last executing test programs: 18m22.558669667s ago: executing program 3 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x21, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r4, 0x58, &(0x7f0000000100)}, 0x87) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 18m21.770467959s ago: executing program 3 (id=527): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x21, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r4, 0x58, &(0x7f0000000100)}, 0x87) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 18m20.804088972s ago: executing program 3 (id=529): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) creat(0x0, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(0x0, 0x84880) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x26}, 0x28) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x7fff, 0x6, "0062007d820000fce6ffffff2140f7ffffff00"}) r6 = syz_open_pts(0xffffffffffffffff, 0x90000) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x6) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000040000000001000000080001000000000004000480080002000100000024000880140007800800050000000c000580"], 0x4c}}, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'some'}, 0x2f) sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0xffffffe7, 0x0}, 0x80) r10 = gettid() futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x414, 0xffffffff, 0x254, 0x254, 0x254, 0xfeffffff, 0xffffffff, 0x34c, 0x34c, 0x34c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0x130, 0x170, 0x0, {}, [@common=@srh1={{0x8c}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @local, [0xff000000, 0xff000000, 0x0, 0x100], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0xff], 0x3c80, 0x1000}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@frag={{0x30}, {[0x1], 0x7, 0x10, 0x3}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x40}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x470) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r10, @ANYRESHEX=r7], 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(r11, 0xc01c5869, &(0x7f00000001c0)={r11, &(0x7f0000000080)='{%\x00', 0x0, &(0x7f0000000100)={@_ha_fsid={[0x7ff, 0x3]}, {0x0, 0x8, 0x7ff, 0x7f}}, 0x8, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x101}) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0xf, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r12, @ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x22, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18m19.702533391s ago: executing program 3 (id=532): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) rseq(0x0, 0x0, 0x0, 0x0) gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}}, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) fanotify_init(0x4, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330, r4}, &(0x7f0000000180)={0x0, 0x0, 0x9, 0xfffffffc, 0x7, 0x6}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x3}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x0, 0x23, 0x0, 0x4, "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", 0x3, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000800}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 18m19.294518827s ago: executing program 3 (id=535): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_emit_ethernet(0xfdef, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x40, 0xb4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) 18m18.958113906s ago: executing program 3 (id=539): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x21, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r4, 0x58, &(0x7f0000000100)}, 0x87) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 18m18.721764953s ago: executing program 32 (id=539): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x21, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r4, 0x58, &(0x7f0000000100)}, 0x87) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 15m48.006354872s ago: executing program 2 (id=1058): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c000000bca5e8f37c8c51eea339c520757775fe0a8bda0f42455a8ba603a577f5af2130f499699afcb29ba6885e98ccdf18fe03ce6cad3e5eff64160446b751732261ffbc4e71c28b1b597e7647ab48c97f929813f601f9504495dfed6a83e1450da332e8725235a2d0fe9cb55a3bb7ce", @ANYRES16, @ANYBLOB="050000000000000000000f00000008000300", @ANYBLOB], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macsec0\x00'}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r5, &(0x7f0000008280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0xffffffffffffffff) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x41}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 15m47.123435516s ago: executing program 2 (id=1062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x205a, 0x800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0xb6, 0x0, 0x0, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15m46.148973257s ago: executing program 2 (id=1063): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x100000, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16, @ANYRES64=r3, @ANYRES16=r3, @ANYRES8=r3, @ANYRESOCT=r3, @ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000061b4d47900000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000006209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m45.972512615s ago: executing program 2 (id=1065): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000840)=0x104, 0x4) sendto$inet(r4, 0x0, 0x0, 0x4000010, &(0x7f0000000000)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r1, @ANYBLOB="089805000750050008001300", @ANYRES32=r2, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 15m45.798924747s ago: executing program 2 (id=1068): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000000900)=@type=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x20000004}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$dlm_plock(0xffffff9c, &(0x7f0000000080), 0x40000, 0x0) r4 = openat$dsp1(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) epoll_pwait(r2, &(0x7f0000000340)=[{}], 0x1, 0x12, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = fsopen(&(0x7f0000000200)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0684113, &(0x7f00000000c0)={0x0, 0x80000001, 0x5, 0xc, 0x2, 0x0, 0x3, 0x3, 0x0, 0xb}) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_RESET(r9, 0x4141, 0x0) 15m45.563386385s ago: executing program 2 (id=1071): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xa6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000106, 0x0, 0x32feb97c}]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x2, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="85000000ae000000620a00ff000000002e0000000000000095000000000000001810000075ad", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa5, &(0x7f0000000240)=""/165, 0x0, 0x8f, '\x00', 0x0, @fallback=0x2}, 0x1c) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000400)={'veth0_virt_wifi\x00', 0x7, 0xfffffff8}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8}]}]}, 0x28}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 15m45.453514894s ago: executing program 33 (id=1071): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xa6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000106, 0x0, 0x32feb97c}]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x2, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="85000000ae000000620a00ff000000002e0000000000000095000000000000001810000075ad", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa5, &(0x7f0000000240)=""/165, 0x0, 0x8f, '\x00', 0x0, @fallback=0x2}, 0x1c) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000400)={'veth0_virt_wifi\x00', 0x7, 0xfffffff8}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8}]}]}, 0x28}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 13m43.170208731s ago: executing program 4 (id=1498): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000001c0)=0xd, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, 0x0}, 0x24008800) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRES64=r4, @ANYRES16=r3, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b7216c}, 0x8011) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xfffffe6c, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x4004000) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffff9c, &(0x7f00000000c0), 0xaa00, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f0000000180)=0xf9) 13m42.005394837s ago: executing program 4 (id=1501): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x86, 0x86, 0x5, [@datasec={0xb, 0x6, 0x0, 0xf, 0x2, [{0x4, 0x28, 0xc9}, {0x5, 0x100, 0x7}, {0x3, 0xe, 0x6000}, {0x3, 0x6, 0xc000}, {0x3, 0x3, 0x200}, {0x5, 0x2, 0x3}], "1231"}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x7fff}}, @fwd={0x7}]}, {0x0, [0xd1122e277f97b8a8, 0x5f, 0x2e]}}, &(0x7f0000000340)=""/235, 0xa5, 0xeb, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, 0x0, 0x20040800) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f00000003c0)) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x15, 0x0, 0x3, 0x3000006, 'U\x00', "1575a859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "fa0700f22b42a3023be516d1"]}) 13m39.881362321s ago: executing program 4 (id=1506): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x800, 0x1, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) listen(r3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000040)={@local, @random="2129c00ee436", @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x4}}, {@generic={0x4305}}}, 0x0) setrlimit(0x7, &(0x7f0000000000)) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x200000000000015e}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) 13m39.562500324s ago: executing program 4 (id=1508): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) r1 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmctl$SHM_INFO(0x0, 0xe, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002580)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25020117800c00030008ac0f0000000000140001000000000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358170800eb00", @ANYRES32=0x0, @ANYBLOB="d800a53cbba7d7da8795f19fd17cf2503f8f3dfb007747cc918e2d2308e379f534891d7bbb3b1a0b9ca8f8b22271ae410a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x8, @multicast1, 0x4e20, 0x4, 'sh\x00', 0x32, 0x2, 0x15}, 0x2c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000480)='veth1_to_bridge\x00') set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2, 0x0, 0x0, 0x24008804}, 0x30048009) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x13, r4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000140)=[{0x25, 0x0, 0x1, 0x5}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="03c9003b5d73da839dc7455ed4b3668eab1287ca718059fc375ecf28141c8902000000000000007ff6a5bfab1078823795ae1d854e5cb5028bf5f105d94e4eac2d106f5880da666244f30702727d"], 0x3f) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$kcm(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000000240)="b23cad26b18b9e512f8b412fcca9dcd319b8fc10c8c689467927dd16f40f8d4d51378db22fb64aabc0e6247c8750697b709ddaad7326f1a338", 0x39}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="a287334256be77426722582b1b1e5a8ef10bd552d20517f875f668eb1f7742a8c390cee29a375ec194c789b4cd7d81de0de08cb774b985b69ec4192a5d496c8442ab35cb83bf604d6a407eee76cf55d0", 0x50}, {&(0x7f0000003780)="2baa9f1017c8dd65bd1650ac0940cd8b86b63d9b4101d20606bfebf82cbb63352c788d116e6dc301b1ebe3c62853af246300db566b26feca05639af4e6f1a0c8e9b21b4513612ea96f040374b67203afa5d8f81ac8ede226111335a5fb79717d23fb02446f94dd5689e994bf613864c71e2d76637ab3b00d503f043551ee131768ca2be92a7c5e0ed729413c2d72eb00c3bfbc0cc95edbcb9c059f5939d5feacde984cfcf6fcb586f3dee71cfd7b3588dea4287f5035d53c0d79a8fa068ae4a56d74d6141ecdfe0fc229a4e31c9abe07e0d95335bd0a00963440519af00b7dcca3ab182ebb8e3dd3f8cb0241323cd0c5c2c49deb67f22cec70e09074f9eabf2c3efabf8f4c9ddade9c43870e5f9d2b0fced386a03318dbc8b3ee6321abe7a84364668ad898c0c0ead7c2aea874e3aea40bb86f42c80615a629e98e07527bd536e1d7b26ec3826b47a132e0ef26a7378ad9856a74cc2d9bfd641cf055a5e9db20ef4d62d4721f91b13387849c83deae2b819612442b811be8dc3840fbd2fcaf2d6814d47c18ab87768b5ab0e9493666379006f06bab3706576e912f6c1b5a7299780a81bdc39484c6f04c2d4f1e952957bc9b9cfbe31b6d26d7215160137044a31f648267782ffcdaf97c93f5e6708a181a1f55f80ae2a87d39ae1b21eb4213e3aade17c22e36993bf2c46e7f4b0c1d63726ac7c4975c5803cda7bfc2469285f8d8d72ba5565278d9e437c2e016811d0183fd7201f66ef505faba9d16ff6b737de1d3eb7e162980c6e72a300be53cb68bde9bc54b6c5f4975b854448db555706518c53d26e08c1f400472551349fdb0a1b9a13800d9040059bd7187b0037a1863347895823caa925814b4c9f995727461d62ce8a4d5452597701f7fb057e613dba30fa880b1ef82ccd4bfff684f8121122d436b40a317758dd9254f96dbe9ff50e9ab4b04ccdae1765c7205e5de1f0a177270254aaaa6bb95d926f128c88f134d52bfe00b8fc071f6106be0b398783862d096c8fc1a293c4c1afdb2e5e3fa88f3e24609807469f180a77aea4893d742d6a367ebe1210a023641911ea75449b9fbfcbf66bec04de34ce2b4c3bc3e7c1b649d01577cdb2b8f85528c32c96bfa268b76591290cff57eb72f9f9ebab0bd7353573509a88916c0b40739c5201662085936f6ca80daa9334240ba9676c9861a332ab5b0a4180c78902194e64ffe092aef9b7830849eb3e29d9d457fe64e2e8ae737ba19c89b1772464678d675e13db6d8c861048064962ffd591fc7f494058a1f9312517087c795acb563c751e425b802eae0b22ec20e5e16bfba15763e1373d8d5541f183167d845934cc7abcfba40f964d54497693b57ee1c5dc2740776ba95e464030b8daaa84d2e5067b2af47a5a077a512e0a7a2a0c8a7cae7fb1b4a3218f9d3b1b4b87ac05f11d7e706a30570bbe12424af76a5d0f2826ee03c3d7ea1759798ba49d92d74ba6d3415d72d821f3bc91f68d0acd7068802e5811839f61341aacc511c737873b7664ac18afdc4a01d316ef837df2352b27975b8102d34c67bc3fdba62dc32ad00e9007ddc094f7ff20a565b07f690e55dc8e375fdd01c0badec0e7a27f393b9dd583b5b7e52c1ac6cba223930f21cde5a717783bbb197c895748dad70e0ae0be7529eac7c49046aa2e5d03831fda707991f0b77104e95c672a323e18b32c3681c87476a18f15776a8516ad65cc2c4c0edfa5c465c1d431b16254c791adc8fd3c70e9c0e195b1b515da58ce5b4fa0f777d0d2db9b634d15ad3e4e2e5b6f71d307aedf761c2e51a9a1bc345d77d8f99f11cd117bdc625ad1de32c066ece55313baa187397a9cb51cbf33477a4490a4a2384264ee7ad4f65e5f0d1911c83f9e9242085b4cb6513c1e9f687b34dc58564f81a3250935561409a43841d501942e1599344971d0d5ae630c23a2abb7bb0c07e8fb5acbcbb5825b31cf462d23632851638e9faace1f7f7a78207fe9e491c724be87cf6f50c3cc51403a1c3cbc246b2d0e59336989a1eb9f1ff8b3f0d871a14f04ca2e8147503633794589675513e7637282d065a751a798462ebd4a77f3f15610561062eb8477b3eae636a337174350b0665d0d1289ad41ce47829ccdeb00c8d2de6d591a21ee53ae570f6fd6c7b8fbc2ce0d57f9ddbedd345b39710a8c55633ef34026ea0d659f26f6fe35e09e567df846999c28c8065a681b8709ed80aac205807dae89e2085e6b058378331f4b29852d58d0197f5f5065c95e372c42599b1cbeb6cb0e6af45dae2c93868054046c40af21a56375ad2fb7c68a8ccc6bf12d3dc0124d45b8bfb5cc85af57495a8257aecc4ca84e93d78607d3c5c327e0e380e191e6b13e6d70a38514e581b11c28f29b1333d80f2d0dce246729afbaae698644a5b4c46c5cee435b5fc46a2eabac815da4c1fc51ec4825642ebb49d6ce224d3ff0ca3032a912527717065fb9b13f8f2b940bd85807af3e8f9d09c9a258d52907c7ee88c82c063699171259aad8cbcf4dfcb9252daa6898820b6a828fa138329db3857e5cd33a25f77689422436b2d73bb369e1b5ff74d0144da464021cea554d9e0b0f6e0d09b7cccce318b7b68de732ef515f443b972e38b3c3dec7d416b2fa6808e4435684fc8ea3f7b9a69e155139ec34c2f95014a619e28a1b6f79f32629622afe07ce478b52782d77721f7fabdec5098ce9fac57ef913fff3f7edfcca9a03aab78d44f2369310e58df2b67325993cde9d026a8c101c0059b1ea076bbaa5c02c792e2336b206764c2b43e8b402ba9e27859a0acfea670dfb8c152aa3858ca8709db1e44789e4aa4bdebcff2f95cbdf9b884fb2139a72e6f0faf180d5fe16eaf36cac1458ff78abc9b5fe1d85e3724b21682aa3cb162f5d07facb5c17d0997c8e008553ede1ee1b62bfa66714aab57e192cc0047b7044b4c10146258cc33d5c2655762db35fb65af0db8b456d9acb9a9b2d890b5ec7ff4f69b0f3b87f50b5a0386b81329f35754823aaa670dfd98107bff2c20233c957c8150245fc0154547a131ec05eef3b9d08186ab9b5f7eb6cc2fe53b60e18bf96d9820b082ce1852c4c73936ef25930747c8c3303331781f7f2e3b436dc95580ff15801d05c518fe44007dcf806c82a4caf86da15fe63ac59c7659ffedb42ee7890f308873515f1c2dcdb6d3e59b08c60165544e697725251c950bf31897a5f6daa7d63bf90800127b280d9f5c055a8bf6878a2171a8371015ac30299b9e28d66924b84646793da99270f9dc508f72665f3b7269667ed65756b68dffcdd7942009965398dd8b444ab8fae4bd5e256e2875b148ab275b4a86739247e5d155c32ecb0249334506e6552aa1363498f31f7df11990489cf87cd5d7ed56605e9cb1130dfdab35bdeb37d8d06761cd60c283b3fd11a4938f8c34d17ce6bc91e452f0379317c1a77941b357977c25c50bfc5e57c89f239c1860414648dabb7cef61091f4485b541719e611e9f0e7371abbd9140bf7aafeaff5bd9b7c1912f13d0cace21cc6caf65409149d0e74c57d5e466695569608752806e0e4c6dc59c56803d8b990600a4d22d3621c65fc80ddf423c00d604338702a22c6294df64f934471d071a9092a52b972c539413dd3f135c06be8f3a2cd8f6d186a5e68c0bca99884f35e24618fdc5149fd6a1df6091ac444576dfc4c781238ad6e70144717fdfdf98cd9c98846160b9863db936aa5d082a614d4eeb67622b0ba43e0a084124e0714a55144e71c6460a1a02139db8f5ab9f3dbb93ca39f711a608978eba6333611417c7ce000d2507eb5cbf0993e13e1e6c194d55e7a1cf76fe53ed6d014954b67bf87c534e63ae5f230d6c9c4ace92cea6e3b95da17f2f1c4e6e3671999f3b9394e7520ec2109e0fab14a02158f37e3501c4849fa253174ac4bf481500cd88b7b76f60d6ee8a10092098c1d313a6fc8b7c1345d262ca30d804a555a1f49a0b7ba998bcffec85518cc7bb2ba7945d3479a0cac1d113fe340511d2f2f00b6cdc2dc78bed489e6ab44c4831a3d3b343dfb035911637489b66663c39c4f336ea53aa43e93b51879b027b2c8be863295110dce53923c42323a5d209f197536667d3f8a75237b672a4ada8a5484ed07b011d756fe3b1b450c0db2dc4e17258ca2bb7c283345dc5291dd1d49dea524f889e20928682403c7f48b94c6236e3339cdac610743048195730d5157ce4a9180f377eeda99a756e6ddeab4b57a0e34389a02ff16b57f7c75a4cb4ed07864707d8fa6c9b55179b501f67a32e9cdfe61d0815846288f1fc18b664fa918b7817df91269293b415c728751126286961df09adce23eced86328a58170ba27665c4f4af670bb7383bd97c7a9c6f50e7a172ec38c47105446eeb8e3ec26375965ba3da3c6241c19330e157a825bc35ba567d1199509a5fedc02b1d37ed6e939d5eff23bb44ca96e643c040850e9da5a78e1fc8c7238558f9ec54b457c94e3cff5c85ab30a57a30fe65e271e34b9b7f2e4b2edadb459ba6c5a5c6f8cc4d85efcc9b8251b85bd7fb08fa13228caa405cab85eb97c0087eff2a541fd8c0e0a873d39fef19def9e3f171c17e3481b95ce1b9bbefb1593318ef38feaec4df3325b56559b381fb7e4cce2e26ebc101525e5af59f14016a0c5b81b31ce59b5e446e8f8b5ce879fe4633f17cd546e3ba85dbf9e479e51828e6dc0d8c3069158b24714a36d5fe2ad7409cc9d0a7e4d40988345a10add65d94eafaa09f8b499b8c19ab1b6588c2cae0b7f972c9c80d8ee1550d2834de70a3a7c41af831f307cfe2b92edccd7b2990b795dc167233938de768c57239f2fff4bec7bf732fa343acc5d69a6561d235b426fb9d2623bbbe67b28bce600ef24c90170dd341bbecae80db9797e3b1d21ee21dbbf5d037dcdc0e9333b4c229918fb93c0c061be5434b9abe8f256de893e815e8d0e464394e1942fb65b3b1646bf35580b2f18a44a878f1d82f61012a078b6ab376a987d3e9b3ff84ba60ea96d7b27dacb340cf028ceb14dfd326fb4548ee9c9f8a9fe204f35965e31791d0c56f908454c557a821c5ef9e148f9a58de8d91f450a7d485a8019fd6f4366fc9eb1a1987cb07320721c76f3e21bd753ce058b4af58008650b73adb6802304847fa4ba5cae064198164c6e0c4f3dce699a04bbe02c93a58ce0ef91b7de109e2983ead84d75fdb81c99da5bdeba5f20b3cd8fee7ae5bca7ef8af081fbd4835268206d3bf6e789701e1950e4afc2a160065bbb2cd89f358ce66729c4356a698cd51392ee3b733b71ae39162f914fb01c7512028b54bfd07a2ed5fa584d0a85b34cdfb075caf396e29de518d02700c4aa2b30eea1623fbfae2f0f026195b3c73ae904c58e267b04e1d6e2d99e2804c0aaa2d8619296bd984af49c916ae77be2030d18030e0aea51e8ac93723cc19458c8b6570b5886e7e37b7c86aa0f9715770705413cd3feb2768970d8457c57e091aecd5229e9b150617d5602e0c89709080186bdbf4591ebbb482396d9dd63aac70bfd4a4e3c4a41114559657abaa9a49ced5cb128564e6e9a648e4ff770fa7a25253186d3cd75c17fca55170817ac773da4d1ce9ae5c7b99566a1d83f8a4abd6f4518c0ac99e9f26710acaaaa39d2b52373f35432c55754e0d51005a7a6b260fd5759bcd63bf9b4c0fce8d1624f0e17dc1740043201c7312bd7ad290a2524aa743c195a031bb83abd6944c990ff5b4fbdaaab1a65b7b2d31ce3c9ddd9ea7f5f3d3575f636a3bff22a51f544a0aa775b300cdd3be15d26577e0a0958d15b16c06", 0xffffffffffffff1b}, {&(0x7f0000004780)="656946c97f8982c4185066c87ff93ef0d0630a082070c2fc", 0x18}], 0x5}, 0x4000040) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010102}}, 0x24) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 13m39.081851958s ago: executing program 4 (id=1511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x8004745a, &(0x7f0000005280)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008ec0)={0x8c, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x334, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0xfff}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) 13m39.036691261s ago: executing program 4 (id=1512): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x842, 0x0) mount$fuseblk(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x488, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000014000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2860aa, 0x0) close_range(0xffffffffffffffff, r1, 0x0) 13m22.92782163s ago: executing program 34 (id=1512): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x842, 0x0) mount$fuseblk(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x488, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000014000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2860aa, 0x0) close_range(0xffffffffffffffff, r1, 0x0) 10.007876848s ago: executing program 5 (id=4223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="388082030400000004000000000000002f000000", @ANYRES32=0x0, @ANYBLOB="00000000420000001800128008000100677470000c00028008000100", @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0xba01}, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x0, 0x4000011, r2, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r5 = shmget(0x1, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x5000) shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmget(0x3, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000040)={0x7, @pix={0x5, 0x3ff, 0x30383653, 0x6, 0x9, 0x6, 0x0, 0x4, 0x0, 0x3}}) sendmmsg$unix(r9, &(0x7f0000003540)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000300)="bb5683f3e35d76f32a078c720e9947a71b0b05e5d573c0aef756a8249afe7030714a67d74dea3bf794f965ddbee0c41f23e96e76403377d22a20bf526b40038a1544d6030899d3b99ef959350d901df130e1b0c51dea7b25915e8aaa4091b7b7aeb82d44d8dfc8c87cfe06ec5e8892937bebb56e3b1a3189d3f4131798fad960a4aa00ece0f89ba51dd63c5e29678df6", 0x90}, {&(0x7f0000000480)="971c992e0812582351ee5f7ad894000ed5b0409e00c8a8947b9f72dc88c58a5209da410a2124257cbaa68f", 0x2b}], 0x2, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r10, 0xffffffffffffffff, r2, r10, r9]}}], 0x20, 0x8080}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000600)}, {&(0x7f0000000680)="7ffd756c3c8de3df2d1b1a8b8db622e366a1df382c944ae54ab176be74ecd8bc13a2e3161a581575897d98bc00df3cadb3d71e8db281b370a83cbe24462388e92fc08407ac24ac8ee885f0e40b019cd42564df3dca32e868185462e6ed0ea7c4172d798319f9274cf0e89d64d8262517b460", 0x72}, {0x0}, {&(0x7f0000000800)="b601fe958632b4c960b470c33c1b19b667fef9f0f7c0dfbd59543dd2049ba999eb245c75f80e7c0509a2ee4dbbfa17480e1e2b309473a2150f724900101291dc6bf1c1cf6e334607843433acf7e6399bce9f7d9e90fc34ece7d20788b2e465c85fda540b8fb23d6ba8a0dbe75f361b6300f3f2ef6252bd344e8e27e60e3f48b50d982b40364f76339fd8f1162978204add4db4f1a48d336e605598f9849934a8f16e98cf0ed66aab005eada34232f70cda3f48a3327a5b0c56ea447fd27a621e02f0a45940e8", 