last executing test programs: 35m24.595481277s ago: executing program 32 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x16f) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, 0x0) mknodat$loop(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x1) renameat2(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f0000000040)='./file0\x00', 0x5) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r2, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0xf, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xc4}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x12, {0x2, 0x0, @remote}, 'lo\x00'}) 35m19.316614038s ago: executing program 33 (id=29): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300dfff00000000000000008500000087000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x11) r2 = openat$sr(0xffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0)={0x2, 0x0, [{0x8000000, 0x2d, &(0x7f0000000340)=""/45}, {0xdddd1000, 0xbb, &(0x7f0000000500)=""/187}]}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1c, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xfffffffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() syz_open_dev$vim2m(&(0x7f0000000440), 0x5, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000780), 0x10) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x800000, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file1\x00', r6, &(0x7f0000000700)='./file1\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35m15.029791477s ago: executing program 34 (id=41): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$hidraw(&(0x7f0000000180), 0xa6, 0x80241) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x6, &(0x7f00000001c0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffe08) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002d40)=""/4104, 0x1008}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f0000000380)=@in, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)=""/25, 0x19}, {&(0x7f0000000680)=""/127, 0x7f}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x3, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(0xffffffffffffffff, 0x1) 35m13.837321438s ago: executing program 35 (id=52): socket$igmp(0x2, 0x3, 0x2) io_uring_setup(0x3936, 0x0) setpriority(0x2, 0x0, 0x4) socket$kcm(0x11, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x0, 0xffffff01, 0x34324152, 0x1, 0x0, [{}, {0xfffffffc}, {}, {0x1}, {0x0, 0x7}, {0xfffffffa, 0x6}, {0x0, 0xd65}], 0x6, 0x0, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x44800) r2 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000140)=0xfc) io_setup(0x1, &(0x7f0000000040)=<r4=>0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) unlinkat(r5, &(0x7f0000000080)='./cgroup\x00', 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) io_submit(r4, 0x3, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x80, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x9dfc52a05f3a92ae}, 0x0, 0x0]) chdir(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x7ee2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (fail_nth: 8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 35m11.936066876s ago: executing program 36 (id=59): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$hidraw(&(0x7f0000000180), 0xa6, 0x80241) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x6, &(0x7f00000001c0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffe08) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002d40)=""/4104, 0x1008}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f0000000380)=@in, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)=""/25, 0x19}, {&(0x7f0000000680)=""/127, 0x7f}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x3, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(0xffffffffffffffff, 0x1) 17m30.974598745s ago: executing program 37 (id=5462): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000320001002abd5000fedbdb25feffffff0800040002000000080005", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) openat$btrfs_control(0xffffff9c, 0x0, 0x50c80, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xf0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 17m29.965615784s ago: executing program 38 (id=5465): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x5000, 0x0, 0x2, 0x9, 0x0, [{0x99, 0x10, 0x7, '\x00', 0xd1}, {0x4, 0x3, 0x3, '\x00', 0x7}, {0x5, 0x3, 0x6, '\x00', 0x6}, {0x72, 0x3, 0xdc}, {0x9, 0x85, 0x0, '\x00', 0x9}, {0x10, 0x3, 0x6, '\x00', 0x5}, {0x4, 0x8, 0xff, '\x00', 0x20}, {0x7f, 0x30, 0xa, '\x00', 0xf9}, {0x8, 0x1c, 0x9, '\x00', 0xfa}, {0x6, 0xfa, 0x7, '\x00', 0xd6}, {0x1, 0x6f, 0xc7, '\x00', 0xd}, {0x8, 0x3, 0x6, '\x00', 0x18}, {0x4, 0x0, 0xbd, '\x00', 0x7}, {0x9, 0x3, 0xa, '\x00', 0x40}, {0x1, 0xf, 0x63, '\x00', 0xd}, {0x5, 0x6, 0x8, '\x00', 0x9}, {0x9, 0x1, 0xd0, '\x00', 0xb}, {0x6, 0xa, 0x4, '\x00', 0x17}, {0x1, 0xf8, 0x6, '\x00', 0x3}, {0x4, 0x44, 0xaf}, {0x5, 0x9, 0x4e}, {0x1, 0x8, 0xf, '\x00', 0xd2}, {0xbc, 0x3, 0x1, '\x00', 0xd}, {0xb, 0x6, 0x3, '\x00', 0xf6}]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x325) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x8}) mkdirat(r6, &(0x7f0000000280)='./file0\x00', 0x100) setsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f0000000600)=0x4000099b, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000580)) 17m18.09985671s ago: executing program 8 (id=5481): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000240)="5825be57aff9352b35d10000", 0xc}], 0x1}}], 0x2, 0x4) 17m17.242725347s ago: executing program 8 (id=5484): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x20, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00'}, 0x10) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20044890) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0xf, 0x6, 0x5a73}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mq_timedsend(0xffffffffffffffff, &(0x7f0000000480)="6646796b85a27cb12f83e76c692f48787d3b0d1c9f52ccd413561d6b89b9ebcb592ae334f75d91c3d32070c163a7ce60bbd9391ddbc026b5dc027f3f74b186985abe743b58978353591b2d2734bfac45d41dcea34b9f854fa451e28f547498d29d01995e4a7ac47b22c2742e59bd98e717ce224d37bbe550c5fd10364372e5492b0b4dbabcb0216e8a3c659ecfebc198d13e76f6", 0x94, 0xfffffffa, &(0x7f0000000540)) write(r6, &(0x7f0000001580)="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", 0x10b5) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4a23, 0x0, @remote, 0x4}, 0xfd65, &(0x7f0000000300)=[{&(0x7f0000000380)="a271993af28907bc1d2fd8fbc0ef1e237ec37626b905e2cb7d7d45a70b193a0ddca24dc159089b890a12", 0x1}, {&(0x7f0000000400)="4204fc22b3811cd0422e5e756ff6f5c61722da06be6b6c7b9f327062bde73abde00237941a1a463b18003e63436713667edfb14ceeca34cf48dc1196ecb67919b57b0b347d990583cf3ec4c8ae55beda082b89cab74413a4bde2fbe6370fa7f4"}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e28, 0x9, @local, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x2, 0x4004851) socket$netlink(0x10, 0x3, 0x4) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 17m13.679618841s ago: executing program 8 (id=5486): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r3=>0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x10, r3, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@ifindex, 0xffffffffffffffff, 0x2b, 0x4, 0xffffffffffffffff, @void, @value}, 0x20) flock(r9, 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) chroot(&(0x7f0000000000)='./bus\x00') flock(r10, 0x2) 17m6.191753939s ago: executing program 8 (id=5487): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952"], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x0, 0x2, 0x2, '\x00', 0xffffffffffffffe0}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x0, 0x13, 0x4, 0x0, 0x3, 0x0, 0x4, '\x00', 0xff, 0x2}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x0, 0x0}) io_uring_setup(0x2273, &(0x7f0000000400)={0x0, 0xe4fb, 0x4, 0x1, 0x163}) r6 = io_uring_setup(0x2195, &(0x7f0000000580)={0x0, 0x7893, 0x400, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c00"], 0x30}], 0x1}, 0x0) 17m3.345919994s ago: executing program 8 (id=5489): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952"], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x0, 0x2, 0x2, '\x00', 0xffffffffffffffe0}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x0, 0x13, 0x4, 0x0, 0x3, 0x0, 0x4, '\x00', 0xff, 0x2}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x0, 0x0}) io_uring_setup(0x2273, &(0x7f0000000400)={0x0, 0xe4fb, 0x4, 0x1, 0x163}) r6 = io_uring_setup(0x2195, &(0x7f0000000580)={0x0, 0x7893, 0x400, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c00"], 0x30}], 0x1}, 0x0) 16m52.467781516s ago: executing program 8 (id=5493): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952"], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x0, 0x2, 0x2, '\x00', 0xffffffffffffffe0}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x0, 0x13, 0x4, 0x0, 0x3, 0x0, 0x4, '\x00', 0xff, 0x2}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x0, 0x0}) io_uring_setup(0x2273, &(0x7f0000000400)={0x0, 0xe4fb, 0x4, 0x1, 0x163}) r7 = io_uring_setup(0x2195, &(0x7f0000000580)={0x0, 0x7893, 0x400, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c00"], 0x30}], 0x1}, 0x0) 16m36.905653303s ago: executing program 39 (id=5493): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952"], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x0, 0x2, 0x2, '\x00', 0xffffffffffffffe0}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x0, 0x13, 0x4, 0x0, 0x3, 0x0, 0x4, '\x00', 0xff, 0x2}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x0, 0x0}) io_uring_setup(0x2273, &(0x7f0000000400)={0x0, 0xe4fb, 0x4, 0x1, 0x163}) r7 = io_uring_setup(0x2195, &(0x7f0000000580)={0x0, 0x7893, 0x400, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c00"], 0x30}], 0x1}, 0x0) 15m1.931635s ago: executing program 0 (id=5618): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x1, 0x1, 0xb, 0x0, 0x100}, 0x20) pipe(&(0x7f0000000080)={<r9=>0xffffffffffffffff}) splice(r9, 0x0, r7, 0x0, 0x1000, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x24f9, 0x0, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$KVM_SET_CPUID2(r13, 0x4048aecb, &(0x7f0000000080)=ANY=[]) close_range(r6, 0xffffffffffffffff, 0x0) 15m1.038436945s ago: executing program 1 (id=5619): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x4600, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffdd2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x1000, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) close_range(r9, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x24f9, 0x0, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0xf) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$TCFLSH(r11, 0x400455c8, 0x2) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000340)=0xfc) r13 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x4) close_range(r6, 0xffffffffffffffff, 0x0) 15m0.979670369s ago: executing program 9 (id=5620): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952"], 0xd) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x0, 0x0}) io_uring_setup(0x2273, &(0x7f0000000400)={0x0, 0xe4fb, 0x4, 0x1, 0x163}) r6 = io_uring_setup(0x2195, &(0x7f0000000580)={0x0, 0x7893, 0x400, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c00"], 0x30}], 0x1}, 0x0) 14m59.961980075s ago: executing program 1 (id=5622): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000240)="5825be57aff9352b35d100000000000000e6caa7", 0x14}], 0x1}}], 0x2, 0x4) 14m59.891474959s ago: executing program 1 (id=5623): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952"], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x0, 0x2, 0x2, '\x00', 0xffffffffffffffe0}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x0, 0x13, 0x4, 0x0, 0x3, 0x0, 0x4, '\x00', 0xff, 0x2}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x0, 0x0}) io_uring_setup(0x2273, &(0x7f0000000400)={0x0, 0xe4fb, 0x4, 0x1, 0x163}) r7 = io_uring_setup(0x2195, &(0x7f0000000580)={0x0, 0x7893, 0x400, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c00"], 0x30}], 0x1}, 0x0) 14m59.462884372s ago: executing program 9 (id=5624): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x401, 0x4) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2d0000, 0x0) syz_clone3(&(0x7f0000000400)={0x44024200, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r2=>0x0, {0x1a}, &(0x7f00000002c0)=""/70, 0x46, &(0x7f0000000340)=""/18, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) prlimit64(r2, 0x1, &(0x7f0000000480)={0xd042, 0x6}, &(0x7f00000004c0)) utime(0x0, 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="d7020000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x1b0, 0x10, 0x100, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x820, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in=@multicast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x8, 0x0, 0xffffffff, 0x2, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0xc1, 0x1, {{'sha256\x00'}, 0x3c8, "3ba7455bf6ba995a773e1ff16737dda38b18b4d6f6ce41090000008bdc51055eaac0ef49cd6d29f30289cb48997dd726aa0f0a9649e86c679a829e5d6e7dd49b20018000000000000000c43271fcb9f7cb888bff11c2ad1d6a690478f2241a27c1f6a3a627bc014b8b3b24e48f2657d774cd30dc9a334444f7"}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24040021}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa7}}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 14m59.139986784s ago: executing program 9 (id=5625): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r3=>0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x10, r3, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r5}, 0x0, &(0x7f00000001c0)=<r7=>0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@ifindex, 0xffffffffffffffff, 0x2b, 0x4, 0xffffffffffffffff, @void, @value}, 0x20) flock(r8, 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) chroot(&(0x7f0000000000)='./bus\x00') flock(r9, 0x2) 14m58.381384575s ago: executing program 1 (id=5626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952"], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x0, 0x13, 0x4, 0x0, 0x3, 0x0, 0x4, '\x00', 0xff, 0x2}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x0, 0x0}) r6 = io_uring_setup(0x2195, &(0x7f0000000580)={0x0, 0x7893, 0x400, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c00"], 0x30}], 0x1}, 0x0) 14m58.315708596s ago: executing program 0 (id=5627): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x80042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x1000, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4106, &(0x7f00000000c0), &(0x7f0000000380)="e21d338379ce7dd9dbd9a92818de08b45774a0e165353ce3ada020ed8e2b708beb15e6976b9a7170fd6da0534f37db00"/66, 0x2, r7}, 0x38) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='netfs_failure\x00', r10, 0x0, 0xfffffffffffffc01}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000240), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) 14m58.151350898s ago: executing program 9 (id=5628): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952"], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x0, 0x13, 0x4, 0x0, 0x3, 0x0, 0x4, '\x00', 0xff, 0x2}) io_uring_setup(0x2273, &(0x7f0000000400)={0x0, 0xe4fb, 0x4, 0x1, 0x163}) r6 = io_uring_setup(0x2195, &(0x7f0000000580)={0x0, 0x7893, 0x400, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c00"], 0x30}], 0x1}, 0x0) 14m55.131232289s ago: executing program 0 (id=5629): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x80042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x1000, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4106, &(0x7f00000000c0), &(0x7f0000000380)="e21d338379ce7dd9dbd9a92818de08b45774a0e165353ce3ada020ed8e2b708beb15e6976b9a7170fd6da0534f37db00"/66, 0x2, r7}, 0x38) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r10, 0x0, 0xfffffffffffffc01}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000240), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) 14m53.169788327s ago: executing program 0 (id=5631): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000240)="5825be57aff9352b35d100000000000000e6caa7", 0x14}], 0x1}}], 0x2, 0x4) 14m52.604108278s ago: executing program 1 (id=5632): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x4600, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffdd2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x1000, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) close_range(r9, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x24f9, 0x0, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0xf) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$TCFLSH(r11, 0x400455c8, 0x2) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000340)=0xfc) r13 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x4) close_range(r6, 0xffffffffffffffff, 0x0) 14m52.601947153s ago: executing program 0 (id=5640): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952"], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x0, 0x13, 0x4, 0x0, 0x3, 0x0, 0x4, '\x00', 0xff, 0x2}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x0, 0x0}) io_uring_setup(0x2273, &(0x7f0000000400)={0x0, 0xe4fb, 0x4, 0x1, 0x163}) r6 = io_uring_setup(0x2195, &(0x7f0000000580)={0x0, 0x7893, 0x400, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c00"], 0x30}], 0x1}, 0x0) 14m52.125478194s ago: executing program 9 (id=5633): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x401, 0x4) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2d0000, 0x0) syz_clone3(&(0x7f0000000400)={0x44024200, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r2=>0x0, {0x1a}, &(0x7f00000002c0)=""/70, 0x46, &(0x7f0000000340)=""/18, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) prlimit64(r2, 0x1, &(0x7f0000000480)={0xd042, 0x6}, &(0x7f00000004c0)) utime(0x0, 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="d7020000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x1b0, 0x10, 