last executing test programs: 10.708007164s ago: executing program 3 (id=53): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 7.574668846s ago: executing program 3 (id=76): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000c00)) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) socket$inet_udp(0x2, 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x15, &(0x7f0000000380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x235}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x6b}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xb0, &(0x7f0000000480)=""/176, 0x41100, 0x42, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xa, 0x3, 0x17}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff, r2, r2, r2, r2, r2], &(0x7f00000005c0)=[{0x2, 0x3, 0x6, 0xa}, {0x8, 0x1, 0xf}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='host1x_syncpt_wait_check\x00', r11, 0x0, 0x40}, 0x18) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r12 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r12, 0xc0045516, &(0x7f0000000200)=0xfff) poll(&(0x7f0000000440)=[{r12, 0x400}], 0x1, 0x101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 6.641357816s ago: executing program 3 (id=84): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 4.045066988s ago: executing program 0 (id=97): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0xffffff80, 0x11, &(0x7f00000005c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x3, 0x4e24, 0x200, 0xa, 0x0, 0x80, 0x6c}, {0x2, 0xb04, 0xf39, 0x7, 0x0, 0xffffffffffffffff, 0x6, 0xffffffffffff0000}, {0x8021, 0x5, 0x1, 0x10001}, 0x4, 0x6e6bb2, 0x3, 0x1, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4d4, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3505, 0x1, 0x0, 0x1, 0xf071, 0xf1, 0x7}}, 0xe8) 3.88924372s ago: executing program 0 (id=99): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000080), 0x5, 0x660400) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x25dfdbfd, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x7, 0x4e20, 0x0, 0x2, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0xffffffffffffffff, 0x8, 0xcc}, {0xf6, 0x1, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x804) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/181, 0xb5, 0x365) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000040)={&(0x7f0000001800)=[{0x8, 0x1011, 0x0, 0x0}], 0x1}) 3.795263305s ago: executing program 0 (id=100): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000340)=0xfffffffffffff697, 0x6}], 0x1, 0x0, 0x0, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000000100)=0x8005, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007d80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f}}, 0x20) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001440), 0x0, 0x40002002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000080000000000000000400000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r9, 0x541b, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)) r10 = syz_open_pts(r6, 0x101000) r11 = dup3(r10, r6, 0x0) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000000)=0x17) socket(0x840000000002, 0x3, 0xff) 3.613025935s ago: executing program 3 (id=102): dup(0xffffffffffffffff) syz_io_uring_setup(0x49f, &(0x7f0000000180)={0x0, 0xe7a8, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x9a3) r2 = getpid() socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='g', 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.154850322s ago: executing program 3 (id=103): syz_io_uring_setup(0x34b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0, 0x1}, &(0x7f0000000100), &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7853f87144118a43c1f0af", @ANYRES32=0x0, @ANYBLOB="000002000a000200000000000000"], 0x28}}, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x1060c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCGUSAGES(r7, 0x40305829, &(0x7f0000008340)={{0x1, 0x3, 0x7f, 0x7, 0x1000, 0x40}, 0x2bf, [0xb704, 0x3ff, 0x6, 0x2, 0xfba9, 0x80000001, 0x1c, 0x8, 0x2, 0x80000000, 0x8, 0x8001, 0xffff, 0x1, 0x248b56bb, 0xf734, 0x46a93a47, 0x51e1, 0x6, 0x6, 0xff, 0xffffffff, 0x8, 0x4, 0x4, 0x6, 0xeb09, 0x101, 0x5, 0x6, 0x8, 0x4, 0x3, 0x88, 0x0, 0x0, 0x1000, 0xfb81, 0x8, 0x40, 0x7, 0xf, 0x3ff, 0x401, 0x5, 0x10, 0xfffffffd, 0x1, 0xc6f8, 0x2, 0x80, 0x2, 0x7, 0xa1a, 0x9, 0x6, 0x1, 0x2, 0x0, 0x6, 0x5, 0x8000, 0x6, 0x2, 0x5819, 0x7, 0x6, 0x4f4, 0x3, 0x80000, 0x1000, 0x2, 0xb, 0x4, 0x7, 0x5, 0x1, 0x2, 0x80000000, 0x0, 0x5, 0x2, 0x8, 0x1, 0x0, 0x6, 0xd985, 0x51, 0x1, 0x5, 0x9, 0x6, 0xfffffffe, 0x79, 0x2, 0x8, 0xffe00, 0xfffffffb, 0x71172ab, 0x3, 0x6, 0x6, 0x1, 0xe96, 0x4, 0xa09, 0x2, 0x4, 0x3, 0xa80c, 0x80000001, 0x9, 0xe7, 0x3e, 0x3, 0x0, 0x4, 0x2cdf, 0x1000, 0x3, 0x5, 0xff, 0x0, 0x4, 0x101, 0xff, 0x1400000, 0xfffffff7, 0x8, 0x8, 0x4, 0xffff, 0x2, 0x9, 0xfff, 0xfd93, 0x0, 0x5, 0x21, 0x4, 0x80000001, 0x401, 0x5, 0xfffffffb, 0x48cd, 0x1, 0x7fff, 0x8000, 0xfffffffe, 0x9, 0x1, 0x6, 0x6, 0xf8, 0xfffffffd, 0xa, 0x6, 0x2, 0xfb2, 0x100, 0x10001, 0x1, 0x40, 0x7, 0x8, 0x3e3, 0x0, 0x6, 0x0, 0x9, 0x0, 0x49, 0x3ff, 0x5, 0x1ff, 0x3, 0xbd, 0xfffffff8, 0x1, 0x3, 0x2, 0x6, 0x0, 0x9, 0x38, 0xd, 0x6, 0xfffffffa, 0x6, 0xf, 0x25, 0x2, 0x0, 0x4, 0x9, 0x2896, 0x4, 0x3, 0x3, 0x7, 0x0, 0xb, 0x9, 0xa9, 0x400, 0x8001, 0x8, 0x2, 0xc6ab, 0x18, 0x8, 0x2, 0x0, 0x7, 0x1, 0x6, 0x5, 0x400, 0x3, 0x3, 0x4, 0x1, 0x2, 0x2, 0x7, 0x8, 0x0, 0x7, 0x7, 0x0, 0xffffff64, 0x5, 0x2, 0x6, 0x3, 0x5, 0xc7, 0x7, 0x212, 0x7, 0x5, 0xe19b, 0x7, 0x5, 0x67, 0xa, 0xf60b, 0x1, 0x1, 0x4, 0x98a, 0x6, 0x10, 0x2eb, 0x2f7e, 0x0, 0x4, 0x1d21, 0x9, 0x80, 0xb, 0x1ff, 0xfffffff6, 0x0, 0xffffffff, 0x4, 0x6, 0x3, 0x6, 0x20000000, 0x8, 0xa, 0x3ff, 0x0, 0x7, 0x68b32c17, 0x339, 0x2, 0xc, 0x5, 0x40, 0x2d, 0x1ff, 0x91, 0x7f, 0x4, 0x7, 0x1, 0x2, 0x3b1, 0x800003, 0x2, 0x3, 0x8001, 0x7, 0xfffffffc, 0x8, 0x0, 0x401c, 0x7, 0x200, 0x8, 0x5, 0xab83, 0x73, 0x8001, 0x1, 0x2, 0x8, 0x7, 0x3, 0x4, 0x8, 0x1, 0x74e, 0x88, 0x2, 0x20, 0x6, 0x328, 0xe5, 0x7, 0x9, 0x86a, 0x3, 0x1, 0x2b, 0xfffffffb, 0x6, 0xa, 0xd2e, 0x80000000, 0x7, 0xfffffff8, 0x0, 0x8, 0x569, 0xa, 0x100, 0xac3, 0x5, 0x6, 0xff, 0xe, 0x81, 0xca, 0xfffffffe, 0x7, 0x8, 0x0, 0x7, 0x5, 0x5, 0x4, 0xe, 0x5, 0x9, 0x7fffffff, 0xfffffffe, 0x1, 0x3de, 0x2, 0x1, 0xfb, 0x2, 0xfffffff8, 0x3ff, 0x8, 0x3, 0x8, 0x31eb, 0x7, 0x5, 0x8, 0x4a0000, 0x0, 0x2, 0xb0, 0x4, 0x8000, 0x80, 0xd05, 0x9, 0x5, 0x8, 0x80, 0x2, 0x5, 0xfffffe00, 0x7, 0x0, 0x5, 0x6af, 0x4, 0x8, 0x3, 0x580, 0x7, 0x9, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7ff, 0x4, 0xfffffff8, 0x9, 0x2, 0x3, 0x77ae, 0x1, 0x91c, 0x5, 0x6, 0x3, 0x0, 0x80000000, 0x21000000, 0xfffffffa, 0x3ff, 0xb3, 0x4f8c, 0x4, 0x127, 0x1, 0x2bfe1798, 0x10000, 0x1, 0x44c, 0x0, 0x4, 0x895, 0x8, 0xff9, 0xfffffff7, 0x3, 0x2c, 0x3ff, 0x6, 0x8, 0x7, 0x1, 0x1000, 0xc530, 0x5, 0x8f, 0x0, 0x6, 0x8000, 0x400, 0x7, 0x6, 0x9, 0x1, 0x5f66, 0x10001, 0x1, 0x9, 0x8000, 0x5, 0x80000001, 0x81, 0x6, 0x8, 0x75f, 0xab8, 0x4, 0x4, 0xe0b0, 0xffff, 0xf, 0x2, 0x4, 0x9, 0xffffd40a, 0x2, 0x9, 0x6, 0x2, 0xfffffa86, 0x8, 0x6, 0x101, 0x3, 0xa000000, 0x8, 0x7fffffff, 0x2, 0x6, 0x4, 0x101, 0x1, 0x200, 0x800, 0x9, 0x2, 0x3, 0xf5, 0xb30, 0x9, 0x2, 0x1, 0xd, 0x7fffffff, 0x7, 0x8, 0x0, 0x9, 0x4, 0x1, 0x462, 0x80000001, 0x5, 0x7, 0x3e2b, 0x4, 0x7ff, 0x2, 0x9, 0x3ff, 0x9, 0x8, 0x6, 0x2, 0x1, 0x100, 0xa, 0x5, 0x800, 0x80000000, 0x40, 0x1, 0x10000, 0xffffcd67, 0x5af, 0x3, 0x8, 0x7, 0x0, 0x227, 0x0, 0x8, 0x0, 0x1c18, 0x6, 0x7, 0x0, 0x9, 0xff, 0x6, 0x101, 0x7fff, 0x1, 0x101, 0xd7b, 0x2, 0x6, 0x81, 0x1, 0x10001, 0x3, 0x2, 0x2, 0xbfc8, 0x1, 0x101, 0x23b8, 0x7f, 0x8, 0xad9, 0x8, 0x4, 0xd31, 0x3a64ec4a, 0xffffffcf, 0x81, 0x9536, 0x0, 0x2, 0x3, 0x0, 0x9, 0x4af7e4bc, 0x7, 0x4, 0x2, 0x2f8, 0x4, 0x4, 0x1, 0x1ff, 0x1c7, 0x80000000, 0xd, 0x8, 0x0, 0x7, 0x1, 0x3, 0x6, 0x10000, 0x89e7, 0xa, 0x6d, 0x4, 0x9, 0x6, 0xf, 0x4, 0x706, 0x800, 0xfffffff2, 0x7, 0x7, 0x5, 0x6, 0x1, 0x91, 0x1f, 0x0, 0xb, 0x3, 0x8, 0x42, 0xd3, 0x0, 0x0, 0xfffffff4, 0x1, 0x3e, 0x7923, 0x7, 0x7, 0x101, 0x7, 0x9a0, 0x9, 0xbff, 0xf26, 0x800, 0xe00000, 0x7, 0x171, 0x5, 0xa7, 0x23, 0x400, 0x5, 0x3, 0x5, 0x5, 0x0, 0x0, 0x5, 0x10, 0x6, 0x7, 0x5, 0x4, 0x1, 0x2, 0x0, 0x3, 0x75, 0x3, 0x5, 0xdec3, 0x7, 0x4, 0xfffffff9, 0x3, 0x6, 0x74b, 0xb126, 0xffffffff, 0xbe25, 0x7, 0x9, 0x9a, 0x6, 0x1800000, 0x76f, 0x4, 0x2, 0x4, 0x1, 0x3, 0xfffffff5, 0x7, 0x6, 0xc, 0x1ff, 0x6a, 0xe3, 0x390e, 0x1, 0x8, 0x7fffffff, 0x47, 0x3, 0x24dc, 0x80000001, 0x3ff, 0xfc, 0x0, 0xfffffffa, 0x4, 0xba, 0x3, 0x3, 0x3ff, 0x3, 0x5, 0xf72, 0x5, 0x8, 0x1258dd22, 0x1, 0x4, 0x88, 0xb5e, 0x4, 0x0, 0x3, 0x9, 0x101, 0xff, 0x3, 0x4, 0x39aa, 0xfffffffd, 0x408, 0x9fb0, 0x400, 0x3, 0xfffffff9, 0x7, 0x8, 0x4, 0xafdb, 0x8001, 0x9, 0x0, 0x2a, 0x40, 0x2e77, 0x0, 0x8, 0x7, 0x6, 0x1, 0x81, 0x10, 0x40, 0x1, 0xef, 0x1, 0x9, 0xc, 0xdd5a, 0x0, 0xffff, 0x2, 0x1000, 0x3, 0x1000, 0x3, 0x4, 0x800, 0xfffffffa, 0x800, 0x7, 0x4, 0xfffffffe, 0xfffffff8, 0x81, 0x3ff, 0x7f, 0x4, 0x7, 0xffffffff, 0x0, 0x401, 0xa, 0x468, 0x1, 0xfffffff9, 0x5, 0x7, 0x8000, 0x0, 0x8, 0x5, 0x6, 0x5, 0x2, 0x2, 0x0, 0x1, 0xae9, 0xb07c, 0x13d2, 0x4, 0xfffffffe, 0xa1ef, 0x9c76, 0xf, 0x2, 0x6865e652, 0x10001, 0xfffffff8, 0xcb93, 0x1, 0x2df8, 0x2, 0x3, 0x8, 0x7f, 0x43c2, 0x9, 0x24, 0x2, 0x7, 0x3ff, 0x0, 0x5, 0xa000, 0x964, 0x1, 0x8001, 0x1, 0x7f, 0x6, 0x4, 0x0, 0x0, 0x8000, 0x1, 0x100, 0x800, 0x7, 0x2d0f, 0x6ea, 0x1, 0x34cd, 0x8, 0x8, 0x9, 0x10000, 0x7, 0x9, 0x5, 0xfffffffa, 0x9, 0x81, 0x11, 0x2, 0x10000, 0x18, 0xffffffff, 0x6, 0x200, 0x8000, 0xad, 0x9, 0x7fffffff, 0xa5, 0x101, 0x0, 0x7, 0x10, 0xa3, 0x7fffffff, 0x5, 0x2, 0x200, 0x8001, 0x0, 0x3, 0x4, 0xfffffffc, 0x4, 0x7, 0x78e7df4e, 0x5, 0x0, 0x3, 0x0, 0x1, 0x1, 0xa, 0x0, 0x0, 0x75, 0x101, 0x69cba428, 0xfff, 0x9, 0x9, 0xfffffc00, 0x1, 0x2, 0xf, 0x6, 0x8, 0x4, 0xc, 0x2, 0x37e, 0x16000, 0x3, 0x8000, 0x0, 0x0, 0x77ef, 0x800, 0x8, 0xffffffb2, 0x7ffffffe, 0x2, 0xc, 0x9, 0xfffff000, 0x7fffffff, 0xffffffff, 0x5, 0x1, 0x1000, 0x1000, 0x10, 0x9, 0x9, 0x1ff, 0x7, 0xfffffff9, 0x3, 0x80000000, 0x7, 0x40, 0x9, 0x1, 0x7, 0x0, 0x352, 0x0, 0xa, 0x3ff, 0x7, 0x2, 0x200001, 0x10001, 0xfffffff7, 0x0, 0x7, 0x8, 0x4, 0x9, 0x1, 0xe3, 0x5e48, 0x7, 0xffffffff, 0x8001, 0x805, 0xfffffff7, 0x9, 0x5, 0x3, 0x9c, 0x1, 0x2c, 0x3, 0x9, 0x7f, 0x35, 0x8d, 0x0, 0xffff, 0x6, 0x81, 0xdae, 0x8, 0x0, 0x8, 0x9, 0x0, 0x7, 0xed9a, 0x800, 0x8, 0x8, 0x8, 0xecc, 0x4622, 0xffffffc0, 0x1, 0x1, 0x1000, 0x101, 0x6, 0x6, 0xfff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x9, 0xf, 0x2, 0x5, 0x0, 0xc, 0x1cd30080, 0x9, 0xf, 0xf5b, 0x8, 0x54, 0xfffffffe, 0x3, 0xbc, 0xe]}) 2.911980934s ago: executing program 0 (id=104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0x1, 0xffffff01, 0xf1}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000080)={0xc, 0x4, 0x64}) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0xa2100, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1709000000000000000400000000000000000000000008000a0000000000"], 0x24}, 0x1, 0x620b}, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)={0x4, 0x0, [{}, {}, {}, {}]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0x40049366, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x1cda82, 0x2) write$cgroup_int(r10, &(0x7f0000000040)=0x1c8, 0x12) 2.703882542s ago: executing program 2 (id=107): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000300)={0x77359400}, 