last executing test programs: 9m46.55541179s ago: executing program 3 (id=401): r0 = socket$unix(0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d01"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 9m45.309815069s ago: executing program 3 (id=407): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}], 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280028}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000540)='\x00', 0x1}, {&(0x7f0000000040)="9d323527768cc2a99116a2a9054f2e72d0ffc5e8a36aeef0b9ed47f3710f74486ec48c470ff97f245dff0d9dbc76095f1c54acdca087", 0x36}, {&(0x7f0000000100)="fabc1ea608dc7284ae62f5985ab419486ba70b3c6429070023efbec43cf6fc720939e33584e40a9059aa591976127d5dec9b8491eff0f9e1dfd1b1463fa3b190798b7af5fe92d465e918c95d1a8bc40702dba1fc2e7974a5c27e4294227f187a45511949d1cccb42cae8f0bf72d8260cec97f0536e682ba8ae3f129b712fc8fa6d974d43fa412121df404877984520754bbe87aed269673ac7a8c62c900f6b69925b0fc31525c746d021fd4d20c9ff5647f39b81131f9392a1c7affb59f291c7e6cfc4ae12ef580c3ee80242f4a93fb25f1ef37c7dacd59aaaf301e97c78d01f2dcb5e6b7ee1", 0xe6}], 0x3}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x1}, 0x8) r2 = socket$unix(0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d01"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 9m43.355270851s ago: executing program 3 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x10009, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000300)={0x2, 0x0, [{0x250, 0x0, 0x100000001}, {0x25d, 0x0, 0xf35}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="2e000000010002", 0x7) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @local}, 0x2, 0x2, 0x1}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="be4d843c", @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a000008000b0000000000060001000700000005"], 0x3c}}, 0x20) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "27100d02ffdc696238fafba14f1bb59de73ae0b892ab126956943b26b622a7080022f52cde9baab9c96dc17a7ae45238723eebd15f3d2027acf9ff4f9ad1499b99e5d73b62cb8d04e9b01c76970bf19630a20040ea9fe0ea2be8596c8ad780b6a1d8c00220f91e10b7db558ce4e77d0fbe65"}, 0x7d) 9m43.185360907s ago: executing program 3 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x1dd) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200305b0100140003006e657464657673696d300000000000002c0016802800018018000c8014000100ff0300ec"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/16, 0x10, 0x720, 0x0, 0x0) 9m41.616569103s ago: executing program 3 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffff8000, 0x1) 9m40.583465987s ago: executing program 3 (id=424): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) unshare(0x6a040000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', &(0x7f0000000280)={0x8001, 0x0, 0x10}, 0x18) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x19) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file1\x00') 9m39.78265822s ago: executing program 32 (id=424): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) unshare(0x6a040000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', &(0x7f0000000280)={0x8001, 0x0, 0x10}, 0x18) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x19) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file1\x00') 9m2.907971196s ago: executing program 1 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x3, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000240)={@remote, r5}, 0x14) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x4844) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @broadcast}, 0xa, 0x0, 0x3}}, 0x26) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, &(0x7f0000000540)="43210098") r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0xffffff82, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r9, @ANYBLOB="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", @ANYRESDEC=r8, @ANYRESHEX=0x0], 0x110}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9m1.96761244s ago: executing program 1 (id=581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m1.741077559s ago: executing program 1 (id=582): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x2000}], 0x0, 0x0, 0x0}) (fail_nth: 5) 9m1.683615899s ago: executing program 1 (id=584): openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x8441) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='mounts\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x2000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/160, 0xa0}], 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000540)='\xf5\xfc\xd2S?\x10s{\x84\x11\n\xaen|\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe4\xe39{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xc8\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x152\x9f\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p3Sb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\x11\xfb\xde\x93\xbe\x7f\xb7\x12\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00\x00', &(0x7f0000000080)='\xa4\x93\xaatH\x98\xb7\x8c\xd5\xff\ak\x05\\_\xed<]\xcd\xfbX\xbfK\xf4g\f\xce\xe8\xc0\xb5S\x13\x9f\x9b\x18\xb3U\xb4>\"\xf9 \xf0\x80j\xf4\xac\x01\x1a\xf3{\xe3I\x0f\x98\xd1\fF\xe53\xa2\xb9\xc0\xbe\xfa\xe9+\xdc\x05\xf4\xcc\xce~\x16\xfb\xd7\xabn\x8d\xeb\xc8\xfb\x1e\x00\xf0F\xc5\x87\x02\x19\x13yfz`ph\x00'/110, 0x0) tkill(r3, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) r4 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x60600, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000001c0)={0x1, 0x7bd1, 0x0, 'queue1\x00', 0x8000}) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f0000bb3000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) 9m1.434498455s ago: executing program 1 (id=589): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x100000000000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x10b0, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000400)=""/223, 0xdf, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 9m1.053608523s ago: executing program 1 (id=590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) io_setup(0x2, &(0x7f0000000180)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x140d, 0x311, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x2800c080}, 0x4008010) eventfd(0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) eventfd2(0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108a35d29534fd3c6bf14ef70000000048f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x1, '\x00', 0x0, @xdp}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3000000}]}]}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, 0x0, 0x8a04}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}]}, 0x3c}}, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) 9m0.925564961s ago: executing program 33 (id=590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) io_setup(0x2, &(0x7f0000000180)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x140d, 0x311, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x2800c080}, 0x4008010) eventfd(0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) eventfd2(0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108a35d29534fd3c6bf14ef70000000048f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x1, '\x00', 0x0, @xdp}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3000000}]}]}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, 0x0, 0x8a04}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}]}, 0x3c}}, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) 4m27.843720682s ago: executing program 4 (id=2009): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x2001001000000000, 0x22072a18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000300)=0xa, 0x4) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x38) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000840)={0x8, 0x0, [{0x0, 0xffffffff, 0x0, 0x7fffffff, 0x6, 0x8001, 0x4}, {0x80000000, 0x4, 0x3, 0x10, 0x8000027, 0x7, 0x5}, {0xb, 0x8, 0x0, 0xffff, 0x7fffff7f, 0x5, 0x2}, {0xb, 0x12, 0x1, 0x7, 0xdf4, 0x401, 0x80000001}, {0x0, 0x2bb, 0x0, 0xa, 0x3, 0x400002, 0x400}, {0x40000001, 0xa, 0x0, 0x5, 0x10000, 0x8, 0xf34f}, {0x80000007, 0x9, 0x9, 0x80000000, 0x9, 0x3, 0x7}, {0xd, 0x451, 0x1, 0x7ffe, 0xffffffff, 0xfffffffc, 0x4}]}) 4m27.834407779s ago: executing program 4 (id=2010): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x80000000000007, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000004000008000000000600000080241c00", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000030000000400"/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x3) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 4m24.912266918s ago: executing program 4 (id=2012): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x101000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000003c0)) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x608b, &(0x7f0000000940)={0x0, 0xd5ef, 0x20, 0x0, 0x3e2, 0x0, r3}, &(0x7f0000000200), &(0x7f0000000340)) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) fcntl$setlease(r0, 0x400, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r5 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg$can_bcm(r5, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x10002) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) prlimit64(0x0, 0x5, &(0x7f0000000380)={0x1, 0x533}, &(0x7f00000003c0)) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf250500000008000300", @ANYRES32=r7, @ANYBLOB="735a0a8120d43aa360695d41773babbaa5efa3632c705c6f0048db3d1b327b6e47d79e94fb1f2ea22904242157dae58f39902e8ad9b52aa48b34fb42f6fae5b8e0324d8a05832035a5a3c990995c1878fa21612c4b4a2361037fe7f6863b4ea0b46946b60955f95823e78bbd9bed6f488f5e72db65ced2751b6f7a512c3147a6569d135bd55127702eea55ef54a529c35c82e8e82308068066660d4c844955d735f0d3eee23d0956"], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4004) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="04bfc772fa43802035e6dd273fe8780a2255dcee406551f7591c18acaeac2cbb4c5e60684d3712463de047c9d45b90876c22cdfdb250d7520531d5c0e9ed43cbb4502a33eb7dbd43d55e678ac423dd88af49", 0x52}], 0x1}}], 0x1, 0x8015) socket$nl_netfilter(0x10, 0x3, 0xc) 4m24.651645563s ago: executing program 4 (id=2013): write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x3, 0x7}, {}, {}, @raw32}], 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0xf0ffff, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 4m24.592403452s ago: executing program 4 (id=2014): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r0, &(0x7f00000002c0)={{0x3, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@dellinkprop={0x20, 0x6d, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x30000, 0x8810}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m23.982593818s ago: executing program 4 (id=2015): connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xf) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) 4m23.896648344s ago: executing program 34 (id=2015): connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xf) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) 4m7.560228159s ago: executing program 5 (id=2069): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x450901, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x4000000, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, &(0x7f0000003f80)) 4m5.144338005s ago: executing program 5 (id=2072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x32}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "986960929428d5b8464f20a222"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1379d09564e3d2a30dbb8d20be"}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "d5ad"}]}, 0x64}, 0x1, 0x0, 0x0, 0xafe1398cbfad491e}, 0x8000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x5, 0x15c, 0x8001, {0x77359400}, {0x0, 0x2710}, {0x3, 0x1}, 0x1, @canfd={{0x2}, 0x12, 0x3, 0x0, 0x0, "6dce75df9fbc7cb267ae2d6a87bc6e4d3a5d6ac3a724824d03e59075acf609efd71a3e469bacbba2fd0e113fa09a0cb62a2b17da2ab07b01b9dd3d69925e66c1"}}, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0xc8c0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000340)={0x0, 0x0, 0x2}, 0x8) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000380)=0x800, 0x4) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000580)={0x53, 0xffffffffffffffff, 0x16, 0x4, @scatter={0x1, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/123, 0x7b}]}, &(0x7f0000000480)="65cc4fd3fca347af475e5ff81a2e8931a3a90ec28ee3", &(0x7f00000004c0)=""/93, 0xbe, 0x10006, 0xffffffffffffffff, &(0x7f0000000540)}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000005c0)={'ip6erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) r5 = openat(r2, &(0x7f0000000600)='./file0\x00', 0x101004, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48880}, 0x8800) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f00000008c0)=0xe4) r7 = geteuid() mount$overlay(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x400, &(0x7f0000000900)={[{@redirect_dir_follow}, {@metacopy_off}], [{@fsname={'fsname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@smackfsroot}, {@hash}, {@uid_eq={'uid', 0x3d, r6}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_lt={'euid<', r7}}]}) mq_open(&(0x7f00000009c0)='uid', 0x80, 0x81, &(0x7f0000000a00)={0x8, 0x5179, 0x4f6, 0x7}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r9, 0x0, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) vmsplice(r5, &(0x7f0000001c00)=[{&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="170ac83f08962740eec2e6989060c5b7bed5a788449e966fa19de61ea9253b369e51fc39847f406d585991354d0b0b80161a70a52996588adf1ddb815175f9a1c7e2ee2e970166667e40d64a002b2afd85eb5cf1622e1b31629a3fab49527325d3a1341aabab4b452ebc8279842871b3b06f48158337566bcceedc6c", 0x7c}], 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FE_GET_PROPERTY(r2, 0x80086f53, &(0x7f0000001e40)={0x16, &(0x7f0000001c40)=[{0x12, '\x00', @st={0x4, [{0x0, @uvalue=0x1}, {0x3}, {0x1, @svalue=0x52}, {0x3, @svalue=0x8}]}, 0xb}, {0x25, '\x00', @data=0x3, 0x6}, {0x13, '\x00', @buffer={"89a58a29bb2ac20958f14d5bfec2e6e25447379cc13e092b15facc8f9d7b929c", 0x20}, 0x6}, {0x14, '\x00', @data=0x4, 0x1}, {0x21, '\x00', @st={0x4, [{0x1, @uvalue=0x7fffffffffffffff}, {0x3, @svalue=0xb}, {0x3, @uvalue=0x2}, {0x1, @uvalue=0x2}]}, 0xfffffffc}, {0x1e, '\x00', @data=0x3, 0x5}, {0x38, '\x00', @buffer={"8ee233098f9e6d03550769eff0606962786bcdb09067b840bb37d186a951b226", 0x20}, 0x6}]}) read$msr(r2, &(0x7f0000001e80)=""/198, 0xc6) openat$ppp(0xffffff9c, &(0x7f0000001f80), 0x600, 0x0) recvmmsg(r2, &(0x7f0000004880)=[{{&(0x7f0000001fc0)=@alg, 0x80, &(0x7f0000003080)=[{&(0x7f0000002040)=""/13, 0xd}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2, &(0x7f00000030c0)=""/52, 0x34}, 0x80000001}, {{&(0x7f0000003100)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003180)=""/117, 0x75}], 0x1, &(0x7f0000003240)=""/51, 0x33}, 0x6}, {{&(0x7f0000003280)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/25, 0x19}, {&(0x7f0000004340)=""/61, 0x3d}, {&(0x7f0000004380)}], 0x4, &(0x7f0000004400)=""/73, 0x49}, 0x1}, {{&(0x7f0000004480)=@nfc, 0x80, &(0x7f0000004640)=[{&(0x7f0000004500)=""/41, 0x29}, {&(0x7f0000004540)=""/225, 0xe1}], 0x2, &(0x7f0000004680)=""/75, 0x4b}, 0x5}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004700)=""/81, 0x51}, {&(0x7f0000004780)=""/87, 0x57}], 0x2, &(0x7f0000004840)=""/23, 0x17}, 0x3}], 0x5, 0x40000120, &(0x7f0000004940)={0x77359400}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000004980)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000004a00)={r10, 0x80000001, 0x4f19, 0x40, 0x5d, 0x7, 0x7f}) 4m4.231277722s ago: executing program 5 (id=2076): io_setup(0x222, &(0x7f0000000180)) r0 = syz_clone(0x942a80, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, 0x0, 0x80802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x96, &(0x7f0000000540)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x3, 0xb4, &(0x7f0000000140)=""/180, 0x40f00, 0x27, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="00000011e7e916e738770d123802a943d48096afa5afec9fe80322a1163d0f99c27458d057db543f00557dfc7bbcf2c2e2149f165ff90e31cbb42283d0b3b812b3dcc9a2150a638c4154fec68c004eb3cbd59bba583321eedc6011422a363dd480fd797473cca58e00000000000075b188b82eb48c4756482f0327df810e4cba6dc857b666cce6b8", @ANYRES16=r8, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="0800310001000000"], 0x24}}, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r5, 0x0, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) readv(r9, &(0x7f0000000540)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f00000000c0)=""/66, 0x42}], 0x2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4m2.154016771s ago: executing program 5 (id=2089): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8948, &(0x7f0000000000)) 4m0.532420184s ago: executing program 5 (id=2099): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001300)={0x2, 0xe21, @multicast2}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r1, &(0x7f0000000100)=""/83, 0x53, 0x100) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r4, &(0x7f0000000180)="cf", 0x1) sendfile(r3, r4, &(0x7f0000000000), 0xfffb) fcntl$addseals(r4, 0x409, 0x8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r5, 0x0) r8 = eventfd2(0x8, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, r4, 0x0, 0x0, 0x6, 0x0, 0x1, r8}, 0x0]) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x5d4}}, './file0\x00'}) 3m59.920434s ago: executing program 5 (id=2103): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000000380)=@in={0x2, 0x4e20, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40001}], 0x1, 0x80) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002, 0x4000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) prlimit64(0x0, 0x2, &(0x7f0000001580), 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) close(0x3) mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_clone3(&(0x7f0000000200)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) 3m45.011463033s ago: executing program 35 (id=2103): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000000380)=@in={0x2, 0x4e20, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40001}], 0x1, 0x80) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002, 0x4000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) prlimit64(0x0, 0x2, &(0x7f0000001580), 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) close(0x3) mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_clone3(&(0x7f0000000200)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) 8.617457581s ago: executing program 7 (id=3215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x200) unshare(0x6020400) fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r9, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000000) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r10, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x1c, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, 0x0, 0x40, 0xa2, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xb}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 8.459548899s ago: executing program 7 (id=3218): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000000c0)={0x3, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a34f124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r6, 0xffffffffffffffff}) poll(&(0x7f00000001c0)=[{r7}], 0x1, 0x0) 7.116147847s ago: executing program 6 (id=3220): r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="748bac5bfa706cd67feb31a5f61d46a0ca75c748af64a39f03f4936539580e913f574802f3941fbde6c95b0c2553a4c76369c5a13eeecfbc41b9f5c2f22f7a262ca520fdb92465bda3a35122d98a638cf5ca716d671adb6775dfd5a88c5ec70f2529405fd69ee11c0507481217bab2fc28f8e292515832b6491d488077e94170dd58f9dd130912d3ad6ebc428e528d86bd2bc12480ede1ba02fa30f9cae983c0820c3ab18af72534fbd32bb4016b8afdb89d076d4b58e06c8467ff101e4bf44919b271b59fda27b4a1fc232698038e976f7524721b2c0edde5d66d", 0xdb, r0) keyctl$unlink(0x9, r1, r0) keyctl$instantiate(0xc, r1, &(0x7f0000000200)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'cifs.spnego\x00', 0x20, 0x2}, 0x37, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r1, 0xa1, 0x2a}, &(0x7f0000000280)={'enc=', 'oaep', ' hash=', {'cbcmac-aes-neon\x00'}}, &(0x7f0000000300)="5a4e600252ecc5ccf6420c8739839bacd853e75d1559d3da0aa04214c4c8234065ddc5bae230b195c597f8aa7db454b54eb25afde193a445381a2f6a82371b3dfc6483fcf173e364ab38d1ad7df853f7534ae97d601538d57db168321c54ac8f682c3cbf58dffab710f1e79f11933b021b80401b41151db2cbcd2ae893ab63cf2b4907fea2f3ba6c2635371a56af6cd27a7f077e955582075b7066a2ab7a3d50a2", &(0x7f00000003c0)="6f55abb7bd893fc098668114c3d4042991a48f210469ab440149a21cade327dab73c299fb983b6cfd368") add_key$fscrypt_provisioning(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_delroute={0x24, 0x19, 0x100, 0x70bd2c, 0x25dfdbff, {0x2, 0x80, 0x30, 0x3, 0xfd, 0x3, 0x0, 0x4, 0x800}, [@RTA_SPORT={0x6, 0x1c, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0xc048}, 0x24008000) keyctl$invalidate(0x15, r0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000600)=0x5f) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000640)={0x3, 0x4, 0x1, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000680)={r0, 0x2a, 0x1000}, 0x0, &(0x7f00000006c0)="93b93876c8d5bb9d2740844030769ebecf773b3ce8904913651b06bb72aeed1098eeaa1b225a437f30b7", &(0x7f0000000700)=""/4096) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f0000001800)={0xffffffffffffffff, &(0x7f0000001700)='cbcmac-aes-neon\x00', 0x400002, &(0x7f0000001740)={@align=0x18, {0x10, 0x1, 0x9, 0x40}}, 0x8, &(0x7f0000001780), &(0x7f00000017c0)=0xf6}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001840)={0x3, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x0, 0x7, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @multicast2}}]}, 0x40c) r3 = add_key$user(&(0x7f0000001c80), &(0x7f0000001cc0)={'syz', 0x2}, &(0x7f0000001d00)="0c4d9f3884abf015175d16bc621873252413bc842c4aa8dcfbeb54cb746424c96400dc202a2eaeb0b7174dd024936493a63747d19061b8ddc2d73ec785296ec837b598ef43921fa0652666ecf9d1a4589aafb028ef94b0528ccc2de9ee9d45e8289aa43653cdd75f301340e433b732cd614aa5b7d3174349ffa924d728d2d72ebe71eb60ffbdfff105c52dbb6036f4fbd3e0ca73cab738f22ec4f03b0f45beba5544449b2f8a3970fdfa24b14077eca4713af52d8b8da350096b2e871f59cea4afc25102c8", 0xc5, r0) keyctl$get_keyring_id(0x0, r3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)=@gettfilter={0x44, 0x2e, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xffe0, 0xc}, {0x8, 0x4}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x3283}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000001f40)=""/105) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000001fc0), 0x1, 0x400) r5 = openat$sw_sync_info(0xffffff9c, &(0x7f0000002000), 0x801, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000002040)={{r5}, "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"}) r6 = openat$cgroup_ro(r5, &(0x7f0000003040)='cpuacct.usage_user\x00', 0x0, 0x0) timerfd_gettime(r6, &(0x7f0000003080)) r7 = add_key$fscrypt_v1(&(0x7f00000030c0), &(0x7f0000003100)={'fscrypt:', @desc1}, &(0x7f0000003140)={0x0, "b2878c0ec4b8bb149010b56693abf313d90bfe276536a4eaf196948e3d8dbde13e1b2941b8cecea5f4384dfc5935daa234990f8eef59ed1985aae4ab4372495c", 0x22}, 0x48, r1) r8 = add_key$fscrypt_v1(&(0x7f00000031c0), &(0x7f0000003200)={'fscrypt:', @desc1}, &(0x7f0000003240)={0x0, "6d99c5a43881e8df12f95ddb5e014caae99f6c5545843ae5a6f361026ac189457123b7725112aad1309d7cb95651f3f59de1a8f113c8a00d6f8f462b9526ea72", 0x27}, 0x48, r1) r9 = add_key$keyring(&(0x7f00000032c0), &(0x7f0000003300)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r7, r8, r9, 0x0) r10 = request_key(&(0x7f0000003340)='.request_key_auth\x00', &(0x7f0000003380)={'syz', 0x3}, &(0x7f00000033c0)='logon\x00', r9) keyctl$update(0x2, r0, &(0x7f0000003400)="75fe79a5add11fec1969e77a7c672b6142fb6fd351e991efb37e8f418d40421c8a", 0x21) keyctl$KEYCTL_MOVE(0x1e, 0x0, r10, r8, 0x0) 7.04024778s ago: executing program 6 (id=3221): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r4, 0x8948, &(0x7f0000000000)) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mprotect(&(0x7f0000f88000/0x2000)=nil, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsuid(0xffffffffffffffff) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x64) mincore(&(0x7f00001b0000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/153) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0xa, 0x100006) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) 6.431542345s ago: executing program 0 (id=3222): dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setresuid(0xee01, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, 0x0) prlimit64(r6, 0x6, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x5d5c, 0x9}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r7, 0x100300) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000003cc0)='./file0\x00', &(0x7f0000003d00)) 6.286973419s ago: executing program 7 (id=3223): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000000c0)={0x3, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a34f124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r6, 0xffffffffffffffff}) poll(&(0x7f00000001c0)=[{r7}], 0x1, 0x0) 5.181277322s ago: executing program 0 (id=3224): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r2, 0x0, &(0x7f00000001c0), 0x100000) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r7 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) syz_open_dev$vcsn(0x0, 0x200, 0x420400) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) (async) sendmsg$key(r7, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async, rerun: 64) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) (rerun: 64) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc2c45513, &(0x7f0000002e00)={{0x9, 0x7, 0x3, 0x2, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x100, 0x1000, 0x0, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0x7, 0x15b, 0x4, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10040002, 0x4, 0x0, 0x2, 0x800, 0x3, 0x3, 0x4, 0x6, 0x2, 0xfff, 0x3ff, 0x1, 0x5, 0x9, 0x5, 0x6, 0x3, 0x78a, 0xbfff8007, 0x200000e, 0xe, 0x0, 0x2, 0x4, 0x3, 0x4, 0x9, 0x80000001, 0x400, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x4000001, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x3, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0x100009, 0x7, 0x4, 0x1, 0x8, 0xffffeffd, 0xffff, 0x5, 0x4, 0x404, 0xcbe, 0x10000, 0xff, 0x4, 0xfffffff9, 0xf8a, 0x58a0, 0xfc13, 0x9, 0x895, 0xc, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0x8e0b2, 0x9, 0x3, 0x12, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x0, 0xe, 0x5, 0x8, 0x2, 0xfff, 0x4, 0x9, 0x7, 0x2, 0x7, 0x6, 0x200ff]}) 4.920404226s ago: executing program 0 (id=3225): syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/uts\x00') r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691]}}, 0x5c) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/107, 0x6b}], 0x1, 0x6, 0x0) 4.820109959s ago: executing program 0 (id=3226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000280)) ioctl(r5, 0x8b22, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x20090, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES64=r6, @ANYRES8=r0, @ANYRESHEX=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x8800}, 0x40084) socket$inet6_sctp(0xa, 0x5, 0x84) 4.205718299s ago: executing program 7 (id=3227): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000007f00e97800000000000000000a000000000500c83fd411c5e7c5926747d172e77b2b234011702c1b8acfd36447c2fabf12c30e91909a6f6406a3de4cbe80b4657f6dfc079a09fab8036e"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) set_mempolicy(0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000068000903000077fb0000000000000a0000000000000004000400080001f69fefcbc9eeee68edb5b9420001000000"], 0x24}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xfffffffd, 0x10004}}) 4.138835754s ago: executing program 2 (id=3228): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000380)=0x800) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r5, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) memfd_secret(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 3.900092099s ago: executing program 0 (id=3229): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xad, &(0x7f0000000140)=""/173, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x54f, &(0x7f0000000140)={0x0, 0x84d9, 0x400, 0xffffffff, 0x204}, &(0x7f00000001c0), &(0x7f0000000440)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', 0x0, 0x2200890, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') syz_fuse_handle_req(r5, &(0x7f00000047c0)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="010100000d0605000000000084b2f2260bbb10730eaa070000000500050000000000000003006269746d61703a706f727400"/76], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x48044) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) msgsnd(0x0, &(0x7f00000017c0)={0x3, "ccc038e6c1811bb93fb0fff199a17ff1d35bea8fa76c6fb3427a59f08c72c3d8cca2e18a4322791fd8b85da1b744a3b55718a0995c42fd13e67a6bf56d90dd0b93965cfd2bf2a9f519a4976f97bffd5620c77df50c8e16f43c130be1d141e8669e0c5fec20b09de2820969f0c1c8fd56a287183a431cbe0f236e2ab0b31298f44fe6a4f3b00a423134db5401084cf825e1712beb998c2766ff4e94f62daea89091093343b684154185d8751a8b0408b7b3b67a7ca64f0b17f0d11d60c8d6160948f09a7c39ae17e580edbe71ac500bf1585ae80eecd86c334e551756ad8a1a6588e9ed315a3cd88380effc5751ed448dda7ffd426a7fcbe488f57fc900e5c50cbaf36df64e943a9b2d17643b8bce34f730d06bc3c6603ccf13d4053a9127058433514b081f6d7e7b2dd20d653f3ac64f8da442b0f8e3e69791400ab667153ac6279663070aad353e5fb0b1d5006f41d78dc2d9646420cef9e55080112538004eb10975677cab1d56bfaeed2ee9680cd8edc9be87b14cf5014c46ec33b6e279e7d16132d396648f2fce87e42b072bab826351605885e05542c787d65c9e1bf66a31e3c796fdf4f48a7b05b5f66be510f7cdd8a35ee84219f3c9f338205c2588ac6e91df1a38896a8dddb2a4f9f665e94c94f7b01dbe1ed7063dd2b565c0f63e6029faa1b5074b49f26b68685a4a6268292a01c7989f9b790a538f18fd1f14d30554161f540aeebb1767e3cc68de35d3e024b4d07a382a42bd81d5d3278947fe13244fcd087f6ebab0f9ae22cf090480279b8bc5b112994a54625add85b947e96dfe42e4ea3834350efa5e3548c9b5240a11484cf84ce175483c8bd78fb47c050e97c6a89ae67fda0da9e54219b3a52ad4a99b991cd4eb5e5fd0199f79a1ac40d97bce5402a92a6bcdb9a9e7a3775a97d1ff71fb8f15937775a9397d51bbe5363f18c04f8c4a2ed56fe75ef76d1b9c721631aed9d42513e9319e87e78738544bae042cc4c40e86249cfc32e4fae85a7b2b3486cc2337f6998efc0762570c8e59383339eb6127014f0ce192d4beb2b81b20d155e53b412fb24941005e9609f2f2fa335e457e1db4ddffe2c9aaa30227cb87bccf92c6a41505ace98544953ff43f1bd0be3109284f0fc3aa3f4680779439576d0c5eb9e0eca109061004cf592369091188bd1fedea1dcb435eb12e72fed5c4ecfb854e690319be047928352d8fc1dffd7f3e9b8d877da260a0c7625de97436de03896efb234feee1af20d341b8295d25f4a4b88a52668c32de7edfb368fccd7dbe7e4de590c2fd0dc45f4fb9b221bf676379053d4ad1d6265b0f7dc1fdbcc402f124b3ad1828bbc067701da51bea2320a716557f4269a8df8bb6d0ef452d3878c3b47610048771e2e8659bdd62414c8d67596288c7266816e1326a83b711bd89949270417c441694b7ee72d9a8234d0399ebe33036ba2e4ef6f7ca7b19eac0d2d6bd2dc037a8a6f21be906c98ad43a199be9cb500ea3e25e8d7f3afa2841d41381dcef2700554d9560a50676b5f463510fc166052ade0d716e6b4f32c14d940ad8215cbb67f5715a5c5bd14346042ada0c4f8f3d251b81a2d1e2066b016fe694cef976c5cf44fe7733c850aa5bfd9886ab0b08ddb5d3499c047e29d7c2e0c5e9eaa6b651d4a6c9e60f6338279dd5fa1062a8b6811b9fbc5c430d2904debc3307b45bc6e7b2930e62fdeac4fac60b548aaa8c0b338825d2a0028123c2cff093beb9c3ea40dea23ac17f04577d2f1fa907ccc55ea17bd2411aca8cddf6753340be88f66ff6ff3cd0a29332ee4fb9f7297dd820dc9f16eb2b758c25090f4bbf55fcdd6e11f6196758b6367d2f1fc7c8eeed969accb3e5d4a4d9d715d26045b609c1e5bf21c1e99d9fe9c1e58bc95461740efee204f1770c37df6a1e57bf92d6c6b8374b0295b8731f0dd004744225bb80f250573f119866d83b04005df80fcdc0f96dd2f3a542d10407e66621fbab1d40a5c5d721c6d493ee3ebeb43fe5e4b26aa4e465ecf57fbeda5aa1d3d84d41cbf14da60a93a16f9fea27983dd637fd61c2f596b111ba9bdaa33584793bb8c6bdbab3454fe84d6555f3af296047ae6efde9581419872e83760781c1d6c2dcec2d158863714d3da76ad519405fb8bf7afd9c678619abee6378e0057a19468f18349ba3388d33bac8d6632bb111f3eb0c7ef91ba28ccef5c7d2ab93e5a9ca25f96ee0fc1232ed5460c247e36c076c744c0040b1a10daad03b56b78d3e73f335a29243701b4747e8e752b3801c2c6843da12ea08a06f2380358ea1efcdddf700e2dfda60a41a7b394fe7c215059a808e2ce58e57af7e1776b93e59f3240bc9e8cd49e65ce2382202482530918621614a3c8030c281b5ff211b21294ee3c52af5da48047a654a6b17d38c2f49c5f006999bd5d6ca6f02c5fb96e0f9478369811c3c273bce4525ee36d51d7c74188be53c28ac5288acbc14b89164cd27777a0ba2ab068395641df63d02cc120c00ebad84bcb116002e19c322e47051e47c79865595740eff0f3d9bc68e1fd42313a31e254c4b3c4ffffe75e64dd6396115760bbaf66108a3a7adc0561b9a73ae14096b9a158c2d99c0fd73ccf69b83c7e8c4859c94f6070c77ffae26a27c70811a1c696869e251cb678a3e4725b8f446b30b7b223a038fc3297d0e3a6c61032d14d6ec43c038dbb7ceb61194a0a89df89235ba47561bd224f17b32fc4a5e173109f76c0f9fd60bcb1c04fa0c9fe80ff17612eab6abb08e2fa485a7762e5300936c3a84bccba1003cc568e0238bf39a004d3a322b551bc72621ae135d616e1bfe47e16290e9fc20a9a139cb3008d92463db3a86905a68511760ce82e94c7fa28bdbb65fef5516aa68fa511275fbdc26b4e0d838ef50aeffbc0ac2ba32c1cf98e92252b084b6576aa4b021f737a13255599c4e5ce4e307ff829fe84bda3b418562c15c2479b7e0b91dbd2fdc43cd231c3484d7e557c72b15900b0d3b1b37cbb4c426a084ff99305d8d2622ee129f8382eb9b60ab829c048689599b45061e88e3a657a7f688a0331e3250f872d60c18f4e9d6dffce5b1a034eeeabc0a7256e88b0a00ffaa074797cd73319c4c6d5202eb56a4fc2c0ea1e247261363ece15e53692c1ede55c5c896b92f9ec806dc04cf42ce70643b679ca501a55740a22f0a4d099f9bcec95f10e37277a43825cd9cbb62400911c930d9d05903e1c43b1356386bab843c84c2108b2bd2cc5ff09e0b75ce855105ac3937599010b26668e5022b25eca4e672d3c426786ebfd0bd5113bb161b53a36fecabf226afca9f57cc541da76ee5818b84913590ab3eb4a1dc3f0868fddcccffcf7f3b751e3ab36cde0fdf2f1c1f325ca108dd2b43aace2f208b88b0313dadf51973a8306ccbc1e97d3174a6958fb986f8cdd9548587cf8192dc57eaf81c6262ede9a9d7c6df104e8e717fc609f3427a1272df39f4ec5d89010edaaf74ce859b3efd4fa44473e0c2efeac38306720e6595f0f2aeaeb151ab1299529a1c3799018fc9575ae3acad02723e08fd57a55ca7fb9f785cd05b68d542d8a8469bd455151f7ae30864f3d635702bb4ec6c3875206907e49b7507dbd0dbfc652ae1bd6ef22f739fbacf5873d51ff10c083bc0d6c277da389556799389f3d99c2b7327d612c7ef8c4d9a1dd22d1fc02fb95efdb63359e9cc9bc7e895cf60a6788082a86b12e6ede24cf07ac19ded5ce19443b43cbb54e629a3706f4c2967bb36940ff55821ac4f089a36056501f1f02472d284ee31ac70dd4ce18ec2f98aaf87ce43e4ec9e6900cc5bf46dd2aabcd362baab5540db19cda3c694f5bc541bb18db34be0d899413d877044022878c0ccc29fd5145284346f5addca6662f262726daf1f671e90029a767b084af657c99b7df8f1c42e22a1c3e789aadb1f840f8b32f2d336a142599bd467468d66db2c2b64b3469a7e5c5db748573a003f448872170a90696483c14c4e0bafd9f4bd2e2f659148c01233bac62dce59985e50daee34da799ffb3e5e1cdcdeec961bc39441e23cc641f03523ab6203f1d342a0c9da236fc26fc7e60d2943cf7d8c24a92698112304be2c2e237118b5194f6b5fa8622a67e5496075f3ae763a56d6d8322c93e02338f6672be5d3c8765906c3b714ac0640c676f3dbdd9f978d1780e58f4da756f5b3c570702f9e90789aa80eafe9c53c5f977855105b5543c20148619b64fbe0aad27d3c7aa21f69cb1a13324804497df3dd820a6cf8dd9fc7a88c50df24d618033fd9ed165edbeffc03d8cb89342085761554261b0c4b9aae69bb2aadf58e523be616b1b3b439d4c853a41667e906dad881cc36bc59ad5b8cca1ac32e2f4bf61e7d9fcefa74b4fbfdbc0084065781c982c9e2c1a2fc1220117b079ad18ee3ec8b7fd647f6ddd779ac39556c5d9b3d887d111c5710b006b3c6f6c808b2cc7ec68fa7388f30edf2c4b8d7595cffa58bc3f3e073b15ca2c32be80e8d258a51b56b6528bb0cd7502b43cdb3e960cc0bc8bf544a0e082f1b712062932c34e2774366653d7da94cc5a93b5f76ac504536c528d99d1ed7565e12eb80f35c45fb0bcb598014d334aaf685f8b4314d72c9569a8ff09f2a9ee9caaabaa0d18014233829bc5077cbb4b7ddd62980556b85da8eaba45ce82b7757162b37e36ad682885c96db30cb553040e9b0122fa3260f465e83429d1bbeb0f3f13ba919cb7c1dd734aca5afedd4516b2bb48a25f32d0d26a19cfb15859b2fd095eb300447b2584da1d47abb46f7056365e49ccbed9a8ba95dc1d6c0c22118a192b23ec039a0309888fff0cf189079b4c7f85deec7360d9024e48857f90cbb517c3cfd7492cc168b2e0b1d0bb3f3a76c22d09185806cde0079858fe40523f96bf42c093064ceacf50ded0586953a442bdb7d751236d6ccfebc9ab329d40464b7750879b8eb9a5576de47e92d98ca4dfbc877c805d05ebcee5e35323fca744927586dbf4f8b0a809e5c37bdc8e6075684bc922113a7943728d03f6983c66ba79156746340013bfad382e5a15721589ca7f5a7a4d18b78856c4d99f673a821658b952d72137705c173423f2e151a583952125a07c42cfdc52120b19f8232f8404948cb7b33b2430c31fcba9f3aee72b28eab84e733dc133b8c6e264b8f106d1311af0092058717488138affdbcd673d5ccda667b92654f071a9f63d8729b4f4dd262228428088b653cdc1b0205f6c7063006773ab97416d26e0cf78de6ee7595a47e43e10d8c1b3e6ce465110fba4d1ad7426ed94385d02c4732956b17a2ec4af4328f446cda3e89987c822a5a61643451a93ac151114799fb02a13bc9a04926efbef360d692f6e90da3c99b5afbd64c99539c3a7238ecd68b671b8b08d6ef3772f6dcf5b53fdb76ae6c37a5a60070b76d3b92d3d9ed51813198aabe3f76f9affabae128972dd1749137a7190a47dccb5c118ee1a461e9ce180ed130cd40b94203fdccfad8444020fe4add01174ee6af1e1f724cd19e381d9bdda116876566c9c9b9e368510a5f9b98234a5716e540adfcc1c12f362c975da7057a4c197b8667c6088480460e82263cc64412c547ecba7986ed48785516b106d9d73087a125989c1b367b826ccd63744386b3d4ddf3d9fb881a0fcea818c59b2eba25d431d2eead8a812f12e4b668b547236484a71ba111ec907d0ba2e8cfae7c05da23671db6b18ea6ae531d28d3c8061fadeebd"}, 0xfd1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x80000000) setresuid(0xee01, 0xee00, 0x0) r7 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r8, 0xff09, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001840), 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.8290735s ago: executing program 7 (id=3230): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpgid(0xffffffffffffffff) getpriority(0x2, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfff, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000880), 0x4) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000300)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000500)="2d618a1422e3f142d7b2876103805f6334f00f0603eda8422f584dd7e9e0ac4056f0352df4961449360b087cc9e74db2c2b3271cf152f99fe56727d47dbcc00756edc17362a91caae3eabbb78c523cb63700fd9e5440bfc2086156a72a2d5a1a7f7dad496aa9382d45bd5b751f22b6d71c9988704c74220a062f1501d7ad9cdcdb81124c2cd0a68333fe59fa6d2b8cffda4eb50bfc58c093715e2e276cdb5b86ed43008e5ae0d3c7adac0a631cad2de6f6bce99cf4d08af71a9ffd1436b057e73842dee5642ca40535c50c9ff24e67c64598d54608bc7c41450dc7fbe28cfcb45870804341bd533b1dfeacf3e66851f8a5db", 0xffffffffffffff3e}, {&(0x7f0000000600)="e8155ad11ae6c71d5f8cad2b6d7d52d3b9319ff8437ced4c45883ecce022f8c7472aa08708e5fd39fd1c45fdfe32d2cbc6f76dd27e5d57d0250233b5f4cec349720c63841563799ac0aba27f037bf4a4a045b5d89d8833f93cb7744d49eafd278d305abcf02a211adffe0a18d11a042316f3478750ef8bd71d1f73ecb1ade3727a47b8e3502700d6b16d4e797a3c726611ad5118019717d619b81a0c949623cfa31e8712ee14e73f023240d26186d4d3db35827fc1a9a906c5909cdd7127834ec1da53593742568f755876033bb05cd259518e4c11b9ade3d47a75dc", 0xdc}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000700)="36c1e7dd0ede231dee56e6a9c5e29f9c366117c71a8c4565317438dcb60700d865a8b395b1a41eee8c2d96ea68608b8d47d4cdca1f7be9cc5995ebcb199f2f321cecca68db4338c8cf3727f7076090d19a3d98c37d3a7f8923b0cbc00401c19ddf751c36eb0cc193ae8d37fcad23266e266d716e670e1bfefab7e9ddd431c48f268caf5013df0825f2bd27148551722f1268b87fa4d6b11abc7083bcb401b8bf3f10ff72dec8d7068a2c4ea38f507f1d5188b4d1a3eccd7113fce27f3ff697072082c6054141a3089b6cd74710bc9b1d566a3c4c2794d52cce919842e346ebcfd6766f898f24fa", 0xe7}, {&(0x7f00000008c0)="bfa5f49ff3ec6c09d63ea251d3a0eb5a5170b51dc708197127983e61c5f7d6036c2849c19de14b755cc2180dc764200e8d6e0f31e0af84e5cb72cc6d4c8d7a06b9de01a77ce1baf7d9917ef77f4e750b3818461a48d88c595f0c98115e86056954c8d6ca39e09bb823a8bfcb3525c20b037fb4dbba2772a1df5bc73a7354309da7a1e8690581feadd3883b280c422011634a5cd0bfde0d91cda4e75c6b1498aa0d96f236edff5ac1797e15189c03fa7f6e4c5fcde4c8958ff6e57dcbe49c5c444b13", 0xc2}, {&(0x7f0000000280)="7e55c084bed8c806959cc8f900", 0xd}, {&(0x7f00000009c0)="471bc03b1671b0cf8a3f79ceec0e4e8bb8f7b401857858aef78e07553614f3fee2e86447cd846c82df1c0d4ab2d1212f5675563c2e11ba93c1a07e3047176f24672051d52c7adaf7457a02ca55ebaa69a0fd136269cb14702085eecf1f617096585cef4c79e5388012da89ed33c47e3d717e21b79e2f08847aea975d356582b22f1ac96112ca8216c0e4f4ae619115ac4b987dfe97f0a712fa09647260df07b26fa183953187e2e8237ca9b5c8625378f1898a68fae70d9fa4c8697a5da9e8426b29b142852c5a179970b7fbcbaae8", 0xcf}], 0x7, &(0x7f0000004340)=ANY=[@ANYBLOB="4400000018010000ff000000216909eb252a54c14ee16c3b227775acf09f7e052e527420fc55074c280450154e15edf371f66fca995cb523d4c5a7230ed7f5b58c00000042fdffff0c01000002000000ddb145a6041465817da1b4b51cdb878622104aa1e3eba335873f4fa0caffb489e16f6674c91bf6e8c01dedee22bf97968c76f0d5227818484c0a415d820a4b83b18a22c319a4aa6e1d0c8d5d36e0dbfc8decc3983b730dba644fa472cbd17ab04d14e7eeab46c32ac2613daa3d52d5596f1e39f00703649d23021b3664647e591ec6bdc0163cf8b69fe9fe768dbb227ce8fde5fd45ae3f4e4709320917c5fa4303fcd655fd3567339a1aab81487b0525cafd620243c17caca98ca5a9cf42e5f3c0e96012e7f5fe7e572d2eff4c4bf16e0105c20060000000110000000600000067171220e5891aae935085a5f3c9edba1bcf139ac7fa3198d7dc7cc6861e2277e3ece5878230160090a247734fbf48da0bd23873be251a2d0284782023027ca86c4eb8a0408661b787d1e4839bb45777c10000000c1000000c01000007000000e6e7ee092967dea8362cec9429e8d28c8310499058d73ba93e244892fc5966ab14e2934ad3dade75500a66bfe0909a815dee259df2aa06c26b241cbc0056eb63df6df154c1fac190700e1d82de5be29e04e68b500ee7f91bd92029e15169d724d8cd96ee2bb8d545ed31762be6c0612192203ddc4338b4821e8df42d3eecae85b109b7aefeb755e4c6c4150e44926c8d81540a6158923f59675ea9d89c10786092a05f2c53a3dea288584055cc081aef4d2d07047fc959a09d89df71284e3819ef1f5172d5fc86f8c5dd4c268bb0704c33c251c90ad4ea9fc0e36f50e729554ccbe976f46a4315bd5e9e12e6680f6ec09a9798ae6c48eb54e7f2b5a65d0c8f1d0c88ebc9a58caefba7265afd3b40b3a132ac8e1218005d933465d01121d8b114b5dab46763368881504239ae137afa1a6130bd1bd0f6eb291734f60af567cfe92127edd927d3196d37343f13a5c174d851022c89eb4d70b165938636ca2a6524fb87f0d7d3c0721cdff2c4d4506e7664810ead72eab8a499de28a583e64b0f05935ef1b78c914d9b70c9d3b757014eeb2fef5b8d076ed68ed5cdc779ab679587c4e6b888ba7758fc197d9ba28e3cfa77d71f5c81a93ba1c4a0ce067fa314114cf965f3014883c62ff59abe47a4c368e39a379b5698a0f9e8fb099ec8d2353d16f5030537bccbbe4bb1a7d86dce3f56834b183568636b48d7cc2c8832dddbb3e7ff3cc3e916835a0b39700d633aae923511d575a5e474a049c2a258f3d417bc792751ce05f504e6e416657cd0a2c31f256374238e73366ffc40755c66b097f21b3d63ac66881eaf8b6a9d95ae92c64c5284d57f649a2f0a495869d62311241f5bbf400c55f0c9f6a7de5227b01e9cb7e935451749ae0f69b0402884c12db61a8a471558814cc92ef4a344e8861480cc6cf4b8fce4629353b8bf8d86d40d43642e5920441d87c9fe469df34fa6d48e069a6d4f36c770b493311c435fed0c6660d2446d0d87397e818ef616f9ed3f0436a46d3741363afc05e4bde9c7fd3453481aec51e59a0eee84bfad1017e25b3fc2be6aff655dc9fb2425aa5b7f757e47a0e824ab44880b420ed02f0c81553a18cc0114064142b36f24f79419e235b272c7815462484aa26a6d65260ec8e4a34463f03c791ad9dae0a3a6c886b664f9f810eb0ed9698dd289f3cd9a525cc5761f588db3d61219af7372967e1f44f3bb22e458da709f24f1492bb270b3661163c4c551074e5224564d5d2a0cae644988d0b06cc4eaad7b7f3790b9f379d6973b28d17bbb0530287838f245299a4fddeee369ee94e19223b87b018bedffa12b96821bb63086aa2f6bf87b64d923291ad03ab301215e270987e2d07223e118af5b82cae2e0f2dff840de175fb79b9adf394f0ac9035eefcec8879875ad91a11ffe823f780a48dfed08e47d5a8d748ac34af0c786a423881fd522f83ea345fe0eb178be7708802cedc3ad06ae9f368c25694c45c467070889c67a9f1a92536187f81b5662b9f0b9e0ea9b53686fc5d79b19e05b59f441b0d7a4992b554da1f485a3507b5c034341cdf81a61c0f9228439a0290657ca76c0289c097fac078b837fa24d57f52d501684989192ed54c8a63b29203eeda3d65448283c327390897f060ca8f614e1e77821b1ef33d02e50df872f2e440fde686cb84627c35ce3bf48e1a43a35eec313462d53c2c559f4c323b24fb5dddbf63cdc9af8619f59b601d448b68824e94738a7d618f193109aa8a34666750d11f738742cc26fd3bba4a022ae5f05bcfe82ff4351621c3f58033365af6263b198