __send_signal_locked+0x159/0x12c0 [ 2053.629755][ T9872] force_sig_info_to_task+0x31d/0x660 [ 2053.629783][ T9872] force_sig_fault+0xc4/0x100 [ 2053.629804][ T9872] ? __pfx_force_sig_fault+0x10/0x10 [ 2053.629833][ T9872] ? fixup_vdso_exception+0x34b/0x400 [ 2053.629860][ T9872] __bad_area_nosemaphore+0x329/0x690 [ 2053.629886][ T9872] ? lock_mm_and_find_vma+0xa6/0x6e0 [ 2053.629915][ T9872] do_user_addr_fault+0x927/0x1370 [ 2053.629944][ T9872] ? rcu_is_watching+0x12/0xc0 [ 2053.629968][ T9872] exc_page_fault+0x5c/0xb0 [ 2053.629997][ T9872] asm_exc_page_fault+0x26/0x30 [ 2053.630013][ T9872] RIP: 0023:0x80000146 [ 2053.630026][ T9872] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f3 0f 1e fc 66 45 <0f> 28 32 c4 82 ad bc af 07 00 00 00 c4 e1 fd 5a a1 3c 9c 43 71 3e [ 2053.630045][ T9872] RSP: 002b:00000000f508476c EFLAGS: 00010202 [ 2053.630061][ T9872] RAX: 000000000000000e RBX: 000000000000000e RCX: 0000000000000000 [ 2053.630071][ T9872] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000080000100 [ 2053.630084][ T9872] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2053.630095][ T9872] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2053.630104][ T9872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2053.630134][ T9872] [ 2054.540946][ T9895] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2054.855151][ T9900] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2055.004415][ T9904] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2055.755462][ T9921] FAULT_INJECTION: forcing a failure. [ 2055.755462][ T9921] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.760729][ T9921] CPU: 1 UID: 0 PID: 9921 Comm: syz.6.9290 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2055.760766][ T9921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2055.760778][ T9921] Call Trace: [ 2055.760784][ T9921] [ 2055.760792][ T9921] dump_stack_lvl+0x16c/0x1f0 [ 2055.760815][ T9921] should_fail_ex+0x512/0x640 [ 2055.760832][ T9921] ? fs_reclaim_acquire+0xae/0x150 [ 2055.760858][ T9921] ? tomoyo_encode2+0x100/0x3e0 [ 2055.760874][ T9921] should_failslab+0xc2/0x120 [ 2055.760894][ T9921] __kmalloc_noprof+0xd2/0x510 [ 2055.760920][ T9921] tomoyo_encode2+0x100/0x3e0 [ 2055.760940][ T9921] tomoyo_encode+0x29/0x50 [ 2055.760956][ T9921] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2055.760976][ T9921] ? tomoyo_profile+0x47/0x60 [ 2055.760999][ T9921] tomoyo_path_number_perm+0x245/0x580 [ 2055.761022][ T9921] ? tomoyo_path_number_perm+0x237/0x580 [ 2055.761049][ T9921] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2055.761111][ T9921] ? find_held_lock+0x2b/0x80 [ 2055.761131][ T9921] ? hook_file_ioctl_common+0x145/0x410 [ 2055.761162][ T9921] ? __fget_files+0x20e/0x3c0 [ 2055.761195][ T9921] security_file_ioctl_compat+0x9b/0x240 [ 2055.761224][ T9921] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2055.761254][ T9921] __do_fast_syscall_32+0x7c/0x3a0 [ 2055.761277][ T9921] do_fast_syscall_32+0x32/0x80 [ 2055.761296][ T9921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2055.761318][ T9921] RIP: 0023:0xf709e579 [ 2055.761333][ T9921] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2055.761350][ T9921] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2055.761367][ T9921] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c028aa03 [ 2055.761378][ T9921] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2055.761389][ T9921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2055.761399][ T9921] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2055.761410][ T9921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2055.761434][ T9921] [ 2055.761523][ T9921] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2056.648710][ T9934] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2056.834216][ T9945] overlayfs: failed to resolve './file0': -2 [ 2057.626188][ T9956] FAULT_INJECTION: forcing a failure. [ 2057.626188][ T9956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2057.634929][ T9956] CPU: 3 UID: 0 PID: 9956 Comm: syz.7.9300 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2057.634970][ T9956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2057.634981][ T9956] Call Trace: [ 2057.634997][ T9956] [ 2057.635004][ T9956] dump_stack_lvl+0x16c/0x1f0 [ 2057.635040][ T9956] should_fail_ex+0x512/0x640 [ 2057.635066][ T9956] _copy_from_user+0x2e/0xd0 [ 2057.635090][ T9956] get_old_timespec32+0x82/0x130 [ 2057.635113][ T9956] ? __pfx_get_old_timespec32+0x10/0x10 [ 2057.635137][ T9956] ? rcu_is_watching+0x12/0xc0 [ 2057.635158][ T9956] __ia32_sys_clock_nanosleep_time32+0x1ce/0x4f0 [ 2057.635180][ T9956] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 2057.635200][ T9956] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 2057.635231][ T9956] do_int80_emulation+0x104/0x460 [ 2057.635251][ T9956] asm_int80_emulation+0x1a/0x20 [ 2057.635268][ T9956] RIP: 0023:0xf7f81579 [ 2057.635281][ T9956] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2057.635298][ T9956] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 000000000000010b [ 2057.635314][ T9956] RAX: ffffffffffffffda RBX: 00000000fffffff2 RCX: 0000000000ca9a3b [ 2057.635325][ T9956] RDX: 0000000080000000 RSI: 0000000099999999 RDI: 0000000000000000 [ 2057.635336][ T9956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2057.635346][ T9956] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2057.635356][ T9956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2057.635378][ T9956] [ 2057.712411][ C3] vkms_vblank_simulate: vblank timer overrun [ 2057.794488][ T9960] cifs: Unknown parameter 'dax' [ 2058.062498][ T9971] [U]  [ 2058.063463][ T9971] [U] K{‘ [ 2058.064910][ T9971] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 2058.067137][ T9971] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 2058.072499][ T9971] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 2058.077318][ T9971] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 2058.088473][ T9971] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 2058.097720][ T9971] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 2058.101738][ T9971] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 2058.122006][ T9971] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 2058.167550][ T9971] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 2058.170403][ T9971] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 2058.174697][ T9971] [U] 22½“Æ©Ðû©x?0;3u± [ 2058.176144][ T9971] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 2058.184001][ T9971] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 2058.186960][ T9971] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 2058.189682][ T9971] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 2058.191689][ T9971] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 2058.195750][ T9971] [U] ¹ ec [ 2058.196834][ T9971] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 2058.203091][ T9969] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 2058.289166][ T9974] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2059.096959][ T9987] netlink: 'syz.6.9309': attribute type 1 has an invalid length. [ 2059.377800][T23411] usb 12-1: new high-speed USB device number 37 using dummy_hcd [ 2059.521300][T23411] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 2059.525738][T23411] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2059.529259][T23411] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2059.533963][T23411] usb 12-1: config 0 interface 0 has no altsetting 0 [ 2059.537657][T23411] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2059.541585][T23411] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2059.545242][T23411] usb 12-1: config 0 interface 0 has no altsetting 0 [ 2059.548078][T23411] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2059.551119][T23411] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2059.555423][T23411] usb 12-1: config 0 interface 0 has no altsetting 0 [ 2059.559106][T23411] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2059.562864][T23411] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2059.567290][T23411] usb 12-1: config 0 interface 0 has no altsetting 0 [ 2059.571842][T23411] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2059.575132][T23411] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2059.579089][T23411] usb 12-1: config 0 interface 0 has no altsetting 0 [ 2059.582867][T23411] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2059.586427][T23411] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2059.590794][T23411] usb 12-1: config 0 interface 0 has no altsetting 0 [ 2059.594399][T23411] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2059.597958][T23411] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2059.601443][T23411] usb 12-1: config 0 interface 0 has no altsetting 0 [ 2059.604373][T23411] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2059.607712][T23411] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2059.612216][T23411] usb 12-1: config 0 interface 0 has no altsetting 0 [ 2059.617687][T23411] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2059.620836][T23411] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2059.624088][T23411] usb 12-1: Product: syz [ 2059.626197][T23411] usb 12-1: Manufacturer: syz [ 2059.627907][T23411] usb 12-1: SerialNumber: syz [ 2059.631078][T23411] usb 12-1: config 0 descriptor?? [ 2059.637209][T23411] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 2059.882935][T10011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2059.886656][T10011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.217879][T10026] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2060.863184][T10037] netlink: 'syz.8.9322': attribute type 1 has an invalid length. [ 2060.866882][T10037] tipc: Started in network mode [ 2060.868622][T10037] tipc: Node identity 2a5089875367, cluster identity 4711 [ 2060.870923][T10037] tipc: Enabled bearer , priority 0 [ 2060.875127][T10037] syzkaller0: entered promiscuous mode [ 2060.876955][T10037] syzkaller0: entered allmulticast mode [ 2060.892393][T10037] tipc: Resetting bearer [ 2060.898170][T10036] tipc: Resetting bearer [ 2060.907241][T10036] tipc: Disabling bearer [ 2060.964085][T10039] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2061.098631][T10043] syzkaller0: entered promiscuous mode [ 2061.100504][T10043] syzkaller0: entered allmulticast mode [ 2061.107400][T10043] netlink: 'syz.4.9325': attribute type 10 has an invalid length. [ 2061.261967][T10041] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input232 [ 