0x8) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xffff, '\x00', @p_u32=0x0}}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) symlink(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async, rerun: 64) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) (rerun: 64) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x2000000, 0xd8, 0x0, &(0x7f00000009c0)="f6e22093a28961013373589e62dda7397623cf7479297f6752e1bc3763d1670b4dcf8d799ae3d3cb80e5a68b783db5e92e8d5951f97dc2a96a4f003486b3171ebfa03c6e15d11d89e3e35b99ee9d175b590f36505b7fef4e10b0b58bd2f20e29a06bd7d3270458443f22464269f84d7973eeb46b3aa7c2944b16b7072a31a752d3b430f2ce78761c2a03258c7aea1e91fb4ec4dec487620a9ec2d9f2edfd2b0c5337392c345378290ddf6cdd5f594c00f6742fe7f10596ebe86a2027710f28771bc2e5df2c63eabef488e79d6a8fe989a256d949e36f9acc", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1005}, 0x4c) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\a\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf250300000014000100ff0100000000000000000000000000010500050003000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], 0x10ad) (async, rerun: 32) r6 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_pidfd_open(r6, 0x0) (async) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) (async, rerun: 64) r7 = io_uring_setup(0x67bd, &(0x7f0000000580)={0x0, 0x0, 0x8, 0xfffffffe, 0x37a}) (rerun: 64) io_uring_enter(r7, 0x0, 0x2, 0xf, 0x0, 0x0) (async) syz_clone(0x81000000, &(0x7f0000000300), 0x0, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000440)="87789824c94ba4a90f359096045387420d6fc7957f8f116c44ccaa5d18c5a7673628c0b44f12dc0e0469850ea839f06fdc6ddf3f") (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB], 0x118}], 0x1}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYRES8=r5, @ANYRES32=r3, @ANYBLOB="22b4709c8e2c7e7c10bc910f3617215de29a9e2b9a40f3276399dae51e38f1e3c19d3f96ba1eabc79aeb42bd81b81f124feccbb0f56b2beadf0b4f7522c08736c627e8ac999d2cb52e09d3140751803333f6e60f0387cef16f75df98832a4e81cad3c06b81f1cfaf34300f33709797817eb82d"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8001) (async, rerun: 64) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x60310c04}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB="1851b8"], 0x1c}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000080) 2.647279918s ago: executing program 0 (id=108): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) recvmmsg(r0, 0x0, 0x0, 0x40000121, 0x0) 2.565106649s ago: executing program 2 (id=109): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca7193"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe4) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@mcast1, @in6=@loopback, 0x4e23, 0x0, 0x4e24, 0x26, 0x2, 0x80, 0xa0, 0x73, r2, r3}, {0xfffffffffffeffff, 0xc8, 0x3, 0xd000000000000000, 0x1ff, 0x3, 0x7, 0x3}, {0x6, 0xf8, 0x1, 0x101}, 0x72c, 0x6e6bc0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3503, 0x4, 0x3, 0xc, 0x3, 0x1, 0xee1}}, 0xe4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket(0x1d, 0x1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000004, 0x42032, 0xffffffffffffffff, 0x0) 2.564800897s ago: executing program 0 (id=110): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 1.664112669s ago: executing program 2 (id=113): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r4, 0x8b20, &(0x7f0000000040)) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0x18, 0x0, &(0x7f0000000340)="63eced8e4cdc3f0a08ceee495b6244dbc45edf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (fail_nth: 1) r11 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x101, 0xfffffffd, 0xffff, 0x10000}, 0x4, 0x9, &(0x7f0000000500)={{0x1, 0x2}, &(0x7f0000000400)={{0x80000000, 0x2, 0x9a, 0x9}, &(0x7f00000003c0)={{0x200, 0x9, 0x80000001, 0x4}}}}, 0x0, &(0x7f0000000c00)="e4eb184e0a7ec02dd22e73f42b156e32cc4d59735d4327994a6333616ca101f1dd60cec26e8ad4facd6adac3005e04ccc6223c26375b3b991497174025cdaeb87a039c943bcb3b74ce682d91a38b7c694426babfb5fa191742cad763e37f2a7f2b1ddaa4d1c3ebffa0756584cfe5a2e83df52eced60a69a915f6d28dd2da2fef6b0cf37a9a9840ba18506f149829b992b33c91ae504bedfcb7b8676231cb4d3bd7807774f2c6df27e10f61f234b91082df15934428889f079cbcd76dd11507262be4b76ee6861b650fe77b55e0dfe8c6a22a521dd535b84688d6e16c3a30e6b0151c74246b54f2dab0b59eaa0e43ec7ebc27933ab4a1468e4620f470704c569f9b735e777f534f8618abfadbf0ff6d71b4b6f33dce0a395c99855d8c5f68b1d6ffb2058335bd60a34887fcb26548523c305235221da2bcbf36de52ded189b7050bcc14847336703c7a740682a8ee520ff04ad60cb76fbecab11f0296ca048c9137809803a7a7a2e008b949a202bd9ae7c8c65f0bd9ae56b63186f32843de3b42c34b61b08fbc29f50db6f0aff76888c8a034e301d166c76d67231a96e75317a126eaca0876a9295851650a556017d0e2c8439ba6d223f151cbaaba67a2fc8f01d133162f844f7ffaba4341ef62de388eecfd7d543c54b8cdb307f674dab9b9441cae6087df8468ccb50714c88166504d3eef608ed8100fa764e091e7a767de7a68b89c67a24d535beb93ba29f724785dcf36908216925d9efe9259479e7b4afeac7c781d4d9659034f454a48c1daeee0c25fbaecd227cf666a691c65ae2fe15413d82409e7eeea24797ebe110a544ca46a594ad247108a5fe5046969b7ca9c37fa0999e08a779d91f824132eac383759de91f3f546cf41ed443b1ab54303af78479688ce95aea923210c4af38647aa01640072990bcb553d8d25f7157ca52003cb3dc81ecd0cdb96d594b5be2263bd5bc8e1aa800290c06b2328c9edd48b97fbffa3e86d69bd2392c6312f894d45e5ccf70002ec39eef895f08dd113ca92cea49be07817ed7c0fd01e221c8e9e944b6d81ae5db0d3cd811f841c694693cfa127ceb5645355b737f1b6c5d2c6a1b8e9bd90fcfdc4ef4155ef18c2018c3eff4aa34187a4760931f86c857ae839278641ec28ff994d5305dde1da31b28478a88b03fc37842641c402801c08132aa89aad9e7ca713d8ab2d7c30446def2e5e61f4e718c8d1c9259696a20adfdf5969243b50eded4667ebc4d4361655b173965d0f370be31529b3a773897440ed80fd963fe0ca7db9a571516de00273eb1b7c3d4cb6ce7984e6d07b07d0b293a79f04cfb5104ea249808e8bd68cb6d72b7fc3aef5f5db61e45127a471c9246ccaccab6f735fc15faec21cc0745418b95972688887a91858b092a962e4064ce13cc87c535a6ed97fe2497db5e976f438b803e2b53672584cb6d359fc26d2858e72c95d64b16a6b695b36764708039c712c74c230b9bbf0a72b81136f3c0f335ab2646b778d37a1bedce1cbc1feab747beec3f3e0cb5e9a898779d1bbd192e8effa33eac9f6c9f35dc65c36516c6660aef0ba9187151656190eb526fe8967c4ff97e653d7bec31ea84ae75c8235953563277dd4b323e8cd650b94fe44c8247c609e734e843ed296c5d0e750830ddef290a69cafdfeb53b8ef86a0945b76e65ec085f570c9e1b60f194bccf65adbedd41cfc5f6aa006af19e783d4f82c1dcfb1c905d7b8fa07d386cf562b216891b5053f220ecf5ae7baf64a2e4370c6e3956163ade0b9128aeca98bf2bc5dfea0712b44f6b96e9c5625aba29eaf56594cbf0ba9f7da679f11fe5402cdb9641a6849fa4e7c4655f460b10e54d6c5f499d9ce35cbfa7ab9a8fdb0bbf393656f0c052d9d046e7cf6391b29181ad6c95ddb921cce900a8d573f4e4c0df7395a4752db56af51358e028cf1c47f57b01b146e42222b327492737b44a51254ddfef77beea22ac68cd5e59e7b004bc31e541855efbb0f1e9d4e04169f4ce766b35e99db25a2552ee5171cd9883b091beb11ac520329e706ba4e365d7d67faccc731ce108cba544defe35664b1f97ee0e271638cfde5ccb4756684a6f1f49d604e6e98cd633424633c9c35c83212b79cf80ad294f206f6f3bf20a40f3ab137aff09f95dea6e6084c7e2a1d05c958662d71c23865cf5204d3e4fa8923aca4c7f5222d3b2de602963629ba885c95ed5f3954f45ed5e38cb6c51a27b5c8542111bc16f38668eef2888f3d6202415116096c863cc85312520edacceacf50a8f4a8fb63537e465286558694ec438db2a698c3cb93576d2560e5211b92f2b4f75c2edb8d27621c72de9458a737c32c36354d3dd5f16d338a21fcdc2af84d73d61cbe27a4ea1616006437fee1902fcf753ad56edf841a6b6d0e915062d0e012a37b99cf77226218b963d8d8c14cd54c73d4800881ed30587850baeb3442ba1528cfa2c9c73ff498223248f4324a1aa78fbe59a8f44cb260f1df94c3d78a20739ac9d88883498de072e5969c8f6fff8f62f3a0be5084fb0bc405a68d41eff3ffbcd872b1fa671d1352a46f01324e9b90d2c58c4bc91b5959fc98cb9c0ee1b590301cbdb664755def8be9ccd8d3ea829c824a6c3fff87b969fd4f55356ff6758c2dfaa1fc28e33b68c53d9604933b862576549646abb9adca055d304c61fc8c548c06a9657c30adbfb720ae61687187526605b005a182c03ceba7aa8ed261dfc0ddf228e1a345fd736028266a582031689cee3694f001c5a833cef4418b39d07d1c82320ec927d7f5c11c60c6de655dd1d723d249ea8b91a53be4964c6a34c71af286285e0679691ffaa31746c119e136157392c11ddf94e4543250e6433661b9f376240c078d28d803470e7adaf364a8aea3e4c49a2f9c910959eb51ebc6cd7cf75dbf68f01f9587c6195395719853a4f93ab955235df41af81f58e468b6f58c847025dbb962e8bd8d21fb083944a9e7a3e8b8b6c037094ff681dc8bf978fabc4ebafa5dde95655f4f069bd45f8dfc3ee5942813bf61490bbbc9107aff1d5e32ca3e49b973e7e693cd9c945907ea592142eb3ffd5adb06914c6de5c9891e39db7478c1c7f827eaaf2e7436e7f1d5a231d7e75eae1e6b990fc56f02f3542871da5d45ea9ae86f48172f8955892ecfc78224b446fea12194fd55a63e7c58d11a552e05fe60714da80384cf3d3d842d60fe4f3fc4fe4f74adf441f780413e0e8db752d49a36ab33f695488b3032777206d7f4c8e5049121f895e69497704bba06072448735ce7fd4855f4e231ac9dc11240517766415620770ed8800487d82cad7c739b03809418f6174d41138b2f825d844bde1919276bc3d99c22e4d3935ab844b17b703c004e177c358c1e6bfbf8075db0ef794ae1d9a12a65f694ddc4538db8175746227bdc749baf2acb42c99bad31f8578913d4cd40e32b9839a33bbc7a8a3effa2a472b8ca927a1846b9b30bbbbc26e1b7c14eb191e8fe84a9a6de6761d02b78e3879259d45e4d5c73962eda4ee72ef48b9554963a4d755fd5b786ba245389cd1ac32f4fe04b1d0408a6ede023805adf0aa0e2328994ab2e5e109f64ee3ef0782067434de80e1c6761d962707729a689698b3771dc29643dccbc6b47f0225a27d7af2b6917bab2465a75d5a88bde2af6915ee879a2833a8b2e9ce165db04c779d66dbbbf4072b2efc7c6a1ba62c3ef055c216029fc4a499e2757c2913c51fb6feb20a74f43c620aa9dbec7f70267e795400a6c9cdf21d620dd0931c875feba7057696977616843b88b057618f786f3d0ac697f70f76dbb080f33f8be2831a11d324275bc8acd0427a172e7e5a41d72f6b563db7c08c11356a43f31adc80976203e9657b411e1ee9a590933dba54764548ca2e8dc658f285dd773b38c0d182578adff7c3b2907ea0ab8dda2e0dc663fc8cb759e35e02db902cd92c526bc98f91ca602c8cce1b808e1154fe54195c5254f273ed3dc5dae7d1e5bb501d34bd46e912451fb7f890bb2bac6fa8b32ca14d7a02579d0c0666c60f1c2b346effebae3295703ab907c265278c9b3c941632a438b7725e268b38269323006d42e71b5978a3b085556be45d579d09ec9c868301ae1747d42a0e52a5ab81ae878cdff27af5bf12807b4f2d40308cd7aca4409c67620b1ad8ae1863ae9473f643224946b22f7514182768744afcf933fb656437310bb375aae399627f0e8fa35cc9f295599e332b5b1f2f83d4d31c2a037390a78f8f06b2070f9de76d783781d5dc193bc9faa76077e5d7714baf4a0a00f60be0570ae8b81cdbd1e55a024adf4991c6a1a65e16d3d2d69c75b45ffbc819d80e2e27ab0def5b459b5e03db287f4b64712c03e08d6b998a73baa0af1b489904fba79c9fa2678e835cdfe6b88714db5af8553e2f26354c9b10b83706998af936a705999eec9393535242755b1886817b88054a363f3bb73ca76d0e9ca0c92774c58183f0016737931802282a1363ce6b9ebc357f190a0e7595a9870b52ef09104ac291e40b9daa1aa372d5f32a4aee0a648d0404c8d6d6dca533829b00de01e94e783707f18b16a7fc0d0e3d62656d0f2a73ee3fcdbdea9f1ffb7d18da6c12dcf0611ebdaee9e529113ce5e2a3bf468ad37c5e84f59d497d261212e6388ee355448878c4c14f67776cb331cc928995f37926023a2f1013e588a227c429695d93e3add111b4448b9352adbb2e93fee2e66895902b84736a9c63aa37a96bbbbcf5c8e7715caaabf95fd376307e16567169e68e0f276faa3b3113db8092465132d9116c51bad67028aa9dec5863efb5dd64f0369763ff1920616ee2c096b006daaac7da5a3caa1c698d078f4ef44800e66c221c7a9635211f3023d33dc499cc26eb0cec2637d6b61604dc6ba89336874df8fbe8f537544646a1ed18aa529e56ef043d18b5cb8726fd5214cbd6b5ab7e20f90497e0eac876e0828c4954ab375ef1e3922c22057791e7e8f1c5a6fec751f8f2cf6b56cdd02f653446516d62ba506387273aee59afde4b61e0c4a696ec8ba12c9bf6a7ede8d976cffbb7a02b009deefa3aba21b5bfc9f3ad47f7a0a777763340293d4c043d1f63bb273770d7489772739de82496dd9b82f883c1226f3b4187c63192e228bd2291c0d11f158a88274c8d4a4d88f7ef8c760d167dedcb618ff3097ab7ca688eb956b520523c443bf99ddb8327d1a5435a5ebbbf62bde915fb7b5bd6dbbae79843a6ed37a83e5a4ce115d213ceac1d0db3a47c001a8bc4e965172f403b1b4c7d235126cd1372421e3fcdf50e8577e1dae799a8f46263b2d92fc26709874ef4f73e53a4cf1368877ed2e2e67a9887f2420019f894b473781ef5ba90afc7ab4b0f86077d9288c0f9ddd06233c5614f625b7a4a08b72c5497bda85ac8042b3fb72076baf0a5636fb774fe64ff94d30ea978ff8162cd09e502906d9d097e18e9ef63aa6913a8b5107b139a4333b137eafafe223874e81d1a24969f2245ffec7d2a342718a91a96b75afe1e96dc4eaa67a36814aa0e7412dbb8041e1ac5a34c77b817f3620ebf3e320724bf13d6b75bc98ebd1a5cb952db70d0331edff67123436618bdf6b265f71c19a4d2f134434828659391937a53782644a0ce4afc6012e60bc748e4c85780acc2161c4e288b91f5f1cc95cdef0315875207fba4ce2b95e976fafb58f88bc4f923c9b3ca9a4163b3e91160bb6b240e17b088553f1502e52ecd2361304ddbc2890d3435e0b78cc60f81f1258ae3e94b2c07812bc96e2cca98a3a8a21c2711517ef2ee9cac97d0c9f6b6d", 