994e6566b6072b1a4ddd1a5f52508a34d6dbeaf8d46853158203320a74124a03e41608666c443bfdc49824cc2a9ff0b2fba83e4286cb5e5d04595095da413643b49e8ac7ce6f5b007987a833dbdc9fc559599f79d3c9bfd6b1cd1772cc43399f0747cb4d0f07eb91cc7b77bf326c2b1b5d0bb97398c10114c5e9c135f269cfac57759ab9ee06f7b9fc1dad4a808d107a66bdaf2e29cce3faf946ed78fe1d9305ed4a754baaa5bccd238a1555a787bcf7e5f1811b2cb9be427c28b203038892105f633837767e74350c5bd586771507e52a496033e7558cac071b4a5c1867f4e8d3f4b3270da9aa7d89713fdf6f37f1c9162860ec64b4b5fc55f37d1891c9f451e01523fbcc63a72d57a45ffc317e19e11f437dd05e316c053e77f7eb990552ab93fee472dba4db77f79ab38e8d3ff42af6c40e494483a3f2995f785d1b3469f310ea7707c91e410ceea5794f181aba408c938b92ac4bcae875034af223a26343e8e179749ccb07621bafdcc9eb8bbb412034358ffa16b58bc759a0e10b7730922366957fee38dc93672770ba5148cc889c10568554426e667ed4b9c62adbe605bc169553c85522309ceecb91c97a7a97482f186e660b65b6f0a8c4b67faddf866ea6191e25ab66c5ceffa754515b7dc06076e7d1c8096cc8feb297fea7b502aabb7e91897019c91c35862257050f7bd6d04c156516417ad9d769f96e0eb347cf3183e1a714281198bb9dd5224bc7b8b865274276bd91bc9cf17b57afb10f5a0f1dfbdd7632fe8a230612bfae73beee9ae43ad4fd636eb476209ae019049a51ec636af0d0b8173f4892bb0dd862d833ecf2533bd923097744405454dbb2c9b3538ef1fa4199d86617c590629d43aed7391fd3d94dddf0e089664eb951db368fa057289aa1d436137a23eb25ca81fb292c3b62a81b4a4c95e0edb8bc4bfb878c802726d825f5b043e7ee270794a2c9a03f5e5b90681d872bd3feb36198d5021a82de147d2775529c32316767f722abc93d91271ab2e026bf2cae8f3599be2107d536fb2fd6d7bfc269e5abfd178cb83069686badbb555314c36322ff2074981469214597c00ad30e9d64edbfa0f6caab2cc0b39e0d60d26a8ec06ea1d9aaddd8181b9d5eb9f531c7c9f8c601cec4b9f484587e2ec5ccbeaa923e506ed81568a7c28f9861e1a70df53ee75f794f51f5636814c35755856d13943b10cc9fa257291301164f083cca36cfe99f508659cbaad2960cc2597305dda48ebd7cfca2965a6a370345b5f1b868d82419dd4790d06186646671df257828acd99c4841ffebef3a17b269723a8c5984866608d465b5c71814b2b98571bf98b8ea381a2b36050d8921d7d02c3324e94782da7d4c2490443ab613a4773e2add648bd249726e533deca327a708eabcb927531f4986e18ba9a4e68c8184194526413d9e7127f272bdec7ffdbf75107884b1b12eb4c89bee2f5c9939b4fdcb6f8aff4528a33f4ed55019d2dad1c3b9c798388d67c3f234289e398e026f27c261fac57c8fc5a984c763b003ea079fdf95dadf1960a773e7913e780ea4fe782321e7cca8e1ce870298c595ebf56b6c7d9706cf32103217675b0f8f3a448c0c9af966284a404f0295b4dbc8ce7483f457fd28e3b64d6befba91303fa50b01a923a62e88720432e1e2e2bcc4f155372af664c0bb67e675ab1a32d7e28e538c8c7cb1d099d8db41ba9e1809560a0ef4535dd7d75e494dd55dda0e3f2c5cfb24ad1c14ae50963c2c5982b4309c6351b578ae51a4014fb19dca6e9880784e4c42f254809da7e00f6a450d6d0bd1cbbeb277345c2d1468453314f192b21b481065dcfc3c4b826512c789cbb5710e711661294f68a2bc67ac20c6ea1713e241ec8db1ea78f346c8c20181133cfed434bed846e784cae07079a65161b430cc1bb0a55df2f4593d0218811b0cfbfb5fbea565084b31be4bb96881c452adc586488a03cc3fe825c73dd3e9ddf43f732a2c99fd813e62c25eee4c0f14bb8a393447fd394fb201906633252681586253bfd807eda8b619e516e7ec5484d7464ad18848aabc980af9fbcc348617024346d9f8dd5bc957b380ba3929619b8649ea9f62cd6867593a7b651bc54978f434787730a2b0166585edd2697384bd2ae33a9502d430daf1d7fe7e9d98f39cb55ed3972bb8bf7c7ead04230de8e4cffbd5861f8384442336cd15174d82706919ff1cd3f3193d9901e683ce5de25fec190ff02722158e9f542ccc2e8eb01f8e1a2703b609e8f4786ea4a046661249e30dbde0e461b642f18c0ec5087ee2a198c41ea1b0c9db26b6d576a50b6cb6e11c0a3c58949872a33078d53003745da7cf9aa2c797611a4dbc93d721b32f00c61e069378022c9cc1bfe339273fedb4f593db1f3b3c1e4f9c19e58de1a9c7da980d1397da6264d67f10ca9ee58df7b674571c9ddb36c7f3b528539eda2c0cff4bed7212d3801e85eaf6c2bedbcafa882bf7506212b814e5c2bf65821d32b386b5040a25741d83324bd3bc940d5fd79c54669fe6a72beb39ff273fb192666512440dce8d4061ebb7453b2d4f47ddff4fa382e7042b902e78d8a1fa0d2b5e6523e04a78582c79ce17c659aeaf36190b8a3ce1a04aab5379d78e3cf1f92e1cdf2b7b8e279aa052024cda49f80b4b8055d0575650188eaba3132d764eb9222e4db1f6922a773aeac02fb723f221f90a1d343facd27c4bc9abfa9bf2991a9197b0942492e6ad850884eecc3835861ee9753082da5a0467adc005e3a844ae1998b8940656480ceb56edc4ad8e0d3ecbe3c248f6a5080ef79808cadecb4288e99ff5787bc604e12324c0cabff41179661700f6dd402ce63c001a1b072958851dca160a9ce781899659b54e3575c1f5e95057d9080d665ee44c2470da02eda1aaf54b2b202caceab8307496f6973238ad5f9aeb2a47511567393f46819cefae09800660eb29ccd1a48e5d96e031db76734724ae9cd47ff0cf5c1b7f2e2cde9b82a08c8f4766c5dbe0ae28aab27f13f077cbb5d3c830ecfa32cc0ac2c859f7fc2f58683a9f522bd7381230e736644363d170b0be1b1092474a2d03fdc9b80976f057ed7c2059bcc3a36ddf3a99f01f65492048cf223ebaea648ff079673adcd6cc84fbbf138f973ae8c86403f76fb60ab6987b592ccb74e9bdb532137b8305b3493899a36401e160a3900aabfa57a1738c5dfc9d481669cc79853e0d8752cb332c9518c614e3d3a5e8699cdbdbea6280c40b7f0b9d7806bcc5b5a951671a02a29fb02bf0e71ba440c04922a481a5a0d22fa2abc0823cc988207f2329be4a360c65b95ee5d89d59249585be2a3d445aca78030932573b8bde8ab8741f5645b3f9a827ced9b3a6f9f40e528e6753eac0ecfb5a3ce1f5e74d6d07cbe828d1f131a656dddef9e096be2d5c1d844ffdf6a83ed92ea80cbd86575767678b088831716fc2369390099369bec01945ca5778684090fbe1295ec1a367161d456e768ae94e82284cc35d4ad95a3c67dbcbc35f4627562254531664a826e68bdb91794529d938044971ec5742aed37de5e9376ea4ffbe676cd950377d2d2a4f8aa69e9472330b3cf2202f2fc3eed4fe740b45bdd8ea1ca2c69aa06ee73a53a96f7f8420987b197d9f8562e585f213b37a56e07559ce8662f82295ef299cd9c813016fc42d8a72251b2786871eedace04ae21ed0c39d2365af3c2605839524b0a1c55395ca78948f0ea619d9c422373f06a994183b9c4aff01d6e61905de4032c3696a408c6be147865c0ea2d1059d7b61debf032ade05f1c8084032ab25669b6405eceda4b1bfe08f93358958fbe6c5fe6b3a64a8e5b6e6e530648884381bdc9873f63614ebe01c8b2990249d84163fc7f8ee8a7a611937fc14f44a440c274729a325ba5c7680bf5cf3a6423be138167312f5bda9fb4ae8c265817e9e8ddcd77baea241e49457abe48d320cfa219a0a892396befabb53540c145fea19287dc5e800000002010000070000002a38a9d003b7ac66ee3b2a4f1394d6cb51d7cf42a746c7f6d9e628a30620065d237750cd2ce3730e581038b9e86ec3633def549772ebeed234e903ef323c2cc41ff9ab6cffc08c7cb0b6168f83149bab1e1f968ad7e0916ec497bada4d75efe8f18b5ac52762d6450e0b12bc0d8d070998d72af185c0a52028f610909764d7a1a69a5641ab25c6a14947b71db5c812e7cfc167e2b45ae454b0ee5d500c84bf98d65e7c928ba944eb5eb7230f461cfe8110dd91a44ffe6799ea1f30d13ef831dcabb377a029ab96279acdf936a428cb197afd99a349c41ffc43670000e00000000e010000d41a0000270b81749039d5434fd674113ee078ffae800c7ce4a0176a5f3844568f58913b3b8c49eac6c26c773ed35e8f5cdf4926ac181463535d05c3229386a3c08c2ffe647ee5e60b72f95694a1a47a1cb68a12a2ca4443f6da8ff39201de2895e7f6348f0dd32092f9d7cd320634ff156e40109d48322f0c2299fd91a311aa3d523672e31e65413d459785d71b27348e3b63460a3c9584e128b48d91b7c5d7d2cfa3c3f0ec9334f547a0fda7292f7bf24ceb1a3713bf4cacc36e2bc094e39e22bb04796dec8ba7500d5ba6b2db3cbdc54f13ae2beb23008000000087000000c60000000e57d8de3c8eb082143f7fb81633bb01a2d3f97f68472f5a60ec44e353170edd547e23583a3e94980a3bf762911c626567ec5a8a5105d9668929e226b4e0b40cb5a3446b9db9fcb6f59702c9aa23b612b97ab597a5cff13ee356135e4c15c38741c020627b3b3bd23f49123d92ef002c638f0000a400000011000000fbffffff03efefddac295cee0dc23d5622b24239f3d30105dbd738b7c2d52f4bc79745c3e3edebd461e6b9f0054810580bc26b6143a3bbfc27e95318024abb5742f67df3a58cf17de54e37c2c0a1d7adf4dcc670220bc0f753952f3b7ec89bd04ea24260476f8d4b571ebb7fb429c91027c7d81d40f64d320da1641f9c9522ba3ea731925ed612e44ed367efc4d1051dada5959b99a9a70c65998400980000001701000000050000c309b6aeda4d9ce048bd3c596812b0e43cd110af027e2af3502d4b3d7f909d7243f890aa88b89ec386bafa211ee5bc5fbf2c446e1734e09784efcda7f1763c3110531efe5bc5cb35a610c3453cc5e1bd727e1ec7831c0f62dec1bea37668334f03d7a00120fda588a2dc196a38af6e4e272202b9b57f48fdc9a00d7804a56b12d5646b331700e882476000002c000000070100000700000003ac8e3ef2cdde5b99385ca1a2050aa214ed869b86ed5883981ff35c0de31eb9d6590518b51a9ed5244fbfd8"], 0x1540}}], 0x1, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x104) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000380)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000"], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 3.526424321s ago: executing program 6 (id=3231): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120) getpgid(0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r3, 0xffff) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000003c0)="81639071fc02060059bd4605c7b354f38eddf528aa915ed5d37a3e981553b9c8b56603b7d850b88466f978877986dcba69070905cd70e0dcebd9095e8793c689f0711880e0ef2826b89f30334e6dcf9a66f214c55fff01b8495f383c73d5b3030e0e006d6759642f0b0000000000000000000000000000000000000000dc15cc55a49f2c720db414a8b5a3723dd08c45bc9c312ca29782f96a37c8f00f46260b88de162f41f33e4b2466b28500"/186, 0xba, 0x0, &(0x7f0000000140)={0x11, 0x1a, r6}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 2.908960894s ago: executing program 2 (id=3232): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001300)={0x2, 0xe21, @multicast2}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r1, &(0x7f0000000100)=""/83, 0x53, 0x100) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000180)="cf", 0x1) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r4, 0x0) r7 = eventfd2(0x8, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, r3, 0x0, 0x0, 0x6, 0x0, 0x1, r7}, 0x0]) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, 0x0, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x5d4}}, './file0\x00'}) io_cancel(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xf, r3, &(0x7f0000000180)="302cc23f2e5a968185013494973cc7918f621f16ebf563cace45fd62201ecfd3954a6843b05f0b8932ae1b304cf65653a904847badeea04030dc6b574ab29f74750f0b21d868603d43d401e65777825b61b902dcc42f1fa96cc6f929e8eb5b312e912f59649de94ca4b59afa9fc0a130fc8099cb3a98c9afa125ffb6061cd032a9297b1aa9d7cae05fa2b0dfe1edb0819c5ce4a000b687c6a3389bfdbe437c47e035de6dd25b9445bf70bb16064c7236f816b82c8136d88839d3584631724035a7920093147c37d98593f8ab931eaa45a6d8475b0bd819d99bf5905465e305b8573246", 0xe3, 0x8, 0x0, 0x0, r1}, &(0x7f00000000c0)) 2.700184069s ago: executing program 2 (id=3233): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000380)={{@host}, 0x59, 0x2800000000000000, 0x1, 0xfffffffa}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100002000000000020"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 2.650366407s ago: executing program 2 (id=3234): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$amidi(&(0x7f0000000080), 0x2, 0x0) getpid() write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd, 0x5, 0x0, 0x0, 0x3}) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x2, @mcast2, 0x7}, 0x1c) 1.353663874s ago: executing program 7 (id=3235): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0xfff5, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.179881281s ago: executing program 6 (id=3236): r0 = socket$nl_route(0x10, 0x3, 0x0) flock(r0, 0x8) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) getsockname$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000340)=0x1c) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) (async) syz_io_uring_setup(0x643d, &(0x7f0000000140)={0x0, 0xfffffffc, 0x10100, 0x1, 0x40}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) dup(0xffffffffffffffff) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000005000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x80000001, 0x0, 0x8}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {0x0, 0xfff1}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x8}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000), &(0x7f0000000000)) 845.50862ms ago: executing program 0 (id=3237): mknod$loop(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0x2020) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x410000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0xa, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000200)=[0x178, 0x10, 0x3, 0x1ff, 0x8, 0x8000, 0x4, 0x3]) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fffc) ioctl$BTRFS_IOC_START_SYNC(r6, 0x400c744d, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 667.172767ms ago: executing program 2 (id=3238): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000540)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x33, 0x0, &(0x7f00000005c0)="6772849fe8b56d059dc7b8263c3eb49cac7664f3f2cad5c96e28deb323ad798390d7e0715c3d09cacab54282c9b3ae4f51d95c"}) 501.723501ms ago: executing program 2 (id=3239): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000180), 0x181500, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000003c0)) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1c}], 0x1, 0x0, 0x45, 0x4002}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) execve(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xb, 0x1, 0xb49, 0x9, 0x8, 0x8, 0x3}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x1, r8, 0x1, 0x1, 0xa, 0x1ff, 0x1}) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e657665000010000280040010"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 501.040655ms ago: executing program 6 (id=3240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_cancel(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0xffff}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x5, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x2, 0xfffffffe, 0x0, [{0x2, 0x6, 0x3}, {0x9, 0x8, 0x9, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0xe9}, {0xfd, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xfe}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0xf, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) (async) io_setup(0x1, &(0x7f0000000b80)) (async) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) (async) io_cancel(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0xffff}, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x5, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) (async) io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x2, 0xfffffffe, 0x0, [{0x2, 0x6, 0x3}, {0x9, 0x8, 0x9, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0xe9}, {0xfd, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xfe}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0xf, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) (async) 0s ago: executing program 6 (id=3241): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001300)={0x2, 0xe21, @multicast2}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r1, &(0x7f0000000100)=""/83, 0x53, 0x100) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000180)="cf", 0x1) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r4, 0x0) r7 = eventfd2(0x8, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, r3, 0x0, 0x0, 0x6, 0x0, 0x1, r7}, 0x0]) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, 0x0, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x5d4}}, './file0\x00'}) io_cancel(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xf, r3, &(0x7f0000000180)="302cc23f2e5a968185013494973cc7918f621f16ebf563cace45fd62201ecfd3954a6843b05f0b8932ae1b304cf65653a904847badeea04030dc6b574ab29f74750f0b21d868603d43d401e65777825b61b902dcc42f1fa96cc6f929e8eb5b312e912f59649de94ca4b59afa9fc0a130fc8099cb3a98c9afa125ffb6061cd032a9297b1aa9d7cae05fa2b0dfe1edb0819c5ce4a000b687c6a3389bfdbe437c47e035de6dd25b9445bf70bb16064c7236f816b82c8136d88839d3584631724035a7920093147c37d98593f8ab931eaa45a6d8475b0bd819d99bf5905465e305b8573246", 0xe3, 0x8, 0x0, 0x0, r1}, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 15451] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 652.680802][T15451] block device autoloading is deprecated and will be removed. [ 652.912243][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2682'. [ 652.915524][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2682'. [ 653.009419][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.696866][T15474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.824841][T15474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.899151][T15474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.968507][T15474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.138373][T15485] sit0: left promiscuous mode [ 654.218859][T15485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 654.253960][ T171] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.264533][ T171] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.287858][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.338597][ T171] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.362863][ T1272] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.200314][T15517] binder: 15516:15517 ioctl c0306201 0 returned -14 [ 655.239840][ T8802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.377316][T14438] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 655.396018][T14438] hid-generic 0000:0000:0000.0033: hidraw1: HID v0.00 Device [syz1] on syz0 [ 655.434989][T15522] fido_id[15522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 655.561653][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.597293][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 655.612815][ T24] hid-generic 0000:0000:0000.0034: hidraw1: HID v0.00 Device [syz1] on syz0 [ 655.888798][ T5951] Bluetooth: hci2: command tx timeout [ 656.198912][T13048] usb 52-1: device descriptor read/8, error -110 [ 656.331484][ T5951] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 656.395642][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'. [ 656.399224][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'. [ 656.589450][T13048] usb usb52-port1: attempt power cycle [ 657.159598][T13048] usb usb52-port1: unable to enumerate USB device [ 657.245818][T15552] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2710'. [ 657.960880][ T6757] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 657.979425][ T6757] hid-generic 0000:0000:0000.0035: hidraw1: HID v0.00 Device [syz1] on syz0 [ 658.289002][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.375926][T15576] binder: 15575:15576 ioctl c0306201 0 returned -14 [ 658.382455][ C1] sd 0:0:0:0: [sda] tag#21 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 658.385777][ C1] sd 0:0:0:0: [sda] tag#21 CDB: Test Unit Ready [ 658.531581][T15588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.540300][T15588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.744119][T14529] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 658.749573][T14529] hid-generic 0000:0000:0000.0036: hidraw1: HID v0.00 Device [syz1] on syz0 [ 658.759349][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.818986][T15593] fido_id[15593]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 658.935600][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 659.558673][ T5951] Bluetooth: hci4: command 0x0c1a tx timeout [ 660.278477][T15625] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2733'. [ 660.391222][T15629] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2734'. [ 660.394073][T15629] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2734'. [ 660.791981][T15635] fuse: Bad value for 'group_id' [ 660.793701][T15635] fuse: Bad value for 'group_id' [ 660.835219][T14529] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 660.839638][T14529] hid-generic 0000:0000:0000.0037: hidraw1: HID v0.00 Device [syz1] on syz0 [ 661.321798][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.464879][T15655] binder: 15654:15655 ioctl c0306201 0 returned -14 [ 661.553757][ T5951] Bluetooth: hci2: command tx timeout [ 662.048054][T15668] overlay: ./file0 is not a directory [ 663.037454][ T6371] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 663.050200][ T6371] hid-generic 0000:0000:0000.0038: hidraw1: HID v0.00 Device [syz1] on syz0 [ 663.158633][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 663.297321][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2750'. [ 663.306394][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2750'. [ 663.472958][T15691] wg2 speed is unknown, defaulting to 1000 [ 663.530244][T15692] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2751'. [ 663.603485][T15691] vcan0 speed is unknown, defaulting to 1000 [ 663.640305][T15694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2752'. [ 663.808787][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2753'. [ 663.815822][T15700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.820313][T15700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.902258][ T171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.938173][T15698] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.957372][T15703] sit0: entered promiscuous mode [ 663.969115][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2753'. [ 664.034923][T15698] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.131018][ T8802] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 664.161019][T15698] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.253307][T15698] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.278610][ T8802] usb 5-1: Using ep0 maxpacket: 8 [ 664.281755][ T8802] usb 5-1: config 162 has an invalid interface number: 79 but max is 0 [ 664.284520][ T8802] usb 5-1: config 162 has no interface number 0 [ 664.286686][ T8802] usb 5-1: config 162 interface 79 has no altsetting 0 [ 664.292623][ T8802] usb 5-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 664.296371][ T8802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.301522][ T8802] usb 5-1: Product: syz [ 664.303499][ T8802] usb 5-1: Manufacturer: syz [ 664.305655][ T8802] usb 5-1: SerialNumber: syz [ 664.359344][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.376044][ T1272] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.391001][ T1272] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.401364][ T1272] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.411583][ T1272] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.424751][T15711] vlan2: entered promiscuous mode [ 664.427108][T15711] vlan2: entered allmulticast mode [ 664.429396][T15711] hsr_slave_1: entered allmulticast mode [ 664.436137][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2757'. [ 