0x100, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x820, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in=@multicast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x8, 0x0, 0xffffffff, 0x2, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0xc1, 0x1, {{'sha256\x00'}, 0x3c8, "3ba7455bf6ba995a773e1ff16737dda38b18b4d6f6ce41090000008bdc51055eaac0ef49cd6d29f30289cb48997dd726aa0f0a9649e86c679a829e5d6e7dd49b20018000000000000000c43271fcb9f7cb888bff11c2ad1d6a690478f2241a27c1f6a3a627bc014b8b3b24e48f2657d774cd30dc9a334444f7"}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24040021}, 0x80) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa7}}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 14m52.058427316s ago: executing program 9 (id=5634): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952"], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x0, 0x2, 0x2, '\x00', 0xffffffffffffffe0}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x0, 0x13, 0x4, 0x0, 0x3, 0x0, 0x4, '\x00', 0xff, 0x2}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x0, 0x0}) io_uring_setup(0x2273, &(0x7f0000000400)={0x0, 0xe4fb, 0x4, 0x1, 0x163}) r7 = io_uring_setup(0x2195, &(0x7f0000000580)={0x0, 0x7893, 0x400, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c00"], 0x30}], 0x1}, 0x0) 14m52.038435706s ago: executing program 1 (id=5635): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952"], 0xd) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x0, 0x0}) io_uring_setup(0x2273, &(0x7f0000000400)={0x0, 0xe4fb, 0x4, 0x1, 0x163}) r6 = io_uring_setup(0x2195, &(0x7f0000000580)={0x0, 0x7893, 0x400, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c00"], 0x30}], 0x1}, 0x0) 14m50.668091312s ago: executing program 0 (id=5636): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x20, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00'}, 0x10) sendmsg$nl_route(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400", @ANYRES16=r5, @ANYBLOB="ad43ffa60000ffdbdf2506"], 0x14}}, 0x20044890) 14m36.785304785s ago: executing program 40 (id=5635): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952"], 0xd) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x0, 0x0}) io_uring_setup(0x2273, &(0x7f0000000400)={0x0, 0xe4fb, 0x4, 0x1, 0x163}) r6 = io_uring_setup(0x2195, &(0x7f0000000580)={0x0, 0x7893, 0x400, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c00"], 0x30}], 0x1}, 0x0) 14m36.775296701s ago: executing program 41 (id=5634): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952"], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x0, 0x2, 0x2, '\x00', 0xffffffffffffffe0}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x0, 0x13, 0x4, 0x0, 0x3, 0x0, 0x4, '\x00', 0xff, 0x2}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x0, 0x0}) io_uring_setup(0x2273, &(0x7f0000000400)={0x0, 0xe4fb, 0x4, 0x1, 0x163}) r7 = io_uring_setup(0x2195, &(0x7f0000000580)={0x0, 0x7893, 0x400, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c00"], 0x30}], 0x1}, 0x0) 14m35.013078108s ago: executing program 42 (id=5636): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x20, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00'}, 0x10) sendmsg$nl_route(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400", @ANYRES16=r5, @ANYBLOB="ad43ffa60000ffdbdf2506"], 0x14}}, 0x20044890) 2m32.703881806s ago: executing program 2 (id=8839): timer_create(0xb, &(0x7f0000000200)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x8], 0x0, 0x0, 0x2}}, 0x3c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m32.604405401s ago: executing program 2 (id=8841): syz_open_dev$loop(0x0, 0x81, 0x2a82) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) openat$binfmt_format(0xffffff9c, &(0x7f0000000380)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m32.541194856s ago: executing program 2 (id=8842): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d0000000c0001800800", @ANYRES32], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 2m32.043946683s ago: executing program 2 (id=8843): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x7, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x80000007, 0x4, 0x0, 0x10, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3, 0x7fffffff, 0x5, 0xffff}, {0xb, 0xe5f, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xd, 0x3, 0x7ff, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x1, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff}]}) syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) unshare(0x22020400) timerfd_create(0x9, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x100, 0x0, 0x10}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400}, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m30.756028702s ago: executing program 2 (id=8853): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000a80)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x0, r3}, 0x14) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x40}}]}, 0x2c}}, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) r9 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000300)=@l={0x92, 0x4, 0xc0, 0x10, 0x40, 0xd0, 0x7c}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000540)={0x7f, 0xfffffff9, 0xfc, 0x7e, 0x9}) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000080)={0x0, <r11=>0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r13, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4850}, 0x4) timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r11}, &(0x7f0000000100)) readv(r0, 0x0, 0x0) 2m30.653813322s ago: executing program 2 (id=8854): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000060a49040000000000000000020000000900020073797a32000000000900010073797a300000000004000480140000001100010000000000000000000000000a"], 0x58}}, 0x0) semget$private(0x0, 0x207, 0x480) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002800000", 0x2c}, {&(0x7f0000000640)="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", 0xe00}, {&(0x7f00000000c0)="26fc4bcf8b00c19cd0eed8a91f7c36de44eed2752c4d27ee2e10986d2b", 0x1d}, {&(0x7f0000000280)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a47502b4207297de026ed4ea30bef60af76f2b26e1a2768a7226f918253314511129725d", 0x68}, {&(0x7f0000000200)}, {&(0x7f0000000240)="be1ac182feb197b37fadc7e8ad4b3a9a9b791e900ba3d6", 0x17}, {&(0x7f00000004c0)="91f0807b6afddf80750c5a560c2081f08de8a721aa5e3cfd5a6bc6cabda994bf8693656d03e1ecd9d468f2d4bb42292991d19fba6097597c9e6f16fdcb2b551f2bfeaaf98a60bc01df68984cf336e2d257b29840e3adfa847b5f420ea7b5e4d1545ae88f63dfbb3ecdfa6633997cbaaa79e2ada80941ed932cbd7a0b11325041f526151f6be00828495864ad9f61c009821728b246b5957891caf322b4a8c97874073ecf48e0cde8e05ba00619d7d90907550d123307265ef06a5ba4a640b82641a834e2684781e4b3e0a93e8d25795a7949e0864c40b8396a01a59b509e34ef484c938c3a677a072a4fba", 0xeb}, {0x0}], 0x8}, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x300}]}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) io_uring_setup(0x172b, &(0x7f0000000000)={0x0, 0xe69, 0x8000, 0x2, 0x155}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2m15.596179564s ago: executing program 43 (id=8854): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000060a49040000000000000000020000000900020073797a32000000000900010073797a300000000004000480140000001100010000000000000000000000000a"], 0x58}}, 0x0) semget$private(0x0, 0x207, 0x480) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002800000", 0x2c}, {&(0x7f0000000640)="9abe48978fc9d6d504d0c9f79768e69abc0d908c4b7714017340a5321e2091ace2f33de355e62b927a1ab681a738f2e4e6d33ce721479d3f68ea12ef5aeb17d903d95cddeb4e2754b78802e05f584c7ab407fc85efe9ab6d650e5eccd789e1e414ab7501f7fb6fd6404b0afab9d4c2078d1030121824daf273d8c33dae1bc50bf1d39fb4f04a10d235dd987de873824c5f97fc33c2e3fde23491dd6d53930ce1c914bc1cc17642dffa0933942972a97ea96b886ad243f6d5378f5d70d8379f5a316ec6c623a6a08674f92554652a32193775938997cb6b24d8355b79860057ea077f62b64ffbd9a886bf7ec98453e6a4792ea0882f8c1e1be8a4b699f4560545c55002fc6f2039736619ffb2c30f946ad7ca29bb4dc823c771b85d812e3f1bee51b20cd8e365a88fda649df477f1f3a1a7c60d0a4c875973658fe25ecb5d45e95dc7cb07f79b0dc0a78bff47ad5ccd5ab5dfc8ba2a8a48572c840fbc134628f698ac267d0eb5d52d37b1927ea10a15efbe12a926e22be39c4c6431b528fca59208b192939f1a4167d613d1fef58e30363112dcef611692353615a2bda0af0bdd5884045f748771b7c8ea5d82d31d048832995615bf68b51370d41a7e4db8cb3970066b6f9e9a55a7c8e41bff4a436ad7b0631250af307a0af8d0d72d7394421f4de5ac2918583f07d92c32d17098f20834ac2ba6bb39d504af6fe664be4e436ba30c885680d58a4ae70c680d553e15ac6c3d1f6b7a6ef99358c948a6c1b1db07c40d2a0b5c7b3c420ee63ee66117175b12ff259783f4cfa8bf5110b96e8417180cd8a413c23659033f8f1857e00df8de16041101a8166411c893af3f00b0596718fe76578301604d27f67ba625fae0e404293872f523b7496ddde4b09f33b7f7e3fcf6fe0d0ebe5eb603e5d8ed1ae18c654498b3db3c59aa51e8022ce90d6834108df0c73e886b49be39f60116ec2ac0e5540af3491ff4d6c526b6350bb5021933a79b4e102f3ff65f7bced45210bf5849a0188493798dc87f8b22ca1b104f5caa5018029bbf03afe7904dbfa0f5e1a2b74a196e0d153b7498b69986657c79bb1df1c9ed1dfe19d00de2040fd668ccedd62c775a9976aac1d9447d4045f499461a320443111bf56d8d7e1dadd1f4ca137c5796c2d7c8a015786a5fc5e7b9021eda74b575925d9d55683e1a940c55299046ac60d49fe05141a7f5280cade653bd2f19018121e18aca2ac846734e941b313242b9c41fa7c8d2058577aae640e8319710021cd89eb291ae0ad15ba292d45ebef0074386668123ed9961b13633043f54314c8f4fe8fc0036512fb088b6671e13d8481b5286e098cdcdf509473ee3c36c0cd218a81f4c2b8758a5573f21a5c12cdcce7e79f4cc8b5a9030f7d0f8a2c809db34b89ed5e063db518a18584c46806f863f7a192df439c5894eed6facd33927bbaa8df57ecd045ef6386ca46a05ab5573068955d21289a4286152c8a2a13df3429b16f4ee1d73a6f544c784b0cc49aa2c83b3738c25ee3d64ac9142131318f82981ae1a17d07941aa3bd05dd9c136cb061a71ae67614dc44ea2d9e350c0cd9dce03e0aa292b384e0f037e4bc392bffb4e847cf01b74e394736f08242a9ce03e5c4e163f5cead6b8446bd9c1fe9bfb31bca88511a74671e2bec33fe0b9aae1376303c979df69c0b305f042bf2e111b446533f4a6b3fac594e5903061e21e7f1c8a30cc1cb3d3078e48741a032723e7eda57fc83c6068ba086b08448af61988bd22dbdb8c3752828f40691e12b284080da18f0ff5f87f324cde7d7325c181560e5f4e7e028476b372bb8b64da996db88e31aef3acea54932b152b4422a6833853f0c217b895c8710473fcb36288faeadd0bc72f8f81b79cffc9c05fd8d30c769ac22f1e72773b0c7e8b234d8624b6cb6311978ec4568b692fda31a04cd795de2794f3376fc7376e30c85d7942b03d97f915289c5754eb057dcb504872e409acf1ff929698e5890161b12140fdef3d1838d41e25dfe0716241170a5392c31d766fe6313ae2aefdaeaffd53d0940949f18d9737a2aacb2111b6dc129e2812eb403446e655d5317e258eda59dfc57d1351c2d64e5074e485d98c06f35b5aec59baf8efc15866eef217c5dac6aad75f55d779c56662420d5b401bf0f19f5217f2d9395931def8f1f8b5847c8f052a8cdf942f567ba004e21c448067c5d2a3bd5cdac560495712f916dcebd06d6b65c767af15216e3c0b84212202356accac045004c612c4660470e593ed89e219ac1f547cfdda3c484b67b00096cd7993fa5a5ddd860d9e8d0c915aea5f6847d50a5283ea522e1d490a8151dc96911a261be4ed30da952b1d8b74c891fac193d5f83f2eb3d974b20523bdd3c7660e42635410073642b983393caf59b20d7ce8682c54fae87d8a57dfa243fcc2fd52d7372155d7e7bf9078e1ccd5046f21b95a5d61bbd1e78fb9c3d6704a141298fde37d09615d51ad10ec8eac5ebb3d1df8e0b559f6e88a77a074d2ffad60d4d58819a76482408c3a7c8edf41abce0f450c33b1cd6432363e6c4ed892f2b78d9b14acf0e8490cfb1f60229753d8eaab8df582c9fac7a54980442985b87bb41e47f415f8617e5025d2f1fdfa745e07b0626b547c7f310d5da65522b95e84a231716afc07da2d7562dc4b583fcdc21a22bc2132532c6713ec0e35004b78612585ff8bac697c8e8ad6da1545d6dfd2f3564f92457dae15cfcb3ca1c4ba9f4210c75bba216ca805b6c8760892257d5ec95252895bc9870adb6b47da48478fc718898c3e1d353fc233227d71c2c7a7dab22c8a5acb19e75eecd1fce82dcf36b7da813b7102cd426a67c3e721505bbcfa4c76c4b93ee06c477a9526cc36cb6e1ec0fc55284c7379766d5771a8db5781fd5b10d22959aeb1ae73ce24721f39aa62bc84ec58ab5cc3b9a5677c25c2240911184667f4f3726efb9aced16eb0967bd9b177b18050dcb554829d38419c8f74aa9279f90e9fec58b755c9ea38533f07d09e23a1540ba794710a46b7d7341aab573a26ad01702794b9c2a5b957ec5d22ea079b8a81f4d6108941d84c588c13458e3d10556df61231e43ea0f84851515b00f4f68cb95ff182fe1a95dd0007c92a84d5fe503dd3cd8bfd81b3a2b351de8d2d5f6020cb1d5523e5e76278e66755d9e9b278f1d4142887c3ac85509abbcc49f8b649bda581e6fdd58fc7662705b843fe49d543cf46fb0c701e41379927731890c1b284071d92f1747dbc4fa906727bc8d0ce783d9079c7735eebe2c9887d9b7ebf5862a9607a038895325f9c54ec0faed2dd3d46b50c1795a1342140fc326e1e24b0434b72fdd3cc4d48dfbefd5df53716cf709235a9d39ddff93ead149c3cd57f680212b5036e99439046791795ead6dfe330d405d90bc6a849b305b0c60d62e4d53b5af25870a0b5e105dcee40360d9594900c4aef9db5d2c11d76de448ff9ad85046a655890820a1092f643c5af63b05762e036df228f5cc0ea00b9664dcdb647684d45aefa01605dfffbf31ea1a7501b82521f49bd36d1f5977932e0b6fe6eb2039e3d91b6129a879b96719a9f3c4e05dc02222ffccca0cb682be2a4fb54c5a590653cef00c2399449cabfa4d2e2e3143ce0d0a49dcddfc59697f0953a93515d0c9672d03bfa96db5ca4902f584eaa4ab32ec348d9f059921b8d6c8ba3e9300e4f4014f8777f588856729bb82dbb95e96a812bde444d62731415896c7cb6336cf8bc05ae1f40f550a21905969a98e551925bc167b1e267670266b3c2f8a75acb3cdb30c993b02e246e7629bad825a84cca2fcc60540a6f8750b6736a19e8854715e0e900431f530b03ba0552ef2272a693a357bd0fe64bf549e5354b954d8651ab6d87cb512dd613981e1a65bd87f36448d974d967bda619b5ec581508a842db9c77292fd2fe0f1e4d248c786ef40fc41ffab06f75f4b293cfece7cd9a9433dabf3cf4a42e16617ecc70f40d28d15316e26433c7ed8276db489ba94cd2314203e05936f48a842f57acfeecc97fec0c433121bef994e780e6761771d9280e9868f03415c11d68b7c0ba2046b089ecbf73de963b206895c090227ee6b348ee6d1af087141c52c109b11c1a8805344c84aca98835cc227e2bd8192a97a11559f048fbf3d6c5ef4714c7045652c271ca859812f1e8485e34e550646aa898d8fcd6ec973c2ca02da1524f454d1468a130b7f6da4a8abc9e221991b9185742276e8a75b949a7c6565276926f617b20217531b626b1479392f9768a1848e528c7a25d2fbe3a32e47a1d9eabf5a32c8e239e3cd3e8e666c6e5a5c02c942b691b721b79142f855240f18005458913b297304beb95bbf61c17348ad74c7f86d642dadf18bc6328122ec84de076d73bb94af4224cc556ffa3f32b5c7ac7d0dedea3c8ee9f0fe16fb2740b2e6e1b7de8b210167614756b1264118dbe3420eb9cc541054f914fd91a853be3a12a0a5be123b8962b02aafac12cb1e931879f480cb0c29885aa91421c5971c7b85a887ca95aefefbfa3a476be3bafb549d92f5471e1f6aca1d9d4d826ea5fc7b7bc3cc20023d6536ee5406ec21b71ed8f146765cfba901ed59cafb2dff9aafd9373bbabbfaff1da0dbf1dd07ab058a8beba78f9222373c87b416d92567ada44c01de4004202bd4d70ee285e8b9b86efeaa5ef62680e4676a8e651b3d1e6aae639b1c4e79a7e583de5c10db7864261273d754e2abf5e47e4b79c970243c16d440a9e6f6b99eb94c9ce436195d7017aeb6f6695622f51c2f237fee93c7f2f76f13a7bc8eb5d574c97d7b2be0a91de2869bec13e0765b54ca44951d4b15fb79228ef3d0090e0aaee13586674b40ce272be597d72a5042ef5ead82fe20331b5b6361889339e35d62fafa4c9dbb20016ed58479fd0a0ee8382fe872894d98b7f59186d0994509a216be36b15b76a134752f58748debaa9b36bc4c188d5c782df6d32f6403082edd4eedda2814638e8ac1b28286b8ce54360c44acb55bb10a73fa09fbd86bfcf4ce4943e4d14535f7a9fd80e2911824fa9dadbba245d85658a2bc827423aea", 0xe00}, {&(0x7f00000000c0)="26fc4bcf8b00c19cd0eed8a91f7c36de44eed2752c4d27ee2e10986d2b", 0x1d}, {&(0x7f0000000280)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a47502b4207297de026ed4ea30bef60af76f2b26e1a2768a7226f918253314511129725d", 0x68}, {&(0x7f0000000200)}, {&(0x7f0000000240)="be1ac182feb197b37fadc7e8ad4b3a9a9b791e900ba3d6", 0x17}, {&(0x7f00000004c0)="91f0807b6afddf80750c5a560c2081f08de8a721aa5e3cfd5a6bc6cabda994bf8693656d03e1ecd9d468f2d4bb42292991d19fba6097597c9e6f16fdcb2b551f2bfeaaf98a60bc01df68984cf336e2d257b29840e3adfa847b5f420ea7b5e4d1545ae88f63dfbb3ecdfa6633997cbaaa79e2ada80941ed932cbd7a0b11325041f526151f6be00828495864ad9f61c009821728b246b5957891caf322b4a8c97874073ecf48e0cde8e05ba00619d7d90907550d123307265ef06a5ba4a640b82641a834e2684781e4b3e0a93e8d25795a7949e0864c40b8396a01a59b509e34ef484c938c3a677a072a4fba", 0xeb}, {0x0}], 0x8}, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x300}]}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) io_uring_setup(0x172b, &(0x7f0000000000)={0x0, 0xe69, 0x8000, 0x2, 0x155}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2m0.061863605s ago: executing program 3 (id=9010): madvise(&(0x7f000045f000/0x1000)=nil, 0x1000, 0xb) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x40088d4) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x198, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x184, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x400, 0x11e41e7a, 0x20000000, 0x8000000, 0x11}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x13c, 0x10, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x907}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x741}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x400, 0xffffffffdfffffff, 0x1, 0xf}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0xd1, 0x6, "baeeec7d419f2f5f2994df8ca7fe90fcb396e8826b4f0b640e7eba6a620d13ef5dd4d3aa582e7fcccc3bf0a7b50acdd7f54b47ec377aa08b32392176a4c726264f82cf3e2aca4fa7ee732080bb2f4f1b7b235f34bbed37c0a4469b183e735a7d64b031f00c3e743a2eaf48bcf9155cdfc03e6e5768ff4c37b7295460282ddb2a12fa62a4b21320f6e544638ede32dae11276a4213520f31db848ddd04df31e2b125afaceef99e50c62d8e9e989bc298c19ac96370e4d388527e8844db0a75a236f91ac8bf40b1826ce49a1391c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x810}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005, 0x4000010, r5, 0x4c1e1000) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff}) dup3(r7, r6, 0x0) 1m59.073876285s ago: executing program 3 (id=9012): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x11, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000280), 0x0, 0x1, 0x1}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x134, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@broadcast, 0x0, 0x6c}, @in6=@private1, {}, {0x0, 0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000240)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x890) 1m58.993380961s ago: executing program 3 (id=9014): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480007006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x48}}, 0x0) 1m58.993253527s ago: executing program 3 (id=9015): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r0 = socket$packet(0x11, 0x3, 0x300) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m58.943439594s ago: executing program 3 (id=9017): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) rt_sigaction(0x836, &(0x7f0000003ec0)={0x0, 0x50000009, 0x0, {[0x1, 0xb]}}, &(0x7f0000004280)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000042c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000003e80)=ANY=[@ANYRESDEC], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) fspick(0xffffffffffffff9c, 0x0, 0xf) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{&(0x7f0000000740)=@tipc, 0x80, &(0x7f00000009c0)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000840)=""/156, 0x9c}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000980)=""/60, 0x3c}], 0x5, &(0x7f0000000a00)=""/38, 0x26}, 0x4}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f00000011c0)=""/105, 0x69}, {&(0x7f0000000ac0)=""/189, 0xbd}, {&(0x7f0000000b80)=""/241, 0xf1}, {&(0x7f0000000c80)=""/62, 0x3e}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/215, 0xd7}, {&(0x7f0000000dc0)=""/47, 0x2f}, {&(0x7f0000000e00)=""/188, 0xbc}, {&(0x7f0000003e00)=""/64, 0xfffffffffffffe40}], 0x9, &(0x7f0000000f80)=""/157, 0x9d}, 0x4}, {{&(0x7f0000001040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003500)=[{&(0x7f00000010c0)=""/203, 0xcb}, {&(0x7f0000003f00)=""/201, 0xc9}, {&(0x7f0000003300)=""/9, 0x9}, {&(0x7f0000003340)=""/33, 0x21}, {&(0x7f0000003380)=""/44, 0x2c}, {&(0x7f00000033c0)=""/146, 0x92}, {&(0x7f0000003480)=""/120, 0x78}], 0x7, &(0x7f0000007080)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003540)=""/135, 0x87}, {&(0x7f0000003600)=""/135, 0x87}, {&(0x7f00000036c0)=""/210, 0xd2}, {&(0x7f00000037c0)=""/177, 0xb1}, {&(0x7f0000006080)=""/4087, 0xff7}, {&(0x7f0000003880)=""/124, 0x7c}, {&(0x7f0000003900)=""/233, 0xe9}, {&(0x7f0000003a00)=""/69, 0x45}], 0x8, &(0x7f0000003ac0)=""/244, 0xf4}, 0xe}], 0x4, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) capset(&(0x7f00000006c0)={0x19980330}, &(0x7f0000000700)={0x1, 0x2, 0x1, 0x80, 0x6, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x2, 0x16e, [0x0, 0x80000280, 0x800002b0, 0x8000046e], 0x0, 0x0, &(0x7f0000003c40)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000004200000000f676657468305f6d61637674617000000076657468305f746f5f6261746164760064766d7270300000000000000000000062617461647630000000000000000000c694288a98e3ff0000000000aaaaaaaaaaaaffff00ffff006e0000006e000000de0000006e666c6f670000000000000000000000000000000000000000000000000000004c000000040000000400c90b000000001c48da6c075ac4bddc84308cbac28980d6ec759ab884773382badf64769fbce01bc4b35e3c0f4b4a6566df961d08d0fd13d1136253276580f77c747e6e37972600000000000000000000c356e8c5009035f815c7c52acbfb000000000000000000000000000000000000000000000000000001000000ffffffff000000000000dd60936969eab4cdd4ebfee0983e601cf5eb883a08b28471"]}, 0x1d6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x3, 0x9}, {0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0x20, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x9}, {}, {0x3, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xe}}]}, 0x2c}}, 0x20040054) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file2\x00'}) setsockopt$MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e22, 0xd5, @private0, 0xffffa2ad}, {0xa, 0x4e24, 0x5, @private1, 0x7fffffff}, 0xffffffffffffffff, {[0x3, 0x88, 0x2, 0x81, 0x6, 0x40, 0x3, 0x1]}}, 0x5c) r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x40) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='lowerdir', &(0x7f0000000100)='\x00', 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r6) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="080026db7000fedbdf250e008000"], 0x14}, 0x1, 0x0, 0x0, 0x2080}, 0x1) r8 = syz_clone(0x21800000, &(0x7f0000000280)="a30aedfd9f53fe485413d3969c54c64cd944225411a9d374921dc36c3994", 0x1e, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f0000000440)="4eda4b97e240da89997aca7f9636523921047024f1d98f4a7d67b56d5901b99138b6a87d748e103938e019e041b471887ff47fe0dfce894637c72ac5ce4b9daa455852760648a905af7e096e795adaac15c849f1a1f611585348c9c76cfb1a103d307ed45dfb4ee2ea8ca443d38ef0e72591a7fcfff22c9ff39b94ed11663de220517736731390e7c253f2cde11a810e7d610692e68bb605dff9c941cc55ef4a5f41aec3818a1f18daff3e3af3fdfb4903de0fbf72c42c88441560d64973781fd8") prctl$PR_SCHED_CORE(0x3e, 0x4, r8, 0x2, &(0x7f00000003c0)) 1m58.758920805s ago: executing program 3 (id=9019): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x8, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7fff, 0x0, 0x0, 0x0, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20044800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, 0x1412, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004801}, 0x20048000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000842f6742edba04bf92074b0b000000000000000000000000850000010000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) 1m43.682710867s ago: executing program 44 (id=9019): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x8, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7fff, 0x0, 0x0, 0x0, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20044800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, 0x1412, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004801}, 0x20048000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000842f6742edba04bf92074b0b000000000000000000000000850000010000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) 4.112965358s ago: executing program 6 (id=9740): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000070000100000000000200000007000000", @ANYRES32=r1, @ANYBLOB="0c00018008"], 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) (fail_nth: 8) 4.112505256s ago: executing program 6 (id=9741): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xfb}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = inotify_init() syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/mnt\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12"], 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) fsync(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101182) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x19, 0x20, 0x200, &(0x7f0000000880)="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"}) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x1000000) 4.033056522s ago: executing program 6 (id=9742): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r4 = openat$kvm(0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x7, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x80000007, 0x4, 0x0, 0x10, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3, 0x7fffffff, 0x5, 0xffff}, {0xb, 0xe5f, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xd, 0x3, 0x7ff, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x1, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff}]}) syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) unshare(0x22020400) timerfd_create(0x9, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x100, 0x0, 0x10}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400}, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{0x0}], 0x1) 3.240881327s ago: executing program 5 (id=9751): pipe(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c000000ac7d0000030000000200000000000008"], 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) read$midi(r0, 0x0, 0x600) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 3.112952129s ago: executing program 5 (id=9753): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x7, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x80000007, 0x4, 0x0, 0x10, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3, 0x7fffffff, 0x5, 0xffff}, {0xb, 0xe5f, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xd, 0x3, 0x7ff, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x1, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff}]}) syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) unshare(0x22020400) timerfd_create(0x9, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x100, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.913248016s ago: executing program 6 (id=9754): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0) read$char_usb(r3, &(0x7f0000000100)=""/103, 0x67) tee(r1, r4, 0x8, 0x9) shutdown(r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {0x0}, {0x0}, {&(0x7f0000000400)=""/6, 0x6}], 0x4}}], 0x1, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0xfffffffd, 0x7}, 0xff14) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801c}, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYRES16=r7, @ANYBLOB="8b3327bd700000000000150000000800030074c10511296530db3e49b2ae8e87de9ef1d257c47eade14f8c32e52d75d2305af099cd054415621aa5e615b12ad4d0599d9e83ff5116ac861df4083afbf48a48bdfd6fa9849b1199a84e3212302bda258f2828965bf3384e9cf00a79b20adeff9899c477a5b990e45ebc05142ecdbea9af07e2", @ANYRES32=0x0, @ANYBLOB="0c009900fcffffff0000000024001d80200000801c000d801800030014000300060005002000e70091090400b5020400"], 0x4c}}, 0x24004080) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r7, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x55}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x3bc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1e}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x11a}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x48) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r7, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "ddd267879f0dbbe762c7da939319f2c9"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9ea7b79f3c52629a5b7455b5bf0fbe42"}, @NL80211_ATTR_SSID={0x7, 0x34, @random="0967df"}]}, 0x50}}, 0x801) 2.583125762s ago: executing program 6 (id=9758): r0 = socket$inet(0x2b, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000001a000000000000000000850000001700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x801, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FD={0x8}]}]}, 0x3c}}, 0x0) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000010300)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xc0) lseek(r8, 0x3, 0x0) getdents(r8, 0x0, 0x22) statx(r8, &(0x7f0000000180)='./file0\x00', 0x2000, 0x4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}) chown(&(0x7f0000000040)='./file0\x00', 0x0, r9) listen(r0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1) 2.461418927s ago: executing program 4 (id=9760): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=@profile={'stack ', 'GPL\x00'}, 0xa) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000000)={0x10, 0x1000f8, 0x20000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76", 0x1a) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xfffffc01, 0x8, 0x7, 0x10, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x29, 0xf2, 0x3, 0x0, 0x4c, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 2.362762086s ago: executing program 4 (id=9761): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_snmp6\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) eventfd2(0x0, 0x80800) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, &(0x7f0000000440)}) syz_clone3(&(0x7f0000000200)={0x100000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESOCT=r1], 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000000000000000000061d000008000300", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008e4740300", @ANYRES32=r8, @ANYBLOB="0a0034000202020202020000080026006c09000008002201f6010000"], 0x38}}, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff}) mq_timedsend(r0, &(0x7f0000000780)="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", 0x1000, 0xc, &(0x7f0000000340)) getpeername$packet(r9, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000200)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x1, r10}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)='O', 0x1}, {&(0x7f0000000380)="bee69d43baa1f2d39cfecf661fcf5b40b261112e6dbb21d437da64cce3626663806d5b971fb1629bbf79874315cee20f381c4be37859af4e29331d7c6f83ea9e502072e4de80c1cd716e70e03a4c70cfc77860806eb86fe48eeedc324a1b16314dc55c44e8aee878938bb2b8ffe6727d2b06c7a165593c916d9e556e5ae9a03ac7e2897be5122b1770aa8a37e3f1faa0006ead9b3fa6440486fd9db411979f", 0x9f}, {&(0x7f0000000280)="2f2b2c1d26f1e8a7f20a117ba6c17697a9d91e071547ff124a532ed044c34dd6571876ee38d23776be5052db1ea43514344cd349360d77897c5be95168b294eb53a2980edff39aa9bd4dbaf80080ad8c1d7de69e852baa8056368248b11f2891c174576949fbc35401fa8939fae3382ddc7d", 0x72}], 0x3}}], 0x1, 0x0) 2.1130849s ago: executing program 5 (id=9762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRESDEC], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)={0x40000}) 1.943153687s ago: executing program 5 (id=9763): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x3f00, 0x4, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1.561371954s ago: executing program 7 (id=9765): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x500, 0x0) epoll_create1(0x0) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x640) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x100, 0x7fffffff}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES8=r7], 0x102) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000000000800c00"], 0x34}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x0, 0x0, 0x24}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r10, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) 1.552290319s ago: executing program 4 (id=9766): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0) read$char_usb(r3, &(0x7f0000000100)=""/103, 0x67) tee(r1, r4, 0x8, 0x9) shutdown(r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {0x0}, {0x0}, {&(0x7f0000000400)=""/6, 0x6}], 0x4}}], 0x1, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0xfffffffd, 0x7}, 0xff14) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801c}, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYRES16=r7, @ANYBLOB="8b3327bd700000000000150000000800030074c10511296530db3e49b2ae8e87de9ef1d257c47eade14f8c32e52d75d2305af099cd054415621aa5e615b12ad4d0599d9e83ff5116ac861df4083afbf48a48bdfd6fa9849b1199a84e3212302bda258f2828965bf3384e9cf00a79b20adeff9899c477a5b990e45ebc05142ecdbea9af07e2", @ANYRES32=0x0, @ANYBLOB="0c009900fcffffff0000000024001d80200000801c000d801800030014000300060005002000e70091090400b5020400"], 0x4c}}, 0x24004080) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r7, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x55}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x3bc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1e}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x11a}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x48) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r7, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "ddd267879f0dbbe762c7da939319f2c9"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9ea7b79f3c52629a5b7455b5bf0fbe42"}, @NL80211_ATTR_SSID={0x7, 0x34, @random="0967df"}]}, 0x50}}, 0x801) 1.277109947s ago: executing program 7 (id=9767): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x255a7000) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = userfaultfd(0x80001) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40106435, &(0x7f0000000d00)) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4b, &(0x7f00000003c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x56e2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5583}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x79, &(0x7f0000000240)=""/121, 0x40f00, 0x20, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000100)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[r1, r1, r1, r1, r1], &(0x7f0000000640)=[{0x1, 0x4, 0x9, 0xa}, {0x2, 0x2, 0xd, 0x7}, {0x2, 0xd70f, 0xa, 0x3}, {0x3, 0x2, 0x10, 0xc}, {0x9, 0x1, 0x5, 0xd}, {0x1, 0x1, 0x9, 0xa}], 0x10, 0x0, @void, @value}, 0x94) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000a00)="28fd21981f237e24da7a9986c269ae53ec9adb7ca57723dee52f71d1474cabe8d10e5ad5352a0b6aa86dc5143bb0491c396edd4e6fbb3612f39784782d9a9ce17bca57171e6a1ade0594f61af3031ea8e0de1e22773f162070cf9dd22cfc68cd6688080e7a3edda65edac2662b8325f52addb36147657a539db9df6861ddec14d44320b09035adc3a1fdf7ba540078f6e872c9714dbd54402edee24a66799faef3c86bb0abf4e10d0c62241c1056b97d0e5b56c6d376b65620c8808ca2a9dba92aead1ac9b65fe03b874a6d55d3a05513a17db915c502906bdd7b687", 0xdc}, {&(0x7f0000000b00)="b4ab664320dd59f6cf86b2c3f1cc91c6fddb30a12861d976b8d33c0af8f8dc9bf2c4c0ac8fdc58069a3cde5f372c21ff3218c3e36833883f54e62462266bb67663f9114c1c7602387b73d75a1d869af3bc67825f5b3a17ed7d06a064f963841ed0bcbecd6750022f4dafd5b5de751b4baae33389dbc145174b77ba3e46712fa1fb926a02f5711c855b82ea626948027d23403727253a63743f0870a590eb54edc7356d49506fee05c43ff29eb57fb5b115f782801186f986fd698fa4539454b5986bc0318a65a174a040c4abf7911a34dcb8276367dbc84b6eb49d0a78aaa4e3a7f23d4a6759496890ce150454f45f86", 0xf0}, {&(0x7f0000000c00)="cadf9bde76bf9e7c3dd59d99558cd9e67e0489180868c256615f6cd39b7916eccdc4b5accd31a98f5ca1598a27c67e9b863b5d15bf66e2f029295462cb5e0ef9d81194fd6ad771d3de5a34972c", 0x4d}, {&(0x7f0000000c80)="48127da305efdf14dec99542243cb6a64cd0726a3f217de8f455f876ae3667930f87b2634515cec59db197889eaa31f8bb7d838e57b86c20814743fff773a805cca8ff3f6af2c5104101b0", 0x4b}], 0x4, 0x2) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000780)={r4, 0x0, 0xe6, 0x0, &(0x7f0000000840)="2ff5f05dd721149740282b590a1c81dd3ca0f073a2d6a1da49c8c27daf96eb0dc8ecf5fcd4b11e8fa513b839fc8ffdcdaa334b53dfa9eb5ce75540c6808f9aa83b9ae5469b691bd5c149e78de5f30db5a624b241fa5cc05895f22bacb453a6117fb0510165e1c2719bf8f7334f496e87a0845e8a019374169ce11d59fdeeb10e01b8be83a927ad3099b5aa4f563b9eddea8923d64ea54544627992cc75d581ba72d09e1d2ce835616212cacd85286aa140426b9c0da79f49ec54e4d51754d328e3ae3df1d5695050a5eda75cdaffb41f75d8bec1f354b74bff95cc1446b3ba3d0a349afc2a1d", 0x0, 0x1, 0x0, 0x8d, 0x0, &(0x7f0000000940)="948cee752eee109375f1da78f53bd367bcdc93f423df0eee4311c09bc3c92fc73c1a8787ab6629f8bcb83fbb9989a9e50f17886141668195ce733bd908aadd67bd950081bf569a34b3e6f02a1ded1f5c69eec21b351865052112d0d69600fafd6b0b21ea33852f156f7caf8b2eb9676fd66ec652ac3b8355f43de901741dfbdaef1343ab2c8c2857292d2851bf", 