0x9}}) 1.514445932s ago: executing program 1 (id=114): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4041) 1.195164303s ago: executing program 2 (id=115): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004e4000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = socket(0x200000000000011, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0xe) close(0x3) close(0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xa}}, 0x14) r2 = socket(0x26, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0xfffffe4b, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x19, 0x20, 0x0, 0xa00, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ftruncate(0xffffffffffffffff, 0x2007ffb) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000040)=0x5) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x13, 0x414, 0x1e8, &(0x7f0000000680)}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.005301377s ago: executing program 2 (id=116): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0xeaff, 0x0, 0x0, 0x0) 955.031713ms ago: executing program 1 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9f1b}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xdcaf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x98) close_range(r0, 0xffffffffffffffff, 0x13000000) 954.106847ms ago: executing program 2 (id=118): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0xffffffffffffff55) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x21, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000500)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x7, 0xffffffffffffffff, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x60000006}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) socket(0x10, 0x400000000080803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8854}, 0x40884) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 953.870001ms ago: executing program 1 (id=119): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0xbcb00a03bdf55da2, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004801}, 0x20000000) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x100000000000000, 0x3, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) capset(&(0x7f0000002040)={0x20071026}, &(0x7f0000002080)={0x1, 0xffff, 0x0, 0x3, 0xb, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000180)=0x10000, 0x4) setreuid(0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f00000020c0)=""/4096, 0x1000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x23c8c22, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x8000}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000031c0)={0xe8, 0x41, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xd0, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0xc4, 0x62, 0x0, 0x1, [@nested={0xc0, 0x55, 0x0, 0x1, [@nested={0xbc, 0x9, 0x0, 0x1, [@typed={0x8, 0x13d, 0x0, 0x0, @pid}, @generic="6e6b9de9ce012312dc6d070dc258475a1471aa15f1a877d8ee184f44959505949eda1fdea2bca70049566bfee917ff388b9ade69d7a6ac19f7280e14a743ae49e0a4007d99cf3c5dc17ee249ef721c27e775e72b593f013dccb65903b0d3220e95002f0d78f4633e55d9c48cb30d666eb2d12dc9a76009a0e79b4110aa5f27ced335713d520b82d2131c1ac8023474af19e5acbc1b720da44e2d8d0cdf3419ab", @typed={0x8, 0x1e, 0x0, 0x0, @fd}, @typed={0x8, 0x78, 0x0, 0x0, @uid}]}]}]}]}]}, 0xe8}}, 0x4010) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {}, 0x800, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb77b, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe, 0x4, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000, 0x0, 0x1d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) chdir(&(0x7f0000000280)='./file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0x8, 0x2, 0x0, "2115beba7af972a16fd06e6b5694848119e1a8bc94b6871c7f46690000000011"}) capget(&(0x7f0000000380)={0x20080522, r4}, &(0x7f0000000400)={0xd, 0xfd4, 0x9e4, 0x9, 0xec45, 0x9}) rename(&(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0\x00') ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000580)={0x1, 0x3, 0x40, &(0x7f0000000480)=""/64}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x181ac1, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 923.813723ms ago: executing program 1 (id=120): dup(0xffffffffffffffff) syz_io_uring_setup(0x49f, &(0x7f0000000180)={0x0, 0xe7a8, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x9a3) r2 = getpid() socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 704.706456ms ago: executing program 1 (id=121): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x6c6}], 0x1, 0x10000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_io_uring_setup(0x178b, &(0x7f0000000180)={0x0, 0x0, 0x13291, 0x4000002, 0x3d}, &(0x7f0000000100), &(0x7f000001fa00)) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r3, &(0x7f00000000c0)='./mnt\x00', r3, &(0x7f0000000100)='./mnt\x00', 0x271) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a0800000060ec38000000000000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691"], 0xe0}], 0x1}, 0x40040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f00000008c0)="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", 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000000c0)={r7, 0x9, 0x9, [0xfff9, 0x9, 0x401, 0x6, 0x9, 0x5, 0x0, 0x9, 0x753]}, 0x1a) 2.20094ms ago: executing program 1 (id=122): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f00000001c0), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa30903, 0x8000, '\x00', @string=&(0x7f0000000540)=0x10}}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(r1, 0x409, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x14d801, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff, 0x308}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) connect$l2tp6(r6, &(0x7f0000000a80)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4, 0x3}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_open_procfs(0x0, &(0x7f0000000500)='statm\x00') 0s ago: executing program 3 (id=123): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) socket(0x2c, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) keyctl$instantiate(0xc, 0x0, &(0x7f0000000300)=@encrypted_load={'load ', 'default', 0x20, 'user:', '/dev/nu\xc1\r\x00\x00\x00Q\x98\x8a.\x9bA\xdd\x82\x00'/36, 0x20, 0x2c9b, 0x20, [0x37, 0x32, 0x35, 0x34, 0x36, 0x37, 0x31, 0x33]}, 0x55, 0x0) request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='syz', 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000000)="224c1a2ad8c298259f72a5f7212bc7ed2d68abd2bb20639c59f501d93f283cc1d060cfbe043351c323a150e8f064", 0x2e, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load user:'], 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0xb9) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) 0s ago: executing program 0 (id=124): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x60, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x50220}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xf}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x7}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}}, 0x0) (fail_nth: 7) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:63284' (ED25519) to the list of known hosts. [ 41.083169][ T5856] cgroup: Unknown subsys name 'net' [ 41.231238][ T5856] cgroup: Unknown subsys name 'cpuset' [ 41.235869][ T5856] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.184805][ T5856] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.550498][ T5305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.553932][ T5305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.555752][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.556458][ T5305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.560314][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.562002][ T5305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.565783][ T5305] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.569669][ T5305] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.572197][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.573634][ T5305] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.575013][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.577393][ T5305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.579649][ T5952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.580197][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.581390][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.581826][ T5305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.582277][ T5305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.582553][ T5305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.584546][ T5952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.587376][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.827293][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 45.880492][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 45.934894][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 46.057535][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.062124][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.064763][ T5946] bridge_slave_0: entered allmulticast mode [ 46.067379][ T5946] bridge_slave_0: entered promiscuous mode [ 46.071372][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.073594][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.075844][ T5946] bridge_slave_1: entered allmulticast mode [ 46.078567][ T5946] bridge_slave_1: entered promiscuous mode [ 46.082076][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 46.168911][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.171866][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.174867][ T5945] bridge_slave_0: entered allmulticast mode [ 46.177918][ T5945] bridge_slave_0: entered promiscuous mode [ 46.182813][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.185130][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.187388][ T5945] bridge_slave_1: entered allmulticast mode [ 46.190284][ T5945] bridge_slave_1: entered promiscuous mode [ 46.208798][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.231438][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.233692][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.235933][ T5953] bridge_slave_0: entered allmulticast mode [ 46.238784][ T5953] bridge_slave_0: entered promiscuous mode [ 46.263176][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.282313][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.284648][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.286864][ T5953] bridge_slave_1: entered allmulticast mode [ 46.289508][ T5953] bridge_slave_1: entered promiscuous mode [ 