664.554557][T15702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.563438][T15702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.578310][T15702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.584244][T15702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.853946][ T8802] pl2303 5-1:162.79: required endpoints missing [ 665.173013][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.238829][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 665.315042][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.355507][T13048] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 665.360944][ T8802] usb 5-1: USB disconnect, device number 35 [ 665.369710][T13048] hid-generic 0000:0000:0000.0039: hidraw1: HID v0.00 Device [syz1] on syz0 [ 665.422437][T15729] wg2 speed is unknown, defaulting to 1000 [ 665.501286][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2763'. [ 665.573572][T15729] vcan0 speed is unknown, defaulting to 1000 [ 665.638118][T15733] vcan0: tx address claim with dlc 1 [ 665.855420][T15738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.867503][T15738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.114655][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2766'. [ 666.122731][T15740] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.188799][T15743] sit0: entered promiscuous mode [ 666.217279][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2766'. [ 666.275007][T15740] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.335795][T15740] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.365553][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2767'. [ 666.368739][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2767'. [ 666.434411][T15740] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.511179][ T1151] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.530587][ T1151] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.539426][ T1151] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.542734][ T1151] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.775965][T15763] fuse: Bad value for 'user_id' [ 666.777993][T15763] fuse: Bad value for 'user_id' [ 666.958254][T15767] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 666.960406][T15767] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 666.963211][T15767] vhci_hcd vhci_hcd.0: Device attached [ 667.228678][ T6371] usb 38-1: SetAddress Request (30) to port 0 [ 667.231261][ T6371] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 667.606619][T15768] vhci_hcd: connection reset by peer [ 667.609330][ T1272] vhci_hcd vhci_hcd.0: stop threads [ 667.611564][ T1272] vhci_hcd vhci_hcd.0: release socket [ 667.614022][ T1272] vhci_hcd vhci_hcd.0: disconnect device [ 667.781602][ T6757] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 667.785868][ T6757] hid-generic 0000:0000:0000.003A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 667.903382][T15781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.911054][T15781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.060607][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2778'. [ 668.064951][T15785] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.128327][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2778'. [ 668.134353][T15785] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.196803][T15785] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.274173][T15785] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.359121][ T8802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.362005][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.467561][T15795] FAULT_INJECTION: forcing a failure. [ 668.467561][T15795] name failslab, interval 1, probability 0, space 0, times 0 [ 668.472693][T15795] CPU: 0 UID: 0 PID: 15795 Comm: syz.6.2782 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.472723][T15795] Tainted: [L]=SOFTLOCKUP [ 668.472730][T15795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 668.472741][T15795] Call Trace: [ 668.472749][T15795] [ 668.472757][T15795] dump_stack_lvl+0x100/0x190 [ 668.472787][T15795] should_fail_ex.cold+0x5/0xa [ 668.472810][T15795] should_failslab+0xc2/0x120 [ 668.472839][T15795] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 668.472864][T15795] ? alloc_pid+0x1bd/0x1890 [ 668.472892][T15795] alloc_pid+0x1bd/0x1890 [ 668.472923][T15795] ? find_held_lock+0x2b/0x80 [ 668.472951][T15795] ? __pfx_alloc_pid+0x10/0x10 [ 668.472971][T15795] ? sched_mm_cid_fork+0x246/0xcd0 [ 668.473008][T15795] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 668.473033][T15795] ? find_held_lock+0x2b/0x80 [ 668.473069][T15795] ? fpu_clone+0x226/0x7c0 [ 668.473091][T15795] ? copy_thread+0x6ce/0xb60 [ 668.473120][T15795] copy_process+0x48f6/0x7a10 [ 668.473154][T15795] ? __pfx_copy_process+0x10/0x10 [ 668.473177][T15795] ? lockdep_init_map_type+0x5c/0x250 [ 668.473201][T15795] ? lockdep_init_map_type+0x5c/0x250 [ 668.473225][T15795] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 668.473251][T15795] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 668.473273][T15795] vhost_task_create+0x1db/0x370 [ 668.473299][T15795] ? __pfx_vhost_task_create+0x10/0x10 [ 668.473322][T15795] ? register_lock_class+0x40/0x560 [ 668.473352][T15795] ? __pfx_vhost_task_fn+0x10/0x10 [ 668.473380][T15795] ? __pfx___mutex_lock+0x10/0x10 [ 668.473407][T15795] kvm_mmu_post_init_vm+0x1b3/0x370 [ 668.473428][T15795] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 668.473447][T15795] ? kvm_vcpu_ioctl+0x155c/0x1730 [ 668.473477][T15795] kvm_vcpu_ioctl+0x730/0x1730 [ 668.473503][T15795] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 668.473527][T15795] ? tomoyo_path_number_perm+0x188/0x580 [ 668.473556][T15795] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 668.473589][T15795] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 668.473618][T15795] ? do_vfs_ioctl+0x226/0x13e0 [ 668.473639][T15795] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 668.473668][T15795] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 668.473691][T15795] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 668.473731][T15795] ? __fget_files+0x21f/0x3d0 [ 668.473764][T15795] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 668.473788][T15795] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 668.473816][T15795] __do_fast_syscall_32+0xe3/0x8c0 [ 668.473839][T15795] do_fast_syscall_32+0x32/0x70 [ 668.473861][T15795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 668.473884][T15795] RIP: 0023:0xf709ef6c [ 668.473900][T15795] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 668.473922][T15795] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 668.473941][T15795] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 668.473954][T15795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 668.473964][T15795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.473975][T15795] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 668.473985][T15795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.474010][T15795] [ 668.630746][ T171] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.668809][ T1151] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.678852][ T46] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.682065][ T46] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.708000][T15797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2783'. [ 668.973900][ T29] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 668.977357][ T29] hid-generic 0000:0000:0000.003B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 669.305926][T15815] wg2 speed is unknown, defaulting to 1000 [ 669.434975][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2787'. [ 669.587549][T15815] vcan0 speed is unknown, defaulting to 1000 [ 669.639579][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.138688][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 670.138706][ T40] audit: type=1326 audit(1771623357.551:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 670.178637][ T40] audit: type=1326 audit(1771623357.551:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 670.187078][ T40] audit: type=1326 audit(1771623357.551:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 670.196282][ T40] audit: type=1326 audit(1771623357.551:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 670.204792][ T40] audit: type=1326 audit(1771623357.551:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 670.213713][ T40] audit: type=1326 audit(1771623357.551:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 670.246441][ T40] audit: type=1326 audit(1771623357.571:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 670.254943][ T40] audit: type=1326 audit(1771623357.571:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 670.263446][ T40] audit: type=1326 audit(1771623357.591:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15833 comm="syz.2.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c5b6b code=0x7ffc0000 [ 670.272077][ T40] audit: type=1326 audit(1771623357.681:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 670.509911][T15839] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2794'. [ 671.211193][ T6757] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 671.245967][ T6757] hid-generic 0000:0000:0000.003C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 671.398793][ T8802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.488640][ T5951] Bluetooth: hci2: command tx timeout [ 672.278772][ T6371] usb 38-1: device descriptor read/8, error -110 [ 672.684724][ T6371] usb usb38-port1: attempt power cycle [ 673.249547][ T6371] usb usb38-port1: unable to enumerate USB device [ 673.385295][T15898] wg2 speed is unknown, defaulting to 1000 [ 673.430036][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2810'. [ 673.450354][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2809'. [ 673.453902][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2809'. [ 673.550457][T15898] vcan0 speed is unknown, defaulting to 1000 [ 673.648645][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 673.814864][T15907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.821344][T15904] tipc: Started in network mode [ 673.823304][T15904] tipc: Node identity e0000001, cluster identity 4711 [ 673.826817][T15904] tipc: Enabling of bearer rejected, failed to enable media [ 673.831312][T15907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.874880][T15909] wg2 speed is unknown, defaulting to 1000 [ 673.962503][T15913] overlayfs: failed to resolve './file0': -2 [ 674.009678][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2814'. [ 674.060244][T15909] vcan0 speed is unknown, defaulting to 1000 [ 674.122711][ T132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.274622][ T6757] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 674.283067][ T6757] hid-generic 0000:0000:0000.003D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 674.439459][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.758929][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.400436][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.413080][ T8802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.617906][T15937] fuse: Bad value for 'group_id' [ 675.620307][T15937] fuse: Bad value for 'group_id' [ 675.633471][T15937] 9p: Bad value for 'rfdno' [ 677.478798][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.561306][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2836'. [ 677.564739][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2836'. [ 677.798720][ T5951] Bluetooth: hci5: command tx timeout [ 678.147650][T15989] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 678.149966][T15989] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 678.163927][T15989] vhci_hcd vhci_hcd.0: Device attached [ 678.182951][T15989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.440587][T13048] usb 52-1: SetAddress Request (10) to port 0 [ 678.443087][T13048] usb 52-1: new SuperSpeed USB device number 10 using vhci_hcd [ 678.460631][T15991] vhci_hcd: connection closed [ 678.462595][ T132] vhci_hcd vhci_hcd.7: stop threads [ 678.466535][ T132] vhci_hcd vhci_hcd.7: release socket [ 678.469015][ T132] vhci_hcd vhci_hcd.7: disconnect device [ 679.004024][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 679.013398][T16006] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.083643][T16007] sit0: entered promiscuous mode [ 679.092450][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 679.102000][T16006] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.116201][T16009] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 679.118631][T16009] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 679.171719][T16006] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.241900][T16006] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.382126][ T46] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.408672][ T46] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.413112][ T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.422421][ T75] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.572891][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 679.572911][ T40] audit: type=1326 audit(1771623367.001:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16012 comm="syz.7.2848" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f06f6c code=0x0 [ 679.879118][ T171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.223417][T16014] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.226035][T16014] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.521188][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.158963][ T132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.161846][ T132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.165167][T14529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.189332][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.319872][T16014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.340182][T16014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.448174][ T29] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 681.454888][ T29] hid-generic 0000:0000:0000.003E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 681.854331][T16034] fido_id[16034]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 681.884597][T16041] netlink: 'syz.0.2856': attribute type 3 has an invalid length. [ 681.887208][T16041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2856'. [ 682.270406][T14721] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.276348][T14721] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.277239][ T6757] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 682.286633][T14721] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.294918][T14721] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.372472][ T6757] hid-generic 0000:0000:0000.003F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 682.430411][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2858'. [ 682.458036][T16047] fido_id[16047]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 682.479246][T16050] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.511314][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 682.517759][ T40] audit: type=1326 audit(1771623369.951:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16045 comm="syz.7.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 682.528150][T16054] sit0: entered promiscuous mode [ 682.534101][ T40] audit: type=1326 audit(1771623369.961:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16045 comm="syz.7.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 682.535957][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2858'. [ 682.549975][T16050] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.578884][ T40] audit: type=1326 audit(1771623369.961:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16045 comm="syz.7.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 682.588129][ T40] audit: type=1326 audit(1771623369.961:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16045 comm="syz.7.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 682.596083][ T40] audit: type=1326 audit(1771623369.981:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16045 comm="syz.7.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 682.604059][ T40] audit: type=1326 audit(1771623369.981:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16045 comm="syz.7.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 682.610863][ T40] audit: type=1326 audit(1771623369.981:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.7.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7105b6b code=0x7ffc0000 [ 682.620481][T16050] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.625745][ T40] audit: type=1326 audit(1771623369.991:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16045 comm="syz.7.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 682.640437][ T40] audit: type=1326 audit(1771623369.991:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16045 comm="syz.7.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 682.714449][T16050] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.818666][ T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.822178][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.825687][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.834484][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.478872][T13048] usb 52-1: device descriptor read/8, error -110 [ 683.596350][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2861'. [ 683.608798][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2861'. [ 683.812600][T16075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.819966][T16075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.889440][T13048] usb usb52-port1: attempt power cycle [ 683.998460][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 684.002720][T16078] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.081678][T16078] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.133401][T16078] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.196156][T16078] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.198789][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.284876][ T132] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.297776][ T132] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.316417][ T132] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.327809][ T132] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.374611][T16090] wg2 speed is unknown, defaulting to 1000 [ 684.450284][T13048] usb usb52-port1: unable to enumerate USB device [ 684.541619][T16090] vcan0 speed is unknown, defaulting to 1000 [ 684.560858][T16100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2869'. [ 684.999974][ T1272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.008832][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.853694][T16125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.863372][T16125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.863691][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2879'. [ 685.962081][ T5951] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 685.966214][ T5951] Bluetooth: hci5: Injecting HCI hardware error event [ 685.971334][ T5951] Bluetooth: hci5: hardware error 0x00 [ 686.280067][ T132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.723048][T16135] netlink: 'syz.7.2882': attribute type 1 has an invalid length. [ 686.750954][T16135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 686.764490][T16135] FAULT_INJECTION: forcing a failure. [ 686.764490][T16135] name failslab, interval 1, probability 0, space 0, times 0 [ 686.770836][T16135] CPU: 1 UID: 0 PID: 16135 Comm: syz.7.2882 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.770879][T16135] Tainted: [L]=SOFTLOCKUP [ 686.770886][T16135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 686.770896][T16135] Call Trace: [ 686.770904][T16135] [ 686.770911][T16135] dump_stack_lvl+0x100/0x190 [ 686.770942][T16135] should_fail_ex.cold+0x5/0xa [ 686.770964][T16135] should_failslab+0xc2/0x120 [ 686.770992][T16135] __kvmalloc_node_noprof+0xfa/0xa00 [ 686.771016][T16135] ? alloc_netdev_mqs+0xd7/0x14f0 [ 686.771042][T16135] ? __pfx_vlan_setup+0x10/0x10 [ 686.771066][T16135] alloc_netdev_mqs+0xd7/0x14f0 [ 686.771091][T16135] rtnl_create_link+0xc13/0xf80 [ 686.771114][T16135] rtnl_newlink+0x13b8/0x2380 [ 686.771142][T16135] ? __pfx_rtnl_newlink+0x10/0x10 [ 686.771161][T16135] ? is_bpf_text_address+0x94/0x1a0 [ 686.771186][T16135] ? kernel_text_address+0x8d/0x100 [ 686.771214][T16135] ? arch_stack_walk+0xa6/0xf0 [ 686.771242][T16135] ? __pfx_stack_trace_save+0x10/0x10 [ 686.771280][T16135] ? find_held_lock+0x2b/0x80 [ 686.771307][T16135] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 686.771325][T16135] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 686.771346][T16135] ? __pfx_rtnl_newlink+0x10/0x10 [ 686.771366][T16135] rtnetlink_rcv_msg+0x95e/0xe90 [ 686.771404][T16135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 686.771429][T16135] ? __lock_acquire+0x4a5/0x2630 [ 686.771456][T16135] netlink_rcv_skb+0x159/0x420 [ 686.771478][T16135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 686.771500][T16135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 686.771530][T16135] ? netlink_deliver_tap+0x1ae/0xcc0 [ 686.771555][T16135] netlink_unicast+0x5aa/0x870 [ 686.771579][T16135] ? __pfx_netlink_unicast+0x10/0x10 [ 686.771610][T16135] netlink_sendmsg+0x8b0/0xda0 [ 686.771635][T16135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.771660][T16135] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 