0x0, 0x2, 0x0, 0x2}, 0x4c) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(r2, r5, 0x0) 1.107031431s ago: executing program 5 (id=9768): bpf$MAP_CREATE(0x80010000, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000040000000400000002"], 0x50) 1.104257387s ago: executing program 4 (id=9769): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=@profile={'stack ', 'GPL\x00'}, 0xa) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000000)={0x10, 0x1000f8, 0x20000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76", 0x1a) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xfffffc01, 0x8, 0x7, 0x10, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x29, 0xf2, 0x3, 0x0, 0x4c, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 1.042001481s ago: executing program 5 (id=9770): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x500, 0x0) epoll_create1(0x0) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x640) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x100, 0x7fffffff}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES8=r7], 0x102) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000000000800c00"], 0x34}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x0, 0x0, 0x24}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r10, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) 1.003357577s ago: executing program 4 (id=9771): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) rt_sigaction(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380)) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="081f000090"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$pvfs2(&(0x7f00000001c0), 0x0, 0x0, 0x20, &(0x7f0000000280)={[{'rng\x00'}, {'\x00'}, {'#'}], [{@smackfsroot={'smackfsroot', 0x3d, '++'}}]}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, '\x00', @raw_data=[0x9, 0x6, 0x1, 0xd, 0x7, 0x81, 0x2, 0xe, 0xf, 0x5, 0xa2ef, 0x4, 0x3, 0x1000, 0x2876, 0x2337, 0xffffff7f, 0x6, 0x7, 0x7fffffff, 0x0, 0x4, 0x7fffffff, 0x80, 0x3, 0x8, 0x5, 0xfffffffb, 0x400, 0x6, 0x0, 0x6375]}) 944.304715ms ago: executing program 7 (id=9772): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="35000e0080000000080211000000080211000000080211000000000000000082d473d7b7c2fc5e09106307f0037206030303030303000000080026006c0900009e0000100008000d00ffffffff000000"], 0x6c}}, 0x20000014) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000040)) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r9=>0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a6970"], 0x64}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000010000305000000120000000000000000", @ANYRES32=0x0, @ANYBLOB="c088010000000000300012800c0001006d6163766c2f300020000280080001001000000008000300ffffffffffff0000080005000000000000000000", @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB], 0x60}}, 0x0) 662.708373ms ago: executing program 7 (id=9773): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELOBJ={0x104, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xd5, 0x8, "5d03c8434cf1f7d58e4c8ff884536b616d2d8cbbc671cfc30bc8281f73830281562b7242793338c9df2543f190f0519fea458e1be52c46d2a87f40d5a3c15143b19d284fb6aee1efe00b946f6fdb6bcbd5c735ccf8ebd5cc26d9fa4c650754203793e9d67065ee4bb280943e8f0a4c851c421093ddb35caeefc3cc3236a0608441c46aedbe07dcf8d4d81322041e92a82ecc081289c7bf5c25efc44f9d09bc58fc34c19f55b9eef06d0dc77d9e5f33b2270d9e5182881d04626f617bdcd6d6ba09e7170d30f2e03055548aeb0e37e8b8a9"}]}], {0x14}}, 0x12c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4000005) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r3 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) dup(0xffffffffffffffff) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async, rerun: 32) chdir(&(0x7f0000000080)='./file1\x00') (async, rerun: 32) setpgid(0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x8000, 0x0) (async) sendmsg$802154_dgram(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x78, &(0x7f0000000300)={0x0}, 0x7, 0x0, 0x0, 0x41}, 0x48015) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) (async) close_range(r0, r1, 0x0) 503.122611ms ago: executing program 7 (id=9774): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4018aee2, &(0x7f0000000400)) pipe(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c000000ac7d0000030000000200000000000008"], 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) read$midi(r3, 0x0, 0x600) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) 502.756836ms ago: executing program 6 (id=9775): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x1, 0x3, 0xa, 0x2, 0x3}, 0x20) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) openat$vmci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x3f00, 0x4, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000000)={{0x7, 0x1}, {0x2, 0x9}, 0x7fffffff, 0x1, 0x9}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0x19, r4, 0x80000001, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x12c, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x118, 0x1, [@m_ct={0xc0, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x7e, 0x6, "45f43c86263fff0bd8fb53f0504ad4fa79dbd2d184868fcd4a7e5fb5d7edfecbd38e5d121622d7f947ab1978fb7d0c401a47e703ea0dcab9f671b058acf110ad37e77fe6f81ce905e3588e35c8e1de68a0d56f6c977e184bfad79bd0444b37ec699f8c9816a30f1a6364ce041e67d24b37759cd69d9fa312060b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xd370}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) dup2(r6, r6) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 500.547258ms ago: executing program 7 (id=9776): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x7, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x80000007, 0x4, 0x0, 0x10, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3, 0x7fffffff, 0x5, 0xffff}, {0xb, 0xe5f, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xd, 0x3, 0x7ff, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x1, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff}]}) syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) unshare(0x22020400) timerfd_create(0x9, 0x0) pselect6(0x0, 0x0, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400}, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 4 (id=9777): r0 = socket$inet6(0xa, 0x4, 0x1) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) socket$inet_dccp(0x2, 0x6, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x7ccc1, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f00005fa000/0x3000)=nil, 0x3000, 0xb635773f06ebbeeb, 0x10, 0xffffffffffffffff, 0xb3704000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind$802154_dgram(r1, &(0x7f0000000200)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) kernel console output (not intermixed with test programs): pfkey_add+0x10/0x10 [ 2055.772961][ T8985] ? kfree_skbmem+0x1a4/0x1f0 [ 2055.772976][ T8985] ? sk_skb_reason_drop+0x136/0x1a0 [ 2055.772988][ T8985] ? pfkey_broadcast+0x2ab/0x460 [ 2055.773000][ T8985] ? __pfx_pfkey_add+0x10/0x10 [ 2055.773012][ T8985] pfkey_process+0x6db/0x840 [ 2055.773025][ T8985] ? __pfx_pfkey_process+0x10/0x10 [ 2055.773046][ T8985] ? __virt_addr_valid+0x5e/0x590 [ 2055.773057][ T8985] ? __phys_addr_symbol+0x30/0x80 [ 2055.773071][ T8985] pfkey_sendmsg+0x43b/0x840 [ 2055.773085][ T8985] ____sys_sendmsg+0xaaf/0xc90 [ 2055.773099][ T8985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2055.773111][ T8985] ? get_compat_msghdr+0x11b/0x170 [ 2055.773131][ T8985] ___sys_sendmsg+0x135/0x1e0 [ 2055.773149][ T8985] ? __pfx____sys_sendmsg+0x10/0x10 [ 2055.773171][ T8985] ? __pfx_lock_release+0x10/0x10 [ 2055.773186][ T8985] ? trace_lock_acquire+0x14e/0x1f0 [ 2055.773203][ T8985] ? __fget_files+0x206/0x3a0 [ 2055.773223][ T8985] __sys_sendmsg+0x16e/0x220 [ 2055.773240][ T8985] ? __pfx___sys_sendmsg+0x10/0x10 [ 2055.773265][ T8985] __do_fast_syscall_32+0x73/0x120 [ 2055.773282][ T8985] do_fast_syscall_32+0x32/0x80 [ 2055.773301][ T8985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2055.773325][ T8985] RIP: 0023:0xf73ae579 [ 2055.773337][ T8985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2055.773351][ T8985] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2055.773366][ T8985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 2055.773376][ T8985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2055.773386][ T8985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2055.773395][ T8985] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2055.773404][ T8985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2055.773423][ T8985] </TASK> [ 2055.773429][ T8985] Mem-Info: [ 2055.888052][ T8985] active_anon:5054 inactive_anon:1801 isolated_anon:0 [ 2055.888052][ T8985] active_file:4189 inactive_file:5483 isolated_file:0 [ 2055.888052][ T8985] unevictable:1776 dirty:108 writeback:0 [ 2055.888052][ T8985] slab_reclaimable:11815 slab_unreclaimable:101822 [ 2055.888052][ T8985] mapped:21413 shmem:8210 pagetables:728 [ 2055.888052][ T8985] sec_pagetables:343 bounce:0 [ 2055.888052][ T8985] kernel_misc_reclaimable:0 [ 2055.888052][ T8985] free:29355 free_pcp:1640 free_cma:0 [ 2055.908090][ T8985] Node 0 active_anon:2112kB inactive_anon:40kB active_file:108kB inactive_file:6144kB unevictable:3580kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:6008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8448kB pagetables:708kB sec_pagetables:1212kB all_unreclaimable? yes [ 2055.916651][ T8985] Node 1 active_anon:20604kB inactive_anon:7164kB active_file:16748kB inactive_file:12488kB unevictable:3524kB isolated(anon):0kB isolated(file):0kB mapped:85736kB dirty:432kB writeback:0kB shmem:29232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3456kB pagetables:2204kB sec_pagetables:160kB all_unreclaimable? no [ 2055.925393][ T8985] Node 0 DMA free:2404kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 2055.933624][ T8985] lowmem_reserve[]: 0 294 294 294 294 [ 2055.935277][ T8985] Node 0 DMA32 free:15600kB boost:0kB min:13560kB low:16948kB high:20336kB reserved_highatomic:2048KB active_anon:2112kB inactive_anon:40kB active_file:108kB inactive_file:6068kB unevictable:3580kB writepending:0kB present:1032196kB managed:301720kB mlocked:60kB bounce:0kB free_pcp:2496kB local_pcp:216kB free_cma:0kB [ 2055.944385][ T8985] lowmem_reserve[]: 0 0 0 0 0 [ 2055.946099][ T8985] Node 1 DMA32 free:93552kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB active_anon:24304kB inactive_anon:7164kB active_file:16748kB inactive_file:12488kB unevictable:3524kB writepending:432kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:6860kB local_pcp:724kB free_cma:0kB [ 2055.954614][ T8985] lowmem_reserve[]: 0 0 0 0 0 [ 2055.955978][ T8985] Node 0 DMA: 35*4kB (UE) 31*8kB (UE) 12*16kB (UE) 9*32kB (UE) 4*64kB (UE) 2*128kB (E) 0*256kB 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 2404kB [ 2055.959964][ T8985] Node 0 DMA32: 42*4kB (UEH) 134*8kB (UMEH) 281*16kB (UMEH) 226*32kB (UMEH) 54*64kB (UMEH) 5*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17064kB [ 2055.964344][ T8985] Node 1 DMA32: 47*4kB (UME) 94*8kB (UEH) 710*16kB (UMEH) 262*32kB (UMEH) 176*64kB (UME) 134*128kB (UMEH) 75*256kB (UME) 33*512kB (UM) 8*1024kB (M) 0*2048kB 0*4096kB = 93388kB [ 2055.969154][ T8985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2055.971851][ T8985] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2055.975201][ T8985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2055.978430][ T8985] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2055.981089][ T8985] 19861 total pagecache pages [ 2055.982398][ T8985] 268 pages in swap cache [ 2055.983644][ T8985] Free swap = 60332kB [ 2055.984779][ T8985] Total swap = 124996kB [ 2055.985941][ T8985] 524155 pages RAM [ 2055.987006][ T8985] 0 pages HighMem/MovableOnly [ 2055.988314][ T8985] 207822 pages reserved [ 2055.989471][ T8985] 0 pages cma reserved [ 2056.159731][ T8998] lo speed is unknown, defaulting to 1000 [ 2056.225875][ T9018] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9067'. [ 2056.627199][ T9035] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2056.629121][ T9035] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2056.631067][ T9035] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2056.633080][ T9035] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2056.635064][ T9035] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2056.636916][ T9035] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2056.974558][ T9043] netlink: 'syz.6.9073': attribute type 10 has an invalid length. [ 2056.986341][ T9043] team0: Port device netdevsim0 added [ 2056.993772][ T9043] netlink: 'syz.6.9073': attribute type 10 has an invalid length. [ 2057.004968][ T9043] team0: Port device netdevsim0 removed [ 2057.012378][ T9043] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2057.320827][ T9048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9075'. [ 2057.348299][ T9048] lo speed is unknown, defaulting to 1000 [ 2057.385284][ T9055] netlink: 'syz.4.9075': attribute type 1 has an invalid length. [ 2057.967569][ T9090] ptrace attach of "/syz-executor exec"[7259] was attempted by "/syz-executor exec"[9090] [ 2059.132679][ T9112] xt_hashlimit: invalid rate [ 2059.638785][ T9117] 9pnet_fd: Insufficient options for proto=fd [ 2059.649670][ T9117] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 2059.651432][ T9117] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2059.656042][ T9117] vhci_hcd vhci_hcd.0: Device attached [ 2059.663545][ T9120] vhci_hcd: connection closed [ 2059.663840][ T1135] vhci_hcd: stop threads [ 2059.668881][ T1135] vhci_hcd: release socket [ 2059.670568][ T1135] vhci_hcd: disconnect device [ 2059.997543][ T9130] netlink: 'syz.5.9087': attribute type 10 has an invalid length. [ 2060.002819][ T9130] team0: Port device netdevsim0 added [ 2060.007461][ T9130] netlink: 'syz.5.9087': attribute type 10 has an invalid length. [ 2060.015169][ T9130] team0: Port device netdevsim0 removed [ 2060.150932][ T77] Bluetooth: (null): Invalid header checksum [ 2060.154161][ T77] Bluetooth: (null): Invalid header checksum [ 2061.387771][ T9150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9093'. [ 2062.075941][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2062.084467][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2062.087316][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2062.089581][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2062.091998][ T5814] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2062.094040][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2062.189736][ T9177] lo speed is unknown, defaulting to 1000 [ 2062.286160][ T40] audit: type=1400 audit(2062.652:1624): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="TIPC" pid=9152 comm="syz.4.9094" [ 2062.365960][ T9177] chnl_net:caif_netlink_parms(): no params data found [ 2062.483310][T23019] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2062.527376][ T1146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.599834][ T9177] bridge0: port 1(bridge_slave_0) entered blocking state [ 2062.602540][ T9177] bridge0: port 1(bridge_slave_0) entered disabled state [ 2062.605026][ T9177] bridge_slave_0: entered allmulticast mode [ 2062.607819][ T9177] bridge_slave_0: entered promiscuous mode [ 2062.612904][ T9177] bridge0: port 2(bridge_slave_1) entered blocking state [ 2062.615443][ T9177] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.618041][ T9177] bridge_slave_1: entered allmulticast mode [ 2062.628255][ T9177] bridge_slave_1: entered promiscuous mode [ 2062.698401][ T1146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.705787][ T9499] netlink: 'syz.4.9099': attribute type 10 has an invalid length. [ 2062.715960][ T9499] team0: Port device netdevsim0 added [ 2062.719964][ T9499] netlink: 'syz.4.9099': attribute type 10 has an invalid length. [ 2062.816669][ T9499] team0: Port device netdevsim0 removed [ 2062.828943][ T9177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2062.856850][ T1146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.868208][ T9177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2063.031079][ T1146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2063.050350][ T9177] team0: Port device team_slave_0 added [ 2063.054212][ T9177] team0: Port device team_slave_1 added [ 2063.115279][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2063.117337][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2063.129821][ T9177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2063.138098][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2063.140004][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2063.146802][ T9177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2063.196794][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9102'. [ 2063.235326][ T9177] hsr_slave_0: entered promiscuous mode [ 2063.237434][ T9177] hsr_slave_1: entered promiscuous mode [ 2063.239368][ T9177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2063.242400][ T9177] Cannot create hsr debugfs directory [ 2063.321149][ T1146] bridge_slave_1: left allmulticast mode [ 2063.322791][ T1146] bridge_slave_1: left promiscuous mode [ 2063.324719][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 2063.342721][ T1146] bridge_slave_0: left allmulticast mode [ 2063.344921][ T1146] bridge_slave_0: left promiscuous mode [ 2063.347069][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.681818][ T40] audit: type=1400 audit(2064.052:1625): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=10218 comm="syz.4.9105" [ 2063.755261][ T1146] IPVS: stopping master sync thread 4976 ... [ 2063.790405][ T2011] usb 11-1: new high-speed USB device number 105 using dummy_hcd [ 2063.829291][T10232] lo speed is unknown, defaulting to 1000 [ 2063.962055][ T2011] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2063.965722][ T2011] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2063.968975][ T2011] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2063.982238][ T2011] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2063.985728][ T2011] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.988423][ T2011] usb 11-1: Product: syz [ 2063.989718][ T2011] usb 11-1: Manufacturer: syz [ 2064.001372][ T2011] usb 11-1: SerialNumber: syz [ 2064.003719][ T2011] usb 11-1: config 0 descriptor?? [ 2064.110628][ T1146] hsr_slave_0: left promiscuous mode [ 2064.112513][ T1146] hsr_slave_1: left promiscuous mode [ 2064.114258][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2064.116324][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2064.118857][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2064.157793][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2064.160703][T23019] Bluetooth: hci5: command tx timeout [ 2064.214443][ T1146] veth0_macvtap: left promiscuous mode [ 2064.216707][ T1146] veth1_vlan: left promiscuous mode [ 2064.218501][ T1146] veth0_vlan: left promiscuous mode [ 2064.220786][ T2011] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2064.424839][ T5798] usb 11-1: USB disconnect, device number 105 [ 2065.789187][T23019] Bluetooth: unknown link type 108 [ 2065.791057][T23019] Bluetooth: hci2: connection err: -111 [ 2066.246597][T23019] Bluetooth: hci5: command tx timeout [ 2066.409794][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 2066.545377][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 2066.896939][T10318] netlink: 'syz.4.9112': attribute type 10 has an invalid length. [ 2066.951107][T10320] netlink: 'syz.4.9112': attribute type 10 has an invalid length. [ 2067.550379][T10297] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 2067.747986][T10311] team0 (unregistering): Port device team_slave_0 removed [ 2067.758506][T10311] team0 (unregistering): Port device team_slave_1 removed [ 2067.776020][T10318] team0: Port device netdevsim0 added [ 2067.779848][T10320] team0: Port device netdevsim0 removed [ 2067.905572][T10367] netlink: 'syz.5.9113': attribute type 4 has an invalid length. [ 2067.932292][ T9177] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2067.940954][ T9177] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2067.948258][ T9177] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2067.957311][ T9177] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2068.017239][ T9177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2068.036291][ T9177] 8021q: adding VLAN 0 to HW filter on device team0 [ 2068.040777][ T1970] bridge0: port 1(bridge_slave_0) entered blocking state [ 2068.042853][ T1970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2068.047645][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.049625][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2068.064185][ T9177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2068.067533][ T9177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2068.177148][T10376] netlink: 'syz.4.9114': attribute type 10 has an invalid length. [ 2068.230512][T10380] netlink: 'syz.4.9114': attribute type 10 has an invalid length. [ 2068.275812][T10376] team0: Port device netdevsim0 added [ 2068.281973][T10380] team0: Port device netdevsim0 removed [ 2068.320751][T23019] Bluetooth: hci5: command tx timeout [ 2068.337109][ T9177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2068.410501][T10388] netlink: 'syz.6.9115': attribute type 4 has an invalid length. [ 2068.464825][ T9177] veth0_vlan: entered promiscuous mode [ 2068.468725][ T9177] veth1_vlan: entered promiscuous mode [ 2068.491548][ T9177] veth0_macvtap: entered promiscuous mode [ 2068.497464][ T9177] veth1_macvtap: entered promiscuous mode [ 2068.505853][ T9177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2068.509513][ T9177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2068.551534][ T9177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2068.555219][ T9177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2068.559833][ T9177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2068.580302][ T9177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2068.583909][ T9177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2068.587388][ T9177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2068.598733][ T9177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2068.602850][ T9177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2068.611223][ T9177] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.614316][ T9177] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.617168][ T9177] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.619664][ T9177] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.751682][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2068.754740][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2068.800281][T23509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2068.802451][T23509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2068.827675][T10406] lo speed is unknown, defaulting to 1000 [ 2069.124299][ T40] audit: type=1326 audit(2069.492:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10441 comm="syz.7.9119" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x0 [ 2069.323594][T10451] netlink: 'syz.6.9121': attribute type 10 has an invalid length. [ 2069.331136][T10451] bond0: (slave netdevsim0): Releasing backup interface [ 2069.338369][T10451] netlink: 'syz.6.9121': attribute type 10 has an invalid length. [ 2069.347257][T10451] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2069.544687][T10456] 9pnet: p9_errstr2errno: server reported unknown error �@� [ 2069.678045][T10461] program syz.7.9119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2070.106926][ T40] audit: type=1400 audit(2070.472:1627): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=10471 comm="syz.4.9127" [ 2070.192436][T10478] netlink: 'syz.7.9124': attribute type 10 has an invalid length. [ 2070.201952][T10478] team0: Port device netdevsim0 added [ 2070.212506][T10478] netlink: 'syz.7.9124': attribute type 10 has an invalid length. [ 2070.225760][T10478] team0: Port device netdevsim0 removed [ 2070.231666][T10478] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2070.282334][T10481] lo speed is unknown, defaulting to 1000 [ 2070.419226][T23019] Bluetooth: hci5: command tx timeout [ 2071.610380][T10531] Invalid logical block size (5) [ 2071.689811][ T40] audit: type=1400 audit(2072.052:1628): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=10539 comm="syz.6.9137" [ 2071.745555][T10546] lo speed is unknown, defaulting to 1000 [ 2072.334248][T10603] netlink: 'syz.4.9142': attribute type 10 has an invalid length. [ 2072.340135][T10603] team0: Port device netdevsim0 added [ 2072.350030][T10603] netlink: 'syz.4.9142': attribute type 10 has an invalid length. [ 2072.358588][T10603] team0: Port device netdevsim0 removed [ 2072.518079][ T40] audit: type=1400 audit(2072.882:1629): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=10607 comm="syz.7.9147" [ 2072.710348][T10616] lo speed is unknown, defaulting to 1000 [ 2073.596853][ T4317] usb 11-1: new high-speed USB device number 106 using dummy_hcd [ 2073.607311][T10678] netlink: 'syz.5.9156': attribute type 4 has an invalid length. [ 2073.609852][ T40] audit: type=1400 audit(2073.972:1630): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=10679 comm="syz.4.9158" [ 2073.703824][T10690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9161'. [ 2073.763279][ T4317] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.785937][ T4317] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2073.791994][ T4317] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2073.795452][ T4317] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.803432][ T4317] usb 11-1: config 0 descriptor?? [ 2073.825479][T10688] netlink: 'syz.7.9160': attribute type 10 has an invalid length. [ 2073.828904][T10688] macvlan0: entered promiscuous mode [ 2073.830516][T10688] macvlan0: entered allmulticast mode [ 2073.833721][T10688] veth1_vlan: entered allmulticast mode [ 2073.837960][T10688] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 2073.865861][T10700] lo speed is unknown, defaulting to 1000 [ 2074.239725][ T4317] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 2074.269526][ T4317] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0926:3333.0011/input/input39 [ 2074.362955][ T4317] keytouch 0003:0926:3333.0011: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 2074.421935][T10664] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9155'. [ 2074.439630][ T5798] usb 11-1: USB disconnect, device number 106 [ 2074.808769][T10785] lo speed is unknown, defaulting to 1000 [ 2074.849747][T10794] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9172'. [ 2074.882028][T10815] netlink: 'syz.7.9168': attribute type 10 has an invalid length. [ 2074.894341][T10815] bond0: (slave netdevsim0): Releasing backup interface [ 2074.902324][T10815] team0: Port device netdevsim0 added [ 2074.907364][T10815] netlink: 'syz.7.9168': attribute type 10 has an invalid length. [ 2074.915292][T10815] team0: Port device netdevsim0 removed [ 2074.922959][T10815] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2075.122407][ T40] audit: type=1400 audit(2075.492:1631): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=10819 comm="syz.4.9176" [ 2075.470168][T12487] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 2075.600153][T12487] usb 9-1: device descriptor read/64, error -71 [ 2075.632736][T10841] efs: device does not support 512 byte blocks [ 2075.634476][T10841] device does not support 512 byte blocks [ 2075.634476][T10841] [ 2075.840290][T12487] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 2075.977333][T12487] usb 9-1: device descriptor read/64, error -71 [ 2076.092555][T12487] usb usb9-port1: attempt power cycle [ 2076.118645][T10865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9182'. [ 2076.257731][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9184'. [ 2076.440172][T12487] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2076.471123][T12487] usb 9-1: device descriptor read/8, error -71 [ 2076.556866][T10877] netlink: 'syz.5.9185': attribute type 10 has an invalid length. [ 2076.561738][T10877] team0: Port device netdevsim0 added [ 2076.569625][T10877] netlink: 'syz.5.9185': attribute type 10 has an invalid length. [ 2076.645914][T10877] team0: Port device netdevsim0 removed [ 2076.710142][T12487] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2076.733334][T12487] usb 9-1: device descriptor read/8, error -71 [ 2076.942866][T12487] usb usb9-port1: unable to enumerate USB device [ 2077.055410][T10885] netlink: 'syz.7.9186': attribute type 10 has an invalid length. [ 2077.075764][T10885] bond0: (slave netdevsim0): Releasing backup interface [ 2077.086637][T10885] team0: Port device netdevsim0 added [ 2077.091362][T10885] netlink: 'syz.7.9186': attribute type 10 has an invalid length. [ 2077.107316][T10885] team0: Port device netdevsim0 removed [ 2077.113021][T10885] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2077.425859][ T40] audit: type=1400 audit(2077.792:1632): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=10890 comm="syz.5.9189" [ 2077.440142][T10892] siw: device registration error -23 [ 2077.626345][T10905] gtp0: entered promiscuous mode [ 2077.627859][T10905] gtp0: entered allmulticast mode [ 2077.951263][T10914] netlink: 'syz.5.9193': attribute type 10 has an invalid length. [ 2077.956551][T10914] team0: Port device netdevsim0 added [ 2077.972482][T10914] netlink: 'syz.5.9193': attribute type 10 has an invalid length. [ 2077.991979][T10914] team0: Port device netdevsim0 removed [ 2078.435030][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9195'. [ 2078.799560][ T40] audit: type=1400 audit(2079.162:1633): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=10934 comm="syz.5.9198" [ 2078.808830][T10935] siw: device registration error -23 [ 2079.985888][T10970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9208'. [ 2080.060474][T10972] netlink: 'syz.7.9207': attribute type 4 has an invalid length. [ 2080.375825][ T40] audit: type=1400 audit(2080.742:1634): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=10977 comm="syz.6.9211" [ 2080.399703][T10978] siw: device registration error -23 [ 2080.576993][T10992] FAULT_INJECTION: forcing a failure. [ 2080.576993][T10992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2080.580680][T10992] CPU: 2 UID: 0 PID: 10992 Comm: syz.5.9215 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2080.580694][T10992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2080.580701][T10992] Call Trace: [ 2080.580705][T10992] <TASK> [ 2080.580709][T10992] dump_stack_lvl+0x16c/0x1f0 [ 2080.580728][T10992] should_fail_ex+0x50a/0x650 [ 2080.580741][T10992] _copy_from_user+0x2e/0xd0 [ 2080.580754][T10992] ucma_write+0x129/0x330 [ 2080.580769][T10992] ? __pfx_ucma_write+0x10/0x10 [ 2080.580783][T10992] ? bpf_lsm_file_permission+0x9/0x10 [ 2080.580800][T10992] ? security_file_permission+0x71/0x210 [ 2080.580816][T10992] ? rw_verify_area+0xcf/0x680 [ 2080.580831][T10992] ? __pfx_ucma_write+0x10/0x10 [ 2080.580844][T10992] vfs_write+0x24c/0x1150 [ 2080.580860][T10992] ? __fget_files+0x1fc/0x3a0 [ 2080.580876][T10992] ? __pfx_lock_release+0x10/0x10 [ 2080.580892][T10992] ? __pfx_vfs_write+0x10/0x10 [ 2080.580907][T10992] ? lock_acquire+0x2f/0xb0 [ 2080.580921][T10992] ? __fget_files+0x40/0x3a0 [ 2080.580939][T10992] ? __fget_files+0x206/0x3a0 [ 2080.580958][T10992] ksys_write+0x207/0x250 [ 2080.580978][T10992] ? __pfx_ksys_write+0x10/0x10 [ 2080.580997][T10992] __do_fast_syscall_32+0x73/0x120 [ 2080.581014][T10992] do_fast_syscall_32+0x32/0x80 [ 2080.581029][T10992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2080.581047][T10992] RIP: 0023:0xf7f91579 [ 2080.581056][T10992] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2080.581066][T10992] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 2080.581077][T10992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 2080.581084][T10992] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 2080.581090][T10992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2080.581096][T10992] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2080.581102][T10992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2080.581114][T10992] </TASK> [ 2080.648997][ C2] vkms_vblank_simulate: vblank timer overrun [ 2080.723628][T10994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9217'. [ 2080.873317][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9218'. [ 2080.888402][T10999] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2081.027243][T11010] 9pnet_fd: Insufficient options for proto=fd [ 2081.111706][ T40] audit: type=1326 audit(2081.482:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.6.9216" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ae579 code=0x0 [ 2081.194781][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9219'. [ 2081.401615][T11028] lo speed is unknown, defaulting to 1000 [ 2081.491114][T11040] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9226'. [ 2081.815355][T11065] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 262145, id = 0 [ 2082.710237][ T2011] usb 12-1: new high-speed USB device number 107 using dummy_hcd [ 2082.860248][ T2011] usb 12-1: Using ep0 maxpacket: 8 [ 2082.863817][ T2011] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2082.867784][ T2011] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2082.871787][ T2011] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 2082.875680][ T2011] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2082.880862][ T2011] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2082.884385][ T2011] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.094057][ T2011] usb 12-1: GET_CAPABILITIES returned 0 [ 2083.095724][ T2011] usbtmc 12-1:16.0: can't read capabilities [ 2083.251681][ T5798] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 2083.268017][ T5798] hid-generic 0000:0000:0000.0012: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0 [ 2083.295225][ T2011] usb 12-1: USB disconnect, device number 107 [ 2083.341372][T11107] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9235'. [ 2083.392876][T11111] ALSA: mixer_oss: invalid OSS volume '�����Y��{��������U����D��D�' [ 2083.395293][T11111] ALSA: mixer_oss: invalid OSS volume 'ߧ�4c�T���󯆩"�m!l�T.�Π����' [ 2083.397632][T11111] ALSA: mixer_oss: invalid OSS volume 'lg�' [ 2083.399316][T11111] ALSA: mixer_oss: invalid OSS volume '�)n���k�Ki��,r��WY\�ZV����?J`G' [ 2083.401855][T11111] ALSA: mixer_oss: invalid OSS volume 'k�O0���$��g��{�pl{��y;_A�RW��' [ 2083.404295][T11111] ALSA: mixer_oss: invalid OSS volume '�' [ 2083.405942][T11111] ALSA: mixer_oss: invalid OSS volume 'sv��Fu{Qby>��h%w���]' [ 2083.408164][T11111] ALSA: mixer_oss: invalid OSS volume '�E���=�v?��@4��8�@�h����L' [ 2083.410604][T11111] ALSA: mixer_oss: invalid OSS volume '�+���?