46.326409][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.332101][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.375248][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.397997][ T5946] team0: Port device team_slave_0 added [ 46.462989][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.471256][ T5946] team0: Port device team_slave_1 added [ 46.475364][ T5945] team0: Port device team_slave_0 added [ 46.477406][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.481012][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.483239][ T5940] bridge_slave_0: entered allmulticast mode [ 46.485805][ T5940] bridge_slave_0: entered promiscuous mode [ 46.547307][ T5945] team0: Port device team_slave_1 added [ 46.576345][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.578823][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.581180][ T5940] bridge_slave_1: entered allmulticast mode [ 46.583897][ T5940] bridge_slave_1: entered promiscuous mode [ 46.607557][ T5953] team0: Port device team_slave_0 added [ 46.610155][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.612338][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.621704][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.662166][ T5953] team0: Port device team_slave_1 added [ 46.664451][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.666792][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.675158][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.683137][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.686075][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.697012][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.745274][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.747520][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.755513][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.759850][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.762048][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.770806][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.776007][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.781079][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.784249][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.786428][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.794494][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.883081][ T5940] team0: Port device team_slave_0 added [ 46.904508][ T5946] hsr_slave_0: entered promiscuous mode [ 46.907711][ T5946] hsr_slave_1: entered promiscuous mode [ 46.934177][ T5940] team0: Port device team_slave_1 added [ 46.951579][ T5953] hsr_slave_0: entered promiscuous mode [ 46.953771][ T5953] hsr_slave_1: entered promiscuous mode [ 46.955838][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.958383][ T5953] Cannot create hsr debugfs directory [ 47.044756][ T5945] hsr_slave_0: entered promiscuous mode [ 47.047468][ T5945] hsr_slave_1: entered promiscuous mode [ 47.050593][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.053721][ T5945] Cannot create hsr debugfs directory [ 47.075149][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.077589][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.085515][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.137394][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.139656][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.148400][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.323068][ T5940] hsr_slave_0: entered promiscuous mode [ 47.325262][ T5940] hsr_slave_1: entered promiscuous mode [ 47.327306][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.329771][ T5940] Cannot create hsr debugfs directory [ 47.546853][ T5953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.553536][ T5953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.558018][ T5953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.566595][ T5953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.597164][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.602980][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.609335][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.613171][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.629342][ T63] Bluetooth: hci2: command tx timeout [ 47.629345][ T5947] Bluetooth: hci3: command tx timeout [ 47.629527][ T5947] Bluetooth: hci0: command tx timeout [ 47.631327][ T63] Bluetooth: hci1: command tx timeout [ 47.670932][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.675884][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.682583][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.690473][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.714756][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.745691][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.753296][ T1215] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.755598][ T1215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.759157][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.767275][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.769651][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.772559][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.776469][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.781391][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.787768][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.820223][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.834893][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.837120][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.857593][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.859912][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.864870][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.895642][ T5946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.899600][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.908672][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.917779][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.920052][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.931528][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.933793][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.951295][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.966305][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.976127][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.978547][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.992573][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.994846][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.012565][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.025249][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.045752][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.063486][ T5953] veth0_vlan: entered promiscuous mode [ 48.080189][ T5946] veth0_vlan: entered promiscuous mode [ 48.082500][ T5953] veth1_vlan: entered promiscuous mode [ 48.092702][ T5946] veth1_vlan: entered promiscuous mode [ 48.107913][ T5953] veth0_macvtap: entered promiscuous mode [ 48.122230][ T5953] veth1_macvtap: entered promiscuous mode [ 48.127478][ T5946] veth0_macvtap: entered promiscuous mode [ 48.132911][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.135397][ T5946] veth1_macvtap: entered promiscuous mode [ 48.147732][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.153414][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.166306][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.170514][ T5953] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.173372][ T5953] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.176118][ T5953] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.180314][ T5953] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.189686][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.201536][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.211221][ T5945] veth0_vlan: entered promiscuous mode [ 48.220403][ T5946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.223147][ T5946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.225846][ T5946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.228866][ T5946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.237470][ T5945] veth1_vlan: entered promiscuous mode [ 48.273678][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.276501][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.285561][ T5945] veth0_macvtap: entered promiscuous mode [ 48.288892][ T5940] veth0_vlan: entered promiscuous mode [ 48.297086][ T5945] veth1_macvtap: entered promiscuous mode [ 48.316089][ T5940] veth1_vlan: entered promiscuous mode [ 48.320025][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.320348][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.325370][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.326396][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.351571][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.353321][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.354011][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.364018][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.373451][ T5940] veth0_macvtap: entered promiscuous mode [ 48.380697][ T5945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.380786][ T5953] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.383424][ T5945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.394328][ T5945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.397031][ T5945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.402474][ T5940] veth1_macvtap: entered promiscuous mode [ 48.426168][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.437080][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.450305][ T5940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.453978][ T5940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.456713][ T5940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.460724][ T5940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.482973][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.487651][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.505885][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.508246][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.528841][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.531296][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.562745][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.565266][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.759389][ T6040] overlayfs: failed to resolve './file1': -2 [ 49.065021][ T6041] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 49.669334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.672013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.698895][ T6043] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 49.701210][ T6043] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.704649][ T6043] vhci_hcd vhci_hcd.0: Device attached [ 49.725321][ T63] Bluetooth: hci1: command tx timeout [ 49.727087][ T63] Bluetooth: hci0: command tx timeout [ 49.729033][ T5957] Bluetooth: hci2: command tx timeout [ 49.730733][ T5957] Bluetooth: hci3: command tx timeout [ 49.795157][ T6056] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 49.852930][ T6052] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 49.859152][ T6052] trusted_key: encrypted_key: keylen parameter is missing [ 