686.771687][T16135] ____sys_sendmsg+0xa54/0xc30 [ 686.771740][T16135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.771776][T16135] ___sys_sendmsg+0x190/0x1e0 [ 686.771803][T16135] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.771859][T16135] __sys_sendmsg+0x170/0x220 [ 686.771879][T16135] ? __pfx___sys_sendmsg+0x10/0x10 [ 686.771908][T16135] ? __pfx_ksys_write+0x10/0x10 [ 686.771939][T16135] __do_fast_syscall_32+0xe3/0x8c0 [ 686.771964][T16135] do_fast_syscall_32+0x32/0x70 [ 686.771984][T16135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 686.772007][T16135] RIP: 0023:0xf7f06f6c [ 686.772022][T16135] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 686.772039][T16135] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 686.772058][T16135] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000280 [ 686.772070][T16135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 686.772080][T16135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 686.772090][T16135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.772100][T16135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 686.772125][T16135] [ 687.249008][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.471217][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2886'. [ 687.487673][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2884'. [ 687.491660][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2884'. [ 687.589690][T16150] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2886'. [ 687.737905][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 687.737922][ T40] audit: type=1326 audit(1771623375.161:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.6.2887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 687.754971][T16159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.755825][ T40] audit: type=1326 audit(1771623375.171:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.6.2887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 687.760779][T16159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.772819][ T40] audit: type=1326 audit(1771623375.171:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.6.2887" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 687.783349][ T40] audit: type=1326 audit(1771623375.171:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.6.2887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 687.824103][ T40] audit: type=1326 audit(1771623375.171:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.6.2887" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 687.885021][ T40] audit: type=1326 audit(1771623375.251:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.6.2887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 687.898744][ T40] audit: type=1326 audit(1771623375.251:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.6.2887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 687.910351][ T40] audit: type=1326 audit(1771623375.261:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16161 comm="syz.6.2887" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d5b6b code=0x7ffc0000 [ 687.991446][ T40] audit: type=1326 audit(1771623375.411:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16161 comm="syz.6.2887" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 688.024325][ T40] audit: type=1326 audit(1771623375.431:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.6.2887" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709ef78 code=0x7ffc0000 [ 688.048831][ T5951] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 688.343125][T16169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2891'. [ 688.461284][T16174] PKCS8: Unsupported PKCS#8 version [ 689.013608][T16178] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2893'. [ 689.018358][T16178] bond_slave_1: entered promiscuous mode [ 689.022467][T16178] bond_slave_1: entered allmulticast mode [ 689.099738][T16180] netlink: 'syz.7.2894': attribute type 1 has an invalid length. [ 689.115922][T16180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 689.128172][T16180] vlan2: entered allmulticast mode [ 689.130844][T16180] vlan0: entered allmulticast mode [ 689.133185][T16180] veth0_vlan: entered allmulticast mode [ 689.136885][T16180] bond2: (slave vlan2): Opening slave failed [ 689.194553][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 689.207930][T16183] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.228172][T16185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2896'. [ 689.325994][T16183] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.389134][T16183] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.433199][T16192] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 689.490245][T16183] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.524485][T16197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.529942][T16197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.575923][T14721] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.583793][T14721] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.593013][ T171] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.606946][ T171] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.974627][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2901'. [ 689.978256][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2901'. [ 690.296806][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.546912][ T6757] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 690.552708][ T6757] hid-generic 0000:0000:0000.0040: hidraw1: HID v0.00 Device [syz1] on syz0 [ 690.764645][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.764762][ T171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.768720][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.035810][ T1272] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.199163][ T1272] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.209029][T16221] fuse: Bad value for 'group_id' [ 691.215061][T16221] fuse: Bad value for 'group_id' [ 691.243488][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 691.322503][ T1272] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.405502][ T1272] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.420479][ T8802] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 691.590719][ T8802] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.595167][ T8802] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 691.602309][ T8802] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 691.606234][ T8802] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 691.610496][ T8802] usb 12-1: Product: syz [ 691.612360][ T8802] usb 12-1: Manufacturer: syz [ 691.614373][ T8802] usb 12-1: SerialNumber: syz [ 691.688252][ T6757] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 691.902746][ T8802] usb 12-1: config 0 descriptor?? [ 692.039627][T14721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.176384][ T1272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.185566][ T1272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.212189][ T1272] bond0 (unregistering): Released all slaves [ 692.228696][ T1272] bond1 (unregistering): (slave wlan0): Releasing backup interface [ 692.249384][ T1272] bond1 (unregistering): Released all slaves [ 692.268316][ T1272] bond2 (unregistering): Released all slaves [ 692.529246][ T6757] hid-generic 0000:0000:0000.0041: hidraw1: HID v0.00 Device [syz1] on syz0 [ 692.618394][T16241] fido_id[16241]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 692.668681][ T1272] tipc: Left network mode [ 692.702330][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2910'. [ 692.705271][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2910'. [ 693.319481][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.997352][T16273] batman_adv: batadv0: Adding interface: dummy0 [ 694.000070][T16273] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.010348][T16273] batman_adv: batadv0: Interface activated: dummy0 [ 694.206415][T14529] usb 12-1: USB disconnect, device number 7 [ 694.854612][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2919'. [ 694.858109][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2919'. [ 694.905703][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.910825][T14721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.059789][ T1272] hsr_slave_0: left promiscuous mode [ 695.062998][ T1272] hsr_slave_1: left promiscuous mode [ 695.066064][ T1272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.081380][ T1272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.089088][ T1272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.092394][ T1272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.156671][ T1272] veth1_macvtap: left promiscuous mode [ 695.159192][ T1272] veth0_macvtap: left promiscuous mode [ 695.161814][ T1272] veth1_vlan: left promiscuous mode [ 695.164215][ T1272] veth0_vlan: left promiscuous mode [ 695.384728][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.392238][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.439337][ T1272] team0 (unregistering): Port device team_slave_1 removed [ 695.455924][ T1272] team0 (unregistering): Port device team_slave_0 removed [ 695.705706][ T29] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 695.717929][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2917'. [ 695.720208][ T29] hid-generic 0000:0000:0000.0042: hidraw1: HID v0.00 Device [syz1] on syz0 [ 695.727792][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2917'. [ 695.837495][T16317] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 696.091496][T16322] hub 2-0:1.0: USB hub found [ 696.093389][T16322] hub 2-0:1.0: 2 ports detected [ 696.139862][ T1272] IPVS: stop unused estimator thread 0... [ 696.365321][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.400604][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2923'. [ 696.403508][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2923'. [ 696.518922][ T171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.087424][T16336] wg2 speed is unknown, defaulting to 1000 [ 697.187365][T16338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2924'. [ 697.227790][T16336] vcan0 speed is unknown, defaulting to 1000 [ 697.809888][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.870372][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2928'. [ 697.983495][T16350] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.024855][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2928'. [ 698.109583][T16350] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.219476][T16350] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.302371][T16350] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.458155][ T171] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.467110][ T171] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.605012][ T171] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.627064][ T171] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.781873][T16364] wg2 speed is unknown, defaulting to 1000 [ 698.884189][T16369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2933'. [ 698.980795][T16364] vcan0 speed is unknown, defaulting to 1000 [ 699.197758][T16376] binder: 16375:16376 ioctl c0306201 0 returned -14 [ 699.234428][T14566] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 699.418801][T14566] usb 11-1: Using ep0 maxpacket: 8 [ 699.423760][ T8802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.430184][T14566] usb 11-1: config 162 has an invalid interface number: 79 but max is 0 [ 699.433602][T14566] usb 11-1: config 162 has no interface number 0 [ 699.436263][T14566] usb 11-1: config 162 interface 79 has no altsetting 0 [ 699.444070][T14566] usb 11-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 699.447874][T14566] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.469067][T14566] usb 11-1: Product: syz [ 699.470850][T14566] usb 11-1: Manufacturer: syz [ 699.472776][T14566] usb 11-1: SerialNumber: syz [ 699.689127][T14460] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 699.710434][T14460] hid-generic 0000:0000:0000.0043: hidraw1: HID v0.00 Device [syz1] on syz0 [ 699.712109][T16365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.728980][T16365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.738991][T16365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.742487][T16365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.781127][T14566] pl2303 11-1:162.79: required endpoints missing [ 699.791534][T14566] usb 11-1: USB disconnect, device number 8 [ 700.480536][T16398] __nla_validate_parse: 2 callbacks suppressed [ 700.480549][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2943'. [ 700.487750][T16398] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.564491][T16398] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.605920][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2943'. [ 700.634037][T16398] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.692122][T16398] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.092256][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 701.092268][ T40] audit: type=1326 audit(1771623388.531:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.0.2945" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 701.101444][ T40] audit: type=1326 audit(1771623388.531:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.0.2945" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 701.109488][ T40] audit: type=1326 audit(1771623388.531:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.0.2945" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 701.117838][ T40] audit: type=1326 audit(1771623388.531:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.0.2945" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 701.126377][ T40] audit: type=1326 audit(1771623388.551:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16410 comm="syz.0.2945" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7185b6b code=0x7ffc0000 [ 701.134390][ T40] audit: type=1326 audit(1771623388.571:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.0.2945" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 701.143839][ T40] audit: type=1326 audit(1771623388.581:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.0.2945" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 701.170612][ T40] audit: type=1326 audit(1771623388.611:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.0.2945" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 701.180044][ T40] audit: type=1326 audit(1771623388.611:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.0.2945" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 701.189718][ T40] audit: type=1326 audit(1771623388.611:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.0.2945" exe="/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 701.370773][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/2:0) [ 702.279711][ T132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.438750][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.571056][ T60] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.585113][ T60] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.597016][ T46] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.612779][ T132] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.875124][T16447] fuse: Bad value for 'group_id' [ 702.877102][T16447] fuse: Bad value for 'group_id' [ 702.887006][ T5951] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 702.919236][ T132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.001312][T16452] netlink: 'syz.6.2961': attribute type 1 has an invalid length. [ 703.065734][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2963'. [ 703.081203][T16456] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.134241][T16456] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.176844][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2963'. [ 703.215780][T16456] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.277504][T16456] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.909699][T16466] fuse: Bad value for 'group_id' [ 703.911690][T16466] fuse: Bad value for 'group_id' [ 704.065631][T16475] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2970'. [ 704.127671][T16479] netlink: 15678 bytes leftover after parsing attributes in process `syz.7.2971'. [ 704.291940][T16485] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 704.294569][T16485] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 704.298019][T16485] vhci_hcd vhci_hcd.0: Device attached [ 704.405819][ T29] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 704.558804][ T24] usb 42-1: SetAddress Request (14) to port 0 [ 704.561330][ T24] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 704.840299][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.050241][ T29] hid-generic 0000:0000:0000.0044: hidraw1: HID v0.00 Device [syz1] on syz0 [ 705.130858][T16486] vhci_hcd: connection reset by peer [ 705.136446][ T132] vhci_hcd vhci_hcd.2: stop threads [ 705.138157][ T132] vhci_hcd vhci_hcd.2: release socket [ 705.140119][ T132] vhci_hcd vhci_hcd.2: disconnect device [ 705.149358][T16494] fido_id[16494]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 705.299620][T16495] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 705.302451][T16495] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 705.305430][T16495] vhci_hcd vhci_hcd.0: Device attached [ 705.323797][T16495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.489350][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.568690][ T34] usb 38-1: SetAddress Request (34) to port 0 [ 705.570873][ T34] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 705.808571][T16503] vhci_hcd: connection reset by peer [ 705.883244][ T171] vhci_hcd vhci_hcd.0: stop threads [ 705.885125][ T171] vhci_hcd vhci_hcd.0: release socket [ 705.888064][ T171] vhci_hcd vhci_hcd.0: disconnect device [ 706.172758][ T60] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.181695][ T60] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.190599][ T60] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.197645][ T171] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.423268][T16535] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2980'. [ 706.832646][ T29] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 706.840779][ T29] hid-generic 0000:0000:0000.0045: hidraw1: HID v0.00 Device [syz1] on syz0 [ 707.613048][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2982'. [ 707.692931][T16557] cifs: Unknown parameter '' [ 708.040217][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.250499][T16562] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 708.252679][T16562] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 708.268918][T16562] vhci_hcd vhci_hcd.0: Device attached [ 708.286907][T16562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.391442][T16566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'. [ 708.394293][T16566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'. [ 708.548722][ T5836] usb 50-1: SetAddress Request (10) to port 0 [ 708.550637][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.550729][ T5836] usb 50-1: new SuperSpeed USB device number 10 using vhci_hcd [ 708.587447][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2987'. [ 708.674493][T16573] ceph: No mds server is up or the cluster is laggy [ 708.679983][T14721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.774798][T16572] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.784520][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2987'. [ 708.809415][T16563] vhci_hcd: connection reset by peer [ 708.810748][ T29] libceph: connect (1)[c::]:6789 error -101 [ 708.811513][T14721] vhci_hcd vhci_hcd.6: stop threads [ 708.813293][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 708.815044][T14721] vhci_hcd vhci_hcd.6: release socket [ 708.818950][T14721] vhci_hcd vhci_hcd.6: disconnect device [ 708.868063][T16580] FAULT_INJECTION: forcing a failure. [ 708.868063][T16580] name failslab, interval 1, probability 0, space 0, times 0 [ 708.872217][T16580] CPU: 3 UID: 0 PID: 16580 Comm: syz.7.2988 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.872236][T16580] Tainted: [L]=SOFTLOCKUP [ 708.872240][T16580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 708.872246][T16580] Call Trace: [ 708.872251][T16580] [ 708.872256][T16580] dump_stack_lvl+0x100/0x190 [ 708.872277][T16580] should_fail_ex.cold+0x5/0xa [ 708.872290][T16580] should_failslab+0xc2/0x120 [ 708.872308][T16580] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 708.872325][T16580] ? __alloc_skb+0x140/0x710 [ 708.872339][T16580] __alloc_skb+0x140/0x710 [ 708.872349][T16580] ? __alloc_skb+0x5b7/0x710 [ 708.872359][T16580] ? __pfx___alloc_skb+0x10/0x10 [ 708.872373][T16580] netlink_ack+0x117/0xb80 [ 708.872388][T16580] ? __lock_acquire+0x4a5/0x2630 [ 708.872404][T16580] netlink_rcv_skb+0x333/0x420 [ 708.872417][T16580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 708.872431][T16580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 708.872450][T16580] ? netlink_deliver_tap+0x1ae/0xcc0 [ 708.872465][T16580] netlink_unicast+0x5aa/0x870 [ 708.872480][T16580] ? __pfx_netlink_unicast+0x10/0x10 [ 708.872498][T16580] netlink_sendmsg+0x8b0/0xda0 [ 708.872514][T16580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.872529][T16580] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 708.872546][T16580] ____sys_sendmsg+0xa54/0xc30 [ 708.872563][T16580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.872597][T16580] ___sys_sendmsg+0x190/0x1e0 [ 708.872614][T16580] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.872647][T16580] __sys_sendmsg+0x170/0x220 [ 708.872659][T16580] ? __pfx___sys_sendmsg+0x10/0x10 [ 708.872676][T16580] ? __pfx_ksys_write+0x10/0x10 [ 708.872696][T16580] __do_fast_syscall_32+0xe3/0x8c0 [ 708.872711][T16580] do_fast_syscall_32+0x32/0x70 [ 708.872724][T16580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 708.872740][T16580] RIP: 0023:0xf7f06f6c [ 708.872749][T16580] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 708.872764][T16580] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 708.872775][T16580] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 708.872782][T16580] RDX: 0000000024008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 708.872789][T16580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.872795][T16580] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 708.872802][T16580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.872816][T16580] [ 708.972111][T16572] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.995106][T16582] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2989'. [ 709.032999][T16572] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.093037][T16572] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.178361][ T46] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.185823][ T46] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.196307][ T171] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.264225][ T132] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.629944][T16598] netlink: 'syz.2.2994': attribute type 1 has an invalid length. [ 709.645488][T16598] bond1: entered promiscuous mode [ 709.647237][T16598] bond1: entered allmulticast mode [ 709.648719][ T24] usb 42-1: device descriptor read/8, error -110 [ 709.649712][T16598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 709.664676][T16598] erspan1: entered allmulticast mode [ 709.669992][T16598] bond1: (slave erspan1): making interface the new active one [ 709.672460][T16598] erspan1: entered promiscuous mode [ 709.675329][T16598] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 710.060386][ T24] usb usb42-port1: attempt power cycle [ 710.165513][T14460] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 710.169204][T14460] hid-generic 0000:0000:0000.0046: hidraw1: HID v0.00 Device [syz1] on syz0 [ 710.216048][T16605] fido_id[16605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 710.283945][T16609] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 710.355089][T16614] dlm: no locking on control device [ 710.375037][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3000'. [ 710.384497][T16617] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.455429][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3000'. [ 710.464153][T16617] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.541520][T16617] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.598701][ T34] usb 38-1: device descriptor read/8, error -110 [ 710.606289][T16617] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.639824][ T24] usb usb42-port1: unable to enumerate USB device [ 710.700072][ T132] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.716877][ T132] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.730336][ T132] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.733062][ T132] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.811821][ T5951] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 710.814630][ T5951] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 710.818626][T16627] tipc: Enabled bearer , priority 0 [ 710.821992][T16627] syzkaller0: entered promiscuous mode [ 710.823954][T16627] syzkaller0: entered allmulticast mode [ 710.826861][T16628] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 710.829311][T16628] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 710.832440][T16628] vhci_hcd vhci_hcd.0: Device attached [ 710.865525][T16627] tipc: Resetting bearer [ 710.867330][T16628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.871654][T16626] tipc: Resetting bearer [ 710.885606][T16626] tipc: Disabling bearer [ 710.999890][ T34] usb usb38-port1: attempt power cycle [ 711.109859][T14529] usb 52-1: SetAddress Request (14) to port 0 [ 711.112557][T14529] usb 52-1: new SuperSpeed USB device number 14 using vhci_hcd [ 711.408118][T16629] vhci_hcd: connection reset by peer [ 711.410437][ T1151] vhci_hcd vhci_hcd.7: stop threads [ 711.412199][ T1151] vhci_hcd vhci_hcd.7: release socket [ 711.414497][ T1151] vhci_hcd vhci_hcd.7: disconnect device [ 711.563452][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.576137][T13048] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 711.615697][T13048] hid-generic 0000:0000:0000.0047: hidraw1: HID v0.00 Device [syz1] on syz0 [ 711.936046][ T34] usb usb38-port1: unable to enumerate USB device [ 712.344250][T16659] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3011'. [ 712.348358][T16659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3011'. [ 712.352435][T16659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3011'. [ 713.643346][ T5836] usb 50-1: device descriptor read/8, error -110 [ 713.799222][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.806788][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.933763][T14566] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 713.949285][T14566] hid-generic 0000:0000:0000.0048: hidraw1: HID v0.00 Device [syz1] on syz0 [ 714.014063][T16694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3022'. [ 714.060317][T16665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.069300][ T5836] usb usb50-port1: attempt power cycle [ 714.205243][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3024'. [ 714.439551][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.444472][T16711] binder: BINDER_SET_CONTEXT_MGR already set [ 714.446078][T16709] dvmrp1: entered allmulticast mode [ 714.446923][T16711] binder: 16710:16711 ioctl 4018620d 80000040 returned -16 [ 714.531762][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 714.531782][ T40] audit: type=1326 audit(1771623401.971:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16707 comm="syz.2.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 714.546070][ T40] audit: type=1326 audit(1771623401.971:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16707 comm="syz.2.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 714.551253][T16713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.556895][ T40] audit: type=1326 audit(1771623401.971:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16707 comm="syz.2.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 714.563325][T16713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.567853][ T40] audit: type=1326 audit(1771623401.971:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16707 comm="syz.2.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 714.594520][ T40] audit: type=1326 audit(1771623402.031:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16707 comm="syz.2.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 714.603339][ T40] audit: type=1326 audit(1771623402.031:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16707 comm="syz.2.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 714.616627][ T40] audit: type=1326 audit(1771623402.061:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16707 comm="syz.2.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 714.619588][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.625932][ T40] audit: type=1326 audit(1771623402.051:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.2.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c5b6b code=0x7ffc0000 [ 714.637924][ T40] audit: type=1326 audit(1771623402.061:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16707 comm="syz.2.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 714.646698][ T40] audit: type=1326 audit(1771623402.061:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16707 comm="syz.2.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 714.689578][ T5836] usb usb50-port1: unable to enumerate USB device [ 715.193064][T16723] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.3033'. [ 715.228229][T16726] fuse: Bad value for 'group_id' [ 715.230286][T16726] fuse: Bad value for 'group_id' [ 715.319555][ T5836] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 715.324112][ T5836] hid-generic 0000:0000:0000.0049: hidraw1: HID v0.00 Device [syz1] on syz0 [ 715.344837][T16730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3035'. [ 715.397025][T16733] FAULT_INJECTION: forcing a failure. [ 715.397025][T16733] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 715.403423][T16733] CPU: 2 UID: 0 PID: 16733 Comm: syz.0.3036 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.403480][T16733] Tainted: [L]=SOFTLOCKUP [ 715.403487][T16733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 715.403496][T16733] Call Trace: [ 715.403503][T16733] [ 715.403510][T16733] dump_stack_lvl+0x100/0x190 [ 715.403536][T16733] should_fail_ex.cold+0x5/0xa [ 715.403547][T16733] ? prepare_alloc_pages+0x16d/0x5f0 [ 715.403561][T16733] should_fail_alloc_page+0xeb/0x140 [ 715.403580][T16733] prepare_alloc_pages+0x1f0/0x5f0 [ 715.403594][T16733] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 715.403614][T16733] ? __lock_acquire+0x4a5/0x2630 [ 715.403631][T16733] ? __lock_acquire+0x4a5/0x2630 [ 715.403644][T16733] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 715.403666][T16733] ? find_held_lock+0x2b/0x80 [ 715.403685][T16733] ? is_bpf_text_address+0x8a/0x1a0 [ 715.403701][T16733] ? is_bpf_text_address+0x8a/0x1a0 [ 715.403718][T16733] ? bpf_ksym_find+0x124/0x1c0 [ 715.403730][T16733] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 715.403749][T16733] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 715.403768][T16733] ? policy_nodemask+0xed/0x4f0 [ 715.403800][T16733] alloc_pages_mpol+0x1fb/0x550 [ 715.403820][T16733] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 715.403839][T16733] ? __lock_acquire+0x4a5/0x2630 [ 715.403854][T16733] alloc_pages_noprof+0x131/0x390 [ 715.403873][T16733] pte_alloc_one+0x1e/0x3e0 [ 715.403886][T16733] do_fault+0x8cc/0x1950 [ 715.403900][T16733] __handle_mm_fault+0x180f/0x2b60 [ 715.403916][T16733] ? mt_find+0x45e/0x8e0 [ 715.403930][T16733] ? __pfx___handle_mm_fault+0x10/0x10 [ 715.403943][T16733] ? __pfx_mt_find+0x10/0x10 [ 715.403964][T16733] ? find_vma+0xbf/0x140 [ 715.403980][T16733] ? __pfx_find_vma+0x10/0x10 [ 715.403999][T16733] handle_mm_fault+0x36d/0xa20 [ 715.404016][T16733] do_user_addr_fault+0x74c/0x12f0 [ 715.404037][T16733] exc_page_fault+0x6f/0xd0 [ 715.404049][T16733] asm_exc_page_fault+0x26/0x30 [ 715.404061][T16733] RIP: 0010:_copy_from_user+0x93/0xd0 [ 715.404079][T16733] Code: fc 14 fd 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 09 69 80 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 a5 f6 [ 715.404091][T16733] RSP: 0018:ffffc900044af858 EFLAGS: 00050246 [ 715.404101][T16733] RAX: 0000000000000001 RBX: 0000000080000040 RCX: 0000000000000068 [ 715.404108][T16733] RDX: 0000000000000001 RSI: 0000000080000040 RDI: ffffc900044afb30 [ 715.404118][T16733] RBP: 0000000000000068 R08: 0000000000000001 R09: fffff52000895f72 [ 715.404124][T16733] R10: ffffc900044afb97 R11: 0000000000000000 R12: 0000000000000000 [ 715.404131][T16733] R13: ffffc900044afb30 R14: ffff8880253324c0 R15: 0000000000000000 [ 715.404145][T16733] ? _copy_from_user+0x87/0xd0 [ 715.404162][T16733] kvm_vm_ioctl+0xf93/0x4080 [ 715.404175][T16733] ? tomoyo_path_number_perm+0x46d/0x580 [ 715.404192][T16733] ? stack_trace_save+0x8e/0xc0 [ 715.404209][T16733] ? __pfx_stack_trace_save+0x10/0x10 [ 715.404228][T16733] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 715.404239][T16733] ? __lock_acquire+0x4a5/0x2630 [ 715.404253][T16733] ? tomoyo_path_number_perm+0x46d/0x580 [ 715.404269][T16733] ? kasan_save_stack+0x3f/0x50 [ 715.404287][T16733] ? kasan_save_stack+0x30/0x50 [ 715.404309][T16733] ? kasan_save_track+0x14/0x30 [ 715.404330][T16733] ? kasan_save_free_info+0x3b/0x70 [ 715.404351][T16733] ? __kasan_slab_free+0x5f/0x80 [ 715.404375][T16733] ? kfree+0x1f6/0x6b0 [ 715.404393][T16733] ? tomoyo_path_number_perm+0x46d/0x580 [ 715.404417][T16733] ? security_file_ioctl_compat+0xd3/0x230 [ 715.404441][T16733] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 715.404458][T16733] ? __do_fast_syscall_32+0xe3/0x8c0 [ 715.404471][T16733] ? do_fast_syscall_32+0x32/0x70 [ 715.404483][T16733] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 715.404498][T16733] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 715.404528][T16733] ? find_held_lock+0x2b/0x80 [ 715.404545][T16733] ? tomoyo_path_number_perm+0x28f/0x580 [ 715.404561][T16733] ? tomoyo_path_number_perm+0x28f/0x580 [ 715.404580][T16733] ? tomoyo_path_number_perm+0x188/0x580 [ 715.404598][T16733] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 715.404620][T16733] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 715.404639][T16733] ? do_vfs_ioctl+0x226/0x13e0 [ 715.404653][T16733] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 715.404669][T16733] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 715.404683][T16733] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 715.404696][T16733] ? find_held_lock+0x2b/0x80 [ 715.404713][T16733] ? hook_file_ioctl_common+0x146/0x410 [ 715.404733][T16733] ? __fget_files+0x21f/0x3d0 [ 715.404753][T16733] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 715.404765][T16733] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 715.404782][T16733] __do_fast_syscall_32+0xe3/0x8c0 [ 715.404797][T16733] do_fast_syscall_32+0x32/0x70 [ 715.404810][T16733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 715.404824][T16733] RIP: 0023:0xf704ef6c [ 715.404833][T16733] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 715.404844][T16733] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 715.404854][T16733] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004068aea3 [ 715.404861][T16733] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 715.404867][T16733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 715.404874][T16733] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 715.404880][T16733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 715.404894][T16733] [ 715.946193][ T5951] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 715.988822][ T5836] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 716.150215][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.154970][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.159181][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 716.164530][ T5836] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 716.168394][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.175907][ T5836] usb 5-1: config 0 descriptor?? [ 716.198709][T14529] usb 52-1: device descriptor read/8, error -110 [ 716.369180][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.593299][ T5836] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 716.606384][T14529] usb usb52-port1: attempt power cycle [ 716.622937][T16743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.630607][T16743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.169823][T14529] usb usb52-port1: unable to enumerate USB device [ 717.204467][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802b190400: rx timeout, send abort [ 717.208021][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b190400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 717.638894][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.365648][T16737] usb 5-1: string descriptor 0 read error: -2 [ 718.464553][ T5836] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 718.469450][ T5836] hid-generic 0000:0000:0000.004B: hidraw2: HID v0.00 Device [syz1] on syz0 [ 718.499592][T14529] usb 5-1: reset high-speed USB device number 36 using dummy_hcd [ 718.508635][ T29] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 718.628614][T14529] usb 5-1: device descriptor read/64, error -32 [ 718.658619][ T29] usb 11-1: Using ep0 maxpacket: 8 [ 718.662621][ T29] usb 11-1: config 162 has an invalid interface number: 79 but max is 0 [ 718.668002][ T29] usb 11-1: config 162 has no interface number 0 [ 718.670779][ T29] usb 11-1: config 162 interface 79 has no altsetting 0 [ 718.675994][ T29] usb 11-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 718.679917][ T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.682760][ T29] usb 11-1: Product: syz [ 718.684339][ T29] usb 11-1: Manufacturer: syz [ 718.685836][ T29] usb 11-1: SerialNumber: syz [ 718.868623][T14529] usb 5-1: reset high-speed USB device number 36 using dummy_hcd [ 718.898797][T16761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.901892][T16761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.928968][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.933795][T16761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.933858][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.943988][T16761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.954997][ T29] pl2303 11-1:162.79: required endpoints missing [ 718.976114][ T29] usb 11-1: USB disconnect, device number 9 [ 718.999153][T14529] usb 5-1: device descriptor read/64, error -32 [ 719.014807][T16771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.034779][T16771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.866179][ T29] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 719.878682][ T29] hid-generic 0000:0000:0000.004C: hidraw2: HID v0.00 Device [syz1] on syz0 [ 719.893211][ T6371] usb 5-1: USB disconnect, device number 36 [ 721.109409][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.208379][T16795] wg2 speed is unknown, defaulting to 1000 [ 721.250622][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3055'. [ 721.296503][T16795] vcan0 speed is unknown, defaulting to 1000 [ 721.336152][ T9] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 721.399880][ T9] hid-generic 0000:0000:0000.004D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 721.455889][T16800] fido_id[16800]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 721.469580][T16798] netlink: 'syz.6.3056': attribute type 1 has an invalid length. [ 721.472123][T16798] netlink: 'syz.6.3056': attribute type 7 has an invalid length. [ 721.475242][T16798] netlink: 'syz.6.3056': attribute type 8 has an invalid length. [ 721.478499][T16798] netlink: 208 bytes leftover after parsing attributes in process `syz.6.3056'. [ 721.767348][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3059'. [ 721.777038][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3059'. [ 722.779996][T16829] netlink: 'syz.6.3064': attribute type 4 has an invalid length. [ 722.788584][T16829] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3064'. [ 722.879113][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0025 [ 723.717439][T16839] wg2 speed is unknown, defaulting to 1000 [ 723.756878][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3067'. [ 723.944963][T16843] hub 2-0:1.0: USB hub found [ 723.947971][T16843] hub 2-0:1.0: 2 ports detected [ 723.977332][T16839] vcan0 speed is unknown, defaulting to 1000 [ 723.995421][T16843] ptrace attach of "/syz-executor exec"[13516] was attempted by ""[16843] [ 724.049455][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.294017][T16851] fuse: Bad value for 'group_id' [ 724.295681][T16851] fuse: Bad value for 'group_id' [ 724.303075][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 724.360882][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.688653][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.710329][T14460] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 724.712978][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.123175][T14460] hid-generic 0000:0000:0000.004E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 726.376681][T16866] fido_id[16866]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 726.558836][T16877] wg2 speed is unknown, defaulting to 1000 [ 726.597606][T16884] fuse: Bad value for 'group_id' [ 726.603026][T16884] fuse: Bad value for 'group_id' [ 726.607371][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 726.690635][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3082'. [ 726.694665][T16889] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.746771][T16891] tmpfs: Unknown parameter 'hash' [ 726.802101][T16892] ip6_vti0: entered promiscuous mode [ 726.806477][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3082'. [ 726.835746][T16889] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.903189][T16889] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.921659][ T1453] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 726.986395][T16889] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.998632][T16895] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 727.001450][T16895] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 727.012281][T16895] vhci_hcd vhci_hcd.0: Device attached [ 727.045834][T16895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.144308][ T1272] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.278709][ T9] usb 38-1: SetAddress Request (38) to port 0 [ 727.281427][ T9] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 727.345108][ T46] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.355467][ T60] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.363928][ T60] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.399054][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.419995][T16876] wg2 