0xc6}, {&(0x7f0000000900)="0dfba698d89687828cb0daf321aae1506ab079b1496e978f458899ba39b741d2b70b10f2dc9ac9c5f12a1246a37a602664a0da7221d2e547734107cbae72367c8ed2007fecc62ccc940bf510f073c63f3b87ccf72b2fcb7d5e99b8b29d9c7a4f156f345ccbb8ce47d3", 0x69}], 0x5, &(0x7f0000000a00)=[@rights={{0x20, 0x1, 0x1, [r4, r10, r10, 0xffffffffffffffff, r4]}}], 0x20, 0x4044000}}, {{&(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000000b00)="424307b2aea7eb038740f55825c9cdf2b3aa73159aecbdca17be89675c4795c67c5d07d0197fb1bb2b7c57ad496fde4eb0c2f4204d1b0690e2c5642b3c5d0445fe2ca616be278527a58c3e", 0x4b}, {&(0x7f0000000b80)="71bf27f4a422f05521576bde1d31b70ee7534f1fcb37cd1fff5f0d8ffd5bf66c8a4afe27203e18f9448c2b", 0x2b}, {&(0x7f0000000bc0)="42c3b572b3295b48e529eceec1ba13f8edb3addca98d7b53af4a24f49f31bc2a0af203387c311a3c9b93474f6151cf813d0c762e141ccfb627ec8846ce2415089bdb51bb2b5b537735014d830f28026beb547cfbfc522f45b860e9b2c2669a6a5527d1af48b610625fe3ea59b43e9637006bd7dde5f222d39c2e79c0877e7d4b520fafa0bf4e36199eee5d3570f7e8df55cdb8586b8d215567a04c7936f6a14af11e4d66275c9ce1ae69fa9334c2bee815ff8ac7bd89384618bcb12c1637d242f2c84258b1cec4e4c4a75cee5c562e7226e2f5dddb85ae32c6981ba6d287dda85d23dcba2ebe84e9aa8a0f5a0fadb0d53dc800c3ee18e5bd62df65a3da6db661fcd0dfab1ce46e937f1fc4f3fe619191ba4342a138dff6f053da3add6287f94f7fb9abd90c740bd9ed67fcc1911980d2993e4fcff14a78eef538fc7469b0a174d520b0a45691dd359a6c5ae182294c508093d2b5617242e8ddf10e3e3752a4f3dcace4530f51088972ec215c159733ba68f2fa69de5ff62eb1a0c8371f938d55f23468ab9d7deedec76f5a88c61cd0588dfaa92f8844c268f8edb77eb4a8b08f646b8f70b911c7e3ae1c2ec52cce444069bd003b17af66743d54e0cc81cbe74160bcc918e99d32785d8786fc5bd362fce3523fdc813241720ba9a2203762bae600062d3821e2385dd9b29ba3e7c7e002712a159065a1d41ed56754271898140c1cd28e7d21f5e8fe3c149a911f311bffd1da1f8f6e1004bcaf85b0a7b8638dcdeebf8841cedff6b417d902df6aa034a37af179d2cdb096fb2e0ebf68a0ae4b38e080929eeebd82450df4980a03660c98e15f6aafcc76cff62fdef985f685118f13360585dfbdba2712cadfcff84a4b92a689898de18aa5b7d497e1c18ed2c13dac6c2a769bf99b91c2f9f02988ee15cb6269627dc86c3416cb4fb528addc246c34dfb6d58adcbbf8694671c6a6b6139be3e1668cc2e957804498cef02cc63899673b6d48f12812c65828ae940a1703e7ac3799af0b0c71cfa7d7480d7ad81fb40c92f2fe2ab74bdf6068df1218204210b3b95e98c542389ffd252bd2998812d120bf913cec02838288d0fa88e9d6812a0ba6994c065a3c01bbee41b1c8f2740dc81432d05e33f5c8640b740cfde7d5b4afe39c63c77d12bd4d337fd466474991c657aca791529941853e68ce1550838900e14480b7d47ae52573977277b9c80868c00b86933b0a4f16f4d2f8e78816cbd256d73e65d6ad0e014ca84257f29acb4b52629501ec63921fd15972db0ea45b7cfc3b1cc113e790cabe6d5ada2a63eaeb130eb90ea6a2ce8226313752fa2ca50006941747ccc499e97885a8184ba9f048c83476ddcb72c96d65f4e3876081a18c61a54ba8e757c467205fcd28986df61c15e3372dfaeb383e015f0f294b31acafb6c17b42ed2044cc17e693bbc8b0a67b432918aa8d26e7bc2beb57a1ddc87c8e21faa9ec5376c1d6699c7c54d018e1e6d5bf83ea39d29a8941ea9c842bef576007f0b4029fa50072062cac6fb8cdd6badd1cbe46ffdaec6fe9d6669c4749bbbcdbe7124965706fa8da6581672a5da05b8e5e6575a0d2b6f9bf04b7a493b899e288507a9797f8bad5c69b8a5b7556048a5b97a61e5c8bc5e7042c13e38b9515bcc525304698e892a0de3af921264785dc0e9a2ad94359f58562c970c1e6c2444a56c2da30de9cd1ac7cac28bc64893fdb068c73d401f4d664c9487df364dd5079d2551500828347604f2682b5499d2d0eb7d8404443791abd5849e8bc3d63cf5f7f92aba36110b787f32a0ceb4eb8658b658b4c57fee5898a3ede8d49cf649487e1cfec01010d6a7f8a1b181ed97730b7fb69ecd2fe19cfea85fea79457b8c4187f85ca905b087971d14f6575a3e0fcea53051a6c4e7e0669511944ccb1c8808f1976e1007e9fd8119bbb70efae186a7b4d18d315cce7f93fa3624f58e8546946f5da64bfb2a18da43a71cdaa18a080ad1558aead8c5f5cc64ad39972302906e827be5e233019d8f867d9925a2c1d5b6c696cb783e0d96ed109ac4f4aa4b04766208e52ff53287e681dd5412a89ef2b0556dc55163a2db2c57f7493b0d32f5c95b345f24a8110f6230d0b9f708d2f28a3dc6856026414a219bac201915aa51a2a49d399542cd443d92bb2231320284fe26e38a151452f93ddb92b7d0618f3b86b1f7dd2191b98ce020fe6f6d8f3bfad5cbc58acb774cb7bd0746ea3789f7b03915d4712d32ac381ef4953263f014dd4d9fbb6b2c47b93467bd1e079b0a65090b2acce48078c934b1e50e4d40d7c5743c3b832206f27665b04fdf25c4db82aa78c76f704278b8ebe62dc1fb72070c93a3f0679c49d924d2bcf8ed7f6f8997001889dca5b4e538dd263f2f642523f06e4e305e5055efe1c88c1cfcd75daa4e8d937537cb61cf4508148368a147aa7440bd6c48604f2d109223d6cd479d4e223d2b355d173ec0ef503796009cf0906d8bab72d59634ed546f7fa4f20ee2b05a2ecedc90dafefeaf6b58153b3e328d9e08128c474acdcad215aa6a29c740ad66473a5a548687fee17dc0f89e1e8e19057cebff79351d40df2fd984a8dd95ab5443980b1d2582f3bbc2ccaf6f724ed16cd89bb699e8c554d4481d939320f64a3d1ad546ca75a13d5331b3aa5deccc7690bdbf63df82547ed161d89fcdd2ea37210df2593a434227c92e5e520161036c5e8e2a3f662c903415a78436083b30ed835e2bac4d00a20a60bbefc1ef44c99d8955a548db836a9cc59f7237c37c2f41ac096fd59e6e684fdd62e247d3fbd24f20f63274f27918204ed8f25ab86e3fcce108b01b12946b7935fae5caf397f917563d0e80c047e004c6bbb4d4cfa7b00320dc1e2768c7c9367ad3f5ed3e27b1b48600e555a80908fc858c8be2ea3fe88d82047a2b71673ff042b89777be3c6fdfa026ac982fa5fa3ada0dc5b831d92bb10eded8204e9ddd3e404160aa4eafd668adee815e808d4bc43ded5e68df8887f9230f7d38e02f2b82a911dad8c5d46308cf3b41b8c0df9a0436810d46622e4e4bb2276fb73101241e0bb182d70f3b52263206c9b7d3f5ca9edf8625954c38eb0b1c97940eb0836f4c7c24ac29787c3b55cad0fde70769586b3ed878fdd97a4f2ea69470622d6c0c23c1878470851453f4c5e844e307a550dea59da2c16da8d754e9a9bd91e544f1d11c2506c4462a653c6094f917b76c7d804bf2f3d34a531180176ec6eb26752d28d1fcfad438f4cbb0716f0c6c77cea7ab0f06f0e2c49bc1f03229862d2109c84df4aa0fe49421da5cce4f70c28bb0845082769f54cf4b7a920ccb6c09af6e76e98b0193d6553269993cba51bdb6738b31adcfe652b9215030976ccb22397f7bfb3f95f289a7020615f1459bc473adfa0da8437bf4900671c95ff995964f58ce7b71f779ab64e04753c8ae16e8ec5e52034dd5462bb494e6b679ca01d6dd66e976519c3595079b1a57d3b84e3df775e8338489b83f4a7eb67870a017b86ca8a6ab9cf272d6eaa5f0efdc55f85ff481dadd85aa2742536f5b74f2b8317f3649cd2a0cf3ffa422711525d313e913ce85890788906b1f0f8717e88a9c3146285966de4c2bb4d31803f0aae5ccb7926e8111f2b84434ce50683677b9d1449adae00e851de14ed4de96daf2f6749e88a6393a1726f6f4c852c3fecb657e6a8356e729ca5b783182fcb862d0df1b4c2c419f634d953fe6637e15459a654ad1ca758fba060593bd247a6ae5e6317cb2732b427c0177bb78dcb98f8f882a6b610d3bb39e4cb63fcb2a210fe621effc91b54c3983a88937bfbb7490a14622a0ce6576c98c9244ae8f84cb9b0d84950b288254293b2753b005051d9f844d5740e12e6d130881455f527e03ad7775b3b258e887f6acdd3caa48d4f528e1a3074c0d296118afe69f0881267db5958d7bcc70157500d8acb022993bed1d7c21bd772299a72dc2052c24b9e38b3aecd2c9888348af70c4a5a6b5299e5d5732974f662ed50e6ab4e38a4cc4b9d2a45cfc500eb44c303bceb412b0a2bc7da5ebc49ca41683dd981a464c2dbb4ae2b8006f506e9611efc46765bd4f4b8bd61e488a3f95f672a17eb8354a90141f5849c5b6f961b759892d2ab90d068671b04c5b280fc7a9e37cf39060ab87a01d0e93dc5dd79b2deccdc00420b355948a75ab91f2ed4bf64113c3131eba2d0e04fdee29ee00745e84d8f1fb2a623af138b62bcba4e1502d5201d0146abd5649ac0723b58582f31554cc5720a0d4b153f2748576c77f4958a83156721ed4a645adc53c8cba511e24f977b32bedbbd53445cb646c0f477d935d7c6e873a38e5c790c6f7655fe9fba51a0f8f51568ed464045231b35d72d130efe1562c5198298c04444e371eed37b61366e9384a8da18f18293e294fb4917dfa960d55cba80264d53d92dbbed875c7d519569f92e6a74cbad1faa09afb91a4be7b56a2b3917222538fc6c92e46f7385503b37170897f5e64778eb18f883e0c823987b238aa5bdb55188b3f519cae40401cb70ab767a04ff2e0fd5f41dc322e84d3e79a6f98f4d88142e87c710e397847d07710b85e90808c1a43788f28d24ed40492f800ce1f5f7b939c020d11a3c348a47dd19c263623033b96bbdfe0e3f041186a93d6d09feb84f26aa766b400fea4e1c4ff0b568461ca3e6682bf5b1f73abb30445609c4b5a0fd0d8e9010a700ff776a795eaea4dfad5305b34cca0cb1a123d1800a6a5e15267b1c9b7670fdbb9b8e69e23590bd10e813d25f14e5afa51273c06cfc7431ec80ccdbebb950c34b6f2fb7eaa15fe414e41e2b9c489360b1f7ef2eb5bbbc7908ac7f5bedd6a138eda542f4ffc4968bb107fbab26e088475dc36cfb896fbbd4e292108d48b118e4c8a4cbe083bd4f94d18590af44fdc05b3321dd8370d46e512fb32bae15cafa062540e494b5d47aee470be9f8b62bc0704ac19c698bc5b4862afe8c5effa71f0d03bc7f13f4c051744810fc7fec411c4cb87403c34ee8d13d643219717e4837b1ed0be012c9b572c751a6120945d94b2ba42126804d3b92854996fb868449333a9a45cadbe3eb79b8d74102b9c7dca6127d211d79b12533123fa0208e5d0c7bfb61fe6695db8e55809e3c6fd288136a06883fb1f68bd080f418ec3cdb9d0525c7fe3d8da57f48b9c8754936139ce0312af82235182a8e30bb5e215395809ae74eb152efe5431ea902b94ed09a90c504b446ecbaa4b918462f4cf54cdf1d14b304a99332ff7f3249d4c56525f32244fa2fc47104a13d3e3e75e2245ebd6b32851cd885b7467c9e3fe21ddcd3d5b8c58315510df64ebfeeec9c137f08558a9b9a34f59afdd380935ca96d72767876f82b00d62754fb377e660e2a9999af74060c0050ba40746ec562d63d9342ee659b0b59993a4a59b8c344c04f65d49ad056bce2b02229988bd2249b8e0b3a330f77d75727da8efa5cf0cc6fb0917bc2da99f6e3470769fa927488964272598b4c5c1abbff738510d349975438ed621949f4537af0d65b01e64139c711bcd3a50793b71d02ba6ed2fc880c6f687356c4a4ad87322a708dae76d9320f69b12707e14ba699efd42370efae7dbe29356a6c1101c3c050d5559dda4ad556175fc8acf302c359161c549efcf4633655924111ac7307469ff429ee429c2252590150fa06fe923613c8b36d023818488e9c37c1ac59fe71ba9401f513557a9ea40e2b2e3612e2f8f8629686433c683f3c7effbf298eddf3a4a107d8b886133894bb49dead34613f222d3db049dd179189684258b960a1309a", 0x1000}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)="8bcb395e8ac691c606a44d8bb45e40594f991a693ada2f85da13a7ed83baad64157fac106704f6e5af584bcbb7e264b1edc95ce3d8d3840e08c7e0854fc64610e8fa4af6a8f29420f89b1756a83c79c7825d0d4258ee3ace5163cc9651bd7641e4b06a2d1da14ac0045347ea3fd3a9eb71af8a4084135d4708975669fefe452e1bfb9808f37f7b074bff02cbe16d5a3eee43533b66b119cac297a3c2d3e7b6bdd97f8ba6def1de9dff69d40c537d725881", 0xb1}, {&(0x7f0000001cc0)="d195ed4c448803adf68bab3bd1965f37c886b10e455d7539ba0e5a84c694f1ed4842e9178b8b2a6115b98d112ea46271220324bea165a8424417f6fcf65cf379b510325139c4d974b94f88bf346e5d3efa1e3d75f33d90cd8eee1bcfc40bd48fe82561c5bca1a2210c48bbeac6c11093df32062f5b0268a2250221bc8faf195c856d10f7356998bf3a7d453aee800b4a4973dedda843", 0x96}], 0x7, &(0x7f0000001e40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r8, r10, r10, 0xffffffffffffffff, r6]}}, @cred={{0x18, 0x1, 0x2, {r7, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0x60, 0x80}}], 0x3, 0x20004000) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000080)=0x2, 0x12) r12 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 8.259471515s ago: executing program 5 (id=4227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0xfff5, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) 8.052519479s ago: executing program 5 (id=4229): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$fuse(0x0, 0x0, 0x0, 0x104010, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c758065725f69653d", @ANYRESDEC=0x0, @ANYBLOB="2c67726d754e5f69643d47e8959e1d9d0c078a3282c6f42e30f385d7ea210c5955e24c0eab40b25cb1b122380b61af", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0x0, 0x6}, {0xe, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040093}, 0x20040084) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000002}) syz_open_pts(r4, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0xc00) sendmsg$nl_generic(r7, 0x0, 0x8410) syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 6.972188674s ago: executing program 5 (id=4231): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) fcntl$getown(0xffffffffffffffff, 0x9) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x81, 0x0) close(0x3) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r3, 0x0) keyctl$dh_compute(0x17, &(0x7f00000006c0), &(0x7f0000000700)=""/62, 0x3e, &(0x7f0000000840)={&(0x7f0000000740)={'crct10dif-generic\x00'}, &(0x7f0000000780)="c047bbeb9ff316c3899a91d62cd6b1e3fdb04e4e12f339d1c36d4dbf1074eeda5e7734c32066c0aa0aca2d0b34e69e6d2bb7e65dc8a1468ed19a1c6f109f6ff43d3d830c954f8be5cd4cb2785980bb9f2966f00fea9265d96df57eef9e478d31fb856a826d1c2e5ed2a802270545d9ecd6837cb78219724fa3def6504ec9a0d61060e6382b847370f5d9f876a50176ce95b6da4108496fdc83c2ca3fa5629a94", 0xa0}) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x3ff, 0xfffffffd, 0xc4d3, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 4.73780377s ago: executing program 1 (id=4238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000000c0)=[{&(0x7f0000000040)="140000001694f91324e64fa7a600000000000000", 0x14}], 0x1}, 0x40081) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) unshare(0x6a040000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c000000020605000000000000000000030000000500050002000000050004000000000005000100070000000900020073797a310000000014000300686173683a69702c706f72742c697000c7efdf9cd62849222202b90fdeaf3000311bb86055097c0f52b5eea2122eba6996c0de208569ab56af5c627e9d058b8de9afb40fb69683305dc9a5983add67e5fad3c732594fbf0650de992a71e548d3d6579a55bad2dd04ae14f8c83282c95d8df1990c7b793f"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700840000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="58000000001845dd17bcffffff000000000000000095400000000000007165bdd5d7b06cc21e18c95c8fa2631799ee4052f4cf6f560608357e77a44ca9e793647b27ad15b63e6588c9d30d5cb3f242bba6133088441c468a4e4b59380e38505be56d95ab5ad7eca7c753fe587a1308b515c507664f514a3b367e5bd423cc7b2a0857ef7d2646dba552bf0cb647b614b0"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r5, 0xc0086448, &(0x7f0000000100)) sendto$inet6(r4, 0x0, 0x0, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080001400000000d080002400000000f0900010073797a3000000000090002007379"], 0x78}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 3.689235307s ago: executing program 1 (id=4240): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}}, 0x0) (fail_nth: 8) 3.461793007s ago: executing program 5 (id=4242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 3.461377183s ago: executing program 1 (id=4243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="388082030400000004000000000000002f000000", @ANYRES32=0x0, @ANYBLOB="00000000420000001800128008000100677470000c00028008000100", @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0xba01}, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x0, 0x4000011, r2, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r5 = shmget(0x1, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x5000) shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmget(0x3, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000040)={0x7, @pix={0x5, 0x3ff, 0x30383653, 0x6, 0x9, 0x6, 0x0, 0x4, 0x0, 0x3}}) sendmmsg$unix(r9, &(0x7f0000003540)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000300)="bb5683f3e35d76f32a078c720e9947a71b0b05e5d573c0aef756a8249afe7030714a67d74dea3bf794f965ddbee0c41f23e96e76403377d22a20bf526b40038a1544d6030899d3b99ef959350d901df130e1b0c51dea7b25915e8aaa4091b7b7aeb82d44d8dfc8c87cfe06ec5e8892937bebb56e3b1a3189d3f4131798fad960a4aa00ece0f89ba51dd63c5e29678df6", 0x90}, {&(0x7f0000000480)="971c992e0812582351ee5f7ad894000ed5b0409e00c8a8947b9f72dc88c58a5209da410a2124257cbaa68f", 0x2b}], 0x2, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r10, 0xffffffffffffffff, r2, r10, r9]}}], 0x20, 0x8080}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000600)}, {&(0x7f0000000680)="7ffd756c3c8de3df2d1b1a8b8db622e366a1df382c944ae54ab176be74ecd8bc13a2e3161a581575897d98bc00df3cadb3d71e8db281b370a83cbe24462388e92fc08407ac24ac8ee885f0e40b019cd42564df3dca32e868185462e6ed0ea7c4172d798319f9274cf0e89d64d8262517b460", 0x72}, {0x0}, {&(0x7f0000000800)="b601fe958632b4c960b470c33c1b19b667fef9f0f7c0dfbd59543dd2049ba999eb245c75f80e7c0509a2ee4dbbfa17480e1e2b309473a2150f724900101291dc6bf1c1cf6e334607843433acf7e6399bce9f7d9e90fc34ece7d20788b2e465c85fda540b8fb23d6ba8a0dbe75f361b6300f3f2ef6252bd344e8e27e60e3f48b50d982b40364f76339fd8f1162978204add4db4f1a48d336e605598f9849934a8f16e98cf0ed66aab005eada34232f70cda3f48a3327a5b0c56ea447fd27a621e02f0a45940e8", 0xc6}, {&(0x7f0000000900)="0dfba698d89687828cb0daf321aae1506ab079b1496e978f458899ba39b741d2b70b10f2dc9ac9c5f12a1246a37a602664a0da7221d2e547734107cbae72367c8ed2007fecc62ccc940bf510f073c63f3b87ccf72b2fcb7d5e99b8b29d9c7a4f156f345ccbb8ce47d3", 0x69}], 0x5, &(0x7f0000000a00)=[@rights={{0x20, 0x1, 0x1, [r4, r10, r10, 0xffffffffffffffff, r4]}}], 0x20, 0x4044000}}, {{&(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000000b00)="424307b2aea7eb038740f55825c9cdf2b3aa73159aecbdca17be89675c4795c67c5d07d0197fb1bb2b7c57ad496fde4eb0c2f4204d1b0690e2c5642b3c5d0445fe2ca616be278527a58c3e", 0x4b}, {&(0x7f0000000b80)="71bf27f4a422f05521576bde1d31b70ee7534f1fcb37cd1fff5f0d8ffd5bf66c8a4afe27203e18f9448c2b", 0x2b}, {&(0x7f0000000bc0)="42c3b572b3295b48e529eceec1ba13f8edb3addca98d7b53af4a24f49f31bc2a0af203387c311a3c9b93474f6151cf813d0c762e141ccfb627ec8846ce2415089bdb51bb2b5b537735014d830f28026beb547cfbfc522f45b860e9b2c2669a6a5527d1af48b610625fe3ea59b43e9637006bd7dde5f222d39c2e79c0877e7d4b520fafa0bf4e36199eee5d3570f7e8df55cdb8586b8d215567a04c7936f6a14af11e4d66275c9ce1ae69fa9334c2bee815ff8ac7bd89384618bcb12c1637d242f2c84258b1cec4e4c4a75cee5c562e7226e2f5dddb85ae32c6981ba6d287dda85d23dcba2ebe84e9aa8a0f5a0fadb0d53dc800c3ee18e5bd62df65a3da6db661fcd0dfab1ce46e937f1fc4f3fe619191ba4342a138dff6f053da3add6287f94f7fb9abd90c740bd9ed67fcc1911980d2993e4fcff14a78eef538fc7469b0a174d520b0a45691dd359a6c5ae182294c508093d2b5617242e8ddf10e3e3752a4f3dcace4530f51088972ec215c159733ba68f2fa69de5ff62eb1a0c8371f938d55f23468ab9d7deedec76f5a88c61cd0588dfaa92f8844c268f8edb77eb4a8b08f646b8f70b911c7e3ae1c2ec52cce444069bd003b17af66743d54e0cc81cbe74160bcc918e99d32785d8786fc5bd362fce3523fdc813241720ba9a2203762bae600062d3821e2385dd9b29ba3e7c7e002712a159065a1d41ed56754271898140c1cd28e7d21f5e8fe3c149a911f311bffd1da1f8f6e1004bcaf85b0a7b8638dcdeebf8841cedff6b417d902df6aa034a37af179d2cdb096fb2e0ebf68a0ae4b38e080929eeebd82450df4980a03660c98e15f6aafcc76cff62fdef985f685118f13360585dfbdba2712cadfcff84a4b92a689898de18aa5b7d497e1c18ed2c13dac6c2a769bf99b91c2f9f02988ee15cb6269627dc86c3416cb4fb528addc246c34dfb6d58adcbbf8694671c6a6b6139be3e1668cc2e957804498cef02cc63899673b6d48f12812c65828ae940a1703e7ac3799af0b0c71cfa7d7480d7ad81fb40c92f2fe2ab74bdf6068df1218204210b3b95e98c542389ffd252bd2998812d120bf913cec02838288d0fa88e9d6812a0ba6994c065a3c01bbee41b1c8f2740dc81432d05e33f5c8640b740cfde7d5b4afe39c63c77d12bd4d337fd466474991c657aca791529941853e68ce1550838900e14480b7d47ae52573977277b9c80868c00b86933b0a4f16f4d2f8e78816cbd256d73e65d6ad0e014ca84257f29acb4b52629501ec63921fd15972db0ea45b7cfc3b1cc113e790cabe6d5ada2a63eaeb130eb90ea6a2ce8226313752fa2ca50006941747ccc499e97885a8184ba9f048c83476ddcb72c96d65f4e3876081a18c61a54ba8e757c467205fcd28986df61c15e3372dfaeb383e015f0f294b31acafb6c17b42ed2044cc17e693bbc8b0a67b432918aa8d26e7bc2beb57a1ddc87c8e21faa9ec5376c1d6699c7c54d018e1e6d5bf83ea39d29a8941ea9c842bef576007f0b4029fa50072062cac6fb8cdd6badd1cbe46ffdaec6fe9d6669c4749bbbcdbe7124965706fa8da6581672a5da05b8e5e6575a0d2b6f9bf04b7a493b899e288507a9797f8bad5c69b8a5b7556048a5b97a61e5c8bc5e7042c13e38b9515bcc525304698e892a0de3af921264785dc0e9a2ad94359f58562c970c1e6c2444a56c2da30de9cd1ac7cac28bc64893fdb068c73d401f4d664c9487df364dd5079d2551500828347604f2682b5499d2d0eb7d8404443791abd5849e8bc3d63cf5f7f92aba36110b787f32a0ceb4eb8658b658b4c57fee5898a3ede8d49cf649487e1cfec01010d6a7f8a1b181ed97730b7fb69ecd2fe19cfea85fea79457b8c4187f85ca905b087971d14f6575a3e0fcea53051a6c4e7e0669511944ccb1c8808f1976e1007e9fd8119bbb70efae186a7b4d18d315cce7f93fa3624f58e8546946f5da64bfb2a18da43a71cdaa18a080ad1558aead8c5f5cc64ad39972302906e827be5e233019d8f867d9925a2c1d5b6c696cb783e0d96ed109ac4f4aa4b04766208e52ff53287e681dd5412a89ef2b0556dc55163a2db2c57f7493b0d32f5c95b345f24a8110f6230d0b9f708d2f28a3dc6856026414a219bac201915aa51a2a49d399542cd443d92bb2231320284fe26e38a151452f93ddb92b7d0618f3b86b1f7dd2191b98ce020fe6f6d8f3bfad5cbc58acb774cb7bd0746ea3789f7b03915d4712d32ac381ef4953263f014dd4d9fbb6b2c47b93467bd1e079b0a65090b2acce48078c934b1e50e4d40d7c5743c3b832206f27665b04fdf25c4db82aa78c76f704278b8ebe62dc1fb72070c93a3f0679c49d924d2bcf8ed7f6f8997001889dca5b4e538dd263f2f642523f06e4e305e5055efe1c88c1cfcd75daa4e8d937537cb61cf4508148368a147aa7440bd6c48604f2d109223d6cd479d4e223d2b355d173ec0ef503796009cf0906d8bab72d59634ed546f7fa4f20ee2b05a2ecedc90dafefeaf6b58153b3e328d9e08128c474acdcad215aa6a29c740ad66473a5a548687fee17dc0f89e1e8e19057cebff79351d40df2fd984a8dd95ab5443980b1d2582f3bbc2ccaf6f724ed16cd89bb699e8c554d4481d939320f64a3d1ad546ca75a13d5331b3aa5deccc7690bdbf63df82547ed161d89fcdd2ea37210df2593a434227c92e5e520161036c5e8e2a3f662c903415a78436083b30ed835e2bac4d00a20a60bbefc1ef44c99d8955a548db836a9cc59f7237c37c2f41ac096fd59e6e684fdd62e247d3fbd24f20f63274f27918204ed8f25ab86e3fcce108b01b12946b7935fae5caf397f917563d0e80c047e004c6bbb4d4cfa7b00320dc1e2768c7c9367ad3f5ed3e27b1b48600e555a80908fc858c8be2ea3fe88d82047a2b71673ff042b89777be3c6fdfa026ac982fa5fa3ada0dc5b831d92bb10eded8204e9ddd3e404160aa4eafd668adee815e808d4bc43ded5e68df8887f9230f7d38e02f2b82a911dad8c5d46308cf3b41b8c0df9a0436810d46622e4e4bb2276fb73101241e0bb182d70f3b52263206c9b7d3f5ca9edf8625954c38eb0b1c97940eb0836f4c7c24ac29787c3b55cad0fde70769586b3ed878fdd97a4f2ea69470622d6c0c23c1878470851453f4c5e844e307a550dea59da2c16da8d754e9a9bd91e544f1d11c2506c4462a653c6094f917b76c7d804bf2f3d34a531180176ec6eb26752d28d1fcfad438f4cbb0716f0c6c77cea7ab0f06f0e2c49bc1f03229862d2109c84df4aa0fe49421da5cce4f70c28bb0845082769f54cf4b7a920ccb6c09af6e76e98b0193d6553269993cba51bdb6738b31adcfe652b9215030976ccb22397f7bfb3f95f289a7020615f1459bc473adfa0da8437bf4900671c95ff995964f58ce7b71f779ab64e04753c8ae16e8ec5e52034dd5462bb494e6b679ca01d6dd66e976519c3595079b1a57d3b84e3df775e8338489b83f4a7eb67870a017b86ca8a6ab9cf272d6eaa5f0efdc55f85ff481dadd85aa2742536f5b74f2b8317f3649cd2a0cf3ffa422711525d313e913ce85890788906b1f0f8717e88a9c3146285966de4c2bb4d31803f0aae5ccb7926e8111f2b84434ce50683677b9d1449adae00e851de14ed4de96daf2f6749e88a6393a1726f6f4c852c3fecb657e6a8356e729ca5b783182fcb862d0df1b4c2c419f634d953fe6637e15459a654ad1ca758fba060593bd247a6ae5e6317cb2732b427c0177bb78dcb98f8f882a6b610d3bb39e4cb63fcb2a210fe621effc91b54c3983a88937bfbb7490a14622a0ce6576c98c9244ae8f84cb9b0d84950b288254293b2753b005051d9f844d5740e12e6d130881455f527e03ad7775b3b258e887f6acdd3caa48d4f528e1a3074c0d296118afe69f0881267db5958d7bcc70157500d8acb022993bed1d7c21bd772299a72dc2052c24b9e38b3aecd2c9888348af70c4a5a6b5299e5d5732974f662ed50e6ab4e38a4cc4b9d2a45cfc500eb44c303bceb412b0a2bc7da5ebc49ca41683dd981a464c2dbb4ae2b8006f506e9611efc46765bd4f4b8bd61e488a3f95f672a17eb8354a90141f5849c5b6f961b759892d2ab90d068671b04c5b280fc7a9e37cf39060ab87a01d0e93dc5dd79b2deccdc00420b355948a75ab91f2ed4bf64113c3131eba2d0e04fdee29ee00745e84d8f1fb2a623af138b62bcba4e1502d5201d0146abd5649ac0723b58582f31554cc5720a0d4b153f2748576c77f4958a83156721ed4a645adc53c8cba511e24f977b32bedbbd53445cb646c0f477d935d7c6e873a38e5c790c6f7655fe9fba51a0f8f51568ed464045231b35d72d130efe1562c5198298c04444e371eed37b61366e9384a8da18f18293e294fb4917dfa960d55cba80264d53d92dbbed875c7d519569f92e6a74cbad1faa09afb91a4be7b56a2b3917222538fc6c92e46f7385503b37170897f5e64778eb18f883e0c823987b238aa5bdb55188b3f519cae40401cb70ab767a04ff2e0fd5f41dc322e84d3e79a6f98f4d88142e87c710e397847d07710b85e90808c1a43788f28d24ed40492f800ce1f5f7b939c020d11a3c348a47dd19c263623033b96bbdfe0e3f041186a93d6d09feb84f26aa766b400fea4e1c4ff0b568461ca3e6682bf5b1f73abb30445609c4b5a0fd0d8e9010a700ff776a795eaea4dfad5305b34cca0cb1a123d1800a6a5e15267b1c9b7670fdbb9b8e69e23590bd10e813d25f14e5afa51273c06cfc7431ec80ccdbebb950c34b6f2fb7eaa15fe414e41e2b9c489360b1f7ef2eb5bbbc7908ac7f5bedd6a138eda542f4ffc4968bb107fbab26e088475dc36cfb896fbbd4e292108d48b118e4c8a4cbe083bd4f94d18590af44fdc05b3321dd8370d46e512fb32bae15cafa062540e494b5d47aee470be9f8b62bc0704ac19c698bc5b4862afe8c5effa71f0d03bc7f13f4c051744810fc7fec411c4cb87403c34ee8d13d643219717e4837b1ed0be012c9b572c751a6120945d94b2ba42126804d3b92854996fb868449333a9a45cadbe3eb79b8d74102b9c7dca6127d211d79b12533123fa0208e5d0c7bfb61fe6695db8e55809e3c6fd288136a06883fb1f68bd080f418ec3cdb9d0525c7fe3d8da57f48b9c8754936139ce0312af82235182a8e30bb5e215395809ae74eb152efe5431ea902b94ed09a90c504b446ecbaa4b918462f4cf54cdf1d14b304a99332ff7f3249d4c56525f32244fa2fc47104a13d3e3e75e2245ebd6b32851cd885b7467c9e3fe21ddcd3d5b8c58315510df64ebfeeec9c137f08558a9b9a34f59afdd380935ca96d72767876f82b00d62754fb377e660e2a9999af74060c0050ba40746ec562d63d9342ee659b0b59993a4a59b8c344c04f65d49ad056bce2b02229988bd2249b8e0b3a330f77d75727da8efa5cf0cc6fb0917bc2da99f6e3470769fa927488964272598b4c5c1abbff738510d349975438ed621949f4537af0d65b01e64139c711bcd3a50793b71d02ba6ed2fc880c6f687356c4a4ad87322a708dae76d9320f69b12707e14ba699efd42370efae7dbe29356a6c1101c3c050d5559dda4ad556175fc8acf302c359161c549efcf4633655924111ac7307469ff429ee429c2252590150fa06fe923613c8b36d023818488e9c37c1ac59fe71ba9401f513557a9ea40e2b2e3612e2f8f8629686433c683f3c7effbf298eddf3a4a107d8b886133894bb49dead34613f222d3db049dd179189684258b960a1309a", 