2061.278622][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9324'. [ 2062.028226][ T838] usb 12-1: USB disconnect, device number 37 [ 2062.033932][ T838] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 2062.577632][T10076] vivid-007: ================= START STATUS ================= [ 2062.580148][T10076] vivid-007: Enable Output Cropping: true [ 2062.582069][T10076] vivid-007: Enable Output Composing: true [ 2062.584086][T10076] vivid-007: Enable Output Scaler: true [ 2062.586014][T10076] vivid-007: Tx RGB Quantization Range: Automatic [ 2062.588323][T10076] vivid-007: Transmit Mode: HDMI [ 2062.590041][T10076] vivid-007: Hotplug Present: 0x00000000 [ 2062.591952][T10076] vivid-007: RxSense Present: 0x00000000 [ 2062.593902][T10076] vivid-007: EDID Present: 0x00000000 [ 2062.595715][T10076] vivid-007: ================== END STATUS ================== [ 2063.041775][T10081] netlink: 'syz.6.9334': attribute type 12 has an invalid length. [ 2063.680162][ T7576] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 2064.088776][T10101] wireguard0: entered promiscuous mode [ 2064.090648][T10101] wireguard0: entered allmulticast mode [ 2064.340832][T17358] usb 13-1: new high-speed USB device number 34 using dummy_hcd [ 2064.434408][T10111] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 2064.437067][T10111] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2064.439932][T10111] vhci_hcd vhci_hcd.0: Device attached [ 2064.498063][T10115] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9344'. [ 2064.503363][T17358] usb 13-1: Using ep0 maxpacket: 32 [ 2064.508809][T17358] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 24 [ 2064.520965][T17358] usb 13-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 2064.526028][T17358] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.540778][T17358] usb 13-1: config 0 descriptor?? [ 2064.616839][T23411] vhci_hcd: vhci_device speed not set [ 2064.674027][T23411] usb 45-1: new full-speed USB device number 6 using vhci_hcd [ 2064.729824][T10112] vhci_hcd: connection reset by peer [ 2064.738451][ T1153] vhci_hcd: stop threads [ 2064.739839][ T1153] vhci_hcd: release socket [ 2064.742867][ T1153] vhci_hcd: disconnect device [ 2064.754038][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 2064.754050][ T40] audit: type=1326 audit(1753742307.284:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10103 comm="syz.8.9340" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x0 [ 2064.946663][T10131] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2065.146239][T10134] overlayfs: failed to resolve './file0': -2 [ 2066.619263][ T40] audit: type=1326 audit(1753742309.248:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.6.9353" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000 [ 2066.636264][ T40] audit: type=1326 audit(1753742309.248:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.6.9353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2066.644389][ T40] audit: type=1326 audit(1753742309.269:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.6.9353" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000 [ 2066.654744][ T40] audit: type=1326 audit(1753742309.279:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.6.9353" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000 [ 2066.675130][ T40] audit: type=1326 audit(1753742309.279:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.6.9353" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000 [ 2066.681901][ T40] audit: type=1326 audit(1753742309.279:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.6.9353" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000 [ 2066.696151][ T40] audit: type=1326 audit(1753742309.279:7806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.6.9353" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000 [ 2066.705250][ T40] audit: type=1326 audit(1753742309.279:7807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.6.9353" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000 [ 2066.712836][ T40] audit: type=1326 audit(1753742309.279:7808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.6.9353" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000 [ 2066.848311][T10165] overlayfs: failed to resolve './file0': -2 [ 2067.008537][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9358'. [ 2067.163876][T17358] usbhid 13-1:0.0: can't add hid device: -71 [ 2067.165973][T17358] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 2067.169460][T17358] usb 13-1: USB disconnect, device number 34 [ 2067.817236][T10184] overlayfs: failed to resolve './file0': -2 [ 2068.741250][T27096] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2069.131945][T27096] usb 11-1: new high-speed USB device number 49 using dummy_hcd [ 2069.275212][T27096] usb 11-1: Using ep0 maxpacket: 32 [ 2069.278139][T27096] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 24 [ 2069.280962][T27096] usb 11-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 2069.283754][T27096] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.287667][T27096] usb 11-1: config 0 descriptor?? [ 2069.959732][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9373'. [ 2070.084973][T23411] vhci_hcd: vhci_device speed not set [ 2070.374728][T10236] overlayfs: failed to resolve './file0': -2 [ 2072.114423][T27096] usbhid 11-1:0.0: can't add hid device: -71 [ 2072.119385][T27096] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 2072.123210][T27096] usb 11-1: USB disconnect, device number 49 [ 2073.142755][T10284] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.145383][T10284] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.147994][T10284] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.150615][T10284] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.573435][ T1248] Bluetooth: Error in BCSP hdr checksum [ 2073.781523][ T13] Bluetooth: Error in BCSP hdr checksum [ 2073.791157][T10301] overlayfs: failed to resolve './file0': -2 [ 2074.028763][ T13] Bluetooth: Error in BCSP hdr checksum [ 2074.880356][T10308] netlink: 'syz.7.9393': attribute type 10 has an invalid length. [ 2074.882959][T10308] team0: Cannot enslave team device to itself [ 2075.209666][T25788] Bluetooth: hci1: command 0x1003 tx timeout [ 2075.209743][ T7576] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2075.420317][T10320] input: syz1 as /devices/virtual/input/input235 [ 2076.413496][T10337] overlayfs: failed to resolve './file0': -2 [ 2076.885971][ T7576] Bluetooth: hci5: command 0x1003 tx timeout [ 2076.886380][T32606] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2077.448920][T10351] FAULT_INJECTION: forcing a failure. [ 2077.448920][T10351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2077.457485][T10351] CPU: 1 UID: 0 PID: 10351 Comm: syz.4.9403 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2077.457510][T10351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2077.457521][T10351] Call Trace: [ 2077.457528][T10351] [ 2077.457536][T10351] dump_stack_lvl+0x16c/0x1f0 [ 2077.457572][T10351] should_fail_ex+0x512/0x640 [ 2077.457596][T10351] _copy_to_user+0x32/0xd0 [ 2077.457618][T10351] simple_read_from_buffer+0xcb/0x170 [ 2077.457647][T10351] proc_fail_nth_read+0x197/0x270 [ 2077.457666][T10351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2077.457683][T10351] ? rw_verify_area+0xcf/0x680 [ 2077.457698][T10351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2077.457713][T10351] vfs_read+0x1e4/0xc60 [ 2077.457724][T10351] ? fdget_pos+0x2a2/0x370 [ 2077.457736][T10351] ? __pfx_vfs_read+0x10/0x10 [ 2077.457746][T10351] ? find_held_lock+0x2b/0x80 [ 2077.457762][T10351] ? __fget_files+0x20e/0x3c0 [ 2077.457778][T10351] ? kfree+0x170/0x4d0 [ 2077.457798][T10351] ksys_read+0x12a/0x250 [ 2077.457808][T10351] ? __pfx_ksys_read+0x10/0x10 [ 2077.457819][T10351] ? rcu_is_watching+0x12/0xc0 [ 2077.457833][T10351] __do_fast_syscall_32+0x7c/0x3a0 [ 2077.457847][T10351] do_fast_syscall_32+0x32/0x80 [ 2077.457859][T10351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2077.457873][T10351] RIP: 0023:0xf70ee579 [ 2077.457882][T10351] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2077.457897][T10351] RSP: 002b:00000000f509c590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2077.457908][T10351] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f509c620 [ 2077.457915][T10351] RDX: 000000000000000f RSI: 00000000f7454ff4 RDI: 0000000000000000 [ 2077.457921][T10351] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2077.457927][T10351] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2077.457933][T10351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2077.457947][T10351] [ 2077.621477][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9406'. [ 2077.706612][ T1241] Bluetooth: Error in BCSP hdr checksum [ 2077.953746][ T3665] Bluetooth: Error in BCSP hdr checksum [ 2078.203434][ T1248] Bluetooth: Error in BCSP hdr checksum [ 2078.541235][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9415'. [ 2078.543021][T10378] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9412'. [ 2078.555644][T10379] overlayfs: failed to resolve './file0': -2 [ 2078.563679][T10378] netlink: 52 bytes leftover after parsing attributes in process `syz.8.9412'. [ 2078.988432][T10389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9416'. [ 2079.024893][T10389] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9416'. [ 2079.154861][T10396] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2079.401549][ T7576] Bluetooth: hci1: command 0x1003 tx timeout [ 2079.405420][T32606] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2080.135424][ T54] usb 12-1: new high-speed USB device number 38 using dummy_hcd [ 2080.290633][ T54] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2080.295204][ T54] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2080.299218][ T54] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.304570][ T54] usb 12-1: config 0 descriptor?? [ 2080.442837][T10421] netlink: 'syz.6.9425': attribute type 1 has an invalid length. [ 2080.507938][ T54] usbhid 12-1:0.0: can't add hid device: -71 [ 2080.509910][ T54] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 2080.516384][ T54] usb 12-1: USB disconnect, device number 38 [ 2080.517965][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9426'. [ 2081.419674][T10442] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9431'. [ 2081.435773][T10440] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2082.709853][T10486] lo speed is unknown, defaulting to 1000 [ 2082.713133][T10486] lo speed is unknown, defaulting to 1000 [ 2082.716298][T10486] lo