speed is unknown, defaulting to 1000 [ 727.424334][T16877] vcan0 speed is unknown, defaulting to 1000 [ 727.611687][T16896] vhci_hcd: connection reset by peer [ 727.614292][ T60] vhci_hcd vhci_hcd.0: stop threads [ 727.616524][ T60] vhci_hcd vhci_hcd.0: release socket [ 727.618987][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 727.705528][ T1453] usb 12-1: config 0 has an invalid interface number: 204 but max is 0 [ 727.770055][ T1453] usb 12-1: config 0 has no interface number 0 [ 727.774774][ T1453] usb 12-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 727.778470][ T1453] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.782033][ T1453] usb 12-1: Product: syz [ 727.783905][ T1453] usb 12-1: Manufacturer: syz [ 727.785816][ T1453] usb 12-1: SerialNumber: syz [ 727.849209][ T1453] usb 12-1: config 0 descriptor?? [ 727.852683][ T1453] ems_usb 12-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 727.856723][ T1453] ems_usb 12-1:0.204: probe with driver ems_usb failed with error -22 [ 727.864405][T16907] comedi comedi3: comedi_test: 3879 microvolt, 100000 microsecond waveform attached [ 728.002225][T16876] vcan0 speed is unknown, defaulting to 1000 [ 728.004480][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3084'. [ 728.008752][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3084'. [ 728.492039][T16922] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3088'. [ 728.532987][T16923] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 728.535765][T16923] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 728.539421][T16923] vhci_hcd vhci_hcd.0: Device attached [ 728.565364][T16923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.764728][T16932] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 728.767575][T16932] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 728.773083][T16932] vhci_hcd vhci_hcd.0: Device attached [ 728.812585][T16932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.840175][ T24] usb 12-1: USB disconnect, device number 8 [ 728.848837][T14438] usb 42-1: SetAddress Request (18) to port 0 [ 728.851869][T14438] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 728.881952][T16936] fuse: Bad value for 'group_id' [ 728.883614][T16936] fuse: Bad value for 'group_id' [ 728.887856][ T5951] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 728.918814][T14566] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 729.096024][T14566] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 729.100944][T14566] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 729.107786][T14566] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 729.119157][T14566] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 729.156061][T16924] vhci_hcd: connection reset by peer [ 729.161962][ T60] vhci_hcd vhci_hcd.2: stop threads [ 729.163791][ T60] vhci_hcd vhci_hcd.2: release socket [ 729.165136][T14566] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 729.165869][ T60] vhci_hcd vhci_hcd.2: disconnect device [ 729.169988][T14566] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.177106][T14566] usb 11-1: Product: syz [ 729.179589][T14566] usb 11-1: Manufacturer: syz [ 729.186037][T14566] usb 11-1: SerialNumber: syz [ 729.197950][T16933] vhci_hcd: connection closed [ 729.198288][ T60] vhci_hcd vhci_hcd.0: stop threads [ 729.201636][ T60] vhci_hcd vhci_hcd.0: release socket [ 729.203636][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 729.213558][T14566] usb 11-1: config 0 descriptor?? [ 729.327456][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 729.327470][ T40] audit: type=1326 audit(1771623416.761:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.7.3092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 729.343855][ T40] audit: type=1326 audit(1771623416.771:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.7.3092" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 729.355563][ T40] audit: type=1326 audit(1771623416.771:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.7.3092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 729.363188][ T40] audit: type=1326 audit(1771623416.771:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.7.3092" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 729.372118][ T40] audit: type=1326 audit(1771623416.771:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.7.3092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 729.405114][ T40] audit: type=1326 audit(1771623416.841:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.7.3092" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 729.412188][ T40] audit: type=1326 audit(1771623416.841:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16944 comm="syz.7.3092" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7105b6b code=0x7ffc0000 [ 729.419928][ T40] audit: type=1326 audit(1771623416.841:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.7.3092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 729.427050][ T40] audit: type=1326 audit(1771623416.841:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.7.3092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 729.436003][ T40] audit: type=1326 audit(1771623416.841:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.7.3092" exe="/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf7f06f6c code=0x7ffc0000 [ 729.444519][T14566] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 729.644194][T16931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.647138][T16931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.654846][ T24] kernel write not supported for file /adsp1 (pid: 24 comm: kworker/2:0) [ 729.675758][T14566] usb 11-1: USB disconnect, device number 10 [ 729.971388][T16947] wg2 speed is unknown, defaulting to 1000 [ 730.141438][T16947] vcan0 speed is unknown, defaulting to 1000 [ 730.547075][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.550721][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.555205][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.180584][T16960] wg2 speed is unknown, defaulting to 1000 [ 731.254380][T16961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3096'. [ 731.324291][T16960] vcan0 speed is unknown, defaulting to 1000 [ 731.778649][ T5943] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 731.972512][ T5943] hid-generic 0000:0000:0000.004F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 732.006982][T16972] fido_id[16972]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 732.090083][T16974] fuse: Bad value for 'group_id' [ 732.092493][T16974] fuse: Bad value for 'group_id' [ 732.097476][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 732.321603][T16979] all: renamed from bridge_slave_1 [ 732.362414][ T9] usb 38-1: device descriptor read/8, error -110 [ 732.551312][T14460] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 732.558940][T14460] hid-generic 0000:0000:0000.0050: hidraw1: HID v0.00 Device [syz1] on syz0 [ 732.698286][T14460] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 732.749782][ T9] usb usb38-port1: attempt power cycle [ 733.283724][T14460] hid-generic 0000:0000:0000.0051: hidraw2: HID v0.00 Device [syz1] on syz0 [ 733.348119][T16989] fido_id[16989]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 733.398808][ T9] usb usb38-port1: unable to enumerate USB device [ 733.559001][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.648897][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.693308][T16993] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3105'. [ 733.697521][T16993] openvswitch: netlink: Flow actions attr not present in new flow. [ 733.890650][T14438] usb 42-1: device descriptor read/8, error -110 [ 734.079384][T16996] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 734.082482][T16996] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 734.085678][T16996] vhci_hcd vhci_hcd.0: Device attached [ 734.120567][T16997] wg2 speed is unknown, defaulting to 1000 [ 734.186960][T17002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3106'. [ 734.267294][T16996] random: crng reseeded on system resumption [ 734.358846][T14438] usb usb42-port1: attempt power cycle [ 734.379323][ T1323] usb 52-1: SetAddress Request (18) to port 0 [ 734.381863][ T1323] usb 52-1: new SuperSpeed USB device number 18 using vhci_hcd [ 734.938625][T16997] vcan0 speed is unknown, defaulting to 1000 [ 735.128191][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.140117][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.155042][T17006] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 735.242579][T14438] usb usb42-port1: unable to enumerate USB device [ 735.363680][T17011] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 735.366534][T17011] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 735.384309][T17011] vhci_hcd vhci_hcd.0: Device attached [ 735.391671][T17011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.520829][T17012] vhci_hcd: connection closed [ 735.521048][ T1272] vhci_hcd vhci_hcd.2: stop threads [ 735.525196][ T1272] vhci_hcd vhci_hcd.2: release socket [ 735.528046][ T1272] vhci_hcd vhci_hcd.2: disconnect device [ 735.530611][T16998] vhci_hcd: connection reset by peer [ 735.533065][ T1272] vhci_hcd vhci_hcd.7: stop threads [ 735.536642][ T1272] vhci_hcd vhci_hcd.7: release socket [ 735.539532][ T1272] vhci_hcd vhci_hcd.7: disconnect device [ 735.872127][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 735.872146][ T40] audit: type=1326 audit(1771623423.311:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.6.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 735.884106][ T40] audit: type=1326 audit(1771623423.311:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.6.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 735.891560][ T40] audit: type=1326 audit(1771623423.311:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.6.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 735.899184][ T40] audit: type=1326 audit(1771623423.311:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.6.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 735.906549][ T40] audit: type=1326 audit(1771623423.321:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.6.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 735.915644][ T40] audit: type=1326 audit(1771623423.321:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17022 comm="syz.6.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d5b6b code=0x7ffc0000 [ 735.924697][ T40] audit: type=1326 audit(1771623423.321:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.6.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 735.939584][ T40] audit: type=1326 audit(1771623423.331:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.6.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 735.955800][ T40] audit: type=1326 audit(1771623423.331:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.6.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 735.967706][ T40] audit: type=1326 audit(1771623423.331:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.6.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 736.212208][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.216008][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.610150][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.648619][ T1453] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 736.800275][ T1453] usb 12-1: config index 0 descriptor too short (expected 23569, got 27) [ 736.803717][ T1453] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.808706][ T1453] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 736.812368][ T1453] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 736.815599][ T1453] usb 12-1: Manufacturer: syz [ 736.819915][ T1453] usb 12-1: config 0 descriptor?? [ 736.878754][ T1453] rc_core: IR keymap rc-hauppauge not found [ 736.880807][ T1453] Registered IR keymap rc-empty [ 736.885380][ T1453] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 736.890850][ T1453] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input26 [ 737.038423][ T1453] usb 12-1: USB disconnect, device number 9 [ 737.717718][ T24] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 737.723072][ T24] hid-generic 0000:0000:0000.0052: hidraw1: HID v0.00 Device [syz1] on syz0 [ 738.303815][T17049] x_tables: duplicate underflow at hook 2 [ 738.458107][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3117'. [ 738.462095][T17051] block nbd0: Unsupported socket: should be TCP or UNIX. [ 739.345309][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3123'. [ 739.397418][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3122'. [ 739.405695][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3122'. [ 739.482182][ T1323] usb 52-1: device descriptor read/8, error -110 [ 739.612468][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3123'. [ 739.638762][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.906775][ T1323] usb usb52-port1: attempt power cycle [ 740.131450][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3124'. [ 740.134987][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3124'. [ 740.345149][ T1453] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 740.351508][ T1453] hid-generic 0000:0000:0000.0053: hidraw1: HID v0.00 Device [syz1] on syz0 [ 740.469768][ T1323] usb usb52-port1: unable to enumerate USB device [ 740.575164][T17097] FAULT_INJECTION: forcing a failure. [ 740.575164][T17097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.580298][T17097] CPU: 3 UID: 0 PID: 17097 Comm: syz.6.3128 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.580327][T17097] Tainted: [L]=SOFTLOCKUP [ 740.580333][T17097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 740.580345][T17097] Call Trace: [ 740.580351][T17097] [ 740.580359][T17097] dump_stack_lvl+0x100/0x190 [ 740.580389][T17097] should_fail_ex.cold+0x5/0xa [ 740.580410][T17097] _copy_from_iter+0x1f4/0x1690 [ 740.580440][T17097] ? __asan_memset+0x23/0x50 [ 740.580479][T17097] ? __pfx__copy_from_iter+0x10/0x10 [ 740.580505][T17097] ? __pfx___alloc_skb+0x10/0x10 [ 740.580534][T17097] netlink_sendmsg+0x808/0xda0 [ 740.580561][T17097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.580585][T17097] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 740.580612][T17097] ____sys_sendmsg+0xa54/0xc30 [ 740.580638][T17097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 740.580673][T17097] ___sys_sendmsg+0x190/0x1e0 [ 740.580700][T17097] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.580756][T17097] __sys_sendmsg+0x170/0x220 [ 740.580777][T17097] ? __pfx___sys_sendmsg+0x10/0x10 [ 740.580802][T17097] ? __pfx_ksys_write+0x10/0x10 [ 740.580832][T17097] __do_fast_syscall_32+0xe3/0x8c0 [ 740.580856][T17097] do_fast_syscall_32+0x32/0x70 [ 740.580877][T17097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 740.580899][T17097] RIP: 0023:0xf709ef6c [ 740.580913][T17097] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 740.580931][T17097] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 740.580947][T17097] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800010c0 [ 740.580961][T17097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 740.580972][T17097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 740.580982][T17097] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 740.580994][T17097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 740.581018][T17097] [ 741.408962][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 741.408974][ T40] audit: type=1326 audit(1771623428.841:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17102 comm="syz.0.3130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 741.417835][ T40] audit: type=1326 audit(1771623428.841:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17102 comm="syz.0.3130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 741.425465][ T40] audit: type=1326 audit(1771623428.841:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17102 comm="syz.0.3130" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 741.447401][ T40] audit: type=1326 audit(1771623428.841:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17102 comm="syz.0.3130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 741.456037][ T40] audit: type=1326 audit(1771623428.841:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17102 comm="syz.0.3130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 741.463577][ T40] audit: type=1326 audit(1771623428.841:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17102 comm="syz.0.3130" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 741.472420][ T40] audit: type=1326 audit(1771623428.881:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17108 comm="syz.0.3130" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7185b6b code=0x7ffc0000 [ 741.488754][ T40] audit: type=1326 audit(1771623428.881:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17102 comm="syz.0.3130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 741.512776][ T40] audit: type=1326 audit(1771623428.881:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17102 comm="syz.0.3130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 741.609595][ T40] audit: type=1326 audit(1771623429.041:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17108 comm="syz.0.3130" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 741.960348][ T1272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.964142][ T1272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.526439][T17117] comedi comedi0: das16m1: I/O port conflict (0x7,16) [ 742.537960][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3134'. [ 742.596909][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3134'. [ 742.688968][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.709935][T17126] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3137'. [ 742.749741][ T5951] Bluetooth: hci3: connection err: -111 [ 742.799931][T17130] fuse: Bad value for 'fd' [ 742.820378][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 743.081463][ T6757] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 743.085133][ T6757] hid-generic 0000:0000:0000.0054: hidraw1: HID v0.00 Device [syz1] on syz0 [ 743.217988][T17143] overlay: Bad value for 'nfs_export' [ 743.380607][T17147] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 743.612292][T17150] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3146'. [ 743.685275][T17152] batadv_slave_0: entered promiscuous mode [ 743.712821][T17151] batadv_slave_0: left promiscuous mode [ 743.811653][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 744.073495][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.283243][T17158] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.355429][T17158] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.368520][T17159] __nla_validate_parse: 1 callbacks suppressed [ 744.371461][T17159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3150'. [ 744.412567][T17158] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.473578][T17158] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.567050][ T60] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.577744][ T60] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.590854][ T60] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.597867][ T60] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.025277][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3153'. [ 745.028144][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3153'. [ 745.641423][ T1272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.645796][ T1272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.778426][T17180] FAULT_INJECTION: forcing a failure. [ 745.778426][T17180] name failslab, interval 1, probability 0, space 0, times 0 [ 745.783351][T17180] CPU: 3 UID: 0 PID: 17180 Comm: syz.7.3155 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.783372][T17180] Tainted: [L]=SOFTLOCKUP [ 745.783377][T17180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 745.783384][T17180] Call Trace: [ 745.783388][T17180] [ 745.783393][T17180] dump_stack_lvl+0x100/0x190 [ 745.783413][T17180] should_fail_ex.cold+0x5/0xa [ 745.783426][T17180] should_failslab+0xc2/0x120 [ 745.783445][T17180] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 745.783467][T17180] ? __alloc_skb+0x140/0x710 [ 745.783481][T17180] __alloc_skb+0x140/0x710 [ 745.783491][T17180] ? __alloc_skb+0x5b7/0x710 [ 745.783501][T17180] ? __pfx___alloc_skb+0x10/0x10 [ 745.783511][T17180] ? genl_rcv_msg+0x4be/0x800 [ 745.783530][T17180] netlink_ack+0x117/0xb80 [ 745.783548][T17180] netlink_rcv_skb+0x333/0x420 [ 745.783561][T17180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 745.783577][T17180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 745.783597][T17180] ? netlink_deliver_tap+0x1ae/0xcc0 [ 745.783608][T17180] ? __rcu_read_unlock+0x27f/0x5e0 [ 745.783625][T17180] genl_rcv+0x28/0x40 [ 745.783638][T17180] netlink_unicast+0x5aa/0x870 [ 745.783653][T17180] ? __pfx_netlink_unicast+0x10/0x10 [ 745.783672][T17180] netlink_sendmsg+0x8b0/0xda0 [ 745.783688][T17180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.783703][T17180] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 745.783719][T17180] ____sys_sendmsg+0xa54/0xc30 [ 745.783737][T17180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.783759][T17180] ___sys_sendmsg+0x190/0x1e0 [ 745.783776][T17180] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.783809][T17180] __sys_sendmsg+0x170/0x220 [ 745.783821][T17180] ? __pfx___sys_sendmsg+0x10/0x10 [ 745.783842][T17180] __do_fast_syscall_32+0xe3/0x8c0 [ 745.783857][T17180] do_fast_syscall_32+0x32/0x70 [ 