>3Iq��0:i��q�|��U�D�ř��' [ 2083.413452][T11111] ALSA: mixer_oss: invalid OSS volume 'vӷ*xr��N0�ܗ���c��A�����d�h�' [ 2083.415831][T11111] ALSA: mixer_oss: invalid OSS volume '��JM����%H�J[~S' [ 2083.445158][T11113] netlink: 'syz.5.9237': attribute type 10 has an invalid length. [ 2083.527559][T11118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2084.100937][T11136] FAULT_INJECTION: forcing a failure. [ 2084.100937][T11136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2084.104640][T11136] CPU: 0 UID: 0 PID: 11136 Comm: syz.5.9243 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2084.104656][T11136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2084.104663][T11136] Call Trace: [ 2084.104667][T11136] <TASK> [ 2084.104671][T11136] dump_stack_lvl+0x16c/0x1f0 [ 2084.104691][T11136] should_fail_ex+0x50a/0x650 [ 2084.104705][T11136] _copy_to_user+0x32/0xd0 [ 2084.104718][T11136] simple_read_from_buffer+0xd0/0x160 [ 2084.104734][T11136] proc_fail_nth_read+0x198/0x270 [ 2084.104749][T11136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2084.104763][T11136] ? rw_verify_area+0xcf/0x680 [ 2084.104777][T11136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2084.104790][T11136] vfs_read+0x1df/0xbf0 [ 2084.104806][T11136] ? __fget_files+0x1fc/0x3a0 [ 2084.104822][T11136] ? __pfx___mutex_lock+0x10/0x10 [ 2084.104837][T11136] ? __pfx_vfs_read+0x10/0x10 [ 2084.104855][T11136] ? __fget_files+0x206/0x3a0 [ 2084.104875][T11136] ksys_read+0x12b/0x250 [ 2084.104890][T11136] ? __pfx_ksys_read+0x10/0x10 [ 2084.104908][T11136] __do_fast_syscall_32+0x73/0x120 [ 2084.104925][T11136] do_fast_syscall_32+0x32/0x80 [ 2084.104941][T11136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2084.104959][T11136] RIP: 0023:0xf7f91579 [ 2084.104968][T11136] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2084.104978][T11136] RSP: 002b:00000000f50b6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2084.104989][T11136] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50b6620 [ 2084.104995][T11136] RDX: 000000000000000f RSI: 00000000f741cff4 RDI: 0000000000000000 [ 2084.105002][T11136] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2084.105008][T11136] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2084.105014][T11136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2084.105026][T11136] </TASK> [ 2084.201743][T11134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2084.205822][T11134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2084.209787][T11134] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 2084.213849][T11134] veth1_vlan: left allmulticast mode [ 2084.217070][T11134] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 2084.220895][T11134] bond0 (unregistering): Released all slaves [ 2084.221149][T11141] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9244'. [ 2084.364594][T11179] lo speed is unknown, defaulting to 1000 [ 2084.402518][T11188] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9247'. [ 2084.414457][T11189] serio: Serial port ptm0 [ 2084.764023][T11221] lo speed is unknown, defaulting to 1000 [ 2085.209772][T11187] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2085.211586][T11187] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2085.213928][T11187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2085.215486][T11187] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2085.219435][T11187] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2085.223019][T11187] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2085.224534][T11187] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2085.234705][T11187] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2085.447401][ T40] audit: type=1400 audit(2085.812:1636): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=11285 comm="syz.6.9261" [ 2085.463186][T11286] siw: device registration error -23 [ 2085.633067][T11293] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9263'. [ 2085.668790][T11294] lo speed is unknown, defaulting to 1000 [ 2085.732402][T11301] 9pnet_virtio: no channels available for device syz [ 2085.797348][T11322] FAULT_INJECTION: forcing a failure. [ 2085.797348][T11322] name failslab, interval 1, probability 0, space 0, times 0 [ 2085.801688][T11322] CPU: 0 UID: 0 PID: 11322 Comm: syz.4.9266 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2085.801703][T11322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2085.801710][T11322] Call Trace: [ 2085.801713][T11322] <TASK> [ 2085.801718][T11322] dump_stack_lvl+0x16c/0x1f0 [ 2085.801739][T11322] should_fail_ex+0x50a/0x650 [ 2085.801756][T11322] ? fs_reclaim_acquire+0xae/0x150 [ 2085.801779][T11322] should_failslab+0xc2/0x120 [ 2085.801794][T11322] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 2085.801818][T11322] ? __pfx___might_resched+0x10/0x10 [ 2085.801841][T11322] ? alloc_vmap_area+0x636/0x2a60 [ 2085.801865][T11322] alloc_vmap_area+0x636/0x2a60 [ 2085.801892][T11322] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2085.801912][T11322] __get_vm_area_node+0x19e/0x2f0 [ 2085.801929][T11322] __vmalloc_node_range_noprof+0x26a/0x1530 [ 2085.801944][T11322] ? kvm_dev_ioctl+0x151/0x1a90 [ 2085.801978][T11322] ? __pfx_vsnprintf+0x10/0x10 [ 2085.802000][T11322] ? kvm_dev_ioctl+0x151/0x1a90 [ 2085.802024][T11322] ? do_raw_spin_lock+0x12d/0x2c0 [ 2085.802042][T11322] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2085.802065][T11322] ? __pfx_snprintf+0x10/0x10 [ 2085.802086][T11322] ? _raw_spin_unlock+0x28/0x50 [ 2085.802104][T11322] ? alloc_fd+0x41f/0x760 [ 2085.802127][T11322] ? kvm_dev_ioctl+0x151/0x1a90 [ 2085.802150][T11322] __vmalloc_noprof+0x6d/0x90 [ 2085.802189][T11322] ? kvm_dev_ioctl+0x151/0x1a90 [ 2085.802214][T11322] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 2085.802236][T11322] kvm_dev_ioctl+0x151/0x1a90 [ 2085.802261][T11322] ? __pfx_lock_release+0x10/0x10 [ 2085.802283][T11322] ? trace_lock_acquire+0x14e/0x1f0 [ 2085.802305][T11322] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 2085.802328][T11322] ? __fget_files+0x206/0x3a0 [ 2085.802346][T11322] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 2085.802364][T11322] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 2085.802379][T11322] __do_fast_syscall_32+0x73/0x120 [ 2085.802396][T11322] do_fast_syscall_32+0x32/0x80 [ 2085.802411][T11322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2085.802431][T11322] RIP: 0023:0xf7f78579 [ 2085.802444][T11322] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2085.802458][T11322] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2085.802472][T11322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2085.802481][T11322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2085.802490][T11322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2085.802499][T11322] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2085.802509][T11322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2085.802525][T11322] </TASK> [ 2085.802537][T11322] syz.4.9266: vmalloc error: size 39584, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2085.886013][T11322] CPU: 0 UID: 0 PID: 11322 Comm: syz.4.9266 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2085.886028][T11322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2085.886035][T11322] Call Trace: [ 2085.886039][T11322] <TASK> [ 2085.886044][T11322] dump_stack_lvl+0x16c/0x1f0 [ 2085.886063][T11322] warn_alloc+0x24d/0x3a0 [ 2085.886081][T11322] ? __pfx_warn_alloc+0x10/0x10 [ 2085.886099][T11322] ? kfree+0x2c4/0x4d0 [ 2085.886116][T11322] ? __get_vm_area_node+0x1dc/0x2f0 [ 2085.886133][T11322] __vmalloc_node_range_noprof+0xd24/0x1530 [ 2085.886152][T11322] ? __pfx_vsnprintf+0x10/0x10 [ 2085.886180][T11322] ? kvm_dev_ioctl+0x151/0x1a90 [ 2085.886201][T11322] ? do_raw_spin_lock+0x12d/0x2c0 [ 2085.886213][T11322] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2085.886229][T11322] ? __pfx_snprintf+0x10/0x10 [ 2085.886244][T11322] ? _raw_spin_unlock+0x28/0x50 [ 2085.886257][T11322] ? alloc_fd+0x41f/0x760 [ 2085.886273][T11322] ? kvm_dev_ioctl+0x151/0x1a90 [ 2085.886290][T11322] __vmalloc_noprof+0x6d/0x90 [ 2085.886305][T11322] ? kvm_dev_ioctl+0x151/0x1a90 [ 2085.886322][T11322] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 2085.886338][T11322] kvm_dev_ioctl+0x151/0x1a90 [ 2085.886356][T11322] ? __pfx_lock_release+0x10/0x10 [ 2085.886370][T11322] ? trace_lock_acquire+0x14e/0x1f0 [ 2085.886385][T11322] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 2085.886403][T11322] ? __fget_files+0x206/0x3a0 [ 2085.886421][T11322] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 2085.886438][T11322] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 2085.886453][T11322] __do_fast_syscall_32+0x73/0x120 [ 2085.886470][T11322] do_fast_syscall_32+0x32/0x80 [ 2085.886485][T11322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2085.886503][T11322] RIP: 0023:0xf7f78579 [ 2085.886512][T11322] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2085.886523][T11322] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2085.886533][T11322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2085.886540][T11322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2085.886546][T11322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2085.886552][T11322] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2085.886558][T11322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2085.886570][T11322] </TASK> [ 2085.886574][T11322] Mem-Info: [ 2085.954201][T11322] active_anon:6317 inactive_anon:49 isolated_anon:0 [ 2085.954201][T11322] active_file:2143 inactive_file:301 isolated_file:0 [ 2085.954201][T11322] unevictable:1761 dirty:278 writeback:0 [ 2085.954201][T11322] slab_reclaimable:10079 slab_unreclaimable:100254 [ 2085.954201][T11322] mapped:28176 shmem:7488 pagetables:675 [ 2085.954201][T11322] sec_pagetables:344 bounce:0 [ 2085.954201][T11322] kernel_misc_reclaimable:0 [ 2085.954201][T11322] free:41501 free_pcp:1583 free_cma:0 [ 2086.000148][T11322] Node 0 active_anon:860kB inactive_anon:0kB active_file:3732kB inactive_file:180kB unevictable:3520kB isolated(anon):0kB isolated(file):0kB mapped:1936kB dirty:328kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8412kB pagetables:708kB sec_pagetables:1212kB all_unreclaimable? yes [ 2086.008760][T11322] Node 1 active_anon:1508kB inactive_anon:196kB active_file:4840kB inactive_file:1024kB unevictable:3524kB isolated(anon):0kB isolated(file):0kB mapped:84568kB dirty:784kB writeback:0kB shmem:3168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3372kB pagetables:2068kB sec_pagetables:164kB all_unreclaimable? no [ 2086.017805][T11322] Node 0 DMA free:2104kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:296kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:8kB free_cma:0kB [ 2086.028046][T11322] lowmem_reserve[]: 0 294 294 294 294 [ 2086.029596][T11322] Node 0 DMA32 free:17652kB boost:0kB min:13560kB low:16948kB high:20336kB reserved_highatomic:0KB active_anon:860kB inactive_anon:0kB active_file:3436kB inactive_file:176kB unevictable:3520kB writepending:328kB present:1032196kB managed:301720kB mlocked:0kB bounce:0kB free_pcp:1224kB local_pcp:584kB free_cma:0kB [ 2086.037636][T11322] lowmem_reserve[]: 0 0 0 0 0 [ 2086.039032][T11322] Node 1 DMA32 free:161328kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:1508kB inactive_anon:196kB active_file:4840kB inactive_file:1024kB unevictable:3524kB writepending:784kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:14360kB local_pcp:12764kB free_cma:0kB [ 2086.047395][T11322] lowmem_reserve[]: 0 0 0 0 0 [ 2086.049074][T11322] Node 0 DMA: 18*4kB (U) 20*8kB (UM) 5*16kB (U) 10*32kB (U) 3*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2104kB [ 2086.053734][T11322] Node 0 DMA32: 886*4kB (UME) 580*8kB (UME) 178*16kB (UME) 125*32kB (UME) 26*64kB (UME) 7*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17592kB [ 2086.058281][T11322] Node 1 DMA32: 312*4kB (UME) 674*8kB (UME) 922*16kB (UME) 917*32kB (UME) 242*64kB (UME) 166*128kB (UME) 107*256kB (UME) 51*512kB (UME) 20*1024kB (UME) 0*2048kB 0*4096kB = 161456kB [ 2086.063813][T11322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2086.066544][T11322] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2086.069372][T11322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2086.072549][T11322] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2086.075226][T11322] 4622 total pagecache pages [ 2086.076541][T11322] 396 pages in swap cache [ 2086.077778][T11322] Free swap = 104116kB [ 2086.078970][T11322] Total swap = 124996kB [ 2086.080411][T11322] 524155 pages RAM [ 2086.081516][T11322] 0 pages HighMem/MovableOnly [ 2086.082902][T11322] 207822 pages reserved [ 2086.084111][T11322] 0 pages cma reserved [ 2086.260537][T27116] usb 11-1: new high-speed USB device number 107 using dummy_hcd [ 2086.338983][T11352] netlink: 'syz.7.9272': attribute type 10 has an invalid length. [ 2086.348594][T11352] team0: Port device netdevsim0 added [ 2086.354067][T11352] netlink: 'syz.7.9272': attribute type 10 has an invalid length. [ 2086.378387][T11352] team0: Port device netdevsim0 removed [ 2086.480192][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 2086.622096][T27116] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2086.625480][T27116] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2086.628214][T27116] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.631807][T27116] usb 11-1: config 0 descriptor?? [ 2086.840015][T27116] usbhid 11-1:0.0: can't add hid device: -71 [ 2086.843850][T27116] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 2086.847039][T27116] usb 11-1: USB disconnect, device number 107 [ 2087.192256][T11388] FAULT_INJECTION: forcing a failure. [ 2087.192256][T11388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2087.196856][T11388] CPU: 0 UID: 0 PID: 11388 Comm: syz.4.9284 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2087.196878][T11388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2087.196888][T11388] Call Trace: [ 2087.196894][T11388] <TASK> [ 2087.196901][T11388] dump_stack_lvl+0x16c/0x1f0 [ 2087.196922][T11388] should_fail_ex+0x50a/0x650 [ 2087.196935][T11388] _copy_from_iter+0x465/0x1560 [ 2087.196955][T11388] ? __pfx__copy_from_iter+0x10/0x10 [ 2087.196968][T11388] ? hlock_class+0x4e/0x130 [ 2087.196981][T11388] ? __lock_acquire+0xcc5/0x3c40 [ 2087.196999][T11388] tun_get_user+0x241/0x3e50 [ 2087.197015][T11388] ? aa_file_perm+0x4c6/0xfe0 [ 2087.197032][T11388] ? __pfx_tun_get_user+0x10/0x10 [ 2087.197042][T11388] ? find_held_lock+0x2d/0x110 [ 2087.197056][T11388] ? __pfx_lock_release+0x10/0x10 [ 2087.197077][T11388] tun_chr_write_iter+0xdc/0x210 [ 2087.197090][T11388] do_iter_readv_writev+0x655/0x950 [ 2087.197107][T11388] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2087.197124][T11388] ? bpf_lsm_file_permission+0x9/0x10 [ 2087.197142][T11388] ? security_file_permission+0x71/0x210 [ 2087.197157][T11388] ? rw_verify_area+0xcf/0x680 [ 2087.197172][T11388] vfs_writev+0x363/0xdd0 [ 2087.197185][T11388] ? find_held_lock+0x2d/0x110 [ 2087.197201][T11388] ? __pfx_vfs_writev+0x10/0x10 [ 2087.197215][T11388] ? find_held_lock+0x2d/0x110 [ 2087.197229][T11388] ? __pfx_lock_release+0x10/0x10 [ 2087.197244][T11388] ? trace_lock_acquire+0x14e/0x1f0 [ 2087.197260][T11388] ? __fget_files+0x206/0x3a0 [ 2087.197280][T11388] ? do_writev+0x133/0x340 [ 2087.197292][T11388] do_writev+0x133/0x340 [ 2087.197306][T11388] ? __pfx_do_writev+0x10/0x10 [ 2087.197324][T11388] __do_fast_syscall_32+0x73/0x120 [ 2087.197341][T11388] do_fast_syscall_32+0x32/0x80 [ 2087.197357][T11388] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2087.197375][T11388] RIP: 0023:0xf7f78579 [ 2087.197383][T11388] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2087.197394][T11388] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 2087.197405][T11388] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f40 [ 2087.197412][T11388] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 2087.197418][T11388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2087.197424][T11388] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2087.197430][T11388] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2087.197443][T11388] </TASK> [ 2087.280196][T23019] Bluetooth: hci2: command 0x0c1a tx timeout [ 2087.280963][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 2087.340251][T27116] usb 11-1: new high-speed USB device number 108 using dummy_hcd [ 2087.388057][T11396] netlink: 'syz.7.9282': attribute type 10 has an invalid length. [ 2087.495130][T27116] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2087.498282][T27116] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2087.500751][T27116] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.504161][T27116] usb 11-1: config 0 descriptor?? [ 2087.638430][T11402] netlink: 'syz.4.9286': attribute type 10 has an invalid length. [ 2087.697935][T11408] syz.4.9289: attempt to access beyond end of device [ 2087.697935][T11408] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2087.701276][T11408] syz.4.9289: attempt to access beyond end of device [ 2087.701276][T11408] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2087.705700][T11408] Mount JFS Failure: -5 [ 2087.706828][T11408] jfs_mount failed w/return code = -5 [ 2087.914832][T27116] usbhid 11-1:0.0: can't add hid device: -71 [ 2087.916673][T27116] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 2087.920616][T27116] usb 11-1: USB disconnect, device number 108 [ 2088.009538][T11426] netlink: 'syz.5.9290': attribute type 10 has an invalid length. [ 2088.014276][T11426] team0: Port device netdevsim0 added [ 2088.019672][T11426] netlink: 'syz.5.9290': attribute type 10 has an invalid length. [ 2088.083794][T11426] team0: Port device netdevsim0 removed [ 2088.491226][T11434] input: syz0 as /devices/virtual/input/input41 [ 2088.570158][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 2088.719137][T11460] tmpfs: Bad value for 'mpol' [ 2088.917517][T11494] FAULT_INJECTION: forcing a failure. [ 2088.917517][T11494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2088.921254][T11494] CPU: 3 UID: 0 PID: 11494 Comm: syz.6.9310 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2088.921269][T11494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2088.921276][T11494] Call Trace: [ 2088.921287][T11494] <TASK> [ 2088.921291][T11494] dump_stack_lvl+0x16c/0x1f0 [ 2088.921321][T11494] should_fail_ex+0x50a/0x650 [ 2088.921338][T11494] _copy_to_user+0x32/0xd0 [ 2088.921352][T11494] simple_read_from_buffer+0xd0/0x160 [ 2088.921368][T11494] proc_fail_nth_read+0x198/0x270 [ 2088.921382][T11494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2088.921396][T11494] ? rw_verify_area+0xcf/0x680 [ 2088.921410][T11494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2088.921423][T11494] vfs_read+0x1df/0xbf0 [ 2088.921438][T11494] ? __fget_files+0x1fc/0x3a0 [ 2088.921454][T11494] ? __pfx___mutex_lock+0x10/0x10 [ 2088.921470][T11494] ? __pfx_vfs_read+0x10/0x10 [ 2088.921488][T11494] ? __fget_files+0x206/0x3a0 [ 2088.921507][T11494] ksys_read+0x12b/0x250 [ 2088.921522][T11494] ? __pfx_ksys_read+0x10/0x10 [ 2088.921541][T11494] __do_fast_syscall_32+0x73/0x120 [ 2088.921558][T11494] do_fast_syscall_32+0x32/0x80 [ 2088.921573][T11494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2088.921591][T11494] RIP: 0023:0xf73ae579 [ 2088.921599][T11494] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2088.921611][T11494] RSP: 002b:00000000f5036590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2088.921621][T11494] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5036620 [ 2088.921628][T11494] RDX: 000000000000000f RSI: 00000000f739cff4 RDI: 0000000000000000 [ 2088.921634][T11494] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2088.921640][T11494] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2088.921646][T11494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2088.921659][T11494] </TASK> [ 2089.090681][T11504] FAULT_INJECTION: forcing a failure. [ 2089.090681][T11504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2089.095523][T11504] CPU: 2 UID: 0 PID: 11504 Comm: syz.6.9313 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2089.095538][T11504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2089.095545][T11504] Call Trace: [ 2089.095549][T11504] <TASK> [ 2089.095553][T11504] dump_stack_lvl+0x16c/0x1f0 [ 2089.095572][T11504] should_fail_ex+0x50a/0x650 [ 2089.095585][T11504] _copy_from_user+0x2e/0xd0 [ 2089.095597][T11504] get_compat_msghdr+0xa8/0x170 [ 2089.095612][T11504] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2089.095630][T11504] ___sys_sendmsg+0x1b0/0x1e0 [ 2089.095648][T11504] ? __pfx____sys_sendmsg+0x10/0x10 [ 2089.095670][T11504] ? trace_lock_acquire+0x14e/0x1f0 [ 2089.095689][T11504] ? __pfx___might_resched+0x10/0x10 [ 2089.095709][T11504] __sys_sendmmsg+0x2fa/0x420 [ 2089.095727][T11504] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2089.095748][T11504] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2089.095769][T11504] ? fput+0x67/0x440 [ 2089.095781][T11504] ? ksys_write+0x1ba/0x250 [ 2089.095795][T11504] ? __pfx_ksys_write+0x10/0x10 [ 2089.095812][T11504] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 2089.095827][T11504] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2089.095843][T11504] __do_fast_syscall_32+0x73/0x120 [ 2089.095859][T11504] do_fast_syscall_32+0x32/0x80 [ 2089.095874][T11504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2089.095892][T11504] RIP: 0023:0xf73ae579 [ 2089.095901][T11504] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2089.095914][T11504] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 2089.095924][T11504] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080003b80 [ 2089.095931][T11504] RDX: 0000000004000070 RSI: 0000000000008000 RDI: 0000000000000000 [ 2089.095938][T11504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2089.095944][T11504] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2089.095950][T11504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2089.095962][T11504] </TASK> [ 2089.256212][T11510] netlink: 'syz.6.9315': attribute type 11 has an invalid length. [ 2089.281036][T11514] netlink: 'syz.7.9312': attribute type 10 has an invalid length. [ 2089.315089][T11514] team0: Port device netdevsim0 added [ 2089.319370][T11514] netlink: 'syz.7.9312': attribute type 10 has an invalid length. [ 2089.337292][T11514] team0: Port device netdevsim0 removed [ 2089.371419][ T40] audit: type=1400 audit(2089.742:1637): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=11519 comm="syz.6.9317" [ 2089.372809][T23019] Bluetooth: hci5: command 0x0c1a tx timeout [ 2089.378358][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 2089.403378][T11520] siw: device registration error -23 [ 2089.576282][T11529] tipc: Started in network mode [ 2089.577746][T11529] tipc: Node identity 4, cluster identity 4711 [ 2089.579641][T11529] tipc: Node number set to 4 [ 2089.758012][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9325'. [ 2089.829719][ T40] audit: type=1400 audit(2090.192:1638): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=11546 comm="syz.5.9327" [ 2089.853097][T11547] siw: device registration error -23 [ 2089.907326][T11551] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 2089.914227][T11551] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 2090.165454][T11569] FAULT_INJECTION: forcing a failure. [ 2090.165454][T11569] name failslab, interval 1, probability 0, space 0, times 0 [ 2090.173896][T11569] CPU: 2 UID: 0 PID: 11569 Comm: syz.7.9333 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2090.173920][T11569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2090.173930][T11569] Call Trace: [ 2090.173936][T11569] <TASK> [ 2090.173943][T11569] dump_stack_lvl+0x16c/0x1f0 [ 2090.173971][T11569] should_fail_ex+0x50a/0x650 [ 2090.173987][T11569] ? fs_reclaim_acquire+0xae/0x150 [ 2090.174011][T11569] ? resv_map_alloc+0x46/0x400 [ 2090.174026][T11569] should_failslab+0xc2/0x120 [ 2090.174041][T11569] __kmalloc_cache_noprof+0x68/0x410 [ 2090.174061][T11569] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2090.174085][T11569] resv_map_alloc+0x46/0x400 [ 2090.174101][T11569] hugetlbfs_get_inode+0x343/0x740 [ 2090.174121][T11569] hugetlb_file_setup+0x15b/0x620 [ 2090.174178][T11569] ksys_mmap_pgoff+0x189/0x5c0 [ 2090.174201][T11569] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2090.174225][T11569] __do_fast_syscall_32+0x73/0x120 [ 2090.174249][T11569] do_fast_syscall_32+0x32/0x80 [ 2090.174272][T11569] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2090.174297][T11569] RIP: 0023:0xf7fd8579 [ 2090.174310][T11569] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2090.174327][T11569] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2090.174343][T11569] RAX: ffffffffffffffda RBX: 0000000080200000 RCX: 0000000000004000 [ 2090.174354][T11569] RDX: 0000000000000004 RSI: 000000000006c832 RDI: 00000000ffffffff [ 2090.174364][T11569] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2090.174374][T11569] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2090.174384][T11569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2090.174403][T11569] </TASK> [ 2090.284978][T11572] netfs: Couldn't get user pages (rc=-14) [ 2090.291435][T11572] IPv6: sit1: Disabled Multicast RS [ 2090.293377][T11572] sit1: entered allmulticast mode [ 2090.437962][T11586] loop7: detected capacity change from 0 to 16384 [ 2090.567213][T11590] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2090.660224][T11588] loop7: detected capacity change from 16384 to 16383 [ 2090.750198][T11590] loop7: detected capacity change from 16383 to 16384 [ 2090.856342][T11598] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 2091.440210][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 2091.450493][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 2092.253292][T11633] netlink: 'syz.7.9352': attribute type 4 has an invalid length. [ 2092.253365][T11630] netlink: 'syz.6.9351': attribute type 4 has an invalid length. [ 2092.717101][ T40] audit: type=1400 audit(2093.082:1639): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=11664 comm="syz.7.9361" [ 2092.738343][T11665] siw: device registration error -23 [ 2092.740673][ T40] audit: type=1326 audit(2093.112:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11648 comm="syz.6.9357" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ae579 code=0x0 [ 2092.858664][T11670] tipc: Started in network mode [ 2092.860867][T11670] tipc: Node identity 4, cluster identity 4711 [ 2092.862895][T11670] tipc: Node number set to 4 [ 2093.039610][T11682] FAULT_INJECTION: forcing a failure. [ 2093.039610][T11682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2093.043423][T11682] CPU: 2 UID: 0 PID: 11682 Comm: syz.5.9366 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2093.043438][T11682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2093.043445][T11682] Call Trace: [ 2093.043449][T11682] <TASK> [ 2093.043453][T11682] dump_stack_lvl+0x16c/0x1f0 [ 2093.043472][T11682] should_fail_ex+0x50a/0x650 [ 2093.043485][T11682] _copy_from_user+0x2e/0xd0 [ 2093.043498][T11682] input_event_from_user+0x22d/0x3b0 [ 2093.043513][T11682] ? __pfx_input_event_from_user+0x10/0x10 [ 2093.043528][T11682] ? input_inject_event+0x1a0/0x380 [ 2093.043543][T11682] evdev_write+0x377/0x750 [ 2093.043559][T11682] ? __pfx_evdev_write+0x10/0x10 [ 2093.043573][T11682] ? bpf_lsm_file_permission+0x9/0x10 [ 2093.043590][T11682] ? security_file_permission+0x71/0x210 [ 2093.043606][T11682] ? rw_verify_area+0xcf/0x680 [ 2093.043621][T11682] ? __pfx_evdev_write+0x10/0x10 [ 2093.043633][T11682] vfs_write+0x24c/0x1150 [ 2093.043649][T11682] ? __fget_files+0x1fc/0x3a0 [ 2093.043665][T11682] ? __pfx_lock_release+0x10/0x10 [ 2093.043681][T11682] ? __pfx_vfs_write+0x10/0x10 [ 2093.043697][T11682] ? lock_acquire+0x2f/0xb0 [ 2093.043711][T11682] ? __fget_files+0x40/0x3a0 [ 2093.043728][T11682] ? __fget_files+0x206/0x3a0 [ 2093.043747][T11682] ksys_write+0x207/0x250 [ 2093.043762][T11682] ? __pfx_ksys_write+0x10/0x10 [ 2093.043780][T11682] __do_fast_syscall_32+0x73/0x120 [ 2093.043797][T11682] do_fast_syscall_32+0x32/0x80 [ 2093.043813][T11682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2093.043831][T11682] RIP: 0023:0xf7f91579 [ 2093.043840][T11682] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2093.043851][T11682] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 2093.043861][T11682] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 2093.043868][T11682] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000 [ 2093.043875][T11682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2093.043881][T11682] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2093.043887][T11682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2093.043899][T11682] </TASK> [ 2093.135410][T11684] ubi: mtd0 is already attached to ubi8 [ 2093.142998][ C3] sr 2:0:0:0: [sr0] tag#17 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2093.146045][ C3] sr 2:0:0:0: [sr0] tag#17 CDB: opcode=0x9a 9a 73 16 dd 97 b9 c1 52 55 af fb c6 [ 2093.733506][ T40] audit: type=1400 audit(2094.102:1641): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=11694 comm="syz.7.9370" [ 2093.740878][T11695] siw: device registration error -23 [ 2093.824498][T11699] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9371'. [ 2093.967669][T11704] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9373'. [ 2095.500195][ T5815] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 2095.673276][ T5815] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2095.676243][ T5815] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2095.680137][ T5815] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2095.683289][ T5815] usb 9-1: config 0 descriptor?? [ 2095.687175][ T40] audit: type=1400 audit(2096.052:1642): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=11729 comm="syz.6.9379" [ 2095.709237][T11730] siw: device registration error -23 [ 2095.908073][ T5815] usbhid 9-1:0.0: can't add hid device: -71 [ 2095.909864][ T5815] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2095.916740][ T5815] usb 9-1: USB disconnect, device number 31 [ 2095.955588][T11736] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9380'. [ 2096.340169][T27116] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2096.500246][T27116] usb 9-1: Using ep0 maxpacket: 32 [ 2096.504792][T27116] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2096.507979][T27116] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2096.511535][T27116] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.522223][T27116] usb 9-1: config 0 descriptor?? [ 2096.597322][T27116] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2096.611248][T27116] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2097.337512][T27116] usb 9-1: USB disconnect, device number 32 [ 2097.339944][T27116] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 2097.843487][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.011329][T11797] FAULT_INJECTION: forcing a failure. [ 2098.011329][T11797] name failslab, interval 1, probability 0, space 0, times 0 [ 2098.014877][T11797] CPU: 1 UID: 0 PID: 11797 Comm: syz.6.9387 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2098.014901][T11797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2098.014909][T11797] Call Trace: [ 2098.014913][T11797] <TASK> [ 2098.014918][T11797] dump_stack_lvl+0x16c/0x1f0 [ 2098.014938][T11797] should_fail_ex+0x50a/0x650 [ 2098.014949][T11797] ? fs_reclaim_acquire+0xae/0x150 [ 2098.014965][T11797] should_failslab+0xc2/0x120 [ 2098.014976][T11797] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 2098.014994][T11797] ? security_file_alloc+0x34/0x2b0 [ 2098.015011][T11797] security_file_alloc+0x34/0x2b0 [ 2098.015026][T11797] init_file+0x93/0x4c0 [ 2098.015038][T11797] alloc_empty_file+0x91/0x1e0 [ 2098.015050][T11797] path_openat+0xe1/0x2d80 [ 2098.015065][T11797] ? hlock_class+0x4e/0x130 [ 2098.015077][T11797] ? __lock_acquire+0x15a9/0x3c40 [ 2098.015096][T11797] ? __pfx_path_openat+0x10/0x10 [ 2098.015112][T11797] ? __pfx___lock_acquire+0x10/0x10 [ 2098.015127][T11797] ? lock_acquire.part.0+0x11b/0x380 [ 2098.015142][T11797] ? find_held_lock+0x2d/0x110 [ 2098.015155][T11797] do_filp_open+0x20c/0x470 [ 2098.015171][T11797] ? __pfx_do_filp_open+0x10/0x10 [ 2098.015186][T11797] ? find_held_lock+0x2d/0x110 [ 2098.015206][T11797] ? alloc_fd+0x41f/0x760 [ 2098.015226][T11797] do_sys_openat2+0x17a/0x1e0 [ 2098.015238][T11797] ? __pfx_do_sys_openat2+0x10/0x10 [ 2098.015250][T11797] ? __pfx___schedule+0x10/0x10 [ 2098.015263][T11797] ? __fget_files+0x206/0x3a0 [ 2098.015281][T11797] __ia32_compat_sys_openat+0x16e/0x210 [ 2098.015295][T11797] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2098.015307][T11797] ? ksys_write+0x1ba/0x250 [ 2098.015326][T11797] __do_fast_syscall_32+0x73/0x120 [ 2098.015343][T11797] do_fast_syscall_32+0x32/0x80 [ 2098.015359][T11797] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2098.015376][T11797] RIP: 0023:0xf73ae579 [ 2098.015385][T11797] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2098.015396][T11797] RSP: 002b:00000000f4ff455c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 2098.015407][T11797] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 000000008000c380 [ 2098.015414][T11797] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2098.015420][T11797] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2098.015426][T11797] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2098.015433][T11797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2098.015445][T11797] </TASK> [ 2098.271579][ T40] audit: type=1326 audit(2098.642:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11779 comm="syz.7.9386" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd8579 code=0x0 [ 2098.394514][T11807] netlink: 'syz.4.9391': attribute type 10 has an invalid length. [ 2098.399390][T11807] team0: Port device netdevsim0 added [ 2098.413248][T11807] netlink: 'syz.4.9391': attribute type 10 has an invalid length. [ 2098.447337][T11807] team0: Port device netdevsim0 removed [ 2098.955304][T11821] lo speed is unknown, defaulting to 1000 [ 2099.030615][T11827] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9395'. [ 2099.116349][ T40] audit: type=1400 audit(2099.482:1644): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=11848 comm="syz.4.9396" [ 2099.751106][ T40] audit: type=1400 audit(2100.122:1645): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=11880 comm="syz.6.9405" [ 2099.769067][T11881] siw: device registration error -23 [ 2099.882839][T11891] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9409'. [ 2099.885740][T11891] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9409'. [ 2099.893514][T11894] FAULT_INJECTION: forcing a failure. [ 2099.893514][T11894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2099.898165][T11894] CPU: 3 UID: 0 PID: 11894 Comm: syz.6.9410 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2099.898187][T11894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2099.898196][T11894] Call Trace: [ 2099.898202][T11894] <TASK> [ 2099.898209][T11894] dump_stack_lvl+0x16c/0x1f0 [ 2099.898234][T11894] should_fail_ex+0x50a/0x650 [ 2099.898255][T11894] _copy_from_iter+0x2a1/0x1560 [ 2099.898274][T11894] ? trace_lock_acquire+0x14e/0x1f0 [ 2099.898293][T11894] ? __alloc_skb+0x1fe/0x380 [ 2099.898317][T11894] ? __pfx__copy_from_iter+0x10/0x10 [ 2099.898333][T11894] ? __virt_addr_valid+0x1a4/0x590 [ 2099.898353][T11894] ? __virt_addr_valid+0x5e/0x590 [ 2099.898368][T11894] ? __phys_addr_symbol+0x30/0x80 [ 2099.898383][T11894] ? __check_object_size+0x488/0x710 [ 2099.898404][T11894] netlink_sendmsg+0x813/0xd70 [ 2099.898430][T11894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2099.898460][T11894] ____sys_sendmsg+0xaaf/0xc90 [ 2099.898480][T11894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2099.898498][T11894] ? get_compat_msghdr+0x11b/0x170 [ 2099.898527][T11894] ___sys_sendmsg+0x135/0x1e0 [ 2099.898554][T11894] ? __pfx____sys_sendmsg+0x10/0x10 [ 2099.898585][T11894] ? __pfx_lock_release+0x10/0x10 [ 2099.898607][T11894] ? trace_lock_acquire+0x14e/0x1f0 [ 2099.898632][T11894] ? __fget_files+0x206/0x3a0 [ 2099.898662][T11894] __sys_sendmsg+0x16e/0x220 [ 2099.898685][T11894] ? __pfx___sys_sendmsg+0x10/0x10 [ 2099.898723][T11894] __do_fast_syscall_32+0x73/0x120 [ 2099.898748][T11894] do_fast_syscall_32+0x32/0x80 [ 