speed is unknown, defaulting to 1000 [ 2082.844653][T10486] infiniband sz1: set down [ 2082.846633][T10486] infiniband sz1: added lo [ 2082.853842][ T2704] lo speed is unknown, defaulting to 1000 [ 2082.889501][T10486] RDS/IB: sz1: added [ 2082.890836][T10486] smc: adding ib device sz1 with port count 1 [ 2082.892770][T10486] smc: ib device sz1 port 1 has pnetid [ 2082.895704][T10486] lo speed is unknown, defaulting to 1000 [ 2082.975779][T10488] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 2082.977899][T10488] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2082.981205][T10488] vhci_hcd vhci_hcd.0: Device attached [ 2082.986747][T10486] lo speed is unknown, defaulting to 1000 [ 2083.026146][T10488] netlink: 'syz.7.9442': attribute type 8 has an invalid length. [ 2083.098210][T10486] lo speed is unknown, defaulting to 1000 [ 2083.194101][T10486] lo speed is unknown, defaulting to 1000 [ 2083.249383][T10495] vhci_hcd: connection closed [ 2083.249577][ T13] vhci_hcd: stop threads [ 2083.252455][ T13] vhci_hcd: release socket [ 2083.253864][ T13] vhci_hcd: disconnect device [ 2083.310537][ T2704] lo speed is unknown, defaulting to 1000 [ 2083.351286][T10501] tipc: Can't bind to reserved service type 2 [ 2083.688891][T25092] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2084.293705][T10526] syz_tun: entered allmulticast mode [ 2084.296737][T10525] syz_tun: left allmulticast mode [ 2084.337486][T10528] macsec1: entered promiscuous mode [ 2084.339427][T10528] dummy0: entered promiscuous mode [ 2084.341712][T10528] macsec1: entered allmulticast mode [ 2084.343360][T10528] dummy0: entered allmulticast mode [ 2084.346864][T10528] dummy0: left allmulticast mode [ 2084.348433][T10528] dummy0: left promiscuous mode [ 2084.505504][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 2084.505516][ T40] audit: type=1326 audit(1753742328.018:7831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.6.9459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2084.514569][ T40] audit: type=1326 audit(1753742328.018:7832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.6.9459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2084.523939][ T40] audit: type=1326 audit(1753742328.018:7833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.6.9459" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2084.534573][ T40] audit: type=1326 audit(1753742328.018:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.6.9459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2084.544190][ T40] audit: type=1326 audit(1753742328.018:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.6.9459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2084.554447][ T40] audit: type=1326 audit(1753742328.029:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.6.9459" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2084.563190][ T40] audit: type=1326 audit(1753742328.029:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.6.9459" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000 [ 2084.570951][ T40] audit: type=1326 audit(1753742328.029:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.6.9459" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000 [ 2084.577851][ T40] audit: type=1326 audit(1753742328.029:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.6.9459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2084.585259][ T40] audit: type=1326 audit(1753742328.029:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.6.9459" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000 [ 2084.802258][T23411] usb 11-1: new full-speed USB device number 50 using dummy_hcd [ 2084.956109][T23411] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2084.960164][T23411] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2084.968290][T23411] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2084.972060][T23411] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2084.975551][T23411] usb 11-1: Product: syz [ 2084.977357][T23411] usb 11-1: Manufacturer: syz [ 2084.979411][T23411] usb 11-1: SerialNumber: syz [ 2085.319704][T25092] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2085.323775][T25092] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2085.327055][T25092] usb 9-1: can't read configurations, error -71 [ 2085.368055][T23411] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2085.392404][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9464'. [ 2086.279520][T10556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.283011][T10556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2086.657636][T10581] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2086.776735][T10589] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2087.482085][ T54] usb 11-1: USB disconnect, device number 50 [ 2087.531247][ T54] usblp0: removed [ 2087.710430][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 2087.930014][T10602] block nbd4: shutting down sockets [ 2087.994310][T10607] fuse: Unknown parameter 'ÿÿ0xffffffffffffffff' [ 2088.046501][T10607] mkiss: ax0: crc mode is auto. [ 2088.658686][T23411] usb 11-1: new full-speed USB device number 51 using dummy_hcd [ 2088.804884][T23411] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2088.808037][T23411] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2088.813731][T23411] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2088.817514][T23411] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2088.820893][T23411] usb 11-1: Product: syz [ 2088.822503][T23411] usb 11-1: Manufacturer: syz [ 2088.831503][T23411] usb 11-1: SerialNumber: syz [ 2088.901969][T10622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2088.987002][T10626] netlink: 'syz.4.9486': attribute type 3 has an invalid length. [ 2089.053121][T23411] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2089.075144][T10627] team0: Mode changed to "loadbalance" [ 2089.079783][T10627] netlink: 'syz.4.9486': attribute type 10 has an invalid length. [ 2089.084275][T10627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2089.087380][T10627] team0: Device bond0 failed to register rx_handler [ 2089.106174][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9486'. [ 2089.486878][T10633] input: syz1 as /devices/virtual/input/input236 [ 2091.245652][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 2091.245664][ T40] audit: type=1326 audit(1753742335.094:7881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10660 comm="syz.7.9496" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffe0000 [ 2091.289219][ T2704] usb 11-1: USB disconnect, device number 51 [ 2091.292254][ T2704] usblp0: removed [ 2091.476563][T10667] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2091.600381][T10674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9501'. [ 2092.631056][T10681] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9503'. [ 2092.705062][T10690] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2092.707618][T10690] tipc: Enabled bearer , priority 10 [ 2092.841527][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2092.898414][ T4296] usb 11-1: new full-speed USB device number 52 using dummy_hcd [ 2092.974661][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2093.071751][ T4296] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2093.075778][ T4296] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2093.082189][ T4296] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2093.085129][ T4296] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2093.087754][ T4296] usb 11-1: Product: syz [ 2093.089212][ T4296] usb 11-1: Manufacturer: syz [ 2093.090766][ T4296] usb 11-1: SerialNumber: syz [ 2093.107932][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2093.231888][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2093.289121][ T4296] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2093.365566][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2093.508451][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2093.632231][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2093.765772][ T54] tipc: Node number set to 2644960229 [ 2093.842787][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2093.853966][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2093.908116][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2093.952163][ T4296] usb 11-1: USB disconnect, device number 52 [ 2093.981870][ T4296] usblp0: removed [ 2094.155750][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2094.670094][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2095.496687][T10742] FAULT_INJECTION: forcing a failure. [ 2095.496687][T10742] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.500729][T10742] CPU: 3 UID: 0 PID: 10742 Comm: syz.6.9520 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2095.500745][T10742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2095.500752][T10742] Call Trace: [ 2095.500756][T10742] [ 2095.500761][T10742] dump_stack_lvl+0x16c/0x1f0 [ 2095.500778][T10742] should_fail_ex+0x512/0x640 [ 2095.500789][T10742] ? fs_reclaim_acquire+0xae/0x150 [ 2095.500806][T10742] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2095.500817][T10742] should_failslab+0xc2/0x120 [ 2095.500831][T10742] __kmalloc_noprof+0xd2/0x510 [ 2095.500845][T10742] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2095.500857][T10742] ? tomoyo_profile+0x47/0x60 [ 2095.500871][T10742] tomoyo_path_number_perm+0x245/0x580 [ 2095.500886][T10742] ? tomoyo_path_number_perm+0x237/0x580 [ 2095.500903][T10742] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2095.500934][T10742] ? find_held_lock+0x2b/0x80 [ 2095.500945][T10742] ? hook_file_ioctl_common+0x145/0x410 [ 2095.500964][T10742] ? __fget_files+0x20e/0x3c0 [ 2095.500980][T10742] ? __fput_deferred+0x480/0x480 [ 2095.500996][T10742] security_file_ioctl_compat+0x9b/0x240 [ 2095.501014][T10742] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2095.501031][T10742] __do_fast_syscall_32+0x7c/0x3a0 [ 2095.501045][T10742] do_fast_syscall_32+0x32/0x80 [ 2095.501057][T10742] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2095.501071][T10742] RIP: 0023:0xf709e579 [ 2095.501080][T10742] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2095.501091][T10742] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2095.501101][T10742] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000040946400 [ 2095.501109][T10742] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 2095.501115][T10742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2095.501121][T10742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2095.501128][T10742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2095.501141][T10742] [ 