745.783870][T17180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 745.783885][T17180] RIP: 0023:0xf7f06f6c [ 745.783895][T17180] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 745.783905][T17180] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 745.783916][T17180] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 745.783923][T17180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 745.783929][T17180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 745.783935][T17180] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 745.783942][T17180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.783956][T17180] [ 745.977508][ T8802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.163353][ T5951] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 746.260221][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3156'. [ 746.322300][T17190] netlink: 'syz.0.3159': attribute type 18 has an invalid length. [ 746.325106][T17190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3159'. [ 746.400375][T17201] xt_policy: neither incoming nor outgoing policy selected [ 746.426696][T17205] tipc: Enabling of bearer rejected, failed to enable media [ 746.528843][ T6757] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 746.538431][ T6757] hid-generic 0000:0000:0000.0055: hidraw1: HID v0.00 Device [syz1] on syz0 [ 746.620996][T17218] binder: BINDER_SET_CONTEXT_MGR already set [ 746.623062][T17218] binder: 17217:17218 ioctl 4018620d 80000040 returned -16 [ 746.681078][T17221] FAULT_INJECTION: forcing a failure. [ 746.681078][T17221] name failslab, interval 1, probability 0, space 0, times 0 [ 746.685424][T17221] CPU: 2 UID: 0 PID: 17221 Comm: syz.7.3167 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.685444][T17221] Tainted: [L]=SOFTLOCKUP [ 746.685448][T17221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 746.685455][T17221] Call Trace: [ 746.685460][T17221] [ 746.685465][T17221] dump_stack_lvl+0x100/0x190 [ 746.685486][T17221] should_fail_ex.cold+0x5/0xa [ 746.685499][T17221] should_failslab+0xc2/0x120 [ 746.685518][T17221] __kmalloc_cache_noprof+0x7a/0x6f0 [ 746.685531][T17221] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 746.685547][T17221] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 746.685565][T17221] tcp_sendmsg_fastopen+0x24d/0x750 [ 746.685584][T17221] mptcp_sendmsg+0x1468/0x1e40 [ 746.685599][T17221] ? aa_sk_perm+0x2de/0xb40 [ 746.685619][T17221] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 746.685633][T17221] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 746.685645][T17221] inet_sendmsg+0x11c/0x140 [ 746.685661][T17221] ____sys_sendmsg+0x9ad/0xc30 [ 746.685678][T17221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.685700][T17221] ___sys_sendmsg+0x190/0x1e0 [ 746.685717][T17221] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.685750][T17221] __sys_sendmsg+0x170/0x220 [ 746.685762][T17221] ? __pfx___sys_sendmsg+0x10/0x10 [ 746.685779][T17221] ? __pfx_ksys_write+0x10/0x10 [ 746.685799][T17221] __do_fast_syscall_32+0xe3/0x8c0 [ 746.685815][T17221] do_fast_syscall_32+0x32/0x70 [ 746.685828][T17221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.685843][T17221] RIP: 0023:0xf7f06f6c [ 746.685852][T17221] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 746.685863][T17221] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 746.685874][T17221] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 746.685881][T17221] RDX: 0000000030004001 RSI: 0000000000000000 RDI: 0000000000000000 [ 746.685888][T17221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 746.685894][T17221] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 746.685901][T17221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.685915][T17221] [ 746.818061][T17223] xt_connbytes: Forcing CT accounting to be enabled [ 746.874364][ T5951] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 747.042548][T17232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3171'. [ 747.047308][T17232] random: crng reseeded on system resumption [ 747.593121][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3174'. [ 747.645009][T17244] comedi comedi2: aio_aio12_8: I/O port conflict (0xcff,32) [ 747.719739][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.723611][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.889336][T14438] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 748.893912][T14438] hid-generic 0000:0000:0000.0056: hidraw1: HID v0.00 Device [syz1] on syz0 [ 749.272847][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.386079][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3180'. [ 749.392934][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3180'. [ 749.588090][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3183'. [ 749.650085][T14438] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 749.658862][T14438] hid-generic 0000:0000:0000.0057: hidraw1: HID v0.00 Device [syz1] on syz0 [ 749.731993][T17283] mkiss: ax0: crc mode is auto. [ 750.880875][T17303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3191'. [ 751.636852][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3192'. [ 751.640275][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3192'. [ 752.199652][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.206183][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.209354][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.210165][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.325566][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.369002][T17327] wg2 speed is unknown, defaulting to 1000 [ 752.441508][T17329] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3196'. [ 752.560912][T17327] vcan0 speed is unknown, defaulting to 1000 [ 752.580716][T17332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.479234][T17290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.080218][T17361] FAULT_INJECTION: forcing a failure. [ 754.080218][T17361] name failslab, interval 1, probability 0, space 0, times 0 [ 754.084984][T17361] CPU: 1 UID: 0 PID: 17361 Comm: syz.2.3204 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.085012][T17361] Tainted: [L]=SOFTLOCKUP [ 754.085017][T17361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 754.085026][T17361] Call Trace: [ 754.085031][T17361] [ 754.085037][T17361] dump_stack_lvl+0x100/0x190 [ 754.085064][T17361] should_fail_ex.cold+0x5/0xa [ 754.085078][T17361] should_failslab+0xc2/0x120 [ 754.085097][T17361] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 754.085112][T17361] ? do_getname+0x35/0x390 [ 754.085127][T17361] do_getname+0x35/0x390 [ 754.085143][T17361] do_sys_openat2+0xc5/0x1e0 [ 754.085157][T17361] ? __pfx_do_sys_openat2+0x10/0x10 [ 754.085169][T17361] ? __fget_files+0x215/0x3d0 [ 754.085188][T17361] ? __fget_files+0x21f/0x3d0 [ 754.085206][T17361] __ia32_compat_sys_openat+0x12d/0x210 [ 754.085221][T17361] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 754.085236][T17361] ? __pfx_ksys_write+0x10/0x10 [ 754.085256][T17361] __do_fast_syscall_32+0xe3/0x8c0 [ 754.085272][T17361] do_fast_syscall_32+0x32/0x70 [ 754.085285][T17361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 754.085300][T17361] RIP: 0023:0xf708ef6c [ 754.085310][T17361] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 754.085321][T17361] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 754.085331][T17361] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800013c0 [ 754.085339][T17361] RDX: 0000000000000042 RSI: 0000000000000804 RDI: 0000000000000000 [ 754.085345][T17361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 754.085352][T17361] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 754.085359][T17361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 754.085372][T17361] [ 754.769074][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.203986][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 755.204030][ T40] audit: type=1326 audit(1771623442.641:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.2.3209" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 755.300942][T17378] binder: 17366:17378 ioctl c0306201 80000180 returned -14 [ 755.326057][ T40] audit: type=1326 audit(1771623442.641:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.2.3209" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 755.341108][ T40] audit: type=1326 audit(1771623442.641:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.2.3209" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 755.350064][ T40] audit: type=1326 audit(1771623442.641:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.2.3209" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 755.357501][ T40] audit: type=1326 audit(1771623442.641:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.2.3209" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 755.366165][ T40] audit: type=1326 audit(1771623442.641:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.2.3209" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 755.373387][ T40] audit: type=1326 audit(1771623442.641:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.2.3209" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef78 code=0x7ffc0000 [ 755.380495][ T40] audit: type=1326 audit(1771623442.641:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.2.3209" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef78 code=0x7ffc0000 [ 755.387489][ T40] audit: type=1326 audit(1771623442.641:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.2.3209" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef78 code=0x7ffc0000 [ 755.394685][ T40] audit: type=1326 audit(1771623442.641:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.2.3209" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef78 code=0x7ffc0000 [ 755.694333][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.746417][T17377] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 756.021308][T17387] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3210'. [ 756.305385][T17389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.311787][T17389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.569399][T17391] input: syz1 as /devices/virtual/input/input27 [ 756.858729][ T1453] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 757.008868][ T1453] usb 5-1: Using ep0 maxpacket: 32 [ 757.012793][ T1453] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 757.015872][ T1453] usb 5-1: config 0 has no interface number 0 [ 757.018179][ T1453] usb 5-1: config 0 interface 176 has no altsetting 0 [ 757.024062][ T1453] usb 5-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 757.027463][ T1453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.031295][ T1453] usb 5-1: Product: syz [ 757.032884][ T1453] usb 5-1: Manufacturer: syz [ 757.034789][ T1453] usb 5-1: SerialNumber: syz [ 757.042654][ T1453] usb 5-1: config 0 descriptor?? [ 757.047813][ T1453] usb-storage 5-1:0.176: USB Mass Storage device detected [ 757.059081][ T1453] usb-storage 5-1:0.176: Quirks match for vid 050d pid 0115: 4 [ 757.254304][ T1453] usb 5-1: USB disconnect, device number 37 [ 758.761111][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.249495][T14721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.798999][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.957755][T17439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.962707][T17439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.334739][T17463] wg2 speed is unknown, defaulting to 1000 [ 761.387792][T17466] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3227'. [ 761.422601][T17463] vcan0 speed is unknown, defaulting to 1000 [ 761.799436][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.802970][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.492301][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.568242][T17476] netlink: 'syz.6.3231': attribute type 1 has an invalid length. [ 762.586455][T17476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 762.600306][T17476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 762.602691][T17476] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 762.606424][T17476] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 764.369313][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.840936][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.848718][T14566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.874792][T17506] binder: BINDER_SET_CONTEXT_MGR already set [ 764.877468][T17506] binder: 17505:17506 ioctl 4018620d 80000040 returned -16 [ 765.257118][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3239'. [ 765.265138][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3239'. [ 765.483543][T17520] BUG: unable to handle page fault for address: ffffed1012e6a200 [ 765.486843][T17520] #PF: supervisor read access in kernel mode [ 765.489233][T17520] #PF: error_code(0x0000) - not-present page [ 765.493538][T17520] PGD 7ffd5067 P4D 7ffd5067 PUD 3fffa067 PMD 0 [ 765.496189][T17520] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 765.498419][T17520] CPU: 2 UID: 0 PID: 17520 Comm: syz.6.3241 Tainted: G L syzkaller #0 PREEMPT(full) [ 765.502374][T17520] Tainted: [L]=SOFTLOCKUP [ 765.504021][T17520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 765.507447][T17520] RIP: 0010:ip_route_output_key_hash_rcu+0x6c0/0x2870 [ 765.510301][T17520] Code: 24 30 48 85 ed 0f 84 91 14 00 00 e8 7a 66 1d f8 48 83 c5 30 e8 71 66 1d f8 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 06 1e 00 00 48 8b 6d 00 e8 bd 2a a2 01 31 ff 41 [ 765.518225][T17520] RSP: 0000:ffffc90007e77458 EFLAGS: 00010a06 [ 765.520646][T17520] RAX: dffffc0000000000 RBX: ffffc90007e776a8 RCX: ffffc90029a60000 [ 765.523795][T17520] RDX: 1ffff11012e6a200 RSI: ffffffff89ea948f RDI: ffff8880264d7f58 [ 765.526877][T17520] RBP: ffff888097351000 R08: 0000000000000001 R09: 0000000000000000 [ 765.529879][T17520] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880264d7f20 [ 765.532783][T17520] R13: ffff88802895ac00 R14: ffffc90007e77508 R15: ffff888012d10000 [ 765.535784][T17520] FS: 0000000000000000(0000) GS:ffff888097351000(0063) knlGS:00000000f548db40 [ 765.539258][T17520] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 765.541973][T17520] CR2: ffffed1012e6a200 CR3: 000000005c8fd000 CR4: 0000000000352ef0 [ 765.545310][T17520] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 765.548692][T17520] DR3: 000000001135000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 765.552971][T17520] Call Trace: [ 765.555264][T17520] [ 765.556761][T17520] ip_route_output_key_hash+0x118/0x2b0 [ 765.559114][T17520] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 765.561783][T17520] ? crng_fast_key_erasure+0x1d6/0x260 [ 765.564120][T17520] ip_route_output_flow+0x27/0x150 [ 765.566283][T17520] sctp_v4_get_dst+0x3c4/0x1220 [ 765.568320][T17520] ? __asan_memset+0x23/0x50 [ 765.570183][T17520] ? _get_random_bytes+0xa8/0x220 [ 765.572059][T17520] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 765.574113][T17520] ? lockdep_init_map_type+0x5c/0x250 [ 765.576390][T17520] ? timer_init_key+0x150/0x340 [ 765.578481][T17520] sctp_transport_route+0x131/0x360 [ 765.580644][T17520] sctp_assoc_add_peer+0x765/0x14f0 [ 765.582586][T17520] sctp_connect_new_asoc+0x1f8/0x770 [ 765.584697][T17520] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 765.587161][T17520] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 765.589589][T17520] __sctp_connect+0x3e7/0xc70 [ 765.591580][T17520] ? __pfx___sctp_connect+0x10/0x10 [ 765.593770][T17520] __sctp_setsockopt_connectx+0x100/0x190 [ 765.596278][T17520] sctp_getsockopt+0x3e88/0x7080 [ 765.598239][T17520] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 765.600501][T17520] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 765.603295][T17520] ? __pfx_sctp_getsockopt+0x10/0x10 [ 765.605482][T17520] ? preempt_schedule_thunk+0x16/0x30 [ 765.607752][T17520] ? __pfx___might_resched+0x10/0x10 [ 765.609938][T17520] ? find_held_lock+0x2b/0x80 [ 765.611829][T17520] ? aa_sk_perm+0x2de/0xb40 [ 765.613767][T17520] ? __pfx_aa_sk_perm+0x10/0x10 [ 765.615749][T17520] ? __lock_acquire+0x4a5/0x2630 [ 765.617852][T17520] ? __pfx_futex_wake+0x10/0x10 [ 765.619941][T17520] ? aa_sock_opt_perm+0xfe/0x1b0 [ 765.622025][T17520] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 765.624482][T17520] do_sock_getsockopt+0x259/0x3d0 [ 765.626619][T17520] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 765.628937][T17520] __sys_getsockopt+0x133/0x1d0 [ 765.631014][T17520] ? __ia32_sys_getsockopt+0xbc/0x160 [ 765.633217][T17520] __ia32_sys_getsockopt+0xbc/0x160 [ 765.635664][T17520] ? __do_fast_syscall_32+0x94/0x8c0 [ 765.637877][T17520] ? lockdep_hardirqs_on+0x78/0x100 [ 765.640217][T17520] __do_fast_syscall_32+0xe3/0x8c0 [ 765.642354][T17520] do_fast_syscall_32+0x32/0x70 [ 765.644469][T17520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 765.647128][T17520] RIP: 0023:0xf709ef6c [ 765.648822][T17520] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 765.656084][T17520] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 765.659612][T17520] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000084 [ 765.662842][T17520] RDX: 000000000000006f RSI: 0000000080000200 RDI: 0000000080000140 [ 765.666054][T17520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 765.669227][T17520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.671888][T17520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 765.674251][T17520] [ 765.675507][T17520] Modules linked in: [ 765.677073][T17520] CR2: ffffed1012e6a200 [ 765.678824][T17520] ---[ end trace 0000000000000000 ]--- [ 765.681278][T17520] RIP: 0010:ip_route_output_key_hash_rcu+0x6c0/0x2870 [ 765.684449][T17520] Code: 24 30 48 85 ed 0f 84 91 14 00 00 e8 7a 66 1d f8 48 83 c5 30 e8 71 66 1d f8 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 06 1e 00 00 48 8b 6d 00 e8 bd 2a a2 01 31 ff 41 [ 765.691643][T17520] RSP: 0000:ffffc90007e77458 EFLAGS: 00010a06 [ 765.693613][T17520] RAX: dffffc0000000000 RBX: ffffc90007e776a8 RCX: ffffc90029a60000 [ 765.696098][T17520] RDX: 1ffff11012e6a200 RSI: ffffffff89ea948f RDI: ffff8880264d7f58 [ 765.698717][T17520] RBP: ffff888097351000 R08: 0000000000000001 R09: 0000000000000000 [ 765.701603][T17520] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880264d7f20 [ 765.704395][T17520] R13: ffff88802895ac00 R14: ffffc90007e77508 R15: ffff888012d10000 [ 765.707002][T17520] FS: 0000000000000000(0000) GS:ffff888097351000(0063) knlGS:00000000f548db40 [ 765.710647][T17520] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 765.713393][T17520] CR2: ffffed1012e6a200 CR3: 000000005c8fd000 CR4: 0000000000352ef0 [ 765.716438][T17520] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 765.719278][T17520] DR3: 000000001135000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 765.722086][T17520] Kernel panic - not syncing: Fatal exception [ 765.725218][T17520] Kernel Offset: disabled [ 765.726693][T17520] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:37:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000000bcd7b4 RBX=ffffffff8e4975c0 RCX=ffffffff8b8ccc75 RDX=0000000000000001 RSI=ffffffff8c1aeaa0 RDI=ffffffff81dde1cb RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000000 R9 =ffffed1005646795 R10=ffff88802b233cab R11=ffff88802b23c0a8 R12=fffffbfff1c92eb8 R13=0000000000000000 R14=ffffffff90d98910 R15=0000000000000000 RIP=ffffffff8b8cb5df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097151000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080139018 CR3=000000005be9e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 17290365832fda5a 8cc9c0665f02f9a9 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 46a986cd1d6dbb36 36103640e6775e8b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0b73e1a51400717 0fd47bf27f76b316 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3be58863bbd5f359 b0ba5c08bd130154 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 74b433429aa15118 a04b80a764151998 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e1629d27eb6cbf68 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ff9df0178792036 ba91062e13853919 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a67458ef00000000 8feb4833dbe89a81 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b06be3945ff1c0bd e514701424702715 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 026a6ffa12f93864 8b74bbcc173209ec ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=f6f90cd8 EBX=f6f91b78 ECX=89240a46 EDX=f6f91b78 ESI=89240a46 EDI=89240a46 EBP=ffffffff ESP=ffde5e50 EIP=f7089c9e EFL=00000286 [--S--P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57513480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c364afe CR3=000000005be9e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85768405 RDI=ffffffff9b486f80 RBP=ffffffff9b486f40 RSP=ffffc90007e76ca8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000030 R14=0000000000000010 R15=ffffffff857683a0 RIP=ffffffff8576842f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097351000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffed1012e6a200 CR3=000000005c8fd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000001135000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000001d0caf46a3a RBX=ffff88802b523f80 RCX=00000000000006e0 RDX=00000000000001d0 RSI=ffff88802b523f80 RDI=00000000000532d2 RBP=00000000000532d2 RSP=ffffc90007d07b00 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=0000000000000019 R15=ffffffff940d74c0 RIP=ffffffff81b4ef45 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097451000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080198018 CR3=000000005badc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000