0x1000}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)="8bcb395e8ac691c606a44d8bb45e40594f991a693ada2f85da13a7ed83baad64157fac106704f6e5af584bcbb7e264b1edc95ce3d8d3840e08c7e0854fc64610e8fa4af6a8f29420f89b1756a83c79c7825d0d4258ee3ace5163cc9651bd7641e4b06a2d1da14ac0045347ea3fd3a9eb71af8a4084135d4708975669fefe452e1bfb9808f37f7b074bff02cbe16d5a3eee43533b66b119cac297a3c2d3e7b6bdd97f8ba6def1de9dff69d40c537d725881", 0xb1}, {&(0x7f0000001cc0)="d195ed4c448803adf68bab3bd1965f37c886b10e455d7539ba0e5a84c694f1ed4842e9178b8b2a6115b98d112ea46271220324bea165a8424417f6fcf65cf379b510325139c4d974b94f88bf346e5d3efa1e3d75f33d90cd8eee1bcfc40bd48fe82561c5bca1a2210c48bbeac6c11093df32062f5b0268a2250221bc8faf195c856d10f7356998bf3a7d453aee800b4a4973dedda843", 0x96}], 0x7, &(0x7f0000001e40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r8, r10, r10, 0xffffffffffffffff, r6]}}, @cred={{0x18, 0x1, 0x2, {r7, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0x60, 0x80}}], 0x3, 0x20004000) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000080)=0x2, 0x12) r12 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 3.266593212s ago: executing program 5 (id=4245): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) fcntl$getown(0xffffffffffffffff, 0x9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0xfffffffe, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x4, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x800, 0xb8547353], [0x6, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0x5, 0x36, 0x5, 0x6, 0x1, 0x9, 0x98, 0x8, 0x3, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x2, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a94, 0x0, 0x9, 0xd, 0x0, 0x3, 0x1, 0x7, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0x0, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x40004, 0x69d, 0x8, 0xffff, 0x200, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10004, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x6b, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f5, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x3e, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0xffffffff, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x1, 0x9, 0x5, 0x7, 0xfe, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfff, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x4, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, 0x0, 0x20000000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x81, 0x0) close(0x3) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r3, 0x0) keyctl$dh_compute(0x17, &(0x7f00000006c0), &(0x7f0000000700)=""/62, 0x3e, &(0x7f0000000840)={&(0x7f0000000740)={'crct10dif-generic\x00'}, &(0x7f0000000780)="c047bbeb9ff316c3899a91d62cd6b1e3fdb04e4e12f339d1c36d4dbf1074eeda5e7734c32066c0aa0aca2d0b34e69e6d2bb7e65dc8a1468ed19a1c6f109f6ff43d3d830c954f8be5cd4cb2785980bb9f2966f00fea9265d96df57eef9e478d31fb856a826d1c2e5ed2a802270545d9ecd6837cb78219724fa3def6504ec9a0d61060e6382b847370f5d9f876a50176ce95b6da4108496fdc83c2ca3fa5629a94", 0xa0}) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x3ff, 0xfffffffd, 0xc4d3, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 3.262553222s ago: executing program 0 (id=4246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 3.026719833s ago: executing program 0 (id=4247): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x40, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfffffffffffffffe}}]}}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r2, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x40110) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, 0x0, &(0x7f00000000c0)) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100037040000800000007c698ea40000", @ANYRES32, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async, rerun: 32) sendmsg$GTP_CMD_DELPDP(r1, 0x0, 0x20000000) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x8, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0), 0x2, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) syz_open_procfs$pagemap(r7, &(0x7f0000000500)) (async, rerun: 64) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) 2.918507582s ago: executing program 0 (id=4249): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$fuse(0x0, 0x0, 0x0, 0x104010, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c758065725f69653d", @ANYRESDEC=0x0, @ANYBLOB="2c67726d754e5f69643d47e8959e1d9d0c078a3282c6f42e30f385d7ea210c5955e24c0eab40b25cb1b122380b61af", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0x0, 0x6}, {0xe, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040093}, 0x20040084) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000002}) syz_open_pts(r4, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0xc00) sendmsg$nl_generic(r7, 0x0, 0x8410) syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2.412273552s ago: executing program 1 (id=4250): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_emit_ethernet(0x46, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r6, &(0x7f0000002480)=[{&(0x7f0000000480)="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", 0xb07}], 0x1) pipe(&(0x7f0000000440)) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet6(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18050000000000000000000007000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1ac, 0x2, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xd}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xd7}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x81}]}}, @CTA_NAT_SRC={0x84, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}, @CTA_ID={0x8}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x24, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}]}}]}, 0x1ac}}, 0x800) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 1.932481047s ago: executing program 0 (id=4251): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0080000000000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r1, @ANYBLOB="54d0f3533bd0e303390100a934a8f2dd0053c1f78e2703f224fa7a67ee2678bb7538e8d1f86275de4577ab0118af775eaf6f231961a2030fbe7bf7658c1f45fcc92f9b9c334bb67dfb6698a8f5c5415ea245e959552dfd71908836b2f79056cd624219b7637b24c9a6fbf5fc427ad7e6b319a585d66a"], 0x48}}, 0x0) socket$key(0xf, 0x3, 0x2) 1.87236289s ago: executing program 0 (id=4252): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$fuse(0x0, 0x0, 0x0, 0x104010, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c758065725f69653d", @ANYRESDEC=0x0, @ANYBLOB="2c67726d754e5f69643d47e8959e1d9d0c078a3282c6f42e30f385d7ea210c5955e24c0eab40b25cb1b122380b61af", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0x0, 0x6}, {0xe, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040093}, 0x20040084) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000002}) syz_open_pts(r4, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0xc00) sendmsg$nl_generic(r7, 0x0, 0x8410) syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.76001805s ago: executing program 6 (id=4253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 1.677738026s ago: executing program 6 (id=4254): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000800000000000000000000000850000000e00000085"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$autofs(0xffffffffffffff9c, 0x0, 0x149000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {}, 0x8, 0xffffffff7fffffff, 0xcd41}}}, 0x90) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000019080)=@ccm_128={{0x304}, "05ab421b1df0a229", "f9ee4e0fff2803edf6f23befa43b4341", "af87af3d", "8414f25bfd68ce63"}, 0xfffffffffffffce8) writev(r6, 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x21f) 1.564895055s ago: executing program 6 (id=4255): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008ec0)={0x90, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x28, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x2}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0x7, 0x0, 0x334, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0xfff}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.314328466s ago: executing program 6 (id=4256): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) ioctl(r2, 0x2203, &(0x7f0000000000)) ioctl$RTC_IRQP_READ(r2, 0x8004700b, &(0x7f00000001c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.041823786s ago: executing program 1 (id=4257): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd20, 0xfffffffc, {0x4}}, 0x14}}, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x1e, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x1}}], 0x5, 0x4040000) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x56d, 0x2}, 0x50) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00004c0000/0x4000)=nil, 0x4000, 0x66) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04011120"], 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, 0x0) 867.11299ms ago: executing program 0 (id=4258): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x0, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r0, r3, 0x6700000000000000) 512.430051ms ago: executing program 6 (id=4259): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$fuse(0x0, 0x0, 0x0, 0x104010, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c758065725f69653d", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000002}) syz_open_pts(0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0xc00) sendmsg$nl_generic(r5, 0x0, 0x8410) syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 40.376724ms ago: executing program 6 (id=4260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r2, 0x301, 0x0, 0x0, {0x2b}}, 0x14}, 0x1, 0x0, 0x0, 0x2000a041}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_emit_ethernet(0x5d, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@x25={0x805, {0x3, 0x2, 0xfb, "db655e83fdd51df840a04cd67d2d1bd816bf3bafaff1a640cdcf448f22c1fd4170f3419d8f23e9f4b744d52e7a6aa9f55bf2e41a6ab6c8484d2ff59addfd925d05eb8500a960399d"}}}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x24}, 0x1, 0x0, 0x0, 0xa7a329dba7057820}, 0x90) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f0000000b40)={0x5, 0x9000, "4077527b0efdb30d9cc61c2ec91f11194995cc28b2b77202", {0x2}, 0x8001}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r7, 0x40044581, &(0x7f0000000440)=0x6) ioctl$EVIOCGMASK(r9, 0x5b07, 0x0) r10 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r10, &(0x7f0000001940)={0xa, 0x0, 0x6, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit={{0x10}}], 0x10}}], 0x1, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x1003}, 0x0) ioprio_get$pid(0x2, 0x0) write$sndseq(r7, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x6}, {}, @time=@tick=0xab46}, {0x40, 0x0, 0x0, 0x0, @tick=0x101, {}, {}, @control={0x4, 0x4, 0x200}}, {0x10, 0x2, 0x94, 0x2, @tick=0x100, {}, {0xfc, 0x9}, @control={0x0, 0x4}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0x8}, {0x0, 0x10}, {0x0, 0x6}, @control={0x1, 0x6, 0x401}}], 0x70) 0s ago: executing program 1 (id=4261): getpid() r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x240, 0x0) mmap(&(0x7f000002d000/0x3000)=nil, 0x3000, 0xd, 0x4012011, r2, 0x0) lseek(r1, 0x2000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x2a, '\x00', @st={0x4, [{0x3, @svalue=0xdff9}, {0x2, @uvalue=0x7}, {0x2, @uvalue=0x5}, {0x3, @uvalue=0x3}]}, 0xffff16c8}, {0x9, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x3, @uvalue=0x8000000000000001}, {0x2, @svalue=0xfff}, {0x3, @svalue=0x6}]}, 0x17d}, {0x37, '\x00', @st={0x4, [{0x1, @uvalue=0x7}, {0x2, @uvalue=0x7}, {0x0, @svalue=0x9}, {0x3, @svalue=0x3}]}}]}) r5 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x4, 0xf5c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r6, 0x80044dff, &(0x7f0000003f80)) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f00000001c0)={0x3, 0x3c4a, 0x4}) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000140)={0x1, 0x8, 0x9}, 0xc) kernel console output (not intermixed with test programs): 9:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.6.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 1179.188949][ T40] audit: type=1326 audit(1779729776.987:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.6.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 1179.196252][ T40] audit: type=1326 audit(1779729776.987:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.6.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 1179.203185][ T40] audit: type=1326 audit(1779729776.987:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.6.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 1179.210610][ T40] audit: type=1326 audit(1779729776.987:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.6.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 1179.247652][T21279] tipc: Enabled bearer , priority 0 [ 1179.265482][T21278] tipc: Resetting bearer [ 1180.291169][T21298] Set syz1 is full, maxelem 65536 reached [ 1181.457424][T21302] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3708'. [ 1181.458160][T21278] tipc: Disabling bearer [ 1181.495634][T21297] wg2 speed is unknown, defaulting to 1000 [ 1181.661500][T21310] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 1181.806060][T16405] Bluetooth: hci3: unexpected cc 0x2035 length: 2 > 1 [ 1181.813073][T16405] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 1181.997357][T21318] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3713'. [ 1183.753450][T21326] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3716'. [ 1184.182699][T21328] IPVS: Error connecting to the multicast addr [ 1184.345989][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3719'. [ 1184.350031][T21335] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1185.186224][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1185.197624][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1185.201995][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1185.204658][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1185.207276][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1185.479781][T21359] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3727'. [ 1185.579255][T21344] wg2 speed is unknown, defaulting to 1000 [ 1186.155441][T16405] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1186.160267][T16405] Bluetooth: hci3: Injecting HCI hardware error event [ 1186.184779][ T5745] Bluetooth: hci3: hardware error 0x00 [ 1186.611705][T21369] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1186.676403][T21372] IPVS: stopping master sync thread 21369 ... [ 1186.686412][ T220] bridge_slave_1: left allmulticast mode [ 1186.688423][ T220] bridge_slave_1: left promiscuous mode [ 1186.690940][ T220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.694825][ T220] bridge_slave_0: left allmulticast mode [ 1186.696851][ T220] bridge_slave_0: left promiscuous mode [ 1186.698947][ T220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.731844][T21348] Set syz1 is full, maxelem 65536 reached [ 1186.822349][ T220] bond3 (unregistering): (slave geneve3): Releasing active interface [ 1186.832815][T21349] Set syz1 is full, maxelem 65536 reached [ 1186.922258][ T220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.926707][ T220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1186.931046][ T220] bond0 (unregistering): Released all slaves [ 1186.936440][ T220] bond1 (unregistering): Released all slaves [ 1186.944172][ T220] bond2 (unregistering): Released all slaves [ 1186.951603][ T220] bond3 (unregistering): Released all slaves [ 1186.962002][T21352] wg2 speed is unknown, defaulting to 1000 [ 1187.058078][ T220] tipc: Left network mode [ 1187.194079][T21350] wg2 speed is unknown, defaulting to 1000 [ 1187.257126][ T5454] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1187.459997][T21363] Bluetooth: hci0: command tx timeout [ 1187.563823][ T5454] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1187.792847][ T220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.797043][ T220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.953304][ T220] team0 (unregistering): Port device team_slave_1 removed [ 1187.960573][ T220] team0 (unregistering): Port device team_slave_0 removed [ 1187.999031][ T13] smc: removing ib device syz2 [ 1188.019523][ T13] smbdirect: ib_dev[syz2] removed [ 1188.073931][ T5454] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1188.400837][ T5745] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1188.412878][ T5454] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1188.484202][T21350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.490438][T21350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.493916][T21350] bridge_slave_0: entered allmulticast mode [ 1188.505288][T21350] bridge_slave_0: entered promiscuous mode [ 1188.512427][T21350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.521736][T21350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.530113][T21350] bridge_slave_1: entered allmulticast mode [ 1188.560727][T21417] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3733'. [ 1188.563800][T21350] bridge_slave_1: entered promiscuous mode [ 1188.671790][T16405] Bluetooth: hci2: command 0x0406 tx timeout [ 1188.685667][T21350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.702958][T21423] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3734'. [ 1188.735916][T21350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.127984][T21350] team0: Port device team_slave_0 added [ 1189.287285][T21350] team0: Port device team_slave_1 added [ 1189.711495][T16405] Bluetooth: hci0: command tx timeout [ 1190.028646][T21350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.039937][T21350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.055110][T21350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.062787][T21350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.065028][T21350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.073292][T21350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.109129][T21350] hsr_slave_0: entered promiscuous mode [ 1190.111911][T21350] hsr_slave_1: entered promiscuous mode [ 1190.116438][T21350] debugfs: 'hsr0' already exists in 'hsr' [ 1190.119658][T21350] Cannot create hsr debugfs directory [ 1190.160248][T21441] ufs: You didn't specify the type of your ufs filesystem [ 1190.160248][T21441] [ 1190.160248][T21441] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1190.160248][T21441] [ 1190.160248][T21441] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1190.173534][T21441] ufs: ufs_fill_super(): bad magic number [ 1190.522665][T21447] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1190.577022][T21446] IPVS: stopping master sync thread 21447 ... [ 1190.613214][T21431] Set syz1 is full, maxelem 65536 reached [ 1191.427387][T21471] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3739'. [ 1191.698306][T21350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1191.742095][T21350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1191.751574][T21350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1191.760047][T21350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1191.762663][T21350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1191.955209][T16405] Bluetooth: hci0: command tx timeout [ 1192.020156][T21350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1192.023621][T21350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1192.031350][T21350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1192.104848][T21350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.120463][T21350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.126660][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.129508][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.147030][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.147142][ T9261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.463614][T21350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.510638][T21350] veth0_vlan: entered promiscuous mode [ 1192.547290][T21519] ufs: You didn't specify the type of your ufs filesystem [ 1192.547290][T21519] [ 1192.547290][T21519] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1192.547290][T21519] [ 1192.547290][T21519] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1192.560398][T21519] ufs: ufs_fill_super(): bad magic number [ 1192.572464][T21350] veth1_vlan: entered promiscuous mode [ 1192.604638][T21350] veth0_macvtap: entered promiscuous mode [ 1192.614258][T21350] veth1_macvtap: entered promiscuous mode [ 1192.643075][T21350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.651168][T21350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.671589][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.674508][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.678118][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.681882][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.754130][ T9261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.759934][ T9261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.816450][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.819071][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.866896][T21524] FAULT_INJECTION: forcing a failure. [ 1192.866896][T21524] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.870977][T21524] CPU: 0 UID: 0 PID: 21524 Comm: syz.1.3725 Tainted: G L syzkaller #0 PREEMPT(full) [ 1192.870995][T21524] Tainted: [L]=SOFTLOCKUP [ 1192.870999][T21524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1192.871006][T21524] Call Trace: [ 1192.871012][T21524] [ 1192.871016][T21524] dump_stack_lvl+0x100/0x190 [ 1192.871040][T21524] should_fail_ex.cold+0x5/0xa [ 