2095.501146][T10742] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2095.569420][T10742] comedi: valid board names for 8255 driver are: [ 2095.571552][T10742] 8255 [ 2095.572461][T10742] comedi: valid board names for vmk80xx driver are: [ 2095.574514][T10742] vmk80xx [ 2095.575576][T10742] comedi: valid board names for usbduxsigma driver are: [ 2095.577752][T10742] usbduxsigma [ 2095.578843][T10742] comedi: valid board names for usbduxfast driver are: [ 2095.580970][T10742] usbduxfast [ 2095.582038][T10742] comedi: valid board names for usbdux driver are: [ 2095.584070][T10742] usbdux [ 2095.585080][T10742] comedi: valid board names for ni6501 driver are: [ 2095.587125][T10742] ni6501 [ 2095.588088][T10742] comedi: valid board names for dt9812 driver are: [ 2095.590128][T10742] dt9812 [ 2095.591088][T10742] comedi: valid board names for ni_labpc_cs driver are: [ 2095.593252][T10742] ni_labpc_cs [ 2095.594359][T10742] comedi: valid board names for ni_daq_700 driver are: [ 2095.598624][T10742] ni_daq_700 [ 2095.599695][T10742] comedi: valid board names for labpc_pci driver are: [ 2095.601804][T10742] labpc_pci [ 2095.602852][T10742] comedi: valid board names for adl_pci9118 driver are: [ 2095.605094][T10742] pci9118dg [ 2095.606158][T10742] pci9118hg [ 2095.607200][T10742] pci9118hr [ 2095.608258][T10742] comedi: valid board names for 8255_pci driver are: [ 2095.610330][T10742] 8255_pci [ 2095.611348][T10742] comedi: valid board names for s526 driver are: [ 2095.613337][T10742] s526 [ 2095.614301][T10742] comedi: valid board names for multiq3 driver are: [ 2095.616370][T10742] multiq3 [ 2095.617377][T10742] comedi: valid board names for pcmuio driver are: [ 2095.619395][T10742] pcmuio48 [ 2095.620410][T10742] pcmuio96 [ 2095.621425][T10742] comedi: valid board names for pcmmio driver are: [ 2095.623496][T10742] pcmmio [ 2095.624455][T10742] comedi: valid board names for pcmda12 driver are: [ 2095.626501][T10742] pcmda12 [ 2095.627495][T10742] comedi: valid board names for pcmad driver are: [ 2095.629505][T10742] pcmad12 [ 2095.630500][T10742] pcmad16 [ 2095.631491][T10742] comedi: valid board names for ni_labpc driver are: [ 2095.632223][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2095.633645][T10742] lab-pc-1200 [ 2095.636897][T10742] lab-pc-1200ai [ 2095.638065][T10742] lab-pc+ [ 2095.639074][T10742] comedi: valid board names for atmio16 driver are: [ 2095.641141][T10742] atmio16 [ 2095.642198][T10742] atmio16d [ 2095.643215][T10742] comedi: valid board names for ni_at_ao driver are: [ 2095.645291][T10742] at-ao-6 [ 2095.646300][T10742] at-ao-10 [ 2095.647315][T10742] comedi: valid board names for ni_at_a2150 driver are: [ 2095.649474][T10742] ni_at_a2150 [ 2095.650567][T10742] comedi: valid board names for adq12b driver are: [ 2095.652658][T10742] adq12b [ 2095.653610][T10742] comedi: valid board names for mpc624 driver are: [ 2095.655632][T10742] mpc624 [ 2095.656558][T10742] comedi: valid board names for c6xdigio driver are: [ 2095.658632][T10742] c6xdigio [ 2095.659653][T10742] comedi: valid board names for aio_iiro_16 driver are: [ 2095.661871][T10742] aio_iiro_16 [ 2095.662967][T10742] comedi: valid board names for aio_aio12_8 driver are: [ 2095.665121][T10742] aio_aio12_8 [ 2095.666237][T10742] aio_ai12_8 [ 2095.667304][T10742] aio_ao12_4 [ 2095.668386][T10742] comedi: valid board names for fl512 driver are: [ 2095.670442][T10742] fl512 [ 2095.671370][T10742] comedi: valid board names for dmm32at driver are: [ 2095.673430][T10742] dmm32at [ 2095.674423][T10742] comedi: valid board names for dt282x driver are: [ 2095.676447][T10742] dt2821 [ 2095.677412][T10742] dt2821-f [ 2095.678435][T10742] dt2821-g [ 2095.679454][T10742] dt2823 [ 2095.680457][T10742] dt2824-pgh [ 2095.681527][T10742] dt2824-pgl [ 2095.682595][T10742] dt2825 [ 2095.683535][T10742] dt2827 [ 2095.684493][T10742] dt2828 [ 2095.685441][T10742] dt2829 [ 2095.686386][T10742] dt21-ez [ 2095.687379][T10742] dt23-ez [ 2095.688376][T10742] dt24-ez [ 2095.689370][T10742] dt24-ez-pgl [ 2095.690514][T10742] comedi: valid board names for dt2817 driver are: [ 2095.692543][T10742] dt2817 [ 2095.693492][T10742] comedi: valid board names for dt2815 driver are: [ 2095.695514][T10742] dt2815 [ 2095.696483][T10742] comedi: valid board names for dt2814 driver are: [ 2095.698520][T10742] dt2814 [ 2095.699528][T10742] comedi: valid board names for dt2811 driver are: [ 2095.701555][T10742] dt2811-pgh [ 2095.702622][T10742] dt2811-pgl [ 2095.703679][T10742] comedi: valid board names for dt2801 driver are: [ 2095.705705][T10742] dt2801 [ 2095.706648][T10742] comedi: valid board names for das6402 driver are: [ 2095.708700][T10742] das6402-12 [ 2095.709822][T10742] das6402-16 [ 2095.710902][T10742] comedi: valid board names for das1800 driver are: [ 2095.712982][T10742] das-1701st [ 2095.714052][T10742] das-1701st-da [ 2095.715201][T10742] das-1702st [ 2095.716301][T10742] das-1702st-da [ 2095.717462][T10742] das-1702hr [ 2095.718587][T10742] das-1702hr-da [ 2095.719732][T10742] das-1701ao [ 2095.720796][T10742] das-1702ao [ 2095.721864][T10742] das-1801st [ 2095.722931][T10742] das-1801st-da [ 2095.724071][T10742] das-1802st [ 2095.725145][T10742] das-1802st-da [ 2095.726303][T10742] das-1802hr [ 2095.727370][T10742] das-1802hr-da [ 2095.728594][T10742] das-1801hc [ 2095.729667][T10742] das-1802hc [ 2095.730737][T10742] das-1801ao [ 2095.731799][T10742] das-1802ao [ 2095.732871][T10742] comedi: valid board names for das800 driver are: [ 2095.734892][T10742] das-800 [ 2095.735888][T10742] cio-das800 [ 2095.736965][T10742] das-801 [ 2095.738022][T10742] cio-das801 [ 2095.739094][T10742] das-802 [ 2095.740091][T10742] cio-das802 [ 2095.741167][T10742] cio-das802/16 [ 2095.742310][T10742] comedi: valid board names for isa-das08 driver are: [ 2095.744412][T10742] isa-das08 [ 2095.745457][T10742] das08-pgm [ 2095.746518][T10742] das08-pgh [ 2095.747654][T10742] das08-pgl [ 2095.748726][T10742] das08-aoh [ 2095.749776][T10742] das08-aol [ 2095.750830][T10742] das08-aom [ 2095.751883][T10742] das08/jr-ao [ 2095.752984][T10742] das08jr-16-ao [ 2095.754124][T10742] pc104-das08 [ 2095.755215][T10742] das08jr/16 [ 2095.756323][T10742] comedi: valid board names for das16m1 driver are: [ 2095.758556][T10742] das16m1 [ 2095.759572][T10742] comedi: valid board names for dac02 driver are: [ 2095.761588][T10742] dac02 [ 2095.762516][T10742] comedi: valid board names for rti802 driver are: [ 2095.764534][T10742] rti802 [ 2095.765482][T10742] comedi: valid board names for rti800 driver are: [ 2095.767572][T10742] rti800 [ 2095.768539][T10742] rti815 [ 2095.769490][T10742] comedi: valid board names for pcm3724 driver are: [ 2095.771554][T10742] pcm3724 [ 2095.772559][T10742] comedi: valid board names for pcl818 driver are: [ 2095.774576][T10742] pcl818l [ 2095.775645][T10742] pcl818h [ 2095.776650][T10742] pcl818hd [ 2095.777685][T10742] pcl818hg [ 2095.778702][T10742] pcl818 [ 2095.779645][T10742] pcl718 [ 2095.780603][T10742] pcm3718 [ 2095.781590][T10742] comedi: valid board names for pcl816 driver are: [ 2095.783609][T10742] pcl816 [ 2095.784550][T10742] pcl814b [ 2095.785624][T10742] comedi: valid board names for pcl812 driver are: [ 2095.787637][T10742] pcl812 [ 2095.788596][T10742] pcl812pg [ 2095.789616][T10742] acl8112pg [ 2095.790656][T10742] acl8112dg [ 2095.791702][T10742] acl8112hg [ 2095.792751][T10742] a821pgl [ 2095.793745][T10742] a821pglnda [ 2095.794860][T10742] a821pgh [ 2095.795952][T10742] a822pgl [ 2095.797203][T10742] a822pgh [ 2095.798458][T10742] a823pgl [ 2095.799699][T10742] a823pgh [ 2095.800962][T10742] pcl813 [ 2095.802145][T10742] pcl813b [ 2095.803152][T10742] acl8113 [ 2095.804273][T10742] iso813 [ 2095.805465][T10742] acl8216 [ 2095.806712][T10742] a826pg [ 2095.807889][T10742] comedi: valid board names for pcl730 driver are: [ 2095.809936][T10742] pcl730 [ 2095.810896][T10742] iso730 [ 2095.811855][T10742] acl7130 [ 2095.812923][T10742] pcm3730 [ 2095.813978][T10742] pcl725 [ 2095.814933][T10742] p8r8dio [ 2095.816122][T10742] acl7225b [ 2095.817504][T10742] p16r16dio [ 2095.818907][T10742] pcl733 [ 2095.820165][T10742] pcl734 [ 2095.821439][T10742] opmm-1616-xt [ 2095.822959][T10742] pearl-mm-p [ 2095.824404][T10742] ir104-pbf [ 2095.825451][T10742] comedi: valid board names for pcl726 driver are: [ 2095.827462][T10742] pcl726 [ 2095.828422][T10742] pcl727 [ 2095.829367][T10742] pcl728 [ 2095.830312][T10742] acl6126 [ 2095.831334][T10742] acl6128 [ 2095.832368][T10742] comedi: valid board names for pcl724 driver are: [ 2095.834463][T10742] pcl724 [ 2095.835410][T10742] pcl722 [ 2095.836399][T10742] pcl731 [ 2095.837365][T10742] acl7122 [ 2095.838366][T10742] acl7124 [ 2095.839361][T10742] pet48dio [ 2095.840391][T10742] pcmio48 [ 2095.841431][T10742] onyx-mm-dio [ 2095.842588][T10742] comedi: valid board names for pcl711 driver are: [ 2095.844625][T10742] pcl711 [ 2095.845599][T10742] pcl711b [ 2095.846596][T10742] acl8112hg [ 2095.847644][T10742] acl8112dg [ 2095.848709][T10742] comedi: valid board names for amplc_pc263 driver are: [ 2095.850885][T10742] pc263 [ 2095.851931][T10742] comedi: valid board names for amplc_pc236 driver are: [ 2095.854108][T10742] pc36at [ 2095.855070][T10742] comedi: valid board names for amplc_dio200 driver are: [ 2095.857311][T10742] pc212e [ 2095.858267][T10742] pc214e [ 2095.859217][T10742] pc215e [ 2095.860166][T10742] pc218e [ 2095.861237][T10742] pc272e [ 2095.862360][T10742] comedi: valid board names for comedi_parport driver are: [ 2095.864617][T10742] comedi_parport [ 2095.865791][T10742] comedi: valid board names for comedi_test driver are: [ 2095.867948][T10742] comedi_test [ 2095.869052][T10742] comedi: valid board names for comedi_bond driver are: [ 2095.871364][T10742] comedi_bond [ 2096.454448][ T54] usb 13-1: new full-speed USB device number 35 using dummy_hcd [ 2096.615830][ T54] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2096.619630][ T54] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2096.623828][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2096.631186][ T54] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2096.635104][ T54] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2096.638313][ T54] usb 13-1: Product: syz [ 2096.640123][ T54] usb 13-1: Manufacturer: syz [ 2096.650703][ T54] usb 13-1: SerialNumber: syz [ 2096.745012][T10773] netlink: 'syz.4.9526': attribute type 16 has an invalid length. [ 2096.748367][T10773] netlink: 'syz.4.9526': attribute type 17 has an invalid length. [ 