50.244779][ T6059] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 50.262077][ T6059] batman_adv: batadv0: Adding interface: team0 [ 50.264134][ T6059] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.272321][ T6059] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 50.298393][ T61] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 50.434174][ T6061] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.440249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.443263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.445996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.446188][ T6061] tipc: Started in network mode [ 50.449274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.451578][ T6061] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 50.452924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.455824][ T6061] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 50.458019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.463451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.463924][ T6061] tipc: Enabled bearer , priority 10 [ 50.466062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.476268][ T6063] input: syz0 as /devices/virtual/input/input5 [ 50.646509][ T6051] vhci_hcd: connection reset by peer [ 50.649043][ T1215] vhci_hcd: stop threads [ 50.651095][ T1215] vhci_hcd: release socket [ 50.653339][ T1215] vhci_hcd: disconnect device [ 50.804175][ T6067] Zero length message leads to an empty skb [ 51.578997][ T59] tipc: Node number set to 1 [ 51.589397][ T5989] IPVS: starting estimator thread 0... [ 51.698466][ T6084] IPVS: using max 45 ests per chain, 108000 per kthread [ 51.788736][ T5947] Bluetooth: hci0: command tx timeout [ 51.790450][ T5947] Bluetooth: hci3: command tx timeout [ 51.792154][ T5947] Bluetooth: hci2: command tx timeout [ 51.793847][ T5947] Bluetooth: hci1: command tx timeout [ 52.148474][ T6089] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 52.498006][ T6093] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 52.501220][ T6093] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15'. [ 53.163199][ T6115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21'. [ 53.870223][ T5957] Bluetooth: hci1: command tx timeout [ 53.872169][ T5957] Bluetooth: hci2: command tx timeout [ 53.874436][ T5947] Bluetooth: hci3: command 0x0419 tx timeout [ 53.875093][ T5951] Bluetooth: hci0: command tx timeout [ 54.807674][ T6152] IPv6: Can't replace route, no match found [ 55.459167][ T61] vhci_hcd: vhci_device speed not set [ 55.595791][ T63] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 55.773210][ T6163] capability: warning: `syz.1.32' uses deprecated v2 capabilities in a way that may be insecure [ 55.929755][ T6125] syz.2.22 (6125) used greatest stack depth: 20744 bytes left [ 55.948427][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 56.219579][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 57.467181][ T6194] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 57.702735][ T6202] FAULT_INJECTION: forcing a failure. [ 57.702735][ T6202] name failslab, interval 1, probability 0, space 0, times 1 [ 57.706640][ T6202] CPU: 3 UID: 0 PID: 6202 Comm: syz.3.43 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 57.706659][ T6202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.706666][ T6202] Call Trace: [ 57.706670][ T6202] [ 57.706674][ T6202] dump_stack_lvl+0x16c/0x1f0 [ 57.706694][ T6202] should_fail_ex+0x512/0x640 [ 57.706709][ T6202] ? __kmalloc_noprof+0xbf/0x510 [ 57.706724][ T6202] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 57.706739][ T6202] should_failslab+0xc2/0x120 [ 57.706750][ T6202] __kmalloc_noprof+0xd2/0x510 [ 57.706764][ T6202] ? __pfx___mutex_trylock_common+0x10/0x10 [ 57.706781][ T6202] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 57.706798][ T6202] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 57.706812][ T6202] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 57.706825][ T6202] ? trace_cap_capable+0x18d/0x200 [ 57.706839][ T6202] ? bpf_lsm_capable+0x9/0x10 [ 57.706851][ T6202] ? security_capable+0x7e/0x260 [ 57.706861][ T6202] ? ns_capable+0xd7/0x110 [ 57.706873][ T6202] genl_rcv_msg+0x55c/0x800 [ 57.706888][ T6202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 57.706901][ T6202] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 57.706921][ T6202] netlink_rcv_skb+0x155/0x420 [ 57.706932][ T6202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 57.706945][ T6202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 57.706962][ T6202] ? netlink_deliver_tap+0x1ae/0xd30 [ 57.706975][ T6202] genl_rcv+0x28/0x40 [ 57.706986][ T6202] netlink_unicast+0x53d/0x7f0 [ 57.706999][ T6202] ? __pfx_netlink_unicast+0x10/0x10 [ 57.707014][ T6202] netlink_sendmsg+0x8d1/0xdd0 [ 57.707027][ T6202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.707039][ T6202] ? __import_iovec+0x1dd/0x650 [ 57.707052][ T6202] ____sys_sendmsg+0xa98/0xc70 [ 57.707066][ T6202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 57.707097][ T6202] ? get_compat_msghdr+0x11a/0x170 [ 57.707113][ T6202] ___sys_sendmsg+0x134/0x1d0 [ 57.707130][ T6202] ? __pfx____sys_sendmsg+0x10/0x10 [ 57.707152][ T6202] ? find_held_lock+0x2b/0x80 [ 57.707171][ T6202] __sys_sendmsg+0x16d/0x220 [ 57.707200][ T6202] ? __pfx___sys_sendmsg+0x10/0x10 [ 57.707226][ T6202] ? rcu_is_watching+0x12/0xc0 [ 57.707238][ T6202] __do_fast_syscall_32+0x7c/0x3a0 [ 57.707249][ T6202] do_fast_syscall_32+0x32/0x80 [ 57.707258][ T6202] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.707271][ T6202] RIP: 0023:0xf7ff6579 [ 57.707279][ T6202] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 57.707288][ T6202] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 57.707298][ T6202] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 57.707304][ T6202] RDX: 000000002000c094 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.707310][ T6202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.707316][ T6202] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 57.707321][ T6202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.707333][ T6202] [ 57.860328][ T6206] random: crng reseeded on system resumption [ 58.162193][ T63] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 58.608725][ T6218] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 58.718118][ T63] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 59.603158][ T6248] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 59.605585][ T6248] netlink: 'syz.0.54': attribute type 3 has an invalid length. [ 59.607968][ T6248] netlink: 224 bytes leftover after parsing attributes in process `syz.0.54'. [ 59.614442][ T6248] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 59.616932][ T6248] netlink: 'syz.0.54': attribute type 2 has an invalid length. [ 59.636831][ T6248] : entered promiscuous mode [ 59.974603][ T6255] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 60.366880][ T6271] FAULT_INJECTION: forcing a failure. [ 60.366880][ T6271] name failslab, interval 1, probability 0, space 0, times 0 [ 60.370911][ T6271] CPU: 2 UID: 0 PID: 6271 Comm: syz.2.62 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 60.370925][ T6271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.370932][ T6271] Call Trace: [ 60.370935][ T6271] [ 60.370940][ T6271] dump_stack_lvl+0x16c/0x1f0 [ 60.370958][ T6271] should_fail_ex+0x512/0x640 [ 60.370974][ T6271] ? fs_reclaim_acquire+0xae/0x150 [ 60.370988][ T6271] ? tomoyo_encode2+0x100/0x3e0 [ 60.371001][ T6271] should_failslab+0xc2/0x120 [ 60.371011][ T6271] __kmalloc_noprof+0xd2/0x510 [ 60.371027][ T6271] ? find_held_lock+0x2b/0x80 [ 60.371038][ T6271] tomoyo_encode2+0x100/0x3e0 [ 60.371054][ T6271] tomoyo_encode+0x29/0x50 [ 60.371066][ T6271] tomoyo_mount_acl+0x144/0x850 [ 60.371079][ T6271] ? __kernel_text_address+0xd/0x40 [ 60.371094][ T6271] ? unwind_get_return_address+0x59/0xa0 [ 60.371111][ T6271] ? arch_stack_walk+0xa6/0x100 [ 60.371128][ T6271] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 60.371155][ T6271] ? tomoyo_domain+0xbb/0x150 [ 60.371170][ T6271] ? tomoyo_profile+0x47/0x60 [ 60.371191][ T6271] tomoyo_mount_permission+0x16d/0x420 [ 60.371204][ T6271] ? tomoyo_mount_permission+0x14f/0x420 [ 60.371217][ T6271] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 60.371238][ T6271] security_sb_mount+0x9b/0x260 [ 60.371250][ T6271] path_mount+0x128/0x2020 [ 60.371267][ T6271] ? kmem_cache_free+0x2d1/0x4d0 [ 60.371280][ T6271] ? __pfx_path_mount+0x10/0x10 [ 60.371295][ T6271] ? getname_flags.part.0+0x1c5/0x550 [ 60.371308][ T6271] ? putname+0x154/0x1a0 [ 60.371318][ T6271] __ia32_sys_mount+0x28b/0x310 [ 60.371334][ T6271] ? __pfx___ia32_sys_mount+0x10/0x10 [ 60.371351][ T6271] ? rcu_is_watching+0x12/0xc0 [ 60.371363][ T6271] __do_fast_syscall_32+0x7c/0x3a0 [ 60.371374][ T6271] do_fast_syscall_32+0x32/0x80 [ 60.371383][ T6271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.371396][ T6271] RIP: 0023:0xf70ae579 [ 60.371403][ T6271] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 60.371413][ T6271] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 60.371422][ T6271] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800002c0 [ 60.371428][ T6271] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000240 [ 60.371434][ T6271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.371439][ T6271] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 60.371445][ T6271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.371457][ T6271] [ 60.720003][ T63] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 60.722218][ T63] Bluetooth: hci3: unexpected event for opcode 0x203e [ 61.831525][ T6294] program syz.1.71 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.570863][ T6330] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 62.676131][ T6296] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.682360][ T6296] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 62.697149][ T6296] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.706277][ T6296] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 62.758124][ T6296] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.766440][ T6296] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 62.780418][ T6296] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.782454][ T6296] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 63.016464][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 63.132667][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 63.136607][ T6369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.80'. [ 63.488419][ T6083] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.638439][ T6083] usb 5-1: Using ep0 maxpacket: 16 [ 63.643174][ T6083] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.646532][ T6083] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.650536][ T6083] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 63.653381][ T6083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.658052][ T6083] usb 5-1: config 0 descriptor?? [ 63.666115][ T6083] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input6 [ 63.888044][ T6083] usb 5-1: USB disconnect, device number 2 [ 64.139599][ T6353] Set syz1 is full, maxelem 65536 reached [ 64.189666][ T6383] FAULT_INJECTION: forcing a failure. [ 64.189666][ T6383] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.195233][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.1.86 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 64.195263][ T6383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.195270][ T6383] Call Trace: [ 64.195275][ T6383] [ 64.195279][ T6383] dump_stack_lvl+0x16c/0x1f0 [ 64.195299][ T6383] should_fail_ex+0x512/0x640 [ 64.195316][ T6383] _copy_from_iter+0x29f/0x16f0 [ 64.195335][ T6383] ? __pfx__copy_from_iter+0x10/0x10 [ 64.195353][ T6383] ? __pfx___might_resched+0x10/0x10 [ 64.195364][ T6383] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.195382][ T6383] hci_sock_sendmsg+0x46d/0x25f0 [ 64.195393][ T6383] ? __pfx_aa_sk_perm+0x10/0x10 [ 64.195406][ T6383] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 64.195419][ T6383] sock_write_iter+0x4fc/0x5b0 [ 64.195433][ T6383] ? __pfx_sock_write_iter+0x10/0x10 [ 64.195450][ T6383] ? bpf_lsm_file_permission+0x9/0x10 [ 64.195461][ T6383] ? security_file_permission+0x71/0x210 [ 64.195474][ T6383] ? rw_verify_area+0xcf/0x680 [ 64.195488][ T6383] vfs_write+0x6c7/0x1150 [ 64.195503][ T6383] ? __pfx_sock_write_iter+0x10/0x10 [ 64.195516][ T6383] ? __pfx_vfs_write+0x10/0x10 [ 64.195529][ T6383] ? find_held_lock+0x2b/0x80 [ 64.195548][ T6383] ksys_write+0x1f8/0x250 [ 64.195561][ T6383] ? __pfx_ksys_write+0x10/0x10 [ 64.195576][ T6383] ? rcu_is_watching+0x12/0xc0 [ 64.195588][ T6383] __do_fast_syscall_32+0x7c/0x3a0 [ 64.195599][ T6383] do_fast_syscall_32+0x32/0x80 [ 64.195608][ T6383] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.195621][ T6383] RIP: 0023:0xf706e579 [ 64.195629][ T6383] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 64.195638][ T6383] RSP: 002b:00000000f505e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 64.195647][ T6383] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000340 [ 64.195653][ T6383] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.195659][ T6383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.195664][ T6383] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 64.195669][ T6383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.195682][ T6383] [ 64.344998][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 64.377561][ T6392] FAULT_INJECTION: forcing a failure. [ 64.377561][ T6392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.382742][ T6392] CPU: 3 UID: 0 PID: 6392 Comm: syz.1.89 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 64.382757][ T6392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.382763][ T6392] Call Trace: [ 64.382766][ T6392] [ 64.382770][ T6392] dump_stack_lvl+0x16c/0x1f0 [ 64.382791][ T6392] should_fail_ex+0x512/0x640 [ 64.382808][ T6392] _copy_to_user+0x32/0xd0 [ 64.382826][ T6392] simple_read_from_buffer+0xcb/0x170 [ 64.382841][ T6392] proc_fail_nth_read+0x197/0x270 [ 64.382853][ T6392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.382866][ T6392] ? rw_verify_area+0xcf/0x680 [ 64.382879][ T6392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.382890][ T6392] vfs_read+0x1e4/0xc60 [ 64.382904][ T6392] ? fdget_pos+0x2a2/0x370 [ 64.382920][ T6392] ? __pfx_vfs_read+0x10/0x10 [ 64.382933][ T6392] ? find_held_lock+0x2b/0x80 [ 64.382947][ T6392] ? __fget_files+0x20e/0x3c0 [ 64.382964][ T6392] ksys_read+0x12a/0x250 [ 64.382977][ T6392] ? __pfx_ksys_read+0x10/0x10 [ 64.382992][ T6392] ? rcu_is_watching+0x12/0xc0 [ 64.383006][ T6392] __do_fast_syscall_32+0x7c/0x3a0 [ 64.383022][ T6392] do_fast_syscall_32+0x32/0x80 [ 64.383035][ T6392] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.383052][ T6392] RIP: 0023:0xf706e579 [ 64.383062][ T6392] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 64.383074][ T6392] RSP: 002b:00000000f505e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 64.383088][ T6392] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f505e620 [ 64.383097][ T6392] RDX: 000000000000000f RSI: 00000000f73d2ff4 RDI: 0000000000000000 [ 64.383103][ T6392] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 64.383108][ T6392] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 64.383114][ T6392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.383127][ T6392] [ 64.692881][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 65.812765][ T6417] overlayfs: failed to resolve './file0': -2 [ 65.821861][ T6417] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 65.826270][ T6417] bond0: (slave wlan1): Opening slave failed [ 65.970835][ T6420] FAULT_INJECTION: forcing a failure. [ 65.970835][ T6420] name failslab, interval 1, probability 0, space 0, times 0 [ 65.975070][ T6420] CPU: 1 UID: 0 PID: 6420 Comm: syz.2.96 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 65.975084][ T6420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.975090][ T6420] Call Trace: [ 65.975094][ T6420] [ 65.975098][ T6420] dump_stack_lvl+0x16c/0x1f0 [ 65.975118][ T6420] should_fail_ex+0x512/0x640 [ 65.975133][ T6420] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 65.975156][ T6420] should_failslab+0xc2/0x120 [ 65.975171][ T6420] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 65.975193][ T6420] ? __asan_memcpy+0x3c/0x60 [ 65.975212][ T6420] ? alloc_pid+0xc7/0xbc0 [ 65.975235][ T6420] alloc_pid+0xc7/0xbc0 [ 65.975261][ T6420] copy_process+0x466f/0x76a0 [ 65.975292][ T6420] ? __pfx_copy_process+0x10/0x10 [ 65.975303][ T6420] ? tctx_task_work_run+0xac/0x380 [ 65.975314][ T6420] ? task_work_run+0x14d/0x240 [ 65.975328][ T6420] ? get_signal+0x1d1/0x26d0 [ 65.975337][ T6420] ? arch_do_signal_or_restart+0x8f/0x790 [ 65.975349][ T6420] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.975365][ T6420] ? __pfx_io_wq_worker+0x10/0x10 [ 65.975376][ T6420] create_io_thread+0xbe/0x100 [ 65.975388][ T6420] ? __pfx_create_io_thread+0x10/0x10 [ 65.975404][ T6420] ? __pfx_io_wq_worker+0x10/0x10 [ 65.975415][ T6420] ? lockdep_init_map_type+0x5c/0x280 [ 65.975430][ T6420] ? lockdep_init_map_type+0x5c/0x280 [ 65.975443][ T6420] ? __init_swait_queue_head+0xca/0x150 [ 65.975460][ T6420] ? create_io_worker+0x1f/0x5b0 [ 65.975469][ T6420] create_io_worker+0x1d0/0x5b0 [ 65.975485][ T6420] io_wq_enqueue+0x4cc/0x980 [ 65.975496][ T6420] ? __pfx_io_wq_enqueue+0x10/0x10 [ 65.975506][ T6420] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 65.975516][ T6420] ? io_prep_async_work+0x54c/0x770 [ 65.975536][ T6420] io_queue_iowq+0x246/0x530 [ 65.975548][ T6420] io_queue_async+0x1fc/0x300 [ 65.975559][ T6420] io_req_task_submit+0x1c8/0x1f0 [ 65.975571][ T6420] ? __pfx_io_req_task_submit+0x10/0x10 [ 65.975583][ T6420] io_handle_tw_list+0x486/0x500 [ 65.975596][ T6420] ? __pfx_io_handle_tw_list+0x10/0x10 [ 65.975607][ T6420] ? task_work_add+0x1d5/0x360 [ 65.975624][ T6420] tctx_task_work_run+0xac/0x380 [ 65.975636][ T6420] tctx_task_work+0x7a/0xd0 [ 65.975647][ T6420] ? __pfx_tctx_task_work+0x10/0x10 [ 65.975658][ T6420] ? rcu_is_watching+0x12/0xc0 [ 65.975667][ T6420] ? _raw_spin_unlock_irq+0x23/0x50 [ 65.975681][ T6420] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.975697][ T6420] task_work_run+0x14d/0x240 [ 65.975712][ T6420] ? __pfx_task_work_run+0x10/0x10 [ 65.975726][ T6420] ? __do_sys_io_uring_enter+0x60f/0x1630 [ 65.975742][ T6420] get_signal+0x1d1/0x26d0 [ 65.975752][ T6420] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 65.975773][ T6420] ? __pfx_get_signal+0x10/0x10 [ 65.975783][ T6420] ? fput+0x70/0xf0 [ 65.975793][ T6420] ? __do_sys_io_uring_enter+0x62c/0x1630 [ 65.975807][ T6420] arch_do_signal_or_restart+0x8f/0x790 [ 65.975817][ T6420] ? __fget_files+0x20e/0x3c0 [ 65.975831][ T6420] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 65.975845][ T6420] ? ksys_write+0x1ac/0x250 [ 65.975858][ T6420] ? __pfx_ksys_write+0x10/0x10 [ 65.975875][ T6420] exit_to_user_mode_loop+0x84/0x110 [ 65.975891][ T6420] __do_fast_syscall_32+0x2ac/0x3a0 [ 65.975901][ T6420] do_fast_syscall_32+0x32/0x80 [ 65.975911][ T6420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.975925][ T6420] RIP: 0023:0xf70ae579 [ 65.975937][ T6420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 65.975950][ T6420] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 65.975967][ T6420] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 0000000000007368 [ 65.975977][ T6420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.975986][ T6420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.975994][ T6420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 65.976003][ T6420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.976028][ T6420] [ 67.171063][ T6445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.104'. [ 67.210150][ T6447] FAULT_INJECTION: forcing a failure. [ 67.210150][ T6447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.214121][ T6447] CPU: 2 UID: 0 PID: 6447 Comm: syz.2.105 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 67.214136][ T6447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.214143][ T6447] Call Trace: [ 67.214146][ T6447] [ 67.214151][ T6447] dump_stack_lvl+0x16c/0x1f0 [ 67.214170][ T6447] should_fail_ex+0x512/0x640 [ 67.214188][ T6447] _copy_from_user+0x2e/0xd0 [ 67.214204][ T6447] get_compat_msghdr+0xa7/0x170 [ 67.214215][ T6447] ? __pfx_get_compat_msghdr+0x10/0x10 [ 67.214230][ T6447] ___sys_sendmsg+0x1ae/0x1d0 [ 67.214247][ T6447] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.214269][ T6447] ? find_held_lock+0x2b/0x80 [ 67.214288][ T6447] __sys_sendmsg+0x16d/0x220 [ 67.214304][ T6447] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.214326][ T6447] ? rcu_is_watching+0x12/0xc0 [ 67.214339][ T6447] __do_fast_syscall_32+0x7c/0x3a0 [ 67.214349][ T6447] do_fast_syscall_32+0x32/0x80 [ 67.214358][ T6447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.214371][ T6447] RIP: 0023:0xf70ae579 [ 67.214379][ T6447] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 67.214388][ T6447] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 67.214397][ T6447] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 67.214403][ T6447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.214409][ T6447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.214414][ T6447] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 67.214420][ T6447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.214432][ T6447] [ 67.565253][ T6464] vlan2: entered allmulticast mode [ 67.566977][ T6464] erspan0: entered allmulticast mode [ 68.466126][ T6472] warning: `syz.2.113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.089693][ T6488] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 69.132982][ T6491] lo speed is unknown, defaulting to 1000 [ 69.134412][ T6491] lo speed is unknown, defaulting to 1000 [ 69.138155][ T6491] lo speed is unknown, defaulting to 1000 [ 69.184996][ T6492] netlink: 'syz.2.118': attribute type 4 has an invalid length. [ 69.195692][ T40] audit: type=1326 audit(1750364728.534:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.118" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ae579 code=0x0 [ 69.217981][ T6491] infiniband syz0: set active [ 69.220305][ T10] lo speed is unknown, defaulting to 1000 [ 69.222380][ T6491] infiniband syz0: added lo [ 69.243305][ T6491] RDS/IB: syz0: added [ 69.244824][ T6491] smc: adding ib device syz0 with port count 1 [ 69.248631][ T6491] smc: ib device syz0 port 1 has pnetid [ 69.251207][ T6222] lo speed is unknown, defaulting to 1000 [ 69.253376][ T6491] lo speed is unknown, defaulting to 1000 [ 69.354197][ T6491] lo speed is unknown, defaulting to 1000 [ 69.433941][ T6491] lo speed is unknown, defaulting to 1000 [ 69.516703][ T6491] lo speed is unknown, defaulting to 1000 [ 70.100040][ T6503] random: crng reseeded on system resumption [ 70.182139][ T6505] batman_adv: batadv0: Removing interface: team0 [ 70.185839][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.188200][ T6505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.193643][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.196146][ T6505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.304742][ T6508] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 70.308041][ T6508] trusted_key: encrypted_key: keylen parameter is missing [ 70.476489][ T6511] FAULT_INJECTION: forcing a failure. [ 70.476489][ T6511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.477598][ T6511] [ 70.477603][ T6511] ====================================================== [ 70.477607][ T6511] WARNING: possible circular locking dependency detected [ 70.477610][ T6511] 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 Not tainted [ 70.477616][ T6511] ------------------------------------------------------ [ 70.477619][ T6511] syz.0.124/6511 is trying to acquire lock: [ 70.477624][ T6511] ffffffff8e4d1c80 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 70.477655][ T6511] [ 70.477655][ T6511] but task is already holding lock: [ 70.477658][ T6511] ffff88802b23bdd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 70.477678][ T6511] [ 70.477678][ T6511] which lock already depends on the new lock. [ 70.477678][ T6511] [ 70.477681][ T6511] [ 70.477681][ T6511] the existing dependency chain (in reverse order) is: [ 70.477684][ T6511] [ 70.477684][ T6511] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 70.477695][ T6511] _raw_spin_lock_nested+0x31/0x40 [ 70.477709][ T6511] raw_spin_rq_lock_nested+0x29/0x130 [ 70.477717][ T6511] task_rq_lock+0xcf/0x490 [ 70.477725][ T6511] cgroup_move_task+0x81/0x2a0 [ 70.477735][ T6511] css_set_move_task+0x288/0x5f0 [ 70.477747][ T6511] cgroup_post_fork+0x201/0x9e0 [ 70.477755][ T6511] copy_process+0x5cfc/0x76a0 [ 70.477766][ T6511] kernel_clone+0xfc/0x960 [ 70.477776][ T6511] user_mode_thread+0xc7/0x110 [ 70.477786][ T6511] rest_init+0x23/0x2b0 [ 70.477796][ T6511] start_kernel+0x3ee/0x4d0 [ 70.477807][ T6511] x86_64_start_reservations+0x18/0x30 [ 70.477818][ T6511] x86_64_start_kernel+0x130/0x190 [ 70.477829][ T6511] common_startup_64+0x13e/0x148 [ 70.477845][ T6511] [ 70.477845][ T6511] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 70.477856][ T6511] _raw_spin_lock_irqsave+0x3a/0x60 [ 70.477869][ T6511] try_to_wake_up+0xb2/0x1680 [ 70.477877][ T6511] __wake_up_common+0x135/0x1f0 [ 70.477889][ T6511] __wake_up+0x31/0x60 [ 70.477898][ T6511] tty_port_default_wakeup+0x2a/0x40 [ 70.477926][ T6511] serial8250_tx_chars+0x68e/0x860 [ 70.477937][ T6511] serial8250_handle_irq+0x761/0xcb0 [ 70.477947][ T6511] serial8250_default_handle_irq+0x9a/0x210 [ 70.477957][ T6511] serial8250_interrupt+0x103/0x210 [ 70.477968][ T6511] __handle_irq_event_percpu+0x229/0x7d0 [ 70.477977][ T6511] handle_irq_event+0xab/0x1e0 [ 70.477985][ T6511] handle_edge_irq+0x28e/0xab0 [ 70.477999][ T6511] __common_interrupt+0xdf/0x250 [ 70.478009][ T6511] common_interrupt+0xba/0xe0 [ 70.478019][ T6511] asm_common_interrupt+0x26/0x40 [ 70.478029][ T6511] pv_native_safe_halt+0xf/0x20 [ 70.478042][ T6511] default_idle+0x13/0x20 [ 70.478050][ T6511] default_idle_call+0x6d/0xb0 [ 70.478060][ T6511] do_idle+0x391/0x510 [ 70.478067][ T6511] cpu_startup_entry+0x4f/0x60 [ 70.478076][ T6511] start_secondary+0x21d/0x2b0 [ 70.478086][ T6511] common_startup_64+0x13e/0x148 [ 70.478100][ T6511] [ 70.478100][ T6511] -> #2 (&tty->write_wait){-...}-{3:3}: [ 70.478113][ T6511] _raw_spin_lock_irqsave+0x3a/0x60 [ 70.478125][ T6511] __wake_up+0x1c/0x60 [ 70.478134][ T6511] tty_port_default_wakeup+0x2a/0x40 [ 70.478142][ T6511] serial8250_tx_chars+0x68e/0x860 [ 70.478151][ T6511] __start_tx+0x3e9/0x4a0 [ 70.478158][ T6511] serial8250_start_tx+0x368/0x530 [ 70.478167][ T6511] __uart_start+0x292/0x4c0 [ 70.478178][ T6511] uart_write+0x218/0xb30 [ 70.478185][ T6511] n_tty_write+0x40f/0x1160 [ 70.478194][ T6511] file_tty_write.constprop.0+0x504/0x9b0 [ 70.478209][ T6511] redirected_tty_write+0xd4/0x150 [ 70.478222][ T6511] vfs_write+0x6c7/0x1150 [ 70.478235][ T6511] ksys_write+0x12a/0x250 [ 70.478247][ T6511] do_syscall_64+0xcd/0x490 [ 70.478254][ T6511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.478263][ T6511] [ 70.478263][ T6511] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 70.478274][ T6511] _raw_spin_lock_irqsave+0x3a/0x60 [ 70.478286][ T6511] serial8250_console_write+0x181/0x1890 [ 70.478297][ T6511] console_flush_all+0x801/0xc60 [ 70.478304][ T6511] console_unlock+0xd8/0x210 [ 70.478311][ T6511] vprintk_emit+0x418/0x6d0 [ 70.478319][ T6511] _printk+0xc7/0x100 [ 70.478331][ T6511] register_console+0xc2d/0x11b0 [ 70.478339][ T6511] univ8250_console_init+0x5f/0x90 [ 70.478350][ T6511] console_init+0x14f/0x680 [ 70.478362][ T6511] start_kernel+0x29f/0x4d0 [ 70.478372][ T6511] x86_64_start_reservations+0x18/0x30 [ 70.478383][ T6511] x86_64_start_kernel+0x130/0x190 [ 70.478394][ T6511] common_startup_64+0x13e/0x148 [ 70.478408][ T6511] [ 70.478408][ T6511] -> #0 (console_owner){-.-.}-{0:0}: [ 70.478420][ T6511] __lock_acquire+0x126f/0x1c90 [ 70.478431][ T6511] lock_acquire+0x179/0x350 [ 70.478446][ T6511] console_lock_spinning_enable+0xb0/0xd0 [ 70.478460][ T6511] console_flush_all+0x7aa/0xc60 [ 70.478468][ T6511] console_unlock+0xd8/0x210 [ 70.478475][ T6511] vprintk_emit+0x418/0x6d0 [ 70.478483][ T6511] _printk+0xc7/0x100 [ 70.478494][ T6511] should_fail_ex+0x4e7/0x640 [ 70.478508][ T6511] copy_to_user_nofault+0xac/0x1c0 [ 70.478523][ T6511] bpf_probe_write_user+0xaf/0xf0 [ 70.478533][ T6511] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 70.478540][ T6511] bpf_trace_run4+0x249/0x5a0 [ 70.478552][ T6511] __bpf_trace_sched_switch+0x145/0x190 [ 70.478567][ T6511] __traceiter_sched_switch+0x6f/0xc0 [ 70.478580][ T6511] __schedule+0x1bee/0x5de0 [ 70.478592][ T6511] preempt_schedule_irq+0x51/0x90 [ 70.478605][ T6511] irqentry_exit+0x36/0x90 [ 70.478618][ T6511] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 70.478627][ T6511] strcmp+0x3e/0xb0 [ 70.478635][ T6511] rtnl_link_ops_get+0xc7/0x2c0 [ 70.478650][ T6511] rtnl_newlink+0x2fd/0x2000 [ 70.478658][ T6511] rtnetlink_rcv_msg+0x95e/0xe90 [ 70.478666][ T6511] netlink_rcv_skb+0x155/0x420 [ 70.478676][ T6511] netlink_unicast+0x53d/0x7f0 [ 70.478685][ T6511] netlink_sendmsg+0x8d1/0xdd0 [ 70.478694][ T6511] ____sys_sendmsg+0xa98/0xc70 [ 70.478704][ T6511] ___sys_sendmsg+0x134/0x1d0 [ 70.478718][ T6511] __sys_sendmsg+0x16d/0x220 [ 70.478731][ T6511] __do_fast_syscall_32+0x7c/0x3a0 [ 70.478739][ T6511] do_fast_syscall_32+0x32/0x80 [ 70.478747][ T6511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.478758][ T6511] [ 70.478758][ T6511] other info that might help us debug this: [ 70.478758][ T6511] [ 70.478760][ T6511] Chain exists of: [ 70.478760][ T6511] console_owner --> &p->pi_lock --> &rq->__lock [ 70.478760][ T6511] [ 70.478774][ T6511] Possible unsafe locking scenario: [ 70.478774][ T6511] [ 70.478776][ T6511] CPU0 CPU1 [ 70.478779][ T6511] ---- ---- [ 70.478781][ T6511] lock(&rq->__lock); [ 70.478787][ T6511] lock(&p->pi_lock); [ 70.478793][ T6511] lock(&rq->__lock); [ 70.478799][ T6511] lock(console_owner); [ 70.478804][ T6511] [ 70.478804][ T6511] *** DEADLOCK *** [ 70.478804][ T6511] [ 70.478806][ T6511] 5 locks held by syz.0.124/6511: [ 70.478811][ T6511] #0: ffffffff8e5c4700 (rcu_read_lock){....}-{1:3}, at: rtnl_link_ops_get+0x2a/0x2c0 [ 70.478838][ T6511] #1: ffff88802b23bdd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 70.478858][ T6511] #2: ffffffff8e5c4700 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1cf/0x5a0 [ 70.478883][ T6511] #3: ffffffff8e5b20c0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 70.478908][ T6511] #4: ffffffff8e5b2130 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 70.478927][ T6511] [ 70.478927][ T6511] stack backtrace: [ 70.478932][ T6511] CPU: 1 UID: 0 PID: 6511 Comm: syz.0.124 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 70.478944][ T6511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.478950][ T6511] Call Trace: [ 70.478954][ T6511] [ 70.478957][ T6511] dump_stack_lvl+0x116/0x1f0 [ 70.478973][ T6511] print_circular_bug+0x275/0x350 [ 70.478985][ T6511] check_noncircular+0x14c/0x170 [ 70.478998][ T6511] __lock_acquire+0x126f/0x1c90 [ 70.479013][ T6511] lock_acquire+0x179/0x350 [ 70.479025][ T6511] ? console_lock_spinning_enable+0x9f/0xd0 [ 70.479040][ T6511] ? console_lock_spinning_enable+0x88/0xd0 [ 70.479057][ T6511] console_lock_spinning_enable+0xb0/0xd0 [ 70.479071][ T6511] ? console_lock_spinning_enable+0x9f/0xd0 [ 70.479086][ T6511] console_flush_all+0x7aa/0xc60 [ 70.479096][ T6511] ? __pfx_console_flush_all+0x10/0x10 [ 70.479107][ T6511] ? is_printk_cpu_sync_owner+0x32/0x40 [ 70.479118][ T6511] console_unlock+0xd8/0x210 [ 70.479126][ T6511] ? __pfx_console_unlock+0x10/0x10 [ 70.479134][ T6511] ? do_raw_spin_unlock+0xe0/0x230 [ 70.479149][ T6511] ? _printk+0xc7/0x100 [ 70.479161][ T6511] ? __down_trylock_console_sem+0xb0/0x140 [ 70.479180][ T6511] vprintk_emit+0x418/0x6d0 [ 70.479192][ T6511] ? __pfx_vprintk_emit+0x10/0x10 [ 70.479208][ T6511] _printk+0xc7/0x100 [ 70.479224][ T6511] ? __pfx__printk+0x10/0x10 [ 70.479237][ T6511] ? __lock_acquire+0x622/0x1c90 [ 70.479249][ T6511] ? __pfx____ratelimit+0x10/0x10 [ 70.479264][ T6511] should_fail_ex+0x4e7/0x640 [ 70.479278][ T6511] copy_to_user_nofault+0xac/0x1c0 [ 70.479296][ T6511] bpf_probe_write_user+0xaf/0xf0 [ 70.479311][ T6511] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 70.479323][ T6511] bpf_trace_run4+0x249/0x5a0 [ 70.479342][ T6511] ? __pfx_bpf_trace_run4+0x10/0x10 [ 70.479357][ T6511] ? sched_clock_cpu+0x6c/0x530 [ 70.479368][ T6511] ? lock_acquire+0x179/0x350 [ 70.479381][ T6511] __bpf_trace_sched_switch+0x145/0x190 [ 70.479397][ T6511] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 70.479415][ T6511] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 70.479431][ T6511] __traceiter_sched_switch+0x6f/0xc0 [ 70.479451][ T6511] __schedule+0x1bee/0x5de0 [ 70.479463][ T6511] ? stack_trace_save+0x8e/0xc0 [ 70.479474][ T6511] ? __pfx_stack_trace_save+0x10/0x10 [ 70.479487][ T6511] ? __pfx___schedule+0x10/0x10 [ 70.479500][ T6511] ? ___sys_sendmsg+0x134/0x1d0 [ 70.479514][ T6511] ? __sys_sendmsg+0x16d/0x220 [ 70.479528][ T6511] ? __do_fast_syscall_32+0x7c/0x3a0 [ 70.479536][ T6511] ? do_fast_syscall_32+0x32/0x80 [ 70.479544][ T6511] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.479558][ T6511] preempt_schedule_irq+0x51/0x90 [ 70.479572][ T6511] irqentry_exit+0x36/0x90 [ 70.479586][ T6511] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 70.479597][ T6511] RIP: 0010:strcmp+0x3e/0xb0 [ 70.479605][ T6511] Code: 48 89 fb 48 83 ec 08 eb 08 40 84 ed 74 61 4c 89 e6 48 89 df 48 83 c3 01 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 42 0f b6 04 28 <38> d0 7f 04 84 c0 75 58 48 89 f0 48 89 f2 0f b6 6b