1192.871059][T21524] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1192.871077][T21524] should_failslab+0xc2/0x120 [ 1192.871095][T21524] __kmalloc_noprof+0xe0/0x850 [ 1192.871106][T21524] ? lockdep_hardirqs_on+0x78/0x100 [ 1192.871125][T21524] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1192.871142][T21524] genl_family_rcv_msg_doit+0xc7/0x300 [ 1192.871155][T21524] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1192.871168][T21524] ? genl_get_cmd+0x3e7/0x760 [ 1192.871183][T21524] ? bpf_lsm_capable+0x9/0x10 [ 1192.871197][T21524] ? security_capable+0x80/0x260 [ 1192.871221][T21524] ? ns_capable+0xd2/0xf0 [ 1192.871239][T21524] genl_rcv_msg+0x560/0x800 [ 1192.871253][T21524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1192.871265][T21524] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1192.871280][T21524] ? __pfx_nl80211_set_station+0x10/0x10 [ 1192.871294][T21524] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1192.871311][T21524] netlink_rcv_skb+0x159/0x420 [ 1192.871328][T21524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1192.871341][T21524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1192.871364][T21524] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1192.871383][T21524] genl_rcv+0x28/0x40 [ 1192.871393][T21524] netlink_unicast+0x585/0x850 [ 1192.871418][T21524] ? __pfx_netlink_unicast+0x10/0x10 [ 1192.871448][T21524] netlink_sendmsg+0x8b0/0xda0 [ 1192.871479][T21524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1192.871508][T21524] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1192.871536][T21524] ____sys_sendmsg+0x9e1/0xb70 [ 1192.871559][T21524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1192.871585][T21524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1192.871623][T21524] ___sys_sendmsg+0x190/0x1e0 [ 1192.871643][T21524] ? __pfx____sys_sendmsg+0x10/0x10 [ 1192.871673][T21524] ? find_held_lock+0x2b/0x80 [ 1192.871714][T21524] __sys_sendmsg+0x170/0x220 [ 1192.871739][T21524] ? __pfx___sys_sendmsg+0x10/0x10 [ 1192.871766][T21524] ? __fget_files+0x21f/0x3d0 [ 1192.871798][T21524] ? ksys_write+0x1ac/0x250 [ 1192.871821][T21524] ? rcu_is_watching+0x12/0xc0 [ 1192.871846][T21524] __do_fast_syscall_32+0xe7/0x950 [ 1192.871866][T21524] ? lockdep_hardirqs_on+0x78/0x100 [ 1192.871886][T21524] do_fast_syscall_32+0x32/0x70 [ 1192.871906][T21524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1192.871930][T21524] RIP: 0023:0xf7f28f7c [ 1192.871947][T21524] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1192.871964][T21524] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1192.871981][T21524] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 1192.871991][T21524] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1192.872001][T21524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1192.872026][T21524] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1192.872037][T21524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1192.872058][T21524] [ 1193.102875][T21526] tipc: Started in network mode [ 1193.104465][T21526] tipc: Node identity 9646e83da3c7, cluster identity 4711 [ 1193.106791][T21526] tipc: Enabled bearer , priority 0 [ 1193.115129][T21525] tipc: Resetting bearer [ 1194.207430][T16405] Bluetooth: hci0: command tx timeout [ 1195.365698][T21525] tipc: Disabling bearer [ 1195.379124][ T54] tipc: Node number set to 897706045 [ 1197.392312][T21561] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3752'. [ 1199.879372][T21544] Set syz1 is full, maxelem 65536 reached [ 1200.157847][T21596] FAULT_INJECTION: forcing a failure. [ 1200.157847][T21596] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.179868][T21596] CPU: 3 UID: 0 PID: 21596 Comm: syz.1.3759 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.179890][T21596] Tainted: [L]=SOFTLOCKUP [ 1200.179894][T21596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1200.179902][T21596] Call Trace: [ 1200.179908][T21596] [ 1200.179914][T21596] dump_stack_lvl+0x100/0x190 [ 1200.179933][T21596] should_fail_ex.cold+0x5/0xa [ 1200.179950][T21596] should_failslab+0xc2/0x120 [ 1200.179965][T21596] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1200.179978][T21596] ? __d_alloc+0x34/0xa40 [ 1200.179997][T21596] __d_alloc+0x34/0xa40 [ 1200.180036][T21596] d_alloc+0x4a/0x1e0 [ 1200.180056][T21596] lookup_one_qstr_excl+0x171/0x250 [ 1200.180082][T21596] start_dirop+0x59/0xb0 [ 1200.180100][T21596] simple_start_creating+0xf9/0x110 [ 1200.180122][T21596] ? __pfx_simple_start_creating+0x10/0x10 [ 1200.180137][T21596] ? mntput+0x70/0xa0 [ 1200.180150][T21596] ? simple_pin_fs+0xa3/0x190 [ 1200.180162][T21596] debugfs_start_creating.part.0+0x82/0x170 [ 1200.180249][T21596] __debugfs_create_file+0xb3/0x4f0 [ 1200.180268][T21596] debugfs_create_file_full+0x41/0x60 [ 1200.180288][T21596] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1200.180307][T21596] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1200.180332][T21596] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 1200.180344][T21596] ? alloc_netdev_mqs+0xd7/0x1560 [ 1200.180360][T21596] ? lockdep_init_map_type+0x5c/0x250 [ 1200.180375][T21596] ? __pfx_br_dev_setup+0x10/0x10 [ 1200.180393][T21596] alloc_netdev_mqs+0x314/0x1560 [ 1200.180411][T21596] br_add_bridge+0x33/0xf0 [ 1200.180424][T21596] old_deviceless+0x619/0x700 [ 1200.180438][T21596] ? lock_acquire+0x1b1/0x370 [ 1200.180449][T21596] ? __pfx_old_deviceless+0x10/0x10 [ 1200.180465][T21596] ? trace_contention_end+0x122/0x170 [ 1200.180478][T21596] ? __mutex_lock+0x26d/0x1b10 [ 1200.180494][T21596] br_ioctl_stub+0x12b/0x4d0 [ 1200.180509][T21596] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1200.180523][T21596] ? kasan_quarantine_put+0x104/0x240 [ 1200.180537][T21596] ? tomoyo_path_number_perm+0x28f/0x580 [ 1200.180558][T21596] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1200.180572][T21596] br_ioctl_call+0x53/0xa0 [ 1200.180585][T21596] sock_ioctl+0x616/0x6b0 [ 1200.180596][T21596] ? __pfx_sock_ioctl+0x10/0x10 [ 1200.180607][T21596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1200.180628][T21596] ? do_vfs_ioctl+0x226/0x13e0 [ 1200.180639][T21596] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1200.180653][T21596] compat_sock_ioctl+0x595/0x760 [ 1200.180665][T21596] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1200.180676][T21596] ? hook_file_ioctl_common+0x149/0x410 [ 1200.180707][T21596] ? __fget_files+0x21f/0x3d0 [ 1200.180722][T21596] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1200.180734][T21596] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1200.180749][T21596] __do_fast_syscall_32+0xe7/0x950 [ 1200.180761][T21596] ? lockdep_hardirqs_on+0x78/0x100 [ 1200.180772][T21596] do_fast_syscall_32+0x32/0x70 [ 1200.180785][T21596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1200.180800][T21596] RIP: 0023:0xf7f28f7c [ 1200.180811][T21596] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1200.180822][T21596] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1200.180834][T21596] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008940 [ 1200.180842][T21596] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1200.180848][T21596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1200.180855][T21596] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1200.180861][T21596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1200.180875][T21596] [ 1200.300948][T21576] Set syz1 is full, maxelem 65536 reached [ 1200.394431][T21574] Process accounting resumed [ 1200.398566][T21566] Set syz1 is full, maxelem 65536 reached [ 1200.432974][T21600] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3760'. [ 1200.444866][T21600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3760'. [ 1200.511998][T21605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1200.515404][T21605] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1201.262383][T21612] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1201.271445][T21611] IPVS: stopping master sync thread 21612 ... [ 1201.848981][T21623] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1201.857711][T21622] IPVS: stopping master sync thread 21623 ... [ 1202.881070][T21633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3770'. [ 1202.976369][T21640] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3771'. [ 1203.127312][T21633] hsr_slave_1 (unregistering): left promiscuous mode [ 1203.369652][T21646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3773'. [ 1203.384705][T21646] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1203.389531][T21646] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3773'. [ 1203.703352][T21656] ufs: You didn't specify the type of your ufs filesystem [ 1203.703352][T21656] [ 1203.703352][T21656] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1203.703352][T21656] [ 1203.703352][T21656] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1203.714286][T21656] ufs: ufs_fill_super(): bad magic number [ 1204.232569][T21662] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1204.237662][T21661] IPVS: stopping master sync thread 21662 ... [ 1204.390179][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3781'. [ 1204.395011][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3781'. [ 1204.399135][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3781'. [ 1204.403586][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3781'. [ 1204.409652][T21666] syzkaller0: entered promiscuous mode [ 1204.412443][T21666] syzkaller0: entered allmulticast mode [ 1204.894796][T21681] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3784'. [ 1204.899617][T21681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3784'. [ 1204.940618][T21685] FAULT_INJECTION: forcing a failure. [ 1204.940618][T21685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.944909][T21685] CPU: 3 UID: 0 PID: 21685 Comm: syz.1.3785 Tainted: G L syzkaller #0 PREEMPT(full) [ 1204.944928][T21685] Tainted: [L]=SOFTLOCKUP [ 1204.944932][T21685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1204.944939][T21685] Call Trace: [ 1204.944945][T21685] [ 1204.944951][T21685] dump_stack_lvl+0x100/0x190 [ 1204.944970][T21685] should_fail_ex.cold+0x5/0xa [ 1204.944986][T21685] _copy_to_user+0x32/0xd0 [ 1204.945002][T21685] simple_read_from_buffer+0xcb/0x170 [ 1204.945018][T21685] proc_fail_nth_read+0x1af/0x230 [ 1204.945056][T21685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1204.945075][T21685] ? rw_verify_area+0xce/0x6d0 [ 1204.945088][T21685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1204.945107][T21685] vfs_read+0x1e4/0xb30 [ 1204.945122][T21685] ? __pfx_vfs_read+0x10/0x10 [ 1204.945134][T21685] ? find_held_lock+0x2b/0x80 [ 1204.945150][T21685] ? __fget_files+0x215/0x3d0 [ 1204.945167][T21685] ? __fget_files+0x21f/0x3d0 [ 1204.945184][T21685] ksys_read+0x12a/0x250 [ 1204.945197][T21685] ? __pfx_ksys_read+0x10/0x10 [ 1204.945210][T21685] ? rcu_is_watching+0x12/0xc0 [ 1204.945225][T21685] ? rcu_is_watching+0x12/0xc0 [ 1204.945240][T21685] do_int80_emulation+0x141/0x700 [ 1204.945255][T21685] asm_int80_emulation+0x1a/0x20 [ 1204.945267][T21685] RIP: 0023:0xf71261ab [ 1204.945277][T21685] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1204.945288][T21685] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1204.945300][T21685] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53e65d0 [ 1204.945307][T21685] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1204.945313][T21685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1204.945320][T21685] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1204.945326][T21685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1204.945340][T21685] [ 1205.192163][T21687] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1205.611126][T21678] Set syz1 is full, maxelem 65536 reached [ 1205.978543][T21701] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1205.983821][T21700] IPVS: stopping master sync thread 21701 ... [ 1207.556190][T21725] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1207.585732][T21723] IPVS: stopping master sync thread 21725 ... [ 1208.225995][T21741] FAULT_INJECTION: forcing a failure. [ 1208.225995][T21741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1208.232916][T21741] CPU: 2 UID: 0 PID: 21741 Comm: syz.6.3798 Tainted: G L syzkaller #0 PREEMPT(full) [ 1208.232947][T21741] Tainted: [L]=SOFTLOCKUP [ 1208.232953][T21741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1208.232964][T21741] Call Trace: [ 1208.232971][T21741] [ 1208.232980][T21741] dump_stack_lvl+0x100/0x190 [ 1208.233009][T21741] should_fail_ex.cold+0x5/0xa [ 1208.233035][T21741] _copy_to_user+0x32/0xd0 [ 1208.233058][T21741] simple_read_from_buffer+0xcb/0x170 [ 1208.233085][T21741] proc_fail_nth_read+0x1af/0x230 [ 1208.233129][T21741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1208.233157][T21741] ? rw_verify_area+0xce/0x6d0 [ 1208.233178][T21741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1208.233205][T21741] vfs_read+0x1e4/0xb30 [ 1208.233229][T21741] ? __pfx_vfs_read+0x10/0x10 [ 1208.233249][T21741] ? find_held_lock+0x2b/0x80 [ 1208.233275][T21741] ? __fget_files+0x215/0x3d0 [ 1208.233301][T21741] ? __fget_files+0x21f/0x3d0 [ 1208.233329][T21741] ksys_read+0x12a/0x250 [ 1208.233349][T21741] ? __pfx_ksys_read+0x10/0x10 [ 1208.233370][T21741] ? rcu_is_watching+0x12/0xc0 [ 1208.233395][T21741] ? rcu_is_watching+0x12/0xc0 [ 1208.233419][T21741] do_int80_emulation+0x141/0x700 [ 1208.233442][T21741] asm_int80_emulation+0x1a/0x20 [ 1208.233458][T21741] RIP: 0023:0xf71e61ab [ 1208.233473][T21741] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1208.233491][T21741] RSP: 002b:00000000f547c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1208.233510][T21741] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f547c5d0 [ 1208.233521][T21741] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1208.233531][T21741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1208.233540][T21741] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1208.233551][T21741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1208.233575][T21741] [ 1208.333613][T21747] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1208.390574][T21749] IPVS: stopping master sync thread 21747 ... [ 1209.123532][T21756] __nla_validate_parse: 7 callbacks suppressed [ 1209.123544][T21756] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3803'. [ 1209.140778][T21756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3803'. [ 1209.644875][T21780] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3809'. [ 1209.940867][T16405] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 1210.788030][T21798] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1210.800231][T21797] IPVS: stopping master sync thread 21798 ... [ 1211.151981][T21804] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3814'. [ 1211.695520][T21807] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3816'. [ 1211.820184][T21811] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3817'. [ 1211.824281][T21811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3817'. [ 1211.828575][T21811] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.0) [ 1212.252752][T21813] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3818'. [ 1212.255666][T21813] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3818'. [ 1212.289465][T21815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3819'. [ 1214.340027][T21846] nbd: couldn't find a device at index 2147483646 [ 1215.500842][T21846] geneve2: entered promiscuous mode [ 1215.508791][ T220] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1215.533630][ T220] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1215.542942][ T220] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1215.545796][T21837] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1215.554387][T21837] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1215.562948][T21837] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1215.576301][ T220] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1215.709387][T21860] __nla_validate_parse: 3 callbacks suppressed [ 1215.709400][T21860] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3834'. [ 1215.714878][T21860] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3834'. [ 1215.745594][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3836'. [ 1217.835419][T21862] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3836'. [ 1217.840149][T21863] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3835'. [ 1218.231850][T15381] usb 11-1: new low-speed USB device number 18 using dummy_hcd [ 1218.398712][T15381] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.402885][T15381] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1218.407326][T15381] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1218.411815][T15381] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1218.415520][T15381] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.418940][ T24] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1218.424829][T21870] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1218.431889][T15381] hub 11-1:1.0: bad descriptor, ignoring hub [ 1218.434488][T15381] hub 11-1:1.0: probe with driver hub failed with error -5 [ 1218.437377][T15381] cdc_wdm 11-1:1.0: skipping garbage [ 1218.439312][T15381] cdc_wdm 11-1:1.0: skipping garbage [ 1218.443356][T15381] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 1218.445876][T15381] cdc_wdm 11-1:1.0: Unknown control protocol [ 1218.589324][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1218.593166][ T24] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 1218.596780][ T24] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 1218.600475][ T24] usb 10-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.604629][ T24] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1218.608312][ T24] usb 10-1: config 250 has no interface number 0 [ 1218.611022][ T24] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1218.615749][ T24] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1218.619595][ T24] usb 10-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1218.625067][ T24] usb 10-1: config 250 interface 228 has no altsetting 0 [ 1218.629620][ T24] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1218.633885][ T24] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1218.637242][ T24] usb 10-1: Product: syz [ 1218.638940][ T24] usb 10-1: SerialNumber: syz [ 1218.653938][ T24] hub 10-1:250.228: bad descriptor, ignoring hub [ 1218.656718][ T24] hub 10-1:250.228: probe with driver hub failed with error -5 [ 1218.719919][ C2] wdm_int_callback: 9398 callbacks suppressed [ 1218.719941][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1218.725124][ C2] wdm_int_callback: 9398 callbacks suppressed [ 1218.725140][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1218.729814][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1218.931262][T21891] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3843'. [ 1218.952992][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1218.955768][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1218.958421][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1218.960647][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1218.964260][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1218.966730][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1218.969004][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1218.971156][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1218.973520][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1218.975650][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1218.978162][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1218.980217][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1218.983538][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1218.985641][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1218.988445][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1218.991197][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1218.994205][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1218.996740][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1218.998736][T21894] FAULT_INJECTION: forcing a failure. [ 1218.998736][T21894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1219.003715][T21894] CPU: 3 UID: 0 PID: 21894 Comm: syz.0.3844 Tainted: G L syzkaller #0 PREEMPT(full) [ 1219.003733][T21894] Tainted: [L]=SOFTLOCKUP [ 1219.003737][T21894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1219.003744][T21894] Call Trace: [ 1219.003749][T21894] [ 1219.003754][T21894] dump_stack_lvl+0x100/0x190 [ 1219.003772][T21894] should_fail_ex.cold+0x5/0xa [ 1219.003788][T21894] _copy_from_user+0x2e/0xd0 [ 1219.003802][T21894] snd_pcm_oss_write2+0x1c2/0x400 [ 1219.003819][T21894] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1219.003830][T21894] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1219.003845][T21894] ? snd_pcm_oss_prepare+0x11e/0x240 [ 1219.003865][T21894] snd_pcm_oss_write+0x729/0xa30 [ 1219.003877][T21894] ? security_file_permission+0x76/0x210 [ 1219.003896][T21894] vfs_write+0x2aa/0x1070 [ 1219.003914][T21894] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1219.003932][T21894] ? __pfx_vfs_write+0x10/0x10 [ 1219.003949][T21894] ? find_held_lock+0x2b/0x80 [ 1219.003973][T21894] ? __fget_files+0x215/0x3d0 [ 1219.003993][T21894] ? __fget_files+0x215/0x3d0 [ 1219.004020][T21894] ? __fget_files+0x21f/0x3d0 [ 1219.004049][T21894] ksys_write+0x12a/0x250 [ 1219.004065][T21894] ? __pfx_ksys_write+0x10/0x10 [ 1219.004077][T21894] ? ksys_write+0x1ac/0x250 [ 1219.004090][T21894] ? rcu_is_watching+0x12/0xc0 [ 1219.004107][T21894] __do_fast_syscall_32+0xe7/0x950 [ 1219.004120][T21894] ? lockdep_hardirqs_on+0x78/0x100 [ 1219.004132][T21894] do_fast_syscall_32+0x32/0x70 [ 1219.004144][T21894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1219.004159][T21894] RIP: 0023:0xf70cef7c [ 1219.004169][T21894] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1219.004180][T21894] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1219.004192][T21894] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800012c0 [ 1219.004199][T21894] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1219.004205][T21894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1219.004212][T21894] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1219.004219][T21894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1219.004233][T21894] [ 1219.044405][ T10] usb 10-1: USB disconnect, device number 15 [ 1219.050837][T21887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.149746][T21887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.069560][T21906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3846'. [ 1220.072624][T21906] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3846'. [ 1220.199353][T21909] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3847'. [ 