2096.774460][T10773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2096.779205][T10773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2096.787159][T27096] lo speed is unknown, defaulting to 1000 [ 2096.789024][T27096] sz1: Port: 1 Link ACTIVE [ 2096.790554][T27096] lo speed is unknown, defaulting to 1000 [ 2096.868545][ T54] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2097.406123][T10787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2097.410251][T10787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2097.613764][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2097.981826][T10797] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9530'. [ 2098.613767][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2099.511191][ T54] usb 13-1: USB disconnect, device number 35 [ 2099.524880][ T54] usblp0: removed [ 2099.595011][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2100.182033][T10849] syz.7.9539: attempt to access beyond end of device [ 2100.182033][T10849] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2100.385719][T10858] overlayfs: failed to resolve './file0': -2 [ 2100.595083][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2101.424660][T10861] loop6: detected capacity change from 0 to 63 [ 2101.437669][T10861] Buffer I/O error on dev loop6, logical block 0, async page read [ 2101.441253][T10861] Buffer I/O error on dev loop6, logical block 1, async page read [ 2101.444091][T10861] Buffer I/O error on dev loop6, logical block 2, async page read [ 2101.446700][T10861] Buffer I/O error on dev loop6, logical block 3, async page read [ 2101.451184][T10861] Buffer I/O error on dev loop6, logical block 0, async page read [ 2101.456602][T10861] Buffer I/O error on dev loop6, logical block 1, async page read [ 2101.459105][T10861] Buffer I/O error on dev loop6, logical block 2, async page read [ 2101.461648][T10861] Buffer I/O error on dev loop6, logical block 3, async page read [ 2101.466685][T10861] Buffer I/O error on dev loop6, logical block 0, async page read [ 2101.469175][T10861] Buffer I/O error on dev loop6, logical block 1, async page read [ 2101.504530][T10869] FAULT_INJECTION: forcing a failure. [ 2101.504530][T10869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2101.508578][T10869] CPU: 1 UID: 0 PID: 10869 Comm: syz.6.9547 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2101.508594][T10869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2101.508602][T10869] Call Trace: [ 2101.508606][T10869] [ 2101.508611][T10869] dump_stack_lvl+0x16c/0x1f0 [ 2101.508626][T10869] should_fail_ex+0x512/0x640 [ 2101.508641][T10869] _copy_from_user+0x2e/0xd0 [ 2101.508654][T10869] inet_compat_routing_ioctl+0x9e/0x2c0 [ 2101.508673][T10869] ? __pfx_inet_compat_routing_ioctl+0x10/0x10 [ 2101.508698][T10869] inet_compat_ioctl+0xd9/0x110 [ 2101.508713][T10869] ? __pfx_inet_compat_ioctl+0x10/0x10 [ 2101.508729][T10869] compat_sock_ioctl+0x173/0x730 [ 2101.508747][T10869] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2101.508762][T10869] ? hook_file_ioctl_common+0x145/0x410 [ 2101.508780][T10869] ? __fget_files+0x20e/0x3c0 [ 2101.508798][T10869] ? __fput_deferred+0x480/0x480 [ 2101.508815][T10869] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2101.508830][T10869] __ia32_compat_sys_ioctl+0x23f/0x370 [ 2101.508848][T10869] __do_fast_syscall_32+0x7c/0x3a0 [ 2101.508861][T10869] do_fast_syscall_32+0x32/0x80 [ 2101.508873][T10869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2101.508887][T10869] RIP: 0023:0xf709e579 [ 2101.508895][T10869] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2101.508907][T10869] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2101.508917][T10869] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000890b [ 2101.508924][T10869] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2101.508931][T10869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2101.508937][T10869] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2101.508943][T10869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2101.508956][T10869] [ 2101.585700][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2101.676426][T10880] FAULT_INJECTION: forcing a failure. [ 2101.676426][T10880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2101.680502][T10880] CPU: 0 UID: 0 PID: 10880 Comm: syz.6.9551 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2101.680518][T10880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2101.680526][T10880] Call Trace: [ 2101.680530][T10880] [ 2101.680535][T10880] dump_stack_lvl+0x16c/0x1f0 [ 2101.680550][T10880] should_fail_ex+0x512/0x640 [ 2101.680564][T10880] _copy_to_user+0x32/0xd0 [ 2101.680578][T10880] simple_read_from_buffer+0xcb/0x170 [ 2101.680596][T10880] proc_fail_nth_read+0x197/0x270 [ 2101.680613][T10880] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2101.680629][T10880] ? rw_verify_area+0xcf/0x680 [ 2101.680645][T10880] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2101.680660][T10880] vfs_read+0x1e4/0xc60 [ 2101.680670][T10880] ? fdget_pos+0x2a2/0x370 [ 2101.680682][T10880] ? __pfx_vfs_read+0x10/0x10 [ 2101.680691][T10880] ? find_held_lock+0x2b/0x80 [ 2101.680707][T10880] ? __fget_files+0x20e/0x3c0 [ 2101.680728][T10880] ksys_read+0x12a/0x250 [ 2101.680738][T10880] ? __pfx_ksys_read+0x10/0x10 [ 2101.680748][T10880] ? __secure_computing+0x21c/0x320 [ 2101.680764][T10880] __do_fast_syscall_32+0x7c/0x3a0 [ 2101.680777][T10880] do_fast_syscall_32+0x32/0x80 [ 2101.680789][T10880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2101.680803][T10880] RIP: 0023:0xf709e579 [ 2101.680812][T10880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2101.680823][T10880] RSP: 002b:00000000f508e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2101.680834][T10880] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f508e620 [ 2101.680841][T10880] RDX: 000000000000000f RSI: 00000000f7404ff4 RDI: 0000000000000000 [ 2101.680847][T10880] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2101.680854][T10880] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2101.680860][T10880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2101.680873][T10880] [ 2102.554401][T10904] FAULT_INJECTION: forcing a failure. [ 2102.554401][T10904] name failslab, interval 1, probability 0, space 0, times 0 [ 2102.558956][T10904] CPU: 1 UID: 0 PID: 10904 Comm: syz.7.9555 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2102.558982][T10904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2102.558990][T10904] Call Trace: [ 2102.558994][T10904] [ 2102.558999][T10904] dump_stack_lvl+0x16c/0x1f0 [ 2102.559014][T10904] should_fail_ex+0x512/0x640 [ 2102.559026][T10904] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2102.559045][T10904] should_failslab+0xc2/0x120 [ 2102.559058][T10904] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2102.559075][T10904] ? assoc_array_insert+0x10c/0x3970 [ 2102.559091][T10904] assoc_array_insert+0x10c/0x3970 [ 2102.559113][T10904] ? __pfx_assoc_array_insert+0x10/0x10 [ 2102.559125][T10904] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2102.559143][T10904] ? lockdep_hardirqs_on+0x7c/0x110 [ 2102.559160][T10904] __key_link_begin+0xf5/0x260 [ 2102.559173][T10904] request_key_and_link+0xd9f/0x1370 [ 2102.559192][T10904] ? __pfx_request_key_and_link+0x10/0x10 [ 2102.559207][T10904] ? __pfx___might_resched+0x10/0x10 [ 2102.559223][T10904] ? __pfx_key_default_cmp+0x10/0x10 [ 2102.559235][T10904] ? __pfx_keyring_search_iterator+0x10/0x10 [ 2102.559248][T10904] ? _copy_from_user+0x59/0xd0 [ 2102.559263][T10904] __do_sys_request_key+0x23a/0x3d0 [ 2102.559277][T10904] ? __pfx___do_sys_request_key+0x10/0x10 [ 2102.559288][T10904] ? ksys_write+0x1ac/0x250 [ 2102.559302][T10904] ? rcu_is_watching+0x12/0xc0 [ 2102.559316][T10904] __do_fast_syscall_32+0x7c/0x3a0 [ 2102.559329][T10904] do_fast_syscall_32+0x32/0x80 [ 2102.559341][T10904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2102.559355][T10904] RIP: 0023:0xf7f81579 [ 2102.559365][T10904] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2102.559380][T10904] RSP: 002b:00000000f506455c EFLAGS: 00000296 ORIG_RAX: 000000000000011f [ 2102.559391][T10904] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000080000140 [ 2102.559398][T10904] RDX: 0000000080000180 RSI: 00000000fffffffe RDI: 0000000000000000 [ 2102.559404][T10904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2102.559411][T10904] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2102.559417][T10904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2102.559431][T10904] [ 2102.567756][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2103.558243][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2103.883635][T10915] loop6: detected capacity change from 0 to 63 [ 2104.377200][ T838] usb 13-1: new full-speed USB device number 36 using dummy_hcd [ 2104.533184][ T838] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2104.536204][ T838] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2104.547417][ T838] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2104.548292][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2104.550561][ T838] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2104.559393][ T838] usb 13-1: Product: syz [ 2104.561540][ T838] usb 13-1: Manufacturer: syz [ 2104.564099][ T838] usb 13-1: SerialNumber: syz [ 2104.778684][ T838] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2105.310761][T10961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2105.313542][T10961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2105.539274][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2105.663596][T10966] loop6: detected capacity change from 0 to 63 [ 2106.529593][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2106.983265][T22488] usb 13-1: USB disconnect, device number 36 [ 2106.986701][T22488] usblp0: removed [ 2107.202887][T11017] netlink: 'syz.7.9582': attribute type 7 has an invalid length. [ 2107.206288][T11017] netlink: 'syz.7.9582': attribute type 8 has an invalid length. [ 2107.529676][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2107.912334][T11029] FAULT_INJECTION: forcing a failure. [ 2107.912334][T11029] name failslab, interval 1, probability 0, space 0, times 0 [ 2107.916315][T11029] CPU: 2 UID: 0 PID: 11029 Comm: syz.6.9586 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2107.916342][T11029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2107.916350][T11029] Call Trace: [ 2107.916355][T11029] [ 2107.916359][T11029] dump_stack_lvl+0x16c/0x1f0 [ 2107.916374][T11029] should_fail_ex+0x512/0x640 [ 