ff 4c 8d 66 01 [ 70.479615][ T6511] RSP: 0018:ffffc90022e3f3c8 EFLAGS: 00000246 [ 70.479622][ T6511] RAX: 0000000000000007 RBX: ffffffff8cf14d41 RCX: ffffffff895ccf72 [ 70.479628][ T6511] RDX: 0000000000000000 RSI: ffffc90022e3f598 RDI: ffffffff8cf14d40 [ 70.479634][ T6511] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 70.479640][ T6511] R10: 00000000ffffffff R11: 0000000000000001 R12: dffffc0000000000 [ 70.479645][ T6511] R13: dffffc0000000000 R14: ffffc90022e3f4b8 R15: ffff88804af73000 [ 70.479653][ T6511] ? rtnl_link_ops_get+0xd2/0x2c0 [ 70.479669][ T6511] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.479678][ T6511] rtnl_link_ops_get+0xc7/0x2c0 [ 70.479693][ T6511] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.479701][ T6511] rtnl_newlink+0x2fd/0x2000 [ 70.479712][ T6511] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.479720][ T6511] ? kasan_quarantine_put+0x10a/0x240 [ 70.479734][ T6511] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.479748][ T6511] ? kmem_cache_free+0x2d1/0x4d0 [ 70.479762][ T6511] ? kfree_skbmem+0x1a4/0x1f0 [ 70.479776][ T6511] ? rcu_is_watching+0x12/0xc0 [ 70.479785][ T6511] ? trace_cap_capable+0x18d/0x200 [ 70.479796][ T6511] ? find_held_lock+0x2b/0x80 [ 70.479805][ T6511] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.479813][ T6511] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.479822][ T6511] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 70.479831][ T6511] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.479840][ T6511] rtnetlink_rcv_msg+0x95e/0xe90 [ 70.479849][ T6511] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.479860][ T6511] ? ref_tracker_free+0x37c/0x830 [ 70.479875][ T6511] netlink_rcv_skb+0x155/0x420 [ 70.479885][ T6511] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.479895][ T6511] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 70.479907][ T6511] ? netlink_deliver_tap+0x1ae/0xd30 [ 70.479918][ T6511] netlink_unicast+0x53d/0x7f0 [ 70.479929][ T6511] ? __pfx_netlink_unicast+0x10/0x10 [ 70.479941][ T6511] netlink_sendmsg+0x8d1/0xdd0 [ 70.479952][ T6511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.479963][ T6511] ? __import_iovec+0x1dd/0x650 [ 70.479973][ T6511] ____sys_sendmsg+0xa98/0xc70 [ 70.479984][ T6511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.479995][ T6511] ? get_compat_msghdr+0x11a/0x170 [ 70.480007][ T6511] ___sys_sendmsg+0x134/0x1d0 [ 70.480022][ T6511] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.480039][ T6511] ? find_held_lock+0x2b/0x80 [ 70.480051][ T6511] __sys_sendmsg+0x16d/0x220 [ 70.480066][ T6511] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.480083][ T6511] ? rcu_is_watching+0x12/0xc0 [ 70.480093][ T6511] __do_fast_syscall_32+0x7c/0x3a0 [ 70.480102][ T6511] do_fast_syscall_32+0x32/0x80 [ 70.480111][ T6511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.480122][ T6511] RIP: 0023:0xf712e579 [ 70.480129][ T6511] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 70.480138][ T6511] RSP: 002b:00000000f511e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 70.480146][ T6511] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 70.480152][ T6511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.480157][ T6511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.480162][ T6511] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 70.480168][ T6511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.480176][ T6511] [ 70.931353][ T6511] CPU: 1 UID: 0 PID: 6511 Comm: syz.0.124 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 70.931368][ T6511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.931374][ T6511] Call Trace: [ 70.931379][ T6511] [ 70.931383][ T6511] dump_stack_lvl+0x116/0x1f0 [ 70.931402][ T6511] should_fail_ex+0x512/0x640 [ 70.931418][ T6511] copy_to_user_nofault+0xac/0x1c0 [ 70.931435][ T6511] bpf_probe_write_user+0xaf/0xf0 [ 70.931447][ T6511] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 70.931455][ T6511] bpf_trace_run4+0x249/0x5a0 [ 70.931469][ T6511] ? __pfx_bpf_trace_run4+0x10/0x10 [ 70.931483][ T6511] ? sched_clock_cpu+0x6c/0x530 [ 70.931495][ T6511] ? lock_acquire+0x179/0x350 [ 70.931508][ T6511] __bpf_trace_sched_switch+0x145/0x190 [ 70.931525][ T6511] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 70.931543][ T6511] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 70.931559][ T6511] __traceiter_sched_switch+0x6f/0xc0 [ 70.931574][ T6511] __schedule+0x1bee/0x5de0 [ 70.931587][ T6511] ? stack_trace_save+0x8e/0xc0 [ 70.931598][ T6511] ? __pfx_stack_trace_save+0x10/0x10 [ 70.931611][ T6511] ? __pfx___schedule+0x10/0x10 [ 70.931623][ T6511] ? ___sys_sendmsg+0x134/0x1d0 [ 70.931639][ T6511] ? __sys_sendmsg+0x16d/0x220 [ 70.931653][ T6511] ? __do_fast_syscall_32+0x7c/0x3a0 [ 70.931662][ T6511] ? do_fast_syscall_32+0x32/0x80 [ 70.931670][ T6511] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.931685][ T6511] preempt_schedule_irq+0x51/0x90 [ 70.931699][ T6511] irqentry_exit+0x36/0x90 [ 70.931714][ T6511] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 70.931724][ T6511] RIP: 0010:strcmp+0x3e/0xb0 [ 70.931734][ T6511] Code: 48 89 fb 48 83 ec 08 eb 08 40 84 ed 74 61 4c 89 e6 48 89 df 48 83 c3 01 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 42 0f b6 04 28 <38> d0 7f 04 84 c0 75 58 48 89 f0 48 89 f2 0f b6 6b ff 4c 8d 66 01 [ 70.931743][ T6511] RSP: 0018:ffffc90022e3f3c8 EFLAGS: 00000246 [ 70.931752][ T6511] RAX: 0000000000000007 RBX: ffffffff8cf14d41 RCX: ffffffff895ccf72 [ 70.931758][ T6511] RDX: 0000000000000000 RSI: ffffc90022e3f598 RDI: ffffffff8cf14d40 [ 70.931763][ T6511] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 70.931769][ T6511] R10: 00000000ffffffff R11: 0000000000000001 R12: dffffc0000000000 [ 70.931775][ T6511] R13: dffffc0000000000 R14: ffffc90022e3f4b8 R15: ffff88804af73000 [ 70.931782][ T6511] ? rtnl_link_ops_get+0xd2/0x2c0 [ 70.931799][ T6511] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.931808][ T6511] rtnl_link_ops_get+0xc7/0x2c0 [ 70.931823][ T6511] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.931832][ T6511] rtnl_newlink+0x2fd/0x2000 [ 70.931843][ T6511] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.931851][ T6511] ? kasan_quarantine_put+0x10a/0x240 [ 70.931866][ T6511] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.931881][ T6511] ? kmem_cache_free+0x2d1/0x4d0 [ 70.931894][ T6511] ? kfree_skbmem+0x1a4/0x1f0 [ 70.931909][ T6511] ? rcu_is_watching+0x12/0xc0 [ 70.931919][ T6511] ? trace_cap_capable+0x18d/0x200 [ 70.931930][ T6511] ? find_held_lock+0x2b/0x80 [ 70.931938][ T6511] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.931947][ T6511] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.931955][ T6511] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 70.931964][ T6511] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.931973][ T6511] rtnetlink_rcv_msg+0x95e/0xe90 [ 70.931983][ T6511] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.931993][ T6511] ? ref_tracker_free+0x37c/0x830 [ 70.932009][ T6511] netlink_rcv_skb+0x155/0x420 [ 70.932020][ T6511] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.932029][ T6511] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 70.932042][ T6511] ? netlink_deliver_tap+0x1ae/0xd30 [ 70.932053][ T6511] netlink_unicast+0x53d/0x7f0 [ 70.932064][ T6511] ? __pfx_netlink_unicast+0x10/0x10 [ 70.932076][ T6511] netlink_sendmsg+0x8d1/0xdd0 [ 70.932087][ T6511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.932098][ T6511] ? __import_iovec+0x1dd/0x650 [ 70.932108][ T6511] ____sys_sendmsg+0xa98/0xc70 [ 70.932124][ T6511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.932135][ T6511] ? get_compat_msghdr+0x11a/0x170 [ 70.932148][ T6511] ___sys_sendmsg+0x134/0x1d0 [ 70.932163][ T6511] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.932181][ T6511] ? find_held_lock+0x2b/0x80 [ 70.932193][ T6511] __sys_sendmsg+0x16d/0x220 [ 70.932208][ T6511] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.932226][ T6511] ? rcu_is_watching+0x12/0xc0 [ 70.932235][ T6511] __do_fast_syscall_32+0x7c/0x3a0 [ 70.932245][ T6511] do_fast_syscall_32+0x32/0x80 [ 70.932254][ T6511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.932265][ T6511] RIP: 0023:0xf712e579 [ 70.932273][ T6511] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 70.932281][ T6511] RSP: 002b:00000000f511e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 70.932290][ T6511] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 70.932296][ T6511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.932301][ T6511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.932306][ T6511] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 70.932312][ T6511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.932320][ T6511] [ 70.935042][ T6511] vlan0: entered allmulticast mode [ 70.950839][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.952268][ T6511] erspan0: entered allmulticast mode [ 70.953509][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.969302][ T6498] PM: hibernation: Basic memory bitmaps freed VM DIAGNOSIS: 20:25:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b23bdc0 RCX=ffffffff8b7eeaa6 RDX=ffffed10056477b9 RSI=0000000000000004 RDI=ffff88802b23bdc0 RBP=0000000000000003 RSP=ffffc90000007b48 R8 =0000000000000000 R9 =ffffed10056477b8 R10=ffff88802b23bdc3 R11=ffffc90000007ff8 R12=ffffed10056477b8 R13=0000000000000000 R14=ffff88802b23cd40 R15=0000000000000000 RIP=ffffffff8b7eeae2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097561000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ffffffff CR3=0000000028a42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000019000000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85580b55 RDI=ffffffff9b06da40 RBP=ffffffff9b06da00 RSP=ffffc90022e3e9c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e36312e36 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b06da00 R15=ffffffff85580af0 RIP=ffffffff85580b7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097661000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f511dfac CR3=0000000028a42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000019000000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff88802b43ca08 RBX=ffff88802b43bdc0 RCX=1ffffffff2150c44 RDX=00000000000001c7 RSI=ffff88802b43ca08 RDI=ffff88802b43ca00 RBP=00000000000001c7 RSP=ffffc900209577d0 R8 =ffff88802b43ca10 R9 =ffff88802b43ca1c R10=1ffff110056877d8 R11=ffff88802b43c0c0 R12=0000000000000001 R13=0000000000000005 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff819232ae RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097761000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffffffff CR3=000000002584d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000040000000 RBX=0000000000000003 RCX=ffffffff8169e256 RDX=ffff88801c328000 RSI=ffffffff816a12ac RDI=0000000000000000 RBP=ffff88802b23bdc0 RSP=ffffc9000048f8e8 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=ffff88802b43cc20 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b53cd40 R15=ffffed10056477b8 RIP=ffffffff816a12ad RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097861000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ffffffff CR3=000000002584d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000