1220.202865][T21909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3847'. [ 1220.257413][ T10] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1220.429071][ T10] usb 10-1: config 4 has an invalid interface number: 56 but max is 0 [ 1220.434142][ T10] usb 10-1: config 4 has no interface number 0 [ 1220.437146][ T10] usb 10-1: config 4 interface 56 has no altsetting 0 [ 1220.444246][ T10] usb 10-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice=25.aa [ 1220.446954][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.450481][ T10] usb 10-1: Product: syz [ 1220.452052][ T10] usb 10-1: Manufacturer: syz [ 1220.454043][ T10] usb 10-1: SerialNumber: syz [ 1220.765870][T21892] input: syz0 as /devices/virtual/input/input58 [ 1221.160076][ T5849] usb 11-1: USB disconnect, device number 18 [ 1221.160193][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1221.319620][T21918] __nla_validate_parse: 1 callbacks suppressed [ 1221.319633][T21918] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3851'. [ 1221.480116][ T10] usb-storage 10-1:4.56: USB Mass Storage device detected [ 1221.602217][ T10] usb-storage 10-1:4.56: Quirks match for vid 152d pid 0539: 4000000 [ 1221.752150][ T10] usb 10-1: USB disconnect, device number 16 [ 1222.100649][T21924] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3852'. [ 1222.401752][T21938] ufs: You didn't specify the type of your ufs filesystem [ 1222.401752][T21938] [ 1222.401752][T21938] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1222.401752][T21938] [ 1222.401752][T21938] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1222.415407][T21938] ufs: ufs_fill_super(): bad magic number [ 1223.466725][T21941] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3856'. [ 1223.504439][T21943] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3857'. [ 1223.761186][T21945] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3858'. [ 1223.833654][T21949] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1223.836115][T21948] IPVS: stopping master sync thread 21949 ... [ 1224.342443][T21960] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.3862'. [ 1224.546816][T20856] usb 11-1: new low-speed USB device number 19 using dummy_hcd [ 1224.711961][T20856] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.728443][T20856] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1224.732675][T20856] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1224.736238][T20856] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1224.739294][T20856] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.745076][T21955] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1224.748513][T20856] hub 11-1:1.0: bad descriptor, ignoring hub [ 1224.751068][T20856] hub 11-1:1.0: probe with driver hub failed with error -5 [ 1224.755948][T20856] cdc_wdm 11-1:1.0: skipping garbage [ 1224.757757][T20856] cdc_wdm 11-1:1.0: skipping garbage [ 1224.761123][T20856] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 1224.763662][T20856] cdc_wdm 11-1:1.0: Unknown control protocol [ 1224.770017][T21966] netlink: 1412 bytes leftover after parsing attributes in process `syz.1.3864'. [ 1224.773868][T21966] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3864'. [ 1224.778136][T21966] netlink: 1997 bytes leftover after parsing attributes in process `syz.1.3864'. [ 1224.782029][T21966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3864'. [ 1225.839922][T20856] usb 11-1: USB disconnect, device number 19 [ 1225.998394][T20856] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 1226.171674][T20856] usb 11-1: Using ep0 maxpacket: 8 [ 1226.175661][T20856] usb 11-1: config 0 has no interfaces? [ 1226.178137][T20856] usb 11-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 1226.181889][T20856] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.188488][T20856] usb 11-1: config 0 descriptor?? [ 1226.390340][T21988] 9pnet_virtio: no channels available for device syz [ 1226.422020][ T5849] usb 11-1: USB disconnect, device number 20 [ 1226.486152][T21990] 9pnet_virtio: no channels available for device syz [ 1226.489216][T21990] openvswitch: netlink: IP tunnel dst address not specified [ 1228.254459][T22003] Set syz1 is full, maxelem 65536 reached [ 1228.476400][T22009] Set syz1 is full, maxelem 65536 reached [ 1229.458335][T22016] Set syz1 is full, maxelem 65536 reached [ 1229.505287][T22036] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3880'. [ 1229.661297][T22028] Set syz1 is full, maxelem 65536 reached [ 1230.249130][T22048] ufs: You didn't specify the type of your ufs filesystem [ 1230.249130][T22048] [ 1230.249130][T22048] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1230.249130][T22048] [ 1230.249130][T22048] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1230.249403][ T193] Bluetooth: Error in BCSP hdr checksum [ 1230.268959][T22048] ufs: ufs_fill_super(): bad magic number [ 1230.496126][ T193] Bluetooth: Error in BCSP hdr checksum [ 1230.504482][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1230.679772][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.683969][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.687716][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1230.692571][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1230.696328][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.701155][ T10] usb 5-1: config 0 descriptor?? [ 1230.775522][ T220] Bluetooth: Error in BCSP hdr checksum [ 1231.150255][ T10] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 1231.184395][ T10] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1231.427144][T22047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.431583][T22047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.444512][T20856] usb 5-1: USB disconnect, device number 27 [ 1232.164463][T16405] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1232.421426][T22068] ufs: You didn't specify the type of your ufs filesystem [ 1232.421426][T22068] [ 1232.421426][T22068] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1232.421426][T22068] [ 1232.421426][T22068] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1232.441198][T22068] ufs: ufs_fill_super(): bad magic number [ 1232.443340][T22067] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3887'. [ 1233.448713][T22067] Process accounting paused [ 1233.657201][T22078] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3892'. [ 1233.855150][T22073] Set syz1 is full, maxelem 65536 reached [ 1233.902706][T22083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3893'. [ 1233.930829][T22083] bond1: entered promiscuous mode [ 1233.932489][T22083] bond1: entered allmulticast mode [ 1233.934600][T22083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1233.948737][T22083] bridge1: entered promiscuous mode [ 1233.951851][T22083] bridge1: entered allmulticast mode [ 1233.955532][T22083] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1233.959802][T22086] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3890'. [ 1234.003440][T22088] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3894'. [ 1234.009138][T22088] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1234.052879][ T34] kernel write not supported for file /snd/midiC2D0 (pid: 34 comm: kworker/3:0) [ 1235.683056][T22108] netlink: 'syz.0.3900': attribute type 5 has an invalid length. [ 1235.803659][T22111] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3901'. [ 1235.910054][T20856] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 1236.094259][T20856] usb 11-1: Using ep0 maxpacket: 8 [ 1236.119368][T20856] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 1236.133945][T20856] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1236.148334][T20856] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1236.170703][T20856] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1236.186040][T20856] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.208108][T20856] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1236.220204][T20856] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.534099][T20856] usb 11-1: usb_control_msg returned -32 [ 1236.547103][T20856] usbtmc 11-1:16.0: can't read capabilities [ 1236.677816][T22123] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3905'. [ 1236.782848][T22125] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.970567][T22125] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.061984][T22125] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.174148][T22125] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.183262][T22129] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1237.185914][T22129] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1237.191653][T22129] vhci_hcd vhci_hcd.0: Device attached [ 1237.259423][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.267063][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.282677][ T193] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.285467][ T193] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.405087][T20856] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1237.480153][T20856] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 1237.675148][T19526] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1237.848433][T19526] usb 10-1: Using ep0 maxpacket: 8 [ 1237.851792][T19526] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1237.855123][T19526] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1237.858908][T19526] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1237.862259][T19526] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1237.865753][T19526] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1237.869859][T19526] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1237.875245][T19526] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.064763][T22138] bridge_slave_1: left allmulticast mode [ 1238.066802][T22138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.073288][T22138] bridge_slave_0: left allmulticast mode [ 1238.075396][T22138] bridge_slave_0: left promiscuous mode [ 1238.079731][T22138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.106796][T19526] usb 10-1: GET_CAPABILITIES returned 0 [ 1238.108784][T19526] usbtmc 10-1:16.0: can't read capabilities [ 1238.563518][T22135] fuse: Invalid rootmode [ 1238.573823][T15619] usb 10-1: USB disconnect, device number 17 [ 1238.847875][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.850687][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.913251][ T6911] usb 11-1: USB disconnect, device number 21 [ 1238.926464][T22132] vhci_hcd: connection reset by peer [ 1238.938773][ T193] vhci_hcd vhci_hcd.6: stop threads [ 1238.940611][ T193] vhci_hcd vhci_hcd.6: release socket [ 1238.942542][ T193] vhci_hcd vhci_hcd.6: disconnect device [ 1239.204969][T22159] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3912'. [ 1239.321770][T22163] FAULT_INJECTION: forcing a failure. [ 1239.321770][T22163] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.331786][T22163] CPU: 0 UID: 0 PID: 22163 Comm: syz.5.3914 Tainted: G L syzkaller #0 PREEMPT(full) [ 1239.331815][T22163] Tainted: [L]=SOFTLOCKUP [ 1239.331819][T22163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1239.331829][T22163] Call Trace: [ 1239.331835][T22163] [ 1239.331843][T22163] dump_stack_lvl+0x100/0x190 [ 1239.331869][T22163] should_fail_ex.cold+0x5/0xa [ 1239.331904][T22163] should_failslab+0xc2/0x120 [ 1239.331919][T22163] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1239.331935][T22163] ? do_getname+0x35/0x390 [ 1239.331953][T22163] ? strncpy_from_user+0x19d/0x2d0 [ 1239.331969][T22163] do_getname+0x35/0x390 [ 1239.331987][T22163] __ia32_sys_renameat2+0xd8/0x140 [ 1239.332006][T22163] __do_fast_syscall_32+0xe7/0x950 [ 1239.332019][T22163] ? lockdep_hardirqs_on+0x78/0x100 [ 1239.332034][T22163] do_fast_syscall_32+0x32/0x70 [ 1239.332052][T22163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1239.332076][T22163] RIP: 0023:0xf6fdef7c [ 1239.332093][T22163] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1239.332108][T22163] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000161 [ 1239.332125][T22163] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000480 [ 1239.332136][T22163] RDX: 00000000ffffff9c RSI: 00000000800004c0 RDI: 0000000000000002 [ 1239.332146][T22163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1239.332155][T22163] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1239.332166][T22163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1239.332188][T22163] [ 1240.555788][T22167] Set syz1 is full, maxelem 65536 reached [ 1241.038364][T22183] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3920'. [ 1241.038728][T22179] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1241.044193][T22179] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1241.047644][T22179] vhci_hcd vhci_hcd.0: Device attached [ 1241.168790][T22179] ./bus: Can't lookup blockdev [ 1241.178254][T22185] vhci_hcd: connection closed [ 1241.178491][ T12] vhci_hcd vhci_hcd.6: stop threads [ 1241.182380][ T12] vhci_hcd vhci_hcd.6: release socket [ 1241.184279][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 1241.671785][T22198] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3923'. [ 1242.146064][T22203] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3925'. [ 1242.962548][T22216] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1242.979138][T22215] IPVS: stopping master sync thread 22216 ... [ 1243.308069][T20856] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1243.810091][T22223] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3932'. [ 1243.813818][T22223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3932'. [ 1244.205108][T22232] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3931'. [ 1244.208322][T22232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3931'. [ 1244.515179][T22242] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3937'. [ 1244.667679][T22229] Set syz1 is full, maxelem 65536 reached [ 1244.812391][T22245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3938'. [ 1245.064781][T22245] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3938'. [ 1245.113099][T22250] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3935'. [ 1245.281639][T22255] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1245.284889][T22255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1245.288220][T22255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1245.297160][T22255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1247.321300][T22274] Set syz1 is full, maxelem 65536 reached [ 1247.548815][T22289] can0: slcan on ptm0. [ 1247.975862][T22292] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1247.980991][T22292] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1247.986132][T22292] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1248.010446][T22292] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1248.815902][T22304] IPVS: stopping master sync thread 22302 ... [ 1248.953102][T22288] can0 (unregistered): slcan off ptm0. [ 1249.402533][T22311] loop5: detected capacity change from 0 to 4095 [ 1249.814400][T22325] __nla_validate_parse: 5 callbacks suppressed [ 1249.814501][T22325] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3953'. [ 1250.185654][T22331] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1250.197491][T22330] IPVS: stopping master sync thread 22331 ... [ 1251.212586][T22345] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3957'. [ 1251.719562][T22353] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1251.760378][T22351] IPVS: stopping master sync thread 22353 ... [ 1251.981420][T22344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3958'. [ 1252.376718][T22346] Set syz1 is full, maxelem 65536 reached [ 1252.624485][T22360] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.3962'. [ 1252.670960][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3964'. [ 1252.674790][T22364] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3964'. [ 1253.658733][T22372] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3966'. [ 1253.662100][T22372] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3966'. [ 1253.828630][T22379] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1253.894944][T22375] IPVS: stopping master sync thread 22379 ... [ 1254.349805][T22389] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3971'. [ 1254.502284][T22395] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1254.521874][T22394] IPVS: stopping master sync thread 22395 ... [ 1254.941434][T22403] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1254.959277][T22402] IPVS: stopping master sync thread 22403 ... [ 1256.179858][T22409] Set syz1 is full, maxelem 65536 reached [ 1256.196828][T22431] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1256.256827][T22432] IPVS: stopping master sync thread 22431 ... [ 1256.414479][T22436] ubi: mtd0 is already attached to ubi16 [ 1256.423584][T22436] netlink: 'syz.5.3981': attribute type 21 has an invalid length. [ 1256.447091][T22436] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3981'. [ 1256.453775][T22436] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3981'. [ 1256.742825][T22441] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 1257.182765][T22449] ubi: mtd0 is already attached to ubi16 [ 1257.191899][T22449] netlink: 'syz.1.3983': attribute type 21 has an invalid length. [ 1257.195091][T22449] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3983'. [ 1257.511169][T22455] ufs: You didn't specify the type of your ufs filesystem [ 1257.511169][T22455] [ 1257.511169][T22455] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1257.511169][T22455] [ 1257.511169][T22455] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1257.535559][T22455] ufs: ufs_fill_super(): bad magic number [ 1257.724991][ T5745] Bluetooth: hci2: command 0x0406 tx timeout [ 1258.962540][T22449] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3983'. [ 1259.057601][T22469] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 1259.093117][T22471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3988'. [ 1259.093477][T22469] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3987'. [ 1259.210266][T22477] netlink: 'syz.6.3989': attribute type 29 has an invalid length. [ 1259.213658][T22477] FAULT_INJECTION: forcing a failure. [ 1259.213658][T22477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.217851][T22477] CPU: 0 UID: 0 PID: 22477 Comm: syz.6.3989 Tainted: G L syzkaller #0 PREEMPT(full) [ 1259.217878][T22477] Tainted: [L]=SOFTLOCKUP [ 1259.217885][T22477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1259.217896][T22477] Call Trace: [ 1259.217904][T22477] [ 1259.217911][T22477] dump_stack_lvl+0x100/0x190 [ 1259.217938][T22477] should_fail_ex.cold+0x5/0xa [ 1259.217964][T22477] _copy_from_iter+0x1f4/0x1690 [ 1259.217991][T22477] ? __pfx__copy_from_iter+0x10/0x10 [ 1259.218010][T22477] ? trace_kmalloc+0xe3/0x110 [ 1259.218031][T22477] ? __kasan_kmalloc+0xaa/0xb0 [ 1259.218048][T22477] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 1259.218064][T22477] ? proc_sys_call_handler+0x2c7/0x5a0 [ 1259.218092][T22477] proc_sys_call_handler+0x3ed/0x5a0 [ 1259.218117][T22477] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1259.218146][T22477] vfs_write+0x6ac/0x1070 [ 1259.218167][T22477] ? __pfx_proc_sys_write+0x10/0x10 [ 1259.218190][T22477] ? __pfx_vfs_write+0x10/0x10 [ 1259.218207][T22477] ? find_held_lock+0x2b/0x80 [ 1259.218247][T22477] ksys_write+0x12a/0x250 [ 1259.218271][T22477] ? __pfx_ksys_write+0x10/0x10 [ 1259.218290][T22477] ? ksys_write+0x1ac/0x250 [ 1259.218314][T22477] ? rcu_is_watching+0x12/0xc0 [ 1259.218341][T22477] __do_fast_syscall_32+0xe7/0x950 [ 1259.218361][T22477] ? lockdep_hardirqs_on+0x78/0x100 [ 1259.218380][T22477] do_fast_syscall_32+0x32/0x70 [ 1259.218399][T22477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1259.218423][T22477] RIP: 0023:0xf70aef7c [ 1259.218438][T22477] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1259.218455][T22477] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1259.218472][T22477] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000080 [ 1259.218483][T22477] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 1259.218493][T22477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1259.218504][T22477] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1259.218514][T22477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1259.218539][T22477] [ 1259.484660][T22482] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3991'. [ 1260.439880][T22492] IPVS: stopping master sync thread 22493 ... [ 1260.490681][T22485] comedi comedi3: c6xdigio: a I/O base address must be specified [ 1261.284220][T22512] FAULT_INJECTION: forcing a failure. [ 1261.284220][T22512] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.288401][T22512] CPU: 1 UID: 0 PID: 22512 Comm: syz.0.3997 Tainted: G L syzkaller #0 PREEMPT(full) [ 1261.288430][T22512] Tainted: [L]=SOFTLOCKUP [ 1261.288434][T22512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1261.288441][T22512] Call Trace: [ 1261.288446][T22512] [ 1261.288452][T22512] dump_stack_lvl+0x100/0x190 [ 1261.288471][T22512] should_fail_ex.cold+0x5/0xa [ 1261.288501][T22512] should_failslab+0xc2/0x120 [ 1261.288516][T22512] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1261.288533][T22512] ? snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 1261.288556][T22512] snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 1261.288576][T22512] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 1261.288594][T22512] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 1261.288618][T22512] snd_mixer_oss_ioctl1+0x17af/0x1cf0 [ 1261.288634][T22512] ? kasan_quarantine_put+0x104/0x240 [ 1261.288646][T22512] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 1261.288664][T22512] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 1261.288679][T22512] ? tomoyo_path_number_perm+0x28f/0x580 [ 1261.288693][T22512] ? tomoyo_path_number_perm+0x28f/0x580 [ 1261.288709][T22512] ? tomoyo_path_number_perm+0x188/0x580 [ 1261.288725][T22512] ? hrtimer_start_range_ns+0x7c4/0x1a50 [ 1261.288742][T22512] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1261.288756][T22512] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1261.288778][T22512] snd_mixer_oss_ioctl_card+0x102/0x170 [ 1261.288794][T22512] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 1261.288815][T22512] snd_pcm_oss_ioctl+0x34d/0x37c0 [ 1261.288827][T22512] ? find_held_lock+0x2b/0x80 [ 1261.288842][T22512] ? __fget_files+0x215/0x3d0 [ 1261.288856][T22512] ? hook_file_ioctl_common+0x149/0x410 [ 1261.288869][T22512] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1261.288883][T22512] ? __fget_files+0x21f/0x3d0 [ 1261.288899][T22512] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 