2107.916386][T11029] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 2107.916400][T11029] should_failslab+0xc2/0x120 [ 2107.916414][T11029] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2107.916425][T11029] ? __alloc_skb+0x2b2/0x380 [ 2107.916439][T11029] __alloc_skb+0x2b2/0x380 [ 2107.916449][T11029] ? __pfx___alloc_skb+0x10/0x10 [ 2107.916461][T11029] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2107.916478][T11029] netlink_alloc_large_skb+0x69/0x130 [ 2107.916493][T11029] netlink_sendmsg+0x6a1/0xdd0 [ 2107.916509][T11029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2107.916524][T11029] ? __import_iovec+0x1dd/0x650 [ 2107.916540][T11029] ____sys_sendmsg+0xa95/0xc70 [ 2107.916557][T11029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2107.916571][T11029] ? get_compat_msghdr+0x11a/0x170 [ 2107.916593][T11029] ___sys_sendmsg+0x134/0x1d0 [ 2107.916606][T11029] ? __pfx____sys_sendmsg+0x10/0x10 [ 2107.916625][T11029] ? find_held_lock+0x2b/0x80 [ 2107.916646][T11029] __sys_sendmsg+0x16d/0x220 [ 2107.916658][T11029] ? __pfx___sys_sendmsg+0x10/0x10 [ 2107.916676][T11029] ? rcu_is_watching+0x12/0xc0 [ 2107.916690][T11029] __do_fast_syscall_32+0x7c/0x3a0 [ 2107.916703][T11029] do_fast_syscall_32+0x32/0x80 [ 2107.916714][T11029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2107.916728][T11029] RIP: 0023:0xf709e579 [ 2107.916737][T11029] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2107.916747][T11029] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2107.916758][T11029] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000180 [ 2107.916765][T11029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2107.916772][T11029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2107.916778][T11029] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2107.916784][T11029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2107.916798][T11029] [ 2107.992243][ C2] vkms_vblank_simulate: vblank timer overrun [ 2108.510829][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2109.501683][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2110.492207][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2111.238819][T11089] FAULT_INJECTION: forcing a failure. [ 2111.238819][T11089] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.243662][T11089] CPU: 3 UID: 0 PID: 11089 Comm: syz.6.9600 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2111.243678][T11089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2111.243685][T11089] Call Trace: [ 2111.243690][T11089] [ 2111.243694][T11089] dump_stack_lvl+0x16c/0x1f0 [ 2111.243709][T11089] should_fail_ex+0x512/0x640 [ 2111.243721][T11089] ? __kmalloc_noprof+0xbf/0x510 [ 2111.243733][T11089] ? handler_new_ref+0x1b0/0xc60 [ 2111.243746][T11089] should_failslab+0xc2/0x120 [ 2111.243760][T11089] __kmalloc_noprof+0xd2/0x510 [ 2111.243769][T11089] ? __asan_memcpy+0x3c/0x60 [ 2111.243789][T11089] handler_new_ref+0x1b0/0xc60 [ 2111.243805][T11089] v4l2_ctrl_new+0x1963/0x2180 [ 2111.243823][T11089] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 2111.243839][T11089] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2111.243858][T11089] v4l2_ctrl_new_std+0x1be/0x290 [ 2111.243875][T11089] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 2111.243889][T11089] ? rcu_is_watching+0x12/0xc0 [ 2111.243901][T11089] ? trace_kmalloc+0x2b/0xd0 [ 2111.243913][T11089] ? __kvmalloc_node_noprof+0x298/0x620 [ 2111.243932][T11089] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 2111.243946][T11089] ? media_request_object_init+0x100/0x180 [ 2111.243965][T11089] vim2m_open+0x160/0x8a0 [ 2111.243980][T11089] v4l2_open+0x225/0x490 [ 2111.243991][T11089] ? __pfx_v4l2_open+0x10/0x10 [ 2111.244001][T11089] chrdev_open+0x231/0x6a0 [ 2111.244013][T11089] ? __pfx_apparmor_file_open+0x10/0x10 [ 2111.244030][T11089] ? __pfx_chrdev_open+0x10/0x10 [ 2111.244046][T11089] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 2111.244075][T11089] do_dentry_open+0x744/0x1c10 [ 2111.244114][T11089] ? __pfx_chrdev_open+0x10/0x10 [ 2111.244139][T11089] vfs_open+0x82/0x3f0 [ 2111.244165][T11089] path_openat+0x1de4/0x2cb0 [ 2111.244191][T11089] ? __pfx_path_openat+0x10/0x10 [ 2111.244217][T11089] do_filp_open+0x20b/0x470 [ 2111.244237][T11089] ? __pfx_do_filp_open+0x10/0x10 [ 2111.244273][T11089] ? _raw_spin_unlock+0x28/0x50 [ 2111.244299][T11089] ? alloc_fd+0x471/0x7d0 [ 2111.244335][T11089] do_sys_openat2+0x11b/0x1d0 [ 2111.244358][T11089] ? __pfx_do_sys_openat2+0x10/0x10 [ 2111.244385][T11089] ? __fget_files+0x20e/0x3c0 [ 2111.244410][T11089] ? handle_mm_fault+0x230/0xd10 [ 2111.244442][T11089] __ia32_compat_sys_openat+0x16d/0x210 [ 2111.244468][T11089] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2111.244492][T11089] ? ksys_write+0x1ac/0x250 [ 2111.244514][T11089] ? rcu_is_watching+0x12/0xc0 [ 2111.244543][T11089] __do_fast_syscall_32+0x7c/0x3a0 [ 2111.244565][T11089] do_fast_syscall_32+0x32/0x80 [ 2111.244585][T11089] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2111.244608][T11089] RIP: 0023:0xf709e579 [ 2111.244623][T11089] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2111.244640][T11089] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 2111.244658][T11089] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 2111.244669][T11089] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 2111.244680][T11089] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2111.244690][T11089] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2111.244700][T11089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2111.244725][T11089] [ 2111.282955][T22488] usb 12-1: new full-speed USB device number 39 using dummy_hcd [ 2111.492832][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2111.551327][T22488] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2111.555354][T22488] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2111.566853][T22488] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2111.571173][T22488] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2111.575744][T22488] usb 12-1: Product: syz [ 2111.578237][T22488] usb 12-1: Manufacturer: syz [ 2111.580749][T22488] usb 12-1: SerialNumber: syz [ 2111.792740][T22488] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2111.827566][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9603'. [ 2112.333002][T11109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2112.335916][T11109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2112.483033][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2113.473673][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2113.782970][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9612'. [ 2113.814529][T11135] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 2113.816646][T11135] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2113.819987][T11135] vhci_hcd vhci_hcd.0: Device attached [ 2113.842643][T11136] vhci_hcd: connection closed [ 2113.842924][ T1248] vhci_hcd: stop threads [ 2113.850065][ T1248] vhci_hcd: release socket [ 2113.853814][ T1248] vhci_hcd: disconnect device [ 2113.936778][T22488] usb 12-1: USB disconnect, device number 39 [ 2113.939790][T22488] usblp0: removed [ 2114.122570][T11129] futex_wake_op: syz.8.9611 tries to shift op by 32; fix this program [ 2114.464845][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2115.454993][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2116.196871][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9623'. [ 2116.237829][T11172] FAULT_INJECTION: forcing a failure. [ 2116.237829][T11172] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2116.243071][T11172] CPU: 1 UID: 0 PID: 11172 Comm: syz.4.9624 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2116.243097][T11172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2116.243109][T11172] Call Trace: [ 2116.243117][T11172] [ 2116.243124][T11172] dump_stack_lvl+0x16c/0x1f0 [ 2116.243150][T11172] should_fail_ex+0x512/0x640 [ 2116.243172][T11172] should_fail_alloc_page+0xe7/0x130 [ 2116.243195][T11172] prepare_alloc_pages+0x3c2/0x610 [ 2116.243220][T11172] ? rcu_is_watching+0x12/0xc0 [ 2116.243241][T11172] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 2116.243271][T11172] ? rcu_is_watching+0x12/0xc0 [ 2116.243289][T11172] ? trace_mm_page_alloc+0x11f/0x1a0 [ 2116.243312][T11172] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 2116.243332][T11172] ? __pfx_stack_trace_save+0x10/0x10 [ 2116.243352][T11172] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2116.243379][T11172] ? alloc_vmap_area+0x645/0x29c0 [ 2116.243400][T11172] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 2116.243424][T11172] ? array_map_alloc+0x27e/0x730 [ 2116.243446][T11172] ? map_create+0x592/0x1db0 [ 2116.243468][T11172] ? __sys_bpf+0x4d8d/0x4ea0 [ 2116.243484][T11172] ? __ia32_sys_bpf+0x76/0xe0 [ 2116.243498][T11172] ? __do_fast_syscall_32+0x7c/0x3a0 [ 2116.243514][T11172] ? do_fast_syscall_32+0x32/0x80 [ 2116.243531][T11172] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2116.243563][T11172] alloc_pages_bulk_noprof+0x71c/0x1410 [ 2116.243581][T11172] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2116.243609][T11172] ? policy_nodemask+0xea/0x4e0 [ 2116.243632][T11172] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 2116.243651][T11172] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2116.243683][T11172] kasan_populate_vmalloc+0xf1/0x1f0 [ 2116.243716][T11172] alloc_vmap_area+0x959/0x29c0 [ 2116.243749][T11172] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2116.243778][T11172] __get_vm_area_node+0x1ca/0x330 [ 2116.243807][T11172] __vmalloc_node_range_noprof+0x271/0x14b0 [ 2116.243834][T11172] ? array_map_alloc+0x27e/0x730 [ 2116.243853][T11172] ? is_bpf_text_address+0x94/0x1a0 [ 2116.243875][T11172] ? kernel_text_address+0x8d/0x100 [ 2116.243901][T11172] ? __kernel_text_address+0xd/0x40 [ 2116.243926][T11172] ? unwind_get_return_address+0x59/0xa0 [ 2116.243954][T11172] ? array_map_alloc+0x27e/0x730 [ 2116.243982][T11172] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2116.244006][T11172] ? trace_cap_capable+0x18d/0x200 [ 2116.244030][T11172] ? apparmor_capable+0x114/0x1d0 [ 2116.244088][T11172] ? array_map_alloc+0x27e/0x730 [ 2116.244107][T11172] __bpf_map_area_alloc+0x12e/0x200 [ 2116.244125][T11172] ? array_map_alloc+0x27e/0x730 [ 2116.244147][T11172] array_map_alloc+0x27e/0x730 [ 2116.244172][T11172] map_create+0x592/0x1db0 [ 2116.244208][T11172] ? __pfx_map_create+0x10/0x10 [ 2116.244232][T11172] ? __might_fault+0xe3/0x190 [ 2116.244256][T11172] ? __might_fault+0xe3/0x190 [ 2116.244274][T11172] ? __might_fault+0x13b/0x190 [ 2116.244303][T11172] __sys_bpf+0x4d8d/0x4ea0 [ 2116.244324][T11172] ? __pfx___sys_bpf+0x10/0x10 [ 2116.244341][T11172] ? ksys_write+0x190/0x250 [ 2116.244365][T11172] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2116.244400][T11172] ? fput+0x70/0xf0 [ 2116.244422][T11172] ? ksys_write+0x1ac/0x250 [ 2116.244441][T11172] ? __pfx_ksys_write+0x10/0x10 [ 2116.244465][T11172] __ia32_sys_bpf+0x76/0xe0 [ 2116.244485][T11172] __do_fast_syscall_32+0x7c/0x3a0 [ 2116.244509][T11172] do_fast_syscall_32+0x32/0x80 [ 2116.244530][T11172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2116.244554][T11172] RIP: 0023:0xf70ee579 [ 2116.244571][T11172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2116.244590][T11172] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2116.244610][T11172] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080004080 [ 2116.244623][T11172] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 2116.244634][T11172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2116.244646][T11172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2116.244658][T11172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2116.244683][T11172] [ 2116.446155][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2116.895039][T11178] netlink: 'syz.6.9626': attribute type 1 has an invalid length. [ 2117.427654][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2117.492311][T11187] program syz.7.9627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2117.529887][T11178] veth5: entered promiscuous mode [ 2117.534812][T11178] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 2117.931702][T11193] gtp0: entered promiscuous mode [ 2117.943027][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9628'. [ 2118.417850][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2118.697588][T11208] overlayfs: failed to resolve './file0': -2 [ 2118.766991][T11212] netlink: 'syz.6.9637': attribute type 11 has an invalid length. [ 2118.805488][T11212] afs: Unknown parameter '18446744073709551615' [ 2118.899416][T11216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9638'. [ 2119.408397][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2119.445181][T11236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9643'. [ 2119.556704][T11238] sp0: Synchronizing with TNC [ 2119.975937][T11238] [U] è [ 2120.128309][ T54] lo speed is unknown, defaulting to 1000 [ 2120.130193][ T54] sz1: Port: 1 Link DOWN [ 2120.131622][ T54] lo speed is unknown, defaulting to 1000 [ 2120.408625][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2120.568212][T11259] FAULT_INJECTION: forcing a failure. [ 2120.568212][T11259] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2120.573677][T11259] CPU: 1 UID: 0 PID: 11259 Comm: syz.4.9649 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2120.573704][T11259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2120.573712][T11259] Call Trace: [ 2120.573716][T11259] [ 2120.573721][T11259] dump_stack_lvl+0x16c/0x1f0 [ 2120.573736][T11259] should_fail_ex+0x512/0x640 [ 2120.573750][T11259] should_fail_alloc_page+0xe7/0x130 [ 2120.573765][T11259] prepare_alloc_pages+0x3c2/0x610 [ 2120.573780][T11259] ? __lock_acquire+0xb8a/0x1c90 [ 2120.573797][T11259] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 2120.573810][T11259] ? __lock_acquire+0xb8a/0x1c90 [ 2120.573830][T11259] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2120.573842][T11259] ? do_raw_spin_lock+0x12c/0x2b0 [ 2120.573860][T11259] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2120.573877][T11259] ? find_held_lock+0x2b/0x80 [ 2120.573892][T11259] ? __lock_acquire+0xb8a/0x1c90 [ 2120.573907][T11259] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2120.573924][T11259] ? policy_nodemask+0xea/0x4e0 [ 2120.573939][T11259] alloc_pages_mpol+0x1fb/0x550 [ 2120.573956][T11259] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2120.573974][T11259] folio_alloc_mpol_noprof+0x36/0x2f0 [ 2120.573990][T11259] shmem_alloc_folio+0x135/0x160 [ 2120.574007][T11259] shmem_alloc_and_add_folio+0x499/0xc20 [ 2120.574028][T11259] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2120.574047][T11259] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 2120.574061][T11259] shmem_get_folio_gfp+0x67f/0x1600 [ 2120.574075][T11259] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 2120.574090][T11259] shmem_write_begin+0x160/0x300 [ 2120.574106][T11259] ? __pfx_shmem_write_begin+0x10/0x10 [ 2120.574122][T11259] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 2120.574149][T11259] generic_perform_write+0x3d0/0x930 [ 2120.574173][T11259] ? __mark_inode_dirty+0x5f0/0xe50 [ 2120.574190][T11259] ? __pfx_generic_perform_write+0x10/0x10 [ 2120.574210][T11259] ? generic_update_time+0xcf/0xf0 [ 2120.574222][T11259] ? mnt_put_write_access_file+0x45/0xf0 [ 2120.574247][T11259] shmem_file_write_iter+0x10e/0x140 [ 2120.574262][T11259] vfs_write+0x6c4/0x1150 [ 2120.574273][T11259] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 2120.574288][T11259] ? __pfx_vfs_write+0x10/0x10 [ 2120.574297][T11259] ? find_held_lock+0x2b/0x80 [ 2120.574318][T11259] ksys_write+0x12a/0x250 [ 2120.574328][T11259] ? __pfx_ksys_write+0x10/0x10 [ 2120.574340][T11259] ? rcu_is_watching+0x12/0xc0 [ 2120.574354][T11259] __do_fast_syscall_32+0x7c/0x3a0 [ 2120.574367][T11259] do_fast_syscall_32+0x32/0x80 [ 2120.574379][T11259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2120.574392][T11259] RIP: 0023:0xf70ee579 [ 2120.574401][T11259] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2120.574413][T11259] RSP: 002b:00000000f509c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 2120.574424][T11259] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000640 [ 2120.574431][T11259] RDX: 00000000fffffc43 RSI: 0000000000000000 RDI: 0000000000000000 [ 2120.574437][T11259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2120.574443][T11259] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2120.574450][T11259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2120.574465][T11259] [ 2121.193820][T11272] sp0: Synchronizing with TNC [ 2121.284882][T11272] [U] è [ 2121.389457][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2121.716471][ T40] audit: type=1804 audit(1753742367.081:7882): pid=11281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9656" name="/newroot/576/file0" dev="tmpfs" ino=3063 res=1 errno=0 [ 2122.135973][T11291] team0: Port device geneve0 removed [ 2122.140754][T11291] bond0: (slave wlan1): Releasing backup interface [ 2122.146890][T11291] bond1: (slave ip6gretap1): Releasing backup interface [ 2122.163061][T11291] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9657'. [ 2122.168586][T11291] netlink: 'syz.7.9657': attribute type 10 has an invalid length. [ 2122.176965][T11291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2122.180764][T11291] team0: Port device bond0 added [ 2122.187137][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9657'. [ 2122.248027][T11297] FAULT_INJECTION: forcing a failure. [ 2122.248027][T11297] name failslab, interval 1, probability 0, space 0, times 0 [ 2122.253202][T11297] CPU: 0 UID: 0 PID: 11297 Comm: syz.6.9660 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2122.253226][T11297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2122.253238][T11297] Call Trace: [ 2122.253245][T11297] [ 2122.253252][T11297] dump_stack_lvl+0x16c/0x1f0 [ 2122.253278][T11297] should_fail_ex+0x512/0x640 [ 2122.253298][T11297] ? fs_reclaim_acquire+0xae/0x150 [ 2122.253324][T11297] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2122.253342][T11297] should_failslab+0xc2/0x120 [ 2122.253365][T11297] __kmalloc_noprof+0xd2/0x510 [ 2122.253391][T11297] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2122.253413][T11297] ? tomoyo_profile+0x47/0x60 [ 2122.253436][T11297] tomoyo_path_number_perm+0x245/0x580 [ 2122.253467][T11297] ? tomoyo_path_number_perm+0x237/0x580 [ 2122.253495][T11297] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2122.253545][T11297] ? find_held_lock+0x2b/0x80 [ 2122.253567][T11297] ? hook_file_ioctl_common+0x145/0x410 [ 2122.253595][T11297] ? __fget_files+0x20e/0x3c0 [ 2122.253623][T11297] ? __fput_deferred+0x480/0x480 [ 2122.253649][T11297] security_file_ioctl_compat+0x9b/0x240 [ 2122.253680][T11297] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2122.253710][T11297] __do_fast_syscall_32+0x7c/0x3a0 [ 2122.253731][T11297] do_fast_syscall_32+0x32/0x80 [ 2122.253752][T11297] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2122.253775][T11297] RIP: 0023:0xf709e579 [ 2122.253791][T11297] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2122.253806][T11297] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2122.253823][T11297] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0506107 [ 2122.253834][T11297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2122.253845][T11297] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2122.253856][T11297] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2122.253867][T11297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2122.253891][T11297] [ 2122.254482][T11297] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2122.380493][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2122.428992][T11291] team0 (unregistering): Port device bond0 removed [ 2123.313189][ T40] audit: type=1804 audit(1753742368.761:7883): pid=11323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.9663" name="/newroot/420/file0" dev="tmpfs" ino=2245 res=1 errno=0 [ 2123.360455][T11318] /dev/sr0: Can't open blockdev [ 2123.371372][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2124.371502][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2124.481259][T11352] netlink: 'syz.4.9675': attribute type 1 has an invalid length. [ 2124.484548][T11352] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9675'. [ 2125.352237][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2125.517233][T11380] Cache volume key already in use (9p,syz,) [ 2125.553248][T11379] 9pnet_virtio: no channels available for device syz [ 2126.113502][T11399] overlayfs: failed to resolve './file0': -2 [ 2126.352781][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2126.403075][T11411] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2126.406703][T11411] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2126.409408][T11411] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2126.412424][T11411] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2126.422309][T11411] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2126.430184][T11411] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2127.342998][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2128.324326][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2128.326772][ T7576] Bluetooth: hci4: command 0x0c1a tx timeout [ 2128.326814][T25788] Bluetooth: hci0: command 0x0405 tx timeout [ 2128.330623][T32606] Bluetooth: hci3: command 0x0406 tx timeout [ 2129.043726][T11476] 9pnet_virtio: no channels available for device syz [ 2129.118335][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9712'. [ 2129.234633][T32606] Bluetooth: hci3: unexpected event 0x06 length: 5 > 3 [ 2129.324424][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2130.305610][T32606] Bluetooth: hci3: command 0x0406 tx timeout [ 2130.315185][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2130.599297][T11509] binder: 11504:11509 ioctl c00c620f 80000740 returned -22 [ 2130.839023][T11492] ------------[ cut here ]------------ [ 2130.840924][T11492] WARNING: CPU: 1 PID: 11492 at mm/shmem.c:1388 shmem_evict_inode+0x8f0/0xbe0 [ 2130.843524][T11492] Modules linked in: [ 2130.844868][T11492] CPU: 1 UID: 0 PID: 11492 Comm: syz.6.9718 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2130.850283][T11492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2130.853890][T11492] RIP: 0010:shmem_evict_inode+0x8f0/0xbe0 [ 2130.855760][T11492] Code: fe e8 64 3d bf ff 45 85 ff 75 ac e8 1a 42 bf ff 48 8b 74 24 28 48 8b 7c 24 30 e8 8b 38 98 ff e9 e3 fd ff ff e8 01 42 bf ff 90 <0f> 0b 90 e9 4f f9 ff ff e8 f3 41 bf ff 4c 89 e2 48 b8 00 00 00 00 [ 2130.862316][T11492] RSP: 0018:ffffc9000dd6f9b0 EFLAGS: 00010293 [ 2130.864337][T11492] RAX: 0000000000000000 RBX: ffff8880781f42d0 RCX: ffffffff81fc0c3e [ 2130.867749][T11492] RDX: ffff888024664880 RSI: ffffffff81fc12ef RDI: 0000000000000007 [ 2130.870339][T11492] RBP: ffffc9000dd6fad8 R08: 0000000000000007 R09: 0000000000000000 [ 2130.873003][T11492] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000008 [ 2130.875628][T11492] R13: 0000000000000000 R14: ffff8880781f4300 R15: ffff8880781f41c0 [ 2130.878332][T11492] FS: 0000000000000000(0000) GS:ffff88809762d000(0000) knlGS:0000000000000000 [ 2130.881236][T11492] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2130.883234][T11492] CR2: 00000000f7390b0c CR3: 00000000277d0000 CR4: 0000000000352ef0 [ 2130.885784][T11492] Call Trace: [ 2130.887234][T11492] [ 2130.888210][T11492] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2130.889982][T11492] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 2130.891931][T11492] ? find_held_lock+0x2b/0x80 [ 2130.893491][T11492] ? evict+0x3a2/0x920 [ 2130.894764][T11492] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2130.896656][T11492] evict+0x3e3/0x920 [ 2130.897938][T11492] ? __pfx_evict+0x10/0x10 [ 2130.899334][T11492] ? iput+0x519/0x880 [ 2130.900655][T11492] iput+0x521/0x880 [ 2130.901863][T11492] ? __pfx_generic_delete_inode+0x10/0x10 [ 2130.903665][T11492] dentry_unlink_inode+0x29c/0x480 [ 2130.905276][T11492] __dentry_kill+0x1d0/0x600 [ 2130.906903][T11492] dput.part.0+0x4b1/0x9b0 [ 2130.908344][T11492] dput+0x1f/0x30 [ 2130.909533][T11492] __fput+0x51c/0xb70 [ 2130.910814][T11492] ? _raw_spin_unlock_irq+0x23/0x50 [ 2130.912491][T11492] task_work_run+0x14d/0x240 [ 2130.913969][T11492] ? __pfx_task_work_run+0x10/0x10 [ 2130.915712][T11492] ? do_raw_spin_unlock+0x172/0x230 [ 2130.917387][T11492] do_exit+0x86c/0x2bd0 [ 2130.918696][T11492] ? __pfx_do_exit+0x10/0x10 [ 2130.920196][T11492] ? preempt_schedule_thunk+0x16/0x30 [ 2130.921884][T11492] do_group_exit+0xd3/0x2a0 [ 2130.923323][T11492] __ia32_sys_exit_group+0x3e/0x50 [ 2130.925012][T11492] ia32_sys_call+0xd56/0x1c40 [ 2130.926491][T11492] __do_fast_syscall_32+0x7c/0x3a0 [ 2130.928129][T11492] do_fast_syscall_32+0x32/0x80 [ 2130.929858][T11492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2130.931946][T11492] RIP: 0023:0xf709e579 [ 2130.933231][T11492] Code: Unable to access opcode bytes at 0xf709e54f. [ 2130.935358][T11492] RSP: 002b:00000000ffdd887c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 2130.937958][T11492] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2130.940920][T11492] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f7404ff4 [ 2130.943335][T11492] RBP: 000000000000002c R08: 0000000000000000 R09: 0000000000000000 [ 2130.945864][T11492] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2130.948316][T11492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2130.951044][T11492] [ 2130.952041][T11492] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2130.954270][T11492] CPU: 1 UID: 0 PID: 11492 Comm: syz.6.9718 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 2130.957969][T11492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2130.961796][T11492] Call Trace: [ 2130.962856][T11492] [ 2130.963812][T11492] dump_stack_lvl+0x3d/0x1f0 [ 2130.965280][T11492] panic+0x71c/0x800 [ 2130.966520][T11492] ? __pfx_panic+0x10/0x10 [ 2130.967918][T11492] ? show_trace_log_lvl+0x29b/0x3e0 [ 2130.969560][T11492] ? check_panic_on_warn+0x1f/0xb0 [ 2130.971261][T11492] ? shmem_evict_inode+0x8f0/0xbe0 [ 2130.972844][T11492] check_panic_on_warn+0xab/0xb0 [ 2130.974374][T11492] __warn+0xf6/0x3c0 [ 2130.975632][T11492] ? shmem_evict_inode+0x8f0/0xbe0 [ 2130.977244][T11492] report_bug+0x3c3/0x580 [ 2130.978645][T11492] ? shmem_evict_inode+0x8f0/0xbe0 [ 2130.980659][T11492] handle_bug+0x184/0x210 [ 2130.982048][T11492] exc_invalid_op+0x17/0x50 [ 2130.983471][T11492] asm_exc_invalid_op+0x1a/0x20 [ 2130.984986][T11492] RIP: 0010:shmem_evict_inode+0x8f0/0xbe0 [ 2130.986702][T11492] Code: fe e8 64 3d bf ff 45 85 ff 75 ac e8 1a 42 bf ff 48 8b 74 24 28 48 8b 7c 24 30 e8 8b 38 98 ff e9 e3 fd ff ff e8 01 42 bf ff 90 <0f> 0b 90 e9 4f f9 ff ff e8 f3 41 bf ff 4c 89 e2 48 b8 00 00 00 00 [ 2130.992464][T11492] RSP: 0018:ffffc9000dd6f9b0 EFLAGS: 00010293 [ 2130.994308][T11492] RAX: 0000000000000000 RBX: ffff8880781f42d0 RCX: ffffffff81fc0c3e [ 2130.996762][T11492] RDX: ffff888024664880 RSI: ffffffff81fc12ef RDI: 0000000000000007 [ 2130.999411][T11492] RBP: ffffc9000dd6fad8 R08: 0000000000000007 R09: 0000000000000000 [ 2131.001848][T11492] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000008 [ 2131.004299][T11492] R13: 0000000000000000 R14: ffff8880781f4300 R15: ffff8880781f41c0 [ 2131.006718][T11492] ? shmem_evict_inode+0x23e/0xbe0 [ 2131.008308][T11492] ? shmem_evict_inode+0x8ef/0xbe0 [ 2131.009912][T11492] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2131.011555][T11492] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 2131.013427][T11492] ? find_held_lock+0x2b/0x80 [ 2131.014856][T11492] ? evict+0x3a2/0x920 [ 2131.016112][T11492] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2131.017775][T11492] evict+0x3e3/0x920 [ 2131.018978][T11492] ? __pfx_evict+0x10/0x10 [ 2131.020355][T11492] ? iput+0x519/0x880 [ 2131.021569][T11492] iput+0x521/0x880 [ 2131.022798][T11492] ? __pfx_generic_delete_inode+0x10/0x10 [ 2131.024520][T11492] dentry_unlink_inode+0x29c/0x480 [ 2131.026079][T11492] __dentry_kill+0x1d0/0x600 [ 2131.027501][T11492] dput.part.0+0x4b1/0x9b0 [ 2131.028895][T11492] dput+0x1f/0x30 [ 2131.030016][T11492] __fput+0x51c/0xb70 [ 2131.031241][T11492] ? _raw_spin_unlock_irq+0x23/0x50 [ 2131.032857][T11492] task_work_run+0x14d/0x240 [ 2131.034285][T11492] ? __pfx_task_work_run+0x10/0x10 [ 2131.035862][T11492] ? do_raw_spin_unlock+0x172/0x230 [ 2131.037474][T11492] do_exit+0x86c/0x2bd0 [ 2131.038861][T11492] ? __pfx_do_exit+0x10/0x10 [ 2131.040415][T11492] ? preempt_schedule_thunk+0x16/0x30 [ 2131.042062][T11492] do_group_exit+0xd3/0x2a0 [ 2131.043454][T11492] __ia32_sys_exit_group+0x3e/0x50 [ 2131.044982][T11492] ia32_sys_call+0xd56/0x1c40 [ 2131.046419][T11492] __do_fast_syscall_32+0x7c/0x3a0 [ 2131.047939][T11492] do_fast_syscall_32+0x32/0x80 [ 2131.049459][T11492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2131.051352][T11492] RIP: 0023:0xf709e579 [ 2131.052659][T11492] Code: Unable to access opcode bytes at 0xf709e54f. [ 2131.054669][T11492] RSP: 002b:00000000ffdd887c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 2131.057163][T11492] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2131.059738][T11492] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f7404ff4 [ 2131.062185][T11492] RBP: 000000000000002c R08: 0000000000000000 R09: 0000000000000000 [ 2131.064635][T11492] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2131.067077][T11492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2131.069873][T11492] [ 2131.071583][T11492] Kernel Offset: disabled [ 2131.072971][T11492] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:33:16 Registers: info registers vcpu 0 CPU#0 RAX=00000000000000aa RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000000 RSI=ffff888041358af0 RDI=00000000000005ca RBP=ffff888041358000 RSP=ffffc9000102f030 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000028 R11=0000000000000001 R12=ffff888041358af0 R13=0000000000000000 R14=0000000000000000 R15=ffff888044bae2d0 RIP=ffffffff8197ef22 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809752d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73a535c CR3=000000004e7d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8556d105 RDI=ffffffff9b09f540 RBP=ffffffff9b09f500 RSP=ffffc9000dd6f320 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b09f500 R15=ffffffff8556d0a0 RIP=ffffffff8556d12f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809762d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7390b0c CR3=00000000277d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001c000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b341f20 RCX=ffffffff81af491d RDX=ffff88801c70c880 RSI=ffffffff81af48f9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900007cf8a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100433f512 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed10056683e5 R15=ffff88802b43b6c0 RIP=ffffffff81af48fb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809772d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056085aad0f40 CR3=0000000047db6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000000bb RBX=0000000000000003 RCX=0000000000000008 RDX=0000000000000000 RSI=ffff888029718b68 RDI=ffff888029718000 RBP=ffff888029718000 RSP=ffffc900005e8a58 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000078 R11=0000000000000001 R12=ffff888029718af0 R13=ffff888029718b68 R14=0000000000000003 R15=0000000000000002 RIP=ffffffff8197f256 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809782d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73bd3c4 CR3=000000005e483000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000