1261.288911][T22512] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1261.288925][T22512] __do_fast_syscall_32+0xe7/0x950 [ 1261.288938][T22512] ? lockdep_hardirqs_on+0x78/0x100 [ 1261.288950][T22512] do_fast_syscall_32+0x32/0x70 [ 1261.288962][T22512] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1261.288978][T22512] RIP: 0023:0xf70cef7c [ 1261.288987][T22512] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1261.288998][T22512] RSP: 002b:00000000f549c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1261.289010][T22512] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080044dff [ 1261.289017][T22512] RDX: 0000000080003f80 RSI: 0000000000000000 RDI: 0000000000000000 [ 1261.289024][T22512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1261.289030][T22512] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1261.289037][T22512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1261.289051][T22512] [ 1262.873899][T22516] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1262.875941][T22516] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1262.878429][T22516] vhci_hcd vhci_hcd.0: Device attached [ 1263.072936][T22530] vhci_hcd: connection closed [ 1263.073489][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1263.081096][ T12] vhci_hcd vhci_hcd.1: release socket [ 1263.083064][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1263.206959][T20856] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 1263.485058][T20856] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1263.489702][T20856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1263.493749][T20856] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1263.510534][T20856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1263.519019][T20856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1263.532384][T20856] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1263.534727][T20856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1263.544336][T20856] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1263.553980][T20856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xf0000) [ 1263.574332][T20856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1263.579892][T20856] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1263.582306][T20856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1263.590274][T20856] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1263.594457][T20856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1263.598824][T20856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1263.609314][T20856] usb 5-1: string descriptor 0 read error: -22 [ 1263.611799][T20856] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1263.616037][T20856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.629399][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1263.639746][T20856] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1263.641208][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1263.647115][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1263.655422][ T5745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1263.659524][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1263.661685][ T1128] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 1263.664537][ T1128] ata1: failed to read log page 10h (errno=-5) [ 1263.667198][ T1128] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 1263.672345][ T1128] ata1.00: irq_stat 0x41000008 [ 1263.674371][ T1128] ata1.00: failed command: WRITE FPDMA QUEUED [ 1263.676798][ T1128] ata1.00: cmd 61/80:70:b6:29:0a/07:00:00:00:00/40 tag 14 ncq dma 983040 out [ 1263.676798][ T1128] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 1263.684115][ T1128] ata1.00: status: { DRDY } [ 1263.686599][ T1128] ata1.00: error: { ABRT } [ 1263.694544][ T1128] ata1.00: configured for UDMA/100 [ 1263.696793][ T1128] ata1: EH complete [ 1263.897356][ T5745] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23 [ 1264.051467][T18948] syz_tun (unregistering): left allmulticast mode [ 1264.491891][T22559] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 1264.514375][T22559] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4008'. [ 1264.658265][T22539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.661345][T22539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.664433][T22539] bridge_slave_0: entered allmulticast mode [ 1264.668618][T22539] bridge_slave_0: entered promiscuous mode [ 1264.673553][T22539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.676544][T22539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.680287][T22539] bridge_slave_1: entered allmulticast mode [ 1264.684898][T22539] bridge_slave_1: entered promiscuous mode [ 1264.711240][T22539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.718727][T22539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.769081][T22539] team0: Port device team_slave_0 added [ 1264.773613][T22539] team0: Port device team_slave_1 added [ 1264.784832][T22567] FAULT_INJECTION: forcing a failure. [ 1264.784832][T22567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1264.790022][T22539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1264.790703][T22567] CPU: 3 UID: 0 PID: 22567 Comm: syz.5.4009 Tainted: G L syzkaller #0 PREEMPT(full) [ 1264.790729][T22567] Tainted: [L]=SOFTLOCKUP [ 1264.790735][T22567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1264.790744][T22567] Call Trace: [ 1264.790750][T22567] [ 1264.790757][T22567] dump_stack_lvl+0x100/0x190 [ 1264.790784][T22567] should_fail_ex.cold+0x5/0xa [ 1264.790806][T22567] _copy_from_user+0x2e/0xd0 [ 1264.790826][T22567] input_event_from_user+0x137/0x290 [ 1264.790880][T22567] ? __pfx_input_event_from_user+0x10/0x10 [ 1264.790901][T22567] ? input_inject_event+0x1a6/0x390 [ 1264.790924][T22567] evdev_write+0x27a/0x430 [ 1264.790946][T22567] ? __pfx_evdev_write+0x10/0x10 [ 1264.790966][T22567] ? bpf_lsm_file_permission+0x9/0x10 [ 1264.790984][T22567] ? security_file_permission+0x76/0x210 [ 1264.791005][T22567] ? rw_verify_area+0xce/0x6d0 [ 1264.791025][T22567] vfs_write+0x2aa/0x1070 [ 1264.791045][T22567] ? __pfx_evdev_write+0x10/0x10 [ 1264.791065][T22567] ? __pfx_vfs_write+0x10/0x10 [ 1264.791082][T22567] ? find_held_lock+0x2b/0x80 [ 1264.791103][T22567] ? __fget_files+0x215/0x3d0 [ 1264.791129][T22567] ? __fget_files+0x215/0x3d0 [ 1264.791150][T22567] ? __fget_files+0x21f/0x3d0 [ 1264.791176][T22567] ksys_write+0x1f8/0x250 [ 1264.791195][T22567] ? __pfx_ksys_write+0x10/0x10 [ 1264.791212][T22567] ? ksys_write+0x1ac/0x250 [ 1264.791232][T22567] ? rcu_is_watching+0x12/0xc0 [ 1264.791255][T22567] __do_fast_syscall_32+0xe7/0x950 [ 1264.791274][T22567] ? lockdep_hardirqs_on+0x78/0x100 [ 1264.791291][T22567] do_fast_syscall_32+0x32/0x70 [ 1264.791309][T22567] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1264.791329][T22567] RIP: 0023:0xf6fdef7c [ 1264.791343][T22567] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1264.791358][T22567] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1264.791374][T22567] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1264.791384][T22567] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1264.791394][T22567] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1264.791403][T22567] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1264.791412][T22567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1264.791435][T22567] [ 1264.870108][T22539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.879697][T22539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.885312][T22539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1264.887582][T22539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.895403][T22539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1264.939615][T22539] hsr_slave_0: entered promiscuous mode [ 1264.942810][T22539] hsr_slave_1: entered promiscuous mode [ 1264.946624][T22539] debugfs: 'hsr0' already exists in 'hsr' [ 1264.948484][T22539] Cannot create hsr debugfs directory [ 1265.090257][T22539] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.093974][T22539] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1265.162497][ T5745] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23 [ 1265.224559][T22539] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.231461][T22539] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1265.325142][T22539] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.331142][T22539] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1265.414754][T22539] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.418715][T22539] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1265.596192][T22539] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1265.611446][T22539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1265.614774][T22539] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1265.619953][T22539] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1265.623594][T22539] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1265.627648][T22539] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1265.630745][T22539] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1265.635040][T22539] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1265.695030][T22539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.713621][T22539] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.718915][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.721278][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.726809][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.729441][ T9261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.870821][ T5745] Bluetooth: hci1: command tx timeout [ 1265.969615][T22539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.118485][T22539] veth0_vlan: entered promiscuous mode [ 1266.123994][T22539] veth1_vlan: entered promiscuous mode [ 1266.146357][T22539] veth0_macvtap: entered promiscuous mode [ 1266.151566][T22539] veth1_macvtap: entered promiscuous mode [ 1266.163039][T22539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.170018][T22539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.177940][ T92] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.184071][ T92] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.202871][ T92] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.214342][ T92] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.267609][ T9261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.275587][ T9261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.287758][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.290467][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.451432][T22612] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 1266.481312][T19526] usb 5-1: USB disconnect, device number 28 [ 1266.664156][T22619] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1266.671676][T22618] IPVS: stopping master sync thread 22619 ... [ 1266.702816][T20856] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 1266.874548][T22594] Process accounting resumed [ 1267.501165][T20856] usb 11-1: device descriptor read/64, error -71 [ 1267.776882][T20856] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 1267.917759][T20856] usb 11-1: device descriptor read/64, error -71 [ 1268.123503][ T5745] Bluetooth: hci1: command tx timeout [ 1268.324068][T20856] usb usb11-port1: attempt power cycle [ 1268.875412][T22638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4024'. [ 1268.878303][T22638] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4024'. [ 1269.206732][T20856] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 1269.241918][T20856] usb 11-1: device descriptor read/8, error -71 [ 1269.456035][T19526] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1269.510034][T20856] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 1269.533614][T20856] usb 11-1: device descriptor read/8, error -71 [ 1269.555069][T22644] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4025'. [ 1269.663307][T20856] usb usb11-port1: unable to enumerate USB device [ 1269.666338][T19526] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1269.672258][T19526] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1269.676658][T19526] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 1269.680394][T19526] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 1269.685834][T19526] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1269.688830][T19526] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.691525][T19526] usb 10-1: Product: syz [ 1269.693029][T19526] usb 10-1: Manufacturer: syz [ 1269.695649][T19526] usb 10-1: SerialNumber: syz [ 1269.698736][T19526] usb 10-1: config 0 descriptor?? [ 1269.883977][T22649] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4027'. [ 1270.057709][T22653] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4028'. [ 1270.376760][ T5745] Bluetooth: hci1: command tx timeout [ 1270.817244][T22657] FAULT_INJECTION: forcing a failure. [ 1270.817244][T22657] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.823903][T22657] CPU: 0 UID: 0 PID: 22657 Comm: syz.0.4031 Tainted: G L syzkaller #0 PREEMPT(full) [ 1270.823931][T22657] Tainted: [L]=SOFTLOCKUP [ 1270.823937][T22657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1270.823947][T22657] Call Trace: [ 1270.823954][T22657] [ 1270.823961][T22657] dump_stack_lvl+0x100/0x190 [ 1270.823989][T22657] should_fail_ex.cold+0x5/0xa [ 1270.824013][T22657] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1270.824035][T22657] should_failslab+0xc2/0x120 [ 1270.824057][T22657] __kmalloc_noprof+0xe0/0x850 [ 1270.824074][T22657] ? lockdep_hardirqs_on+0x78/0x100 [ 1270.824099][T22657] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1270.824125][T22657] genl_family_rcv_msg_doit+0xc7/0x300 [ 1270.824147][T22657] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1270.824166][T22657] ? genl_get_cmd+0x3e7/0x760 [ 1270.824189][T22657] ? bpf_lsm_capable+0x9/0x10 [ 1270.824210][T22657] ? security_capable+0x80/0x260 [ 1270.824241][T22657] ? ns_capable+0xd2/0xf0 [ 1270.824267][T22657] genl_rcv_msg+0x560/0x800 [ 1270.824289][T22657] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1270.824308][T22657] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1270.824327][T22657] ? __pfx_nl80211_set_station+0x10/0x10 [ 1270.824349][T22657] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1270.824377][T22657] netlink_rcv_skb+0x159/0x420 [ 1270.824405][T22657] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1270.824443][T22657] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1270.824481][T22657] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1270.824511][T22657] genl_rcv+0x28/0x40 [ 1270.824543][T22657] netlink_unicast+0x585/0x850 [ 1270.824576][T22657] ? __pfx_netlink_unicast+0x10/0x10 [ 1270.824611][T22657] netlink_sendmsg+0x8b0/0xda0 [ 1270.824642][T22657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1270.824672][T22657] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1270.824704][T22657] ____sys_sendmsg+0x9e1/0xb70 [ 1270.824730][T22657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1270.824759][T22657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1270.824797][T22657] ___sys_sendmsg+0x190/0x1e0 [ 1270.824817][T22657] ? __pfx____sys_sendmsg+0x10/0x10 [ 1270.824845][T22657] ? find_held_lock+0x2b/0x80 [ 1270.824884][T22657] __sys_sendmsg+0x170/0x220 [ 1270.824907][T22657] ? __pfx___sys_sendmsg+0x10/0x10 [ 1270.824926][T22657] ? __fget_files+0x21f/0x3d0 [ 1270.824957][T22657] ? ksys_write+0x1ac/0x250 [ 1270.824982][T22657] ? rcu_is_watching+0x12/0xc0 [ 1270.825005][T22657] __do_fast_syscall_32+0xe7/0x950 [ 1270.825022][T22657] ? lockdep_hardirqs_on+0x78/0x100 [ 1270.825041][T22657] do_fast_syscall_32+0x32/0x70 [ 1270.825059][T22657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1270.825082][T22657] RIP: 0023:0xf70cef7c [ 1270.825096][T22657] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1270.825113][T22657] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1270.825130][T22657] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380 [ 1270.825140][T22657] RDX: 0000000024008810 RSI: 0000000000000000 RDI: 0000000000000000 [ 1270.825150][T22657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1270.825160][T22657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.825170][T22657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1270.825193][T22657] [ 1271.002840][T22664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4033'. [ 1271.013836][T22664] bridge0: port 3(batadv1) entered blocking state [ 1271.023952][T22664] bridge0: port 3(batadv1) entered disabled state [ 1271.026164][T22664] batadv1: entered allmulticast mode [ 1271.028769][T22664] batadv1: entered promiscuous mode [ 1271.188664][T22670] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1271.194336][T22669] IPVS: stopping master sync thread 22670 ... [ 1271.571517][ T1264] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1271.577834][ T1264] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1272.062930][T22686] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4039'. [ 1272.066341][T22686] netlink: 'syz.0.4039': attribute type 2 has an invalid length. [ 1272.068765][T22686] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4039'. [ 1272.205462][T22691] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4041'. [ 1272.315690][T20856] usb 11-1: new low-speed USB device number 26 using dummy_hcd [ 1272.518114][T22693] overlayfs: failed lookup in lower (newroot/381, name='file1', err=-40): overlapping layers [ 1272.534203][T20856] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.538795][T20856] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1272.542896][T20856] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1272.547279][T20856] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1272.553143][T20856] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.558244][T22680] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1272.562565][T20856] hub 11-1:1.0: bad descriptor, ignoring hub [ 1272.569142][T20856] hub 11-1:1.0: probe with driver hub failed with error -5 [ 1272.580770][T20856] cdc_wdm 11-1:1.0: skipping garbage [ 1272.582882][T20856] cdc_wdm 11-1:1.0: skipping garbage [ 1272.599458][T20856] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 1272.602397][T20856] cdc_wdm 11-1:1.0: Unknown control protocol [ 1272.613814][T19526] adutux 10-1:0.0: ADU208 now attached to /dev/usb/adutux1 [ 1272.629636][ T5745] Bluetooth: hci1: command tx timeout [ 1272.630779][T19526] usb 10-1: USB disconnect, device number 18 [ 1272.700447][T22702] netlink: 'syz.5.4046': attribute type 21 has an invalid length. [ 1272.703980][T22702] IPv6: NLM_F_CREATE should be specified when creating new route [ 1272.707393][T22702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1272.710359][T22702] IPv6: NLM_F_CREATE should be set when creating new route [ 1272.713447][T22702] IPv6: NLM_F_CREATE should be set when creating new route [ 1272.715803][T22702] IPv6: NLM_F_CREATE should be set when creating new route [ 1272.726115][T22702] netlink: 'syz.5.4046': attribute type 21 has an invalid length. [ 1272.729508][T22702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1272.765391][ T5745] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 1272.865271][T22706] openvswitch: netlink: IP tunnel dst address not specified [ 1272.871335][ C3] wdm_int_callback: 9476 callbacks suppressed [ 1272.871349][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1272.875756][ C3] wdm_int_callback: 9476 callbacks suppressed [ 1272.875767][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1272.880242][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1272.882756][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1272.885266][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1272.887486][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1272.889848][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1272.892227][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1273.241056][T22713] random: crng reseeded on system resumption [ 1273.340847][T22715] random: crng reseeded on system resumption [ 1273.437400][T22718] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4050'. [ 1273.670647][T20856] usb 11-1: USB disconnect, device number 26 [ 1273.864801][T20856] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 1273.923624][T22724] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4054'. [ 1274.049560][T20856] usb 11-1: Using ep0 maxpacket: 8 [ 1274.124477][T20856] usb 11-1: config 0 has no interfaces? [ 1274.126471][T20856] usb 11-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 1274.136893][T20856] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.165653][T20856] usb 11-1: config 0 descriptor?? [ 1274.303359][T22729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4053'. [ 1274.306234][T22729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4053'. [ 1274.437796][T22726] Set syz1 is full, maxelem 65536 reached [ 1274.584138][ T5745] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 1274.926749][T15381] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1275.238581][T22745] netlink: 'syz.0.4059': attribute type 1 has an invalid length. [ 1275.250758][T22745] bond1: entered promiscuous mode [ 1275.253618][T22745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1275.285076][T22745] random: crng reseeded on system resumption [ 1275.307038][T22745] program syz.0.4059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1275.325782][T22745] ata1.00: invalid command format 255 [ 1275.401070][T22747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1275.404073][T22747] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1275.408133][T22747] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1275.414341][T22747] bond1: (slave vti0): making interface the new active one [ 1275.416699][T22747] vti0: entered promiscuous mode [ 1275.419277][T22747] bond1: (slave vti0): Enslaving as an active interface with an up link [ 1275.635056][T20856] usb 11-1: USB disconnect, device number 27 [ 1276.201476][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4064'. [ 1276.204799][T22760] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4064'. [ 1276.925092][T22765] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4065'. [ 1277.153091][ T5745] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 1277.601435][T13913] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1277.785567][T13913] usb 10-1: Using ep0 maxpacket: 8 [ 1277.791612][T13913] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1277.797493][T13913] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1277.807635][T13913] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1277.816567][T13913] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1277.829516][T13913] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1277.841224][T13913] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1277.845990][T13913] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.319728][T22797] ufs: You didn't specify the type of your ufs filesystem [ 1278.319728][T22797] [ 1278.319728][T22797] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1278.319728][T22797] [ 1278.319728][T22797] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1278.332012][T22797] ufs: ufs_fill_super(): bad magic number [ 1278.501719][T22796] netlink: 'syz.6.4074': attribute type 1 has an invalid length. [ 1278.504861][T22796] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4074'. [ 1279.304771][T22806] ufs: You didn't specify the type of your ufs filesystem [ 1279.304771][T22806] [ 1279.304771][T22806] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1279.304771][T22806] [ 1279.304771][T22806] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1279.317469][T22806] ufs: ufs_fill_super(): bad magic number [ 1280.479307][T13913] usb 10-1: USB disconnect, device number 19 [ 1280.517100][T22809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4077'. [ 1280.520257][T22809] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4077'. [ 1280.901719][T22813] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4076'. [ 1281.354863][T22821] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1281.360359][T22820] IPVS: stopping master sync thread 22821 ... [ 1282.472707][T22823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4081'. [ 1282.476793][T22823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4081'. [ 1282.692579][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4086'. [ 1282.697346][T22824] Set syz1 is full, maxelem 65536 reached [ 1282.697832][T22840] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4086'. [ 1282.840728][T22843] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4087'. [ 1282.844418][T22843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4087'. [ 1282.849100][T22843] Bluetooth: MGMT ver 1.23 [ 1283.921724][T22852] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4089'. [ 1283.937145][T22849] nbd: must specify at least one socket [ 1283.987042][T22849] nbd: must specify a device to reconfigure [ 1284.443809][T22861] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4091'. [ 1284.467192][T22859] ufs: You didn't specify the type of your ufs filesystem [ 1284.467192][T22859] [ 1284.467192][T22859] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1284.467192][T22859] [ 1284.467192][T22859] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1284.500884][T22859] ufs: ufs_fill_super(): bad magic number [ 1284.681194][T22866] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1284.746567][T22867] IPVS: stopping master sync thread 22866 ... [ 1284.851298][T22873] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1284.860634][T22872] IPVS: stopping master sync thread 22873 ... [ 1285.611878][T22877] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4096'. [ 1285.620478][T22877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4096'. [ 1286.246943][T22891] Set syz1 is full, maxelem 65536 reached [ 1287.566735][T22907] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1287.572197][T22906] IPVS: stopping master sync thread 22907 ... [ 1288.125455][T22910] __nla_validate_parse: 2 callbacks suppressed [ 1288.125476][T22910] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4105'. [ 1288.362695][T22915] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4106'. [ 1288.368091][T22915] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4106'. [ 1288.830740][T22928] ufs: You didn't specify the type of your ufs filesystem [ 1288.830740][T22928] [ 1288.830740][T22928] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1288.830740][T22928] [ 1288.830740][T22928] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1288.840450][T22928] ufs: ufs_fill_super(): bad magic number [ 1288.933024][T22930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4109'. [ 1289.327663][T22929] Set syz1 is full, maxelem 65536 reached [ 1289.445550][T22937] ufs: You didn't specify the type of your ufs filesystem [ 1289.445550][T22937] [ 1289.445550][T22937] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1289.445550][T22937] [ 1289.445550][T22937] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1289.455274][T22937] ufs: ufs_fill_super(): bad magic number [ 1289.902814][T22939] can: request_module (can-proto-0) failed. [ 1290.922126][T22948] Set syz1 is full, maxelem 65536 reached [ 1291.079138][T22953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4116'. [ 1291.085852][T22953] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4116'. [ 1291.313281][T22958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4118'. [ 1291.868620][ T5745] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1292.208401][T22968] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4122'. [ 1292.927256][T22970] Set syz1 is full, maxelem 65536 reached [ 1293.111514][T22978] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4125'. [ 1293.117374][T22978] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4125'. [ 1293.203035][T22981] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1293.237248][T22983] IPVS: stopping master sync thread 22981 ... [ 1293.369068][T22990] IPVS: stopping master sync thread 22991 ... [ 1294.151743][T22996] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4127'. [ 1294.426106][T23001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.432788][T23001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.451278][T23001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.471621][T23001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.747414][T23008] binder: 22998:23008 ioctl c0306201 800001c0 returned -14 [ 1294.776603][T23005] bridge0: port 3(batadv1) entered blocking state [ 1294.779464][T23005] bridge0: port 3(batadv1) entered forwarding state [ 1294.786627][T23005] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1294.833534][T23005] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4131'. [ 1295.254390][T23027] Bluetooth: MGMT ver 1.23 [ 1296.004376][T23058] FAULT_INJECTION: forcing a failure. [ 1296.004376][T23058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1296.010282][T23058] CPU: 0 UID: 0 PID: 23058 Comm: syz.1.4147 Tainted: G L syzkaller #0 PREEMPT(full) [ 1296.010311][T23058] Tainted: [L]=SOFTLOCKUP [ 1296.010317][T23058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1296.010327][T23058] Call Trace: [ 1296.010334][T23058] [ 1296.010341][T23058] dump_stack_lvl+0x100/0x190 [ 1296.010368][T23058] should_fail_ex.cold+0x5/0xa [ 1296.010391][T23058] _copy_from_iter+0x1f4/0x1690 [ 1296.010416][T23058] ? __asan_memset+0x23/0x50 [ 1296.010447][T23058] ? __alloc_skb+0x4e9/0x710 [ 1296.010470][T23058] ? __pfx__copy_from_iter+0x10/0x10 [ 1296.010488][T23058] ? __pfx___alloc_skb+0x10/0x10 [ 1296.010511][T23058] ? skb_page_frag_refill+0x309/0x4b0 [ 1296.010535][T23058] ? sk_page_frag_refill+0x6c/0x340 [ 1296.010555][T23058] tcp_sendmsg_locked+0xcab/0x4500 [ 1296.010608][T23058] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1296.010637][T23058] ? do_raw_spin_lock+0x128/0x260 [ 1296.010663][T23058] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1296.010690][T23058] ? __local_bh_enable_ip+0x9e/0x120 [ 1296.010719][T23058] tcp_sendmsg+0x2e/0x50 [ 1296.010738][T23058] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1296.010759][T23058] inet_sendmsg+0xb9/0x140 [ 1296.010781][T23058] __sys_sendto+0x446/0x4b0 [ 1296.010801][T23058] ? __pfx_inet_sendmsg+0x10/0x10 [ 1296.010822][T23058] ? __pfx___sys_sendto+0x10/0x10 [ 1296.010851][T23058] ? __fget_files+0x215/0x3d0 [ 1296.010874][T23058] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1296.010907][T23058] ? fput+0x79/0x100 [ 1296.010933][T23058] ? ksys_write+0x1ac/0x250 [ 1296.010957][T23058] __ia32_sys_sendto+0xdd/0x1b0 [ 1296.010976][T23058] ? __do_fast_syscall_32+0x98/0x950 [ 1296.010996][T23058] ? lockdep_hardirqs_on+0x78/0x100 [ 1296.011013][T23058] __do_fast_syscall_32+0xe7/0x950 [ 1296.011032][T23058] ? lockdep_hardirqs_on+0x78/0x100 [ 1296.011050][T23058] do_fast_syscall_32+0x32/0x70 [ 1296.011070][T23058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1296.011093][T23058] RIP: 0023:0xf7f28f7c [ 1296.011108][T23058] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1296.011125][T23058] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 1296.011143][T23058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 1296.011155][T23058] RDX: 000000000000fdef RSI: 0000000000000805 RDI: 0000000000000000 [ 1296.011165][T23058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1296.011175][T23058] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1296.011186][T23058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1296.011209][T23058] [ 1296.187541][T23060] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 1296.209455][T23062] comedi comedi3: fl512: I/O base address not correctly aligned [ 1296.689242][T23047] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1296.693502][T23047] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1296.758109][T23047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1296.760254][T23047] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1296.766762][T23047] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1296.870968][T23047] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1296.875165][T23047] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1296.879163][T23047] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1297.097072][T23088] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 1297.118580][T23090] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4157'. [ 1297.130780][T23091] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4156'. [ 1297.167011][T23084] Set syz1 is full, maxelem 65536 reached [ 1297.432650][T23104] wg1: entered promiscuous mode [ 1297.434340][T23104] wg1: entered allmulticast mode [ 1297.593332][T23113] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4163'. [ 1297.621898][T23100] nbd0: detected capacity change from 0 to 63 [ 1297.634327][T16405] block nbd0: Receive control failed (result -32) [ 1297.731464][ T5746] block nbd0: Dead connection, failed to find a fallback [ 1297.734992][ T5746] block nbd0: shutting down sockets [ 1297.737968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1297.748217][ T5746] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1297.751961][ T5746] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1297.757040][ T5746] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1297.767635][ T5746] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1297.773958][ T5746] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1297.777481][ T5746] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1297.789560][ T5746] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1297.800371][ T5746] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1297.808285][ T5746] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1297.811320][T23120] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4165'. [ 1297.812249][ T5746] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1297.822433][ T5746] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1297.826207][ T5746] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1297.830257][ T5746] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1297.833079][ T5746] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1297.839401][ T5746] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1297.842465][ T5746] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1297.845633][ T5746] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1297.850673][ T5746] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1297.858960][ T5746] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1297.862287][ T5746] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1297.886428][ T5746] ldm_validate_partition_table(): Disk read failed. [ 1297.903931][ T5746] Dev nbd0: unable to read RDB block 0 [ 1297.915699][ T5746] nbd0: unable to read partition table [ 1298.106609][T16405] Bluetooth: hci2: command 0x0406 tx timeout [ 1298.203874][ T5746] ldm_validate_partition_table(): Disk read failed. [ 1298.225818][ T5746] Dev nbd0: unable to read RDB block 0 [ 1298.243137][ T5746] nbd0: unable to read partition table [ 1298.450530][T23123] program syz.0.4166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1298.972778][T16405] Bluetooth: hci0: command 0x0c1a tx timeout [ 1299.070257][T16405] Bluetooth: hci1: command 0x0c1a tx timeout [ 1299.593992][T23139] fuse: Bad value for 'fd' [ 1299.714553][T23127] Set syz1 is full, maxelem 65536 reached [ 1299.721793][T23139] Process accounting paused [ 1299.812736][T23136] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4169'. [ 1299.965274][T23151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4173'. [ 1299.985468][T23153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4174'. [ 1300.083127][T23157] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 1300.116786][T23160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4177'. [ 1300.165565][T23169] 9p: Bad value for 'rfdno' [ 1300.172855][T23167] tipc: Enabled bearer , priority 0 [ 1300.182912][T23167] syzkaller0: entered promiscuous mode [ 1300.185496][T23167] syzkaller0: entered allmulticast mode [ 1300.224665][T23167] tipc: Resetting bearer [ 1300.257471][T23175] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1300.266141][T23174] IPVS: stopping master sync thread 23175 ... [ 1300.338962][T23166] tipc: Resetting bearer [ 1300.359429][T16405] Bluetooth: hci2: command 0x0406 tx timeout [ 1300.764391][T23166] tipc: Disabling bearer [ 1301.239458][T16405] Bluetooth: hci0: command 0x0c1a tx timeout [ 1301.312552][T16405] Bluetooth: hci1: command 0x0c1a tx timeout [ 1301.383077][T23188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4184'. [ 1301.388989][T23188] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4184'. [ 1301.436717][T23190] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4185'. [ 1301.596157][T16405] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 1301.604682][T23176] Set syz1 is full, maxelem 65536 reached [ 1302.208239][T23183] Set syz1 is full, maxelem 65536 reached [ 1302.291451][T23202] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4187'. [ 1302.569115][T16405] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 1302.678657][T23207] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4189'. [ 1303.316739][T23222] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4194'. [ 1303.493000][T16405] Bluetooth: hci0: command 0x0c1a tx timeout [ 1303.565551][T16405] Bluetooth: hci1: command 0x0c1a tx timeout [ 1305.295604][T23251] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 1305.308873][T23251] __nla_validate_parse: 2 callbacks suppressed [ 1305.308889][T23251] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4200'. [ 1305.389481][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.396270][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.808967][T23259] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1305.815256][T23258] IPVS: stopping master sync thread 23259 ... [ 1306.004107][T23262] FAULT_INJECTION: forcing a failure. [ 1306.004107][T23262] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.013539][T23262] CPU: 1 UID: 0 PID: 23262 Comm: syz.0.4203 Tainted: G L syzkaller #0 PREEMPT(full) [ 1306.013559][T23262] Tainted: [L]=SOFTLOCKUP [ 1306.013563][T23262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1306.013570][T23262] Call Trace: [ 1306.013575][T23262] [ 1306.013579][T23262] dump_stack_lvl+0x100/0x190 [ 1306.013600][T23262] should_fail_ex.cold+0x5/0xa [ 1306.013617][T23262] ? tomoyo_encode2+0xfb/0x3c0 [ 1306.013634][T23262] should_failslab+0xc2/0x120 [ 1306.013650][T23262] __kmalloc_noprof+0xe0/0x850 [ 1306.013661][T23262] ? d_absolute_path+0x136/0x1b0 [ 1306.013676][T23262] tomoyo_encode2+0xfb/0x3c0 [ 1306.013694][T23262] tomoyo_encode+0x29/0x50 [ 1306.013708][T23262] tomoyo_realpath_from_path+0x18c/0x690 [ 1306.013728][T23262] tomoyo_path_number_perm+0x23c/0x580 [ 1306.013740][T23262] ? tomoyo_path_number_perm+0x22e/0x580 [ 1306.013754][T23262] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1306.013773][T23262] ? lockdep_unlock+0x5a/0xc0 [ 1306.013798][T23262] ? current_check_access_path+0x269/0x430 [ 1306.013814][T23262] ? __pfx_current_check_access_path+0x10/0x10 [ 1306.013832][T23262] ? d_alloc_parallel+0x864/0x14e0 [ 1306.013846][T23262] tomoyo_path_mknod+0x164/0x190 [ 1306.013864][T23262] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1306.013881][T23262] ? find_held_lock+0x2b/0x80 [ 1306.013896][T23262] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1306.013917][T23262] security_path_mknod+0x161/0x300 [ 1306.013935][T23262] may_o_create+0x30/0x3a0 [ 1306.013948][T23262] lookup_open.isra.0+0xa0d/0x11b0 [ 1306.013963][T23262] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1306.013979][T23262] ? __pfx___might_resched+0x10/0x10 [ 1306.013993][T23262] ? mnt_get_write_access+0x52/0x2f0 [ 1306.014015][T23262] ? __pfx_down_write+0x10/0x10 [ 1306.014031][T23262] ? mnt_get_write_access+0x1e9/0x2f0 [ 1306.014051][T23262] path_openat+0x2291/0x31a0 [ 1306.014069][T23262] ? fred_int80_emulation+0x651/0x700 [ 1306.014083][T23262] ? __pfx_path_openat+0x10/0x10 [ 1306.014103][T23262] do_file_open+0x20e/0x430 [ 1306.014119][T23262] ? __pfx_do_file_open+0x10/0x10 [ 1306.014144][T23262] ? _raw_spin_unlock+0x28/0x50 [ 1306.014160][T23262] ? alloc_fd+0x476/0x790 [ 1306.014178][T23262] do_sys_openat2+0x10d/0x1e0 [ 1306.014198][T23262] ? __pfx_do_sys_openat2+0x10/0x10 [ 1306.014216][T23262] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1306.014232][T23262] __ia32_compat_sys_openat+0x12d/0x210 [ 1306.014244][T23262] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1306.014255][T23262] ? fput+0x79/0x100 [ 1306.014270][T23262] ? ksys_write+0x1ac/0x250 [ 1306.014284][T23262] ? rcu_is_watching+0x12/0xc0 [ 1306.014300][T23262] __do_fast_syscall_32+0xe7/0x950 [ 1306.014312][T23262] ? lockdep_hardirqs_on+0x78/0x100 [ 1306.014324][T23262] do_fast_syscall_32+0x32/0x70 [ 1306.014336][T23262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1306.014351][T23262] RIP: 0023:0xf70cef7c [ 1306.014362][T23262] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1306.014372][T23262] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1306.014384][T23262] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 000000008000c380 [ 1306.014391][T23262] RDX: 0000000000020842 RSI: 0000000000000000 RDI: 0000000000000000 [ 1306.014398][T23262] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1306.014405][T23262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1306.014412][T23262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1306.014430][T23262] [ 1306.014443][T23262] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1306.743553][T23274] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4205'. [ 1306.790588][T23275] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4206'. [ 1307.878801][T23240] Set syz1 is full, maxelem 65536 reached [ 1307.963240][ T24] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1308.117347][T15381] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 1308.137431][ T24] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1308.140698][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.145474][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.149416][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1308.153037][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.157318][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.167018][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1308.170097][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.173873][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.177660][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1308.187562][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.190534][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.197374][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1308.201807][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.206205][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.210884][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1308.215738][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.218686][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.222110][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1308.225713][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.228709][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.234024][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1308.237866][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.241880][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.247597][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1308.251568][ T24] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1308.255699][ T24] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1308.258561][ T24] usb 10-1: Product: syz [ 1308.259910][ T24] usb 10-1: Manufacturer: syz [ 1308.261523][ T24] usb 10-1: SerialNumber: syz [ 1308.266741][ T24] usb 10-1: config 0 descriptor?? [ 1308.278772][ T24] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 1308.278954][T15381] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.286585][T15381] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1308.294145][T15381] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1308.299844][T15381] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1308.306997][T15381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.314145][T23281] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1308.321531][T15381] hub 5-1:1.0: bad descriptor, ignoring hub [ 1308.323427][T15381] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1308.327974][T15381] cdc_wdm 5-1:1.0: skipping garbage [ 1308.329709][T15381] cdc_wdm 5-1:1.0: skipping garbage [ 1308.333049][T23286] ufs: You didn't specify the type of your ufs filesystem [ 1308.333049][T23286] [ 1308.333049][T23286] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1308.333049][T23286] [ 1308.333049][T23286] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1308.346056][T15381] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1308.349931][T15381] cdc_wdm 5-1:1.0: Unknown control protocol [ 1308.398827][T23231] Set syz1 is full, maxelem 65536 reached [ 1308.408436][T23286] ufs: ufs_fill_super(): bad magic number [ 1308.526545][T19526] usb 10-1: USB disconnect, device number 20 [ 1308.546451][T19526] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 1308.731090][T23293] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1308.740829][T23292] IPVS: stopping master sync thread 23293 ... [ 1308.899476][T15381] usb 5-1: USB disconnect, device number 29 [ 1309.197867][T23299] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4213'. [ 1309.908744][T23305] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1310.187308][T23314] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4218'. [ 1310.788016][T23323] blk_print_req_error: 138 callbacks suppressed [ 1310.788238][T23323] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1310.793814][T23323] buffer_io_error: 138 callbacks suppressed [ 1310.793855][T23323] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1310.799121][T23323] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1310.802291][T23323] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1310.805853][T23323] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1310.809232][T23323] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1310.812445][T23323] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1310.816396][T23323] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1310.819639][T23323] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1310.822579][T23323] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1310.826027][T23323] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1310.829864][T23323] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1310.834924][T23323] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1310.838953][T23323] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1310.843945][T23323] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1310.848522][T23323] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1310.857676][T23323] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1310.861217][T23323] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1310.864498][T23323] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1310.868609][T23323] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1310.891510][T23323] ldm_validate_partition_table(): Disk read failed. [ 1310.895022][T23323] Dev nbd0: unable to read RDB block 0 [ 1311.018755][T23323] nbd0: unable to read partition table [ 1312.200743][T23345] ufs: You didn't specify the type of your ufs filesystem [ 1312.200743][T23345] [ 1312.200743][T23345] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1312.200743][T23345] [ 1312.200743][T23345] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1312.221139][T23345] ufs: ufs_fill_super(): bad magic number [ 1312.229065][T23344] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4226'. [ 1313.365816][T23355] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4229'. [ 1313.595997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1313.928055][T23356] Set syz1 is full, maxelem 65536 reached [ 1314.427033][T23373] ufs: You didn't specify the type of your ufs filesystem [ 1314.427033][T23373] [ 1314.427033][T23373] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1314.427033][T23373] [ 1314.427033][T23373] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1314.441005][T23373] ufs: ufs_fill_super(): bad magic number [ 1314.603146][T23375] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4232'. [ 1315.086661][T23379] IPVS: stopping master sync thread 23380 ... [ 1316.817913][T23398] Set syz1 is full, maxelem 65536 reached [ 1317.038636][T23404] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4239'. [ 1317.498167][T23406] FAULT_INJECTION: forcing a failure. [ 1317.498167][T23406] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.507265][T23406] CPU: 1 UID: 0 PID: 23406 Comm: syz.1.4240 Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.507295][T23406] Tainted: [L]=SOFTLOCKUP [ 1317.507302][T23406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1317.507313][T23406] Call Trace: [ 1317.507320][T23406] [ 1317.507349][T23406] dump_stack_lvl+0x100/0x190 [ 1317.507379][T23406] should_fail_ex.cold+0x5/0xa [ 1317.507405][T23406] should_failslab+0xc2/0x120 [ 1317.507430][T23406] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1317.507450][T23406] ? __d_alloc+0x34/0xa40 [ 1317.507480][T23406] __d_alloc+0x34/0xa40 [ 1317.507508][T23406] d_alloc+0x4a/0x1e0 [ 1317.507534][T23406] lookup_one_qstr_excl+0x171/0x250 [ 1317.507565][T23406] start_dirop+0x59/0xb0 [ 1317.507587][T23406] simple_start_creating+0xf9/0x110 [ 1317.507611][T23406] ? __pfx_simple_start_creating+0x10/0x10 [ 1317.507634][T23406] ? mntput+0x70/0xa0 [ 1317.507653][T23406] ? simple_pin_fs+0xa3/0x190 [ 1317.507673][T23406] debugfs_start_creating.part.0+0x82/0x170 [ 1317.507708][T23406] __debugfs_create_file+0xb3/0x4f0 [ 1317.507740][T23406] debugfs_create_file_full+0x41/0x60 [ 1317.507771][T23406] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1317.507799][T23406] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1317.507841][T23406] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 1317.507859][T23406] ? alloc_netdev_mqs+0xd7/0x1560 [ 1317.507889][T23406] ? lockdep_init_map_type+0x5c/0x250 [ 1317.507913][T23406] ? __pfx_macsec_setup+0x10/0x10 [ 1317.507943][T23406] alloc_netdev_mqs+0x314/0x1560 [ 1317.507972][T23406] rtnl_create_link+0xc13/0xf80 [ 1317.507999][T23406] rtnl_newlink+0x13bd/0x2380 [ 1317.508032][T23406] ? __pfx_rtnl_newlink+0x10/0x10 [ 1317.508053][T23406] ? rcu_is_watching+0x12/0xc0 [ 1317.508075][T23406] ? kasan_quarantine_put+0x104/0x240 [ 1317.508093][T23406] ? lockdep_hardirqs_on+0x78/0x100 [ 1317.508116][T23406] ? kfree_skbmem+0x19a/0x210 [ 1317.508143][T23406] ? kmem_cache_free+0x127/0x6c0 [ 1317.508182][T23406] ? __dev_queue_xmit+0x9ef/0x4950 [ 1317.508209][T23406] ? find_held_lock+0x2b/0x80 [ 1317.508232][T23406] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1317.508254][T23406] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1317.508280][T23406] ? __pfx_rtnl_newlink+0x10/0x10 [ 1317.508304][T23406] rtnetlink_rcv_msg+0x95e/0xe90 [ 1317.508335][T23406] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1317.508366][T23406] ? ref_tracker_free+0x37e/0x6c0 [ 1317.508393][T23406] netlink_rcv_skb+0x159/0x420 [ 1317.508423][T23406] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1317.508448][T23406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1317.508485][T23406] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1317.508517][T23406] netlink_unicast+0x585/0x850 [ 1317.508548][T23406] ? __pfx_netlink_unicast+0x10/0x10 [ 1317.508584][T23406] netlink_sendmsg+0x8b0/0xda0 [ 1317.508616][T23406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1317.508647][T23406] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1317.508682][T23406] ____sys_sendmsg+0x9e1/0xb70 [ 1317.508709][T23406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1317.508738][T23406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1317.508776][T23406] ___sys_sendmsg+0x190/0x1e0 [ 1317.508795][T23406] ? __pfx____sys_sendmsg+0x10/0x10 [ 1317.508851][T23406] ? find_held_lock+0x2b/0x80 [ 1317.508891][T23406] __sys_sendmsg+0x170/0x220 [ 1317.508916][T23406] ? __pfx___sys_sendmsg+0x10/0x10 [ 1317.508936][T23406] ? __fget_files+0x21f/0x3d0 [ 1317.508966][T23406] ? ksys_write+0x1ac/0x250 [ 1317.508990][T23406] ? rcu_is_watching+0x12/0xc0 [ 1317.509015][T23406] __do_fast_syscall_32+0xe7/0x950 [ 1317.509034][T23406] ? lockdep_hardirqs_on+0x78/0x100 [ 1317.509054][T23406] do_fast_syscall_32+0x32/0x70 [ 1317.509073][T23406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1317.509096][T23406] RIP: 0023:0xf7f28f7c [ 1317.509112][T23406] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1317.509127][T23406] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1317.509144][T23406] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 1317.509155][T23406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1317.509165][T23406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1317.509175][T23406] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1317.509185][T23406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1317.509209][T23406] [ 1317.748272][T23411] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4242'. [ 1317.855969][T23409] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4241'. [ 1318.036694][T23425] ufs: You didn't specify the type of your ufs filesystem [ 1318.036694][T23425] [ 1318.036694][T23425] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1318.036694][T23425] [ 1318.036694][T23425] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1318.048631][T23425] ufs: ufs_fill_super(): bad magic number [ 1318.135804][T23428] fuse: Bad value for 'max_read' [ 1318.160747][T23429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4247'. [ 1318.165711][T23431] openvswitch: netlink: IP tunnel dst address not specified [ 1318.321841][T23437] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4249'. [ 1319.407639][T23450] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4252'. [ 1319.414983][T23452] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4253'. [ 1319.493221][T23455] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1319.503060][T23454] IPVS: stopping master sync thread 23455 ... [ 1319.774962][T23457] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4255'. [ 1319.784573][T23457] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4255'. [ 1320.013671][T23460] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4256'. [ 1320.735462][T23473] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4259'. [ 1321.222024][T23479] ================================================================== [ 1321.224528][T23479] BUG: KASAN: global-out-of-bounds in dvb_device_open+0x398/0x3b0 [ 1321.227417][T23479] Read of size 8 at addr ffffffff8d005440 by task syz.1.4261/23479 [ 1321.232410][T23479] [ 1321.233781][T23479] CPU: 0 UID: 0 PID: 23479 Comm: syz.1.4261 Tainted: G L syzkaller #0 PREEMPT(full) [ 1321.233814][T23479] Tainted: [L]=SOFTLOCKUP [ 1321.233821][T23479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1321.233832][T23479] Call Trace: [ 1321.233840][T23479] [ 1321.233847][T23479] dump_stack_lvl+0x100/0x190 [ 1321.233873][T23479] print_report+0x13d/0x4b0 [ 1321.233899][T23479] ? __virt_addr_valid+0x239/0x430 [ 1321.233927][T23479] ? dvb_device_open+0x398/0x3b0 [ 1321.233946][T23479] kasan_report+0xdf/0x1d0 [ 1321.233965][T23479] ? dvb_device_open+0x398/0x3b0 [ 1321.233985][T23479] dvb_device_open+0x398/0x3b0 [ 1321.234004][T23479] ? __pfx_dvb_device_open+0x10/0x10 [ 1321.234022][T23479] chrdev_open+0x234/0x6a0 [ 1321.234042][T23479] ? __pfx_apparmor_file_open+0x10/0x10 [ 1321.234059][T23479] ? __pfx_chrdev_open+0x10/0x10 [ 1321.234081][T23479] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1321.234107][T23479] do_dentry_open+0x6d8/0x1660 [ 1321.234126][T23479] ? __pfx_chrdev_open+0x10/0x10 [ 1321.234149][T23479] vfs_open+0x82/0x3f0 [ 1321.234173][T23479] path_openat+0x208c/0x31a0 [ 1321.234194][T23479] ? asm_int80_emulation+0x1a/0x20 [ 1321.234212][T23479] ? __pfx_path_openat+0x10/0x10 [ 1321.234236][T23479] do_file_open+0x20e/0x430 [ 1321.234258][T23479] ? __pfx_do_file_open+0x10/0x10 [ 1321.234285][T23479] ? _raw_spin_unlock+0x28/0x50 [ 1321.234309][T23479] ? alloc_fd+0x476/0x790 [ 1321.234332][T23479] do_sys_openat2+0x10d/0x1e0 [ 1321.234354][T23479] ? __pfx_do_sys_openat2+0x10/0x10 [ 1321.234377][T23479] ? do_raw_spin_lock+0x128/0x260 [ 1321.234399][T23479] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 1321.234420][T23479] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 1321.234440][T23479] __ia32_compat_sys_openat+0x12d/0x210 [ 1321.234457][T23479] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1321.234475][T23479] ? rcu_is_watching+0x12/0xc0 [ 1321.234495][T23479] ? rcu_is_watching+0x12/0xc0 [ 1321.234515][T23479] do_int80_emulation+0x141/0x700 [ 1321.234533][T23479] asm_int80_emulation+0x1a/0x20 [ 1321.234549][T23479] RIP: 0023:0xf71261ab [ 1321.234564][T23479] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1321.234581][T23479] RSP: 002b:00000000f53e603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1321.234601][T23479] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53e6100 [ 1321.234614][T23479] RDX: 0000000000040402 RSI: 0000000000000000 RDI: 0000000000000000 [ 1321.234625][T23479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1321.234635][T23479] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1321.234646][T23479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1321.234662][T23479] [ 1321.234669][T23479] [ 1321.335843][T23479] The buggy address belongs to the variable: SYZFAIL: failed to recv rpc [ 1321.338085][T23479] sctp_events+0xf40/0xf80 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1321.340006][T23479] [ 1321.341019][T23479] The buggy address belongs to the physical page: [ 1321.343171][T23479] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xd005 [ 1321.346575][T23479] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1321.349224][T23485] MTD: Couldn't look up './file0': -15 [ 1321.349677][T23479] raw: 00fff00000002000 ffffea0000340148 ffffea0000340148 0000000000000000 [ 1321.354845][T23479] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1321.357793][T23479] page dumped because: kasan: bad access detected [ 1321.360318][T23479] page_owner info is not present (never set?) [ 1321.362723][T23479] [ 1321.363694][T23479] Memory state around the buggy address: [ 1321.365896][T23479] ffffffff8d005300: 07 f9 f9 f9 f9 f9 f9 f9 05 f9 f9 f9 f9 f9 f9 f9 [ 1321.368816][T23479] ffffffff8d005380: 05 f9 f9 f9 f9 f9 f9 f9 05 f9 f9 f9 f9 f9 f9 f9 [ 1321.371757][T23479] >ffffffff8d005400: 00 00 00 07 f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 [ 1321.374882][T23479] ^ [ 1321.377305][T23479] ffffffff8d005480: 00 00 f9 f9 f9 f9 f9 f9 00 00 00 00 f9 f9 f9 f9 [ 1321.380431][T23479] ffffffff8d005500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 [ 1321.383469][T23479] ================================================================== [ 1321.394296][T23479] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1321.396987][T23479] CPU: 0 UID: 0 PID: 23479 Comm: syz.1.4261 Tainted: G L syzkaller #0 PREEMPT(full) [ 1321.401214][T23479] Tainted: [L]=SOFTLOCKUP [ 1321.402920][T23479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1321.406858][T23479] Call Trace: [ 1321.407933][T23479] [ 1321.409215][T23479] dump_stack_lvl+0x100/0x190 [ 1321.411183][T23479] vpanic+0x552/0x970 [ 1321.412524][T23479] ? __pfx_vpanic+0x10/0x10 [ 1321.414417][T23479] ? dvb_device_open+0x398/0x3b0 [ 1321.416514][T23479] panic+0xd1/0xe0 [ 1321.418034][T23479] ? __pfx_panic+0x10/0x10 [ 1321.419831][T23479] ? dvb_device_open+0x398/0x3b0 [ 1321.421807][T23479] ? preempt_schedule_common+0x42/0xc0 [ 1321.423970][T23479] check_panic_on_warn.cold+0x19/0x34 [ 1321.426085][T23479] end_report.part.0+0x3a/0x90 [ 1321.427629][T23479] kasan_report.cold+0xe/0x18 [ 1321.429524][T23479] ? dvb_device_open+0x398/0x3b0 [ 1321.431493][T23479] dvb_device_open+0x398/0x3b0 [ 1321.433413][T23479] ? __pfx_dvb_device_open+0x10/0x10 [ 1321.435496][T23479] chrdev_open+0x234/0x6a0 [ 1321.437267][T23479] ? __pfx_apparmor_file_open+0x10/0x10 [ 1321.439450][T23479] ? __pfx_chrdev_open+0x10/0x10 [ 1321.441128][T23479] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1321.443456][T23479] do_dentry_open+0x6d8/0x1660 [ 1321.445367][T23479] ? __pfx_chrdev_open+0x10/0x10 [ 1321.447169][T23479] vfs_open+0x82/0x3f0 [ 1321.448481][T23479] path_openat+0x208c/0x31a0 [ 1321.450233][T23479] ? asm_int80_emulation+0x1a/0x20 [ 1321.452269][T23479] ? __pfx_path_openat+0x10/0x10 [ 1321.453932][T23479] do_file_open+0x20e/0x430 [ 1321.455450][T23479] ? __pfx_do_file_open+0x10/0x10 [ 1321.457426][T23479] ? _raw_spin_unlock+0x28/0x50 [ 1321.458998][T23479] ? alloc_fd+0x476/0x790 [ 1321.460356][T23479] do_sys_openat2+0x10d/0x1e0 [ 1321.461858][T23479] ? __pfx_do_sys_openat2+0x10/0x10 [ 1321.464063][T23479] ? do_raw_spin_lock+0x128/0x260 [ 1321.465898][T23479] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 1321.467819][T23479] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 1321.469611][T23479] __ia32_compat_sys_openat+0x12d/0x210 [ 1321.471323][T23479] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1321.473214][T23479] ? rcu_is_watching+0x12/0xc0 [ 1321.474708][T23479] ? rcu_is_watching+0x12/0xc0 [ 1321.476198][T23479] do_int80_emulation+0x141/0x700 [ 1321.477812][T23479] asm_int80_emulation+0x1a/0x20 [ 1321.479366][T23479] RIP: 0023:0xf71261ab [ 1321.480639][T23479] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1321.486529][T23479] RSP: 002b:00000000f53e603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1321.489134][T23479] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53e6100 [ 1321.491566][T23479] RDX: 0000000000040402 RSI: 0000000000000000 RDI: 0000000000000000 [ 1321.493998][T23479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1321.496414][T23479] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1321.498994][T23479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1321.501423][T23479] [ 1321.503204][T23479] Kernel Offset: disabled [ 1321.504559][T23479] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:26:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857c75e5 RDI=ffffffff9b468820 RBP=ffffffff9b4687e0 RSP=ffffc9000412f2e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3866666666666666 R12=0000000000000000 R13=0000000000000066 R14=0000000000000010 R15=ffffffff857c7580 RIP=ffffffff857c760f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097171000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f701c5d0 CR3=000000005b337000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00007fb9d3b11a01 RBX=0000000000000000 RCX=00007ffffffff000 RDX=0000000000000206 RSI=ffffffff8df2076a RDI=ffffffff8c1c4400 RBP=0000000000000000 RSP=ffffc90026297f48 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81000138 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb9d41c0880 ffffffff 00c00000 GS =0000 ffff888097271000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f155b8 CR3=000000004c81b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000029 Opmask02=00000000ffffffff Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd949accb8 00007ffd949accb8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd949ace90 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fca28994f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9d3bf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9d3bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffff000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373268fd1fadc53 73730ccaa0cc6d73 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737182 7373734204127342 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 317570632f302f71 6d2f35706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001f1 0000000000000000 0000000000003175 70632f302f716d2f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fca2898c90 000055fca2880420 0000000000000211 0000000000000036 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66736c2c346d612c 312c30722c38396b 2c34312c342c322c 312c30652d323431 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a11432c1b1e185f 1e2c4357034b1c6b 68787e73716f736a 6369642b64327172 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f777f7f7f7e7f7f 5f7f7f7f7f7b7f7f 7d7f7e7b7f7f7f7f 7f7d6e7f7e3f737b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3051383300424630 0030303030343d00 3334313300003100 34303032343d4d45 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3051382c0042002c 002c30302c343300 2c00312c00003100 312c30322d320031 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8defb261 RDI=ffffffff8c1c4400 RBP=ffffffff8e7e5420 RSP=ffffc90003f4f6a8 R8 =0000000005810405 R9 =0000000000000007 R10=0000000000000000 R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e406de RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd6e7a71300 ffffffff 00c00000 GS =0000 ffff888097371000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555cf8539f40 CR3=00000000264ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=3dd7f5c78ee491b3 7826941d1d5e1ca9 3dd7f5c78ee491b3 7826941d1d5e1ca9 3dd7f5c78ee491b3 7826941d1d5e1ca9 3dd7f5c78ee491b3 7826941d1d5e1ca9 ZMM18=913b86eab24500ba 695afd7cfb3bbdaa 913b86eab24500ba 695afd7cfb3bbdaa 913b86eab24500ba 695afd7cfb3bbdaa 913b86eab24500ba 695afd7cfb3bbdaa ZMM19=b626000000000000 0000000000000004 b626000000000000 0000000000000003 b626000000000000 0000000000000002 b626000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007265687069 636b7301ffffffff ffffffffe3081f84 034c04001f800300 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000a08004c0800 060073920fffffff ff02040800000800 1ffffffffc08007c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000a014f8a0fff ffffff0200080000 080006015ab00380 0204080000080006 ZMM24=28cf738228cf7382 28cf738228cf7382 28cf738228cf7382 28cf738228cf7382 28cf738228cf7382 28cf738228cf7382 28cf738228cf7382 28cf738228cf7382 ZMM25=223dece4223dece4 223dece4223dece4 223dece4223dece4 223dece4223dece4 223dece4223dece4 223dece4223dece4 223dece4223dece4 223dece4223dece4 ZMM26=2d67dc8c2d67dc8c 2d67dc8c2d67dc8c 2d67dc8c2d67dc8c 2d67dc8c2d67dc8c 2d67dc8c2d67dc8c 2d67dc8c2d67dc8c 2d67dc8c2d67dc8c 2d67dc8c2d67dc8c ZMM27=295b78b4295b78b4 295b78b4295b78b4 295b78b4295b78b4 295b78b4295b78b4 295b78b4295b78b4 295b78b4295b78b4 295b78b4295b78b4 295b78b4295b78b4 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ba3f0000ba3f0000 ba3f0000ba3f0000 ba3f0000ba3f0000 ba3f0000ba3f0000 ba3f0000ba3f0000 ba3f0000ba3f0000 ba3f0000ba3f0000 ba3f0000ba3f0000 info registers vcpu 3 CPU#3 RAX=ffff888055623108 RBX=ffffffff8e7e5420 RCX=ffffc900048d7694 RDX=0000000000000000 RSI=ffffffff8e7e5420 RDI=ffff888055623108 RBP=ffffffff8280e8ff RSP=ffffc900048d7688 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888055622500 R13=0000000000000001 R14=0000000000000202 R15=0000000000000004 RIP=ffffffff81e40cf2 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097471000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73a52f0 CR3=000000005a0bb000 CR4=00352ef0 DR0=0000000000000003 DR1=0000000000009a69 DR2=0000000000000400 DR3=000000000000f08e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba6fdbf2b9ed883d d3f1adac1a58e8f7 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 edc885054bbd1f48 23a773b30d217d8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c8ff6de3f779a12 4d9c7a207d1c7ec0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 31ec61a22d9d96ee 2829c39ca8e35898 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000ac0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c98efb66cb952c0 0000032100000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 008001000010f636 0000032100800100 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000032100800100 6cb7b2b400000321 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003216cda10a6 6cd673a400800100 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b492fbb8a66d3b4c 677bdd2757ca20a6 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 26689292ad696501 ac9e20d46e5f9233 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000