2099.898770][T11894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2099.898794][T11894] RIP: 0023:0xf73ae579 [ 2099.898808][T11894] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2099.898822][T11894] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2099.898839][T11894] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 2099.898850][T11894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2099.898859][T11894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2099.898874][T11894] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2099.898882][T11894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2099.898902][T11894] </TASK> [ 2100.208673][T11901] netlink: 'syz.6.9411': attribute type 10 has an invalid length. [ 2100.263188][T11902] netlink: 'syz.6.9411': attribute type 10 has an invalid length. [ 2100.324687][T11904] netlink: 'syz.5.9412': attribute type 10 has an invalid length. [ 2100.382878][T11907] netlink: 'syz.5.9412': attribute type 10 has an invalid length. [ 2100.400367][T11901] bond0: (slave netdevsim0): Releasing backup interface [ 2100.523328][T11902] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2100.527627][T11904] team0: Port device netdevsim0 added [ 2100.532453][T11907] team0: Port device netdevsim0 removed [ 2100.969204][ T40] audit: type=1400 audit(2101.332:1646): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=11919 comm="syz.5.9417" [ 2100.980837][T11921] siw: device registration error -23 [ 2101.112608][T11933] netlink: 'syz.5.9420': attribute type 7 has an invalid length. [ 2101.115665][T11933] netlink: 212424 bytes leftover after parsing attributes in process `syz.5.9420'. [ 2101.145236][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9416'. [ 2101.148008][T11934] bridge_slave_1: left allmulticast mode [ 2101.149814][T11934] bridge_slave_1: left promiscuous mode [ 2101.151658][T11934] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.155694][T11934] bridge_slave_0: left allmulticast mode [ 2101.157334][T11934] bridge_slave_0: left promiscuous mode [ 2101.159052][T11934] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.574925][T11937] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 2101.578938][T11937] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2101.582017][T11937] gretap1: entered promiscuous mode [ 2101.583979][T11937] gretap1: entered allmulticast mode [ 2102.043918][T11961] lo speed is unknown, defaulting to 1000 [ 2102.087711][T11969] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9428'. [ 2102.140145][ T40] audit: type=1326 audit(2102.502:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz.7.9425" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd8579 code=0x0 [ 2103.428118][T12026] lo speed is unknown, defaulting to 1000 [ 2103.463235][T12031] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9439'. [ 2104.132458][T12061] netlink: 'syz.4.9441': attribute type 10 has an invalid length. [ 2104.137211][T12061] team0: Port device netdevsim0 added [ 2104.145771][T12061] netlink: 'syz.4.9441': attribute type 10 has an invalid length. [ 2104.158848][T12061] team0: Port device netdevsim0 removed [ 2105.038075][T12073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9445'. [ 2106.980526][T12088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9451'. [ 2107.029611][T12090] netlink: 'syz.7.9450': attribute type 4 has an invalid length. [ 2108.263431][T12123] netlink: 'syz.5.9457': attribute type 10 has an invalid length. [ 2108.268028][T12123] team0: Port device netdevsim0 added [ 2108.273225][T12123] netlink: 'syz.5.9457': attribute type 10 has an invalid length. [ 2108.283178][T12123] team0: Port device netdevsim0 removed [ 2108.659028][T12130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9459'. [ 2109.058388][T12139] netlink: 'syz.4.9460': attribute type 4 has an invalid length. [ 2109.301285][T12142] netlink: 'syz.5.9462': attribute type 10 has an invalid length. [ 2109.305377][T12142] team0: Port device netdevsim0 added [ 2109.309032][T12142] netlink: 'syz.5.9462': attribute type 10 has an invalid length. [ 2109.331788][T12142] team0: Port device netdevsim0 removed [ 2110.405159][T12150] netlink: 'syz.5.9464': attribute type 4 has an invalid length. [ 2110.492295][ T40] audit: type=1400 audit(2110.862:1648): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=12154 comm="syz.6.9465" [ 2110.520885][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9466'. [ 2110.529148][T12156] siw: device registration error -23 [ 2111.016599][T12172] netlink: 'syz.6.9470': attribute type 10 has an invalid length. [ 2111.040542][T12172] bond0: (slave netdevsim0): Releasing backup interface [ 2111.122186][T12174] netlink: 'syz.6.9470': attribute type 10 has an invalid length. [ 2111.137474][T12174] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2111.281350][T12180] netlink: 'syz.5.9472': attribute type 4 has an invalid length. [ 2111.361380][T12158] uprobe: syz.4.9467:12158 failed to unregister, leaking uprobe [ 2112.989517][T12251] netlink: 'syz.5.9487': attribute type 10 has an invalid length. [ 2112.994879][T12251] team0: Port device netdevsim0 added [ 2113.001718][T12251] netlink: 'syz.5.9487': attribute type 10 has an invalid length. [ 2113.039697][T12251] team0: Port device netdevsim0 removed [ 2113.482954][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9493'. [ 2113.485443][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9493'. [ 2113.489957][T12254] bridge0: port 3(vlan2) entered blocking state [ 2113.491848][T12254] bridge0: port 3(vlan2) entered disabled state [ 2113.493658][T12254] vlan2: entered allmulticast mode [ 2113.495787][T12254] vlan2: left allmulticast mode [ 2114.248642][T12300] overlayfs: failed to clone upperpath [ 2114.317835][T12305] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9507'. [ 2114.716457][T12313] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2114.741119][T12313] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2114.749693][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9510'. [ 2114.769336][T12313] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2114.772058][T12313] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2114.808394][T12313] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 2114.885949][T12351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2115.647383][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9516'. [ 2115.853629][ T40] audit: type=1400 audit(2116.222:1649): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=12377 comm="syz.5.9518" [ 2115.876950][T12378] siw: device registration error -23 [ 2116.247953][T12388] netlink: 'syz.5.9520': attribute type 4 has an invalid length. [ 2116.749526][T12393] netlink: 'syz.6.9521': attribute type 10 has an invalid length. [ 2116.758729][T12393] bond0: (slave netdevsim0): Releasing backup interface [ 2116.771206][T12393] netlink: 'syz.6.9521': attribute type 10 has an invalid length. [ 2116.778282][T12393] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2117.294278][T12405] lo speed is unknown, defaulting to 1000 [ 2117.329744][T12410] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9524'. [ 2117.556788][ T40] audit: type=1326 audit(2117.922:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.6.9525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 2117.564738][ T40] audit: type=1326 audit(2117.922:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.6.9525" exe="/syz-executor" sig=0 arch=40000003 syscall=13 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 2117.572134][ T40] audit: type=1326 audit(2117.922:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.6.9525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 2117.579715][ T40] audit: type=1326 audit(2117.922:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.6.9525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 2117.587202][ T40] audit: type=1326 audit(2117.922:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.6.9525" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 2117.599850][ T40] audit: type=1326 audit(2117.922:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.6.9525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 2117.619181][ T40] audit: type=1326 audit(2117.922:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.6.9525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 2117.631926][ T40] audit: type=1326 audit(2117.922:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.6.9525" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 2117.639065][ T40] audit: type=1326 audit(2117.922:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.6.9525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 2117.659513][T12435] 9pnet_fd: Insufficient options for proto=fd [ 2117.672322][T12435] nr0: entered promiscuous mode [ 2118.522714][T12461] hub 9-0:1.0: USB hub found [ 2118.524214][T12461] hub 9-0:1.0: 1 port detected [ 2118.866835][T12471] netlink: 'syz.7.9533': attribute type 10 has an invalid length. [ 2118.924094][T12479] netlink: 'syz.7.9533': attribute type 10 has an invalid length. [ 2118.927273][T12480] netlink: 'syz.4.9534': attribute type 10 has an invalid length. [ 2118.982933][T12484] netlink: 'syz.4.9534': attribute type 10 has an invalid length. [ 2119.008312][T12471] team0: Port device netdevsim0 added [ 2119.038728][T12479] team0: Port device netdevsim0 removed [ 2119.041662][T12480] team0: Port device netdevsim0 added [ 2119.060704][T12484] team0: Port device netdevsim0 removed [ 2119.792214][T12498] netlink: 'syz.5.9538': attribute type 4 has an invalid length. [ 2120.190851][T12527] netlink: 'syz.6.9546': attribute type 10 has an invalid length. [ 2120.195382][T12527] bond0: (slave netdevsim0): Releasing backup interface [ 2120.203077][T12527] netlink: 'syz.6.9546': attribute type 10 has an invalid length. [ 2120.206327][T12527] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2120.994775][T12551] overlayfs: failed to clone upperpath [ 2121.157246][T12554] bond0: (slave netdevsim0): Releasing backup interface [ 2121.162903][T12555] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2121.689262][T12567] validate_nla: 2 callbacks suppressed [ 2121.689303][T12567] netlink: 'syz.7.9555': attribute type 4 has an invalid length. [ 2122.016890][T12570] netlink: 76 bytes leftover after parsing attributes in process `syz.6.9557'. [ 2122.037601][T12566] netlink: 'syz.5.9556': attribute type 4 has an invalid length. [ 2122.360333][ T5798] usb 11-1: new high-speed USB device number 109 using dummy_hcd [ 2122.520266][ T5798] usb 11-1: Using ep0 maxpacket: 8 [ 2122.523114][ T5798] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2122.525907][ T5798] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2122.528758][ T5798] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 2122.532352][ T5798] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2122.535355][ T5798] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2122.539115][ T5798] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2122.541941][ T5798] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.736184][T12617] netlink: 'syz.5.9562': attribute type 10 has an invalid length. [ 2122.742237][T12617] team0: Port device netdevsim0 added [ 2122.747775][T12617] netlink: 'syz.5.9562': attribute type 10 has an invalid length. [ 2122.822319][T12618] netlink: 'syz.4.9565': attribute type 10 has an invalid length. [ 2122.882718][T12621] netlink: 'syz.4.9565': attribute type 10 has an invalid length. [ 2122.892313][T12617] team0: Port device netdevsim0 removed [ 2122.910654][T12618] team0: Port device netdevsim0 added [ 2122.922980][T12621] team0: Port device netdevsim0 removed [ 2123.029983][ T5814] Bluetooth: hci5: Unknown advertising packet type: 0x53 [ 2123.111919][ T5798] usb 11-1: usb_control_msg returned -71 [ 2123.115640][ T5798] usbtmc 11-1:16.0: can't read capabilities [ 2123.118614][ T5798] usb 11-1: USB disconnect, device number 109 [ 2123.236892][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9567'. [ 2123.319906][T12649] netlink: 'syz.7.9570': attribute type 2 has an invalid length. [ 2123.322435][T12649] netlink: 'syz.7.9570': attribute type 1 has an invalid length. [ 2123.324895][T12649] netlink: 112860 bytes leftover after parsing attributes in process `syz.7.9570'. [ 2123.327592][T12649] nbd: couldn't find device at index 1568768 [ 2123.330821][T12649] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9570'. [ 2124.087851][T12689] netlink: 'syz.7.9579': attribute type 10 has an invalid length. [ 2124.095644][T12689] team0: Port device netdevsim0 added [ 2124.101105][T12689] netlink: 'syz.7.9579': attribute type 10 has an invalid length. [ 2124.249339][T12689] team0: Port device netdevsim0 removed [ 2125.015109][T12708] team0: Port device netdevsim0 added [ 2125.046902][T12708] team0: Port device netdevsim0 removed [ 2125.698252][T12721] overlayfs: failed to clone upperpath [ 2125.986176][T12734] xt_CT: No such helper "pptp" [ 2126.001061][ T5798] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2126.728469][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9596'. [ 2126.831832][T12776] validate_nla: 3 callbacks suppressed [ 2126.831868][T12776] netlink: 'syz.7.9597': attribute type 10 has an invalid length. [ 2126.843932][T12776] team0: Port device netdevsim0 added [ 2126.847856][T12776] netlink: 'syz.7.9597': attribute type 10 has an invalid length. [ 2126.956829][T12776] team0: Port device netdevsim0 removed [ 2127.639499][T12783] syz.6.9599 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2127.645489][T12783] CPU: 3 UID: 0 PID: 12783 Comm: syz.6.9599 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2127.645522][T12783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2127.645531][T12783] Call Trace: [ 2127.645535][T12783] <TASK> [ 2127.645541][T12783] dump_stack_lvl+0x16c/0x1f0 [ 2127.645561][T12783] dump_header+0x101/0x930 [ 2127.645577][T12783] oom_kill_process+0x270/0xa60 [ 2127.645590][T12783] ? oom_cpuset_eligible.isra.0+0x199/0x2d0 [ 2127.645605][T12783] out_of_memory+0x1407/0x1700 [ 2127.645623][T12783] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2127.645640][T12783] ? __pfx_out_of_memory+0x10/0x10 [ 2127.645654][T12783] ? lock_acquire+0x2f/0xb0 [ 2127.645668][T12783] ? __alloc_frozen_pages_noprof+0xcc5/0x2470 [ 2127.645690][T12783] __alloc_frozen_pages_noprof+0x1d66/0x2470 [ 2127.645713][T12783] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2127.645733][T12783] ? hlock_class+0x4e/0x130 [ 2127.645750][T12783] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2127.645769][T12783] ? policy_nodemask+0xea/0x4e0 [ 2127.645781][T12783] alloc_pages_mpol+0x1fc/0x540 [ 2127.645815][T12783] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2127.645826][T12783] ? __lock_acquire+0x15a9/0x3c40 [ 2127.645844][T12783] folio_alloc_mpol_noprof+0x36/0x2f0 [ 2127.645858][T12783] vma_alloc_folio_noprof+0xee/0x1b0 [ 2127.645875][T12783] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2127.645888][T12783] ? find_held_lock+0x2d/0x110 [ 2127.645902][T12783] do_pte_missing+0x202f/0x3e10 [ 2127.645924][T12783] __handle_mm_fault+0x1166/0x2c60 [ 2127.645944][T12783] ? __pfx___handle_mm_fault+0x10/0x10 [ 2127.645960][T12783] ? follow_page_pte+0x3ac/0x1490 [ 2127.645975][T12783] ? __pfx_lock_release+0x10/0x10 [ 2127.646000][T12783] handle_mm_fault+0x3fa/0xaa0 [ 2127.646019][T12783] __get_user_pages+0x773/0x36f0 [ 2127.646038][T12783] ? __pfx_mt_find+0x10/0x10 [ 2127.646055][T12783] ? __pfx___get_user_pages+0x10/0x10 [ 2127.646076][T12783] populate_vma_page_range+0x27f/0x3a0 [ 2127.646093][T12783] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2127.646110][T12783] ? __pfx_find_vma_intersection+0x10/0x10 [ 2127.646125][T12783] ? __mm_populate+0xd3/0x380 [ 2127.646143][T12783] __mm_populate+0x1d6/0x380 [ 2127.646159][T12783] ? __pfx___mm_populate+0x10/0x10 [ 2127.646177][T12783] ? up_write+0x1b2/0x520 [ 2127.646195][T12783] __do_sys_mlockall+0x520/0x5c0 [ 2127.646207][T12783] __do_fast_syscall_32+0x73/0x120 [ 2127.646223][T12783] do_fast_syscall_32+0x32/0x80 [ 2127.646239][T12783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2127.646257][T12783] RIP: 0023:0xf73ae579 [ 2127.646266][T12783] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2127.646277][T12783] RSP: 002b:00000000f501555c EFLAGS: 00000296 ORIG_RAX: 0000000000000098 [ 2127.646287][T12783] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 2127.646294][T12783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2127.646300][T12783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2127.646307][T12783] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2127.646313][T12783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2127.646325][T12783] </TASK> [ 2127.646377][T12783] Mem-Info: [ 2127.741774][T12783] active_anon:1730 inactive_anon:11907 isolated_anon:418 [ 2127.741774][T12783] active_file:411 inactive_file:1018 isolated_file:0 [ 2127.741774][T12783] unevictable:14133 dirty:148 writeback:0 [ 2127.741774][T12783] slab_reclaimable:10169 slab_unreclaimable:101494 [ 2127.741774][T12783] mapped:33625 shmem:14683 pagetables:690 [ 2127.741774][T12783] sec_pagetables:344 bounce:0 [ 2127.741774][T12783] kernel_misc_reclaimable:0 [ 2127.741774][T12783] free:22257 free_pcp:164 free_cma:0 [ 2127.754246][T12783] Node 0 active_anon:52kB inactive_anon:84kB active_file:52kB inactive_file:704kB unevictable:2760kB isolated(anon):1672kB isolated(file):0kB mapped:1676kB dirty:24kB writeback:0kB shmem:4028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8408kB pagetables:500kB sec_pagetables:1212kB all_unreclaimable? no [ 2127.763188][T12783] Node 1 active_anon:6884kB inactive_anon:46904kB active_file:1588kB inactive_file:3356kB unevictable:53776kB isolated(anon):0kB isolated(file):0kB mapped:132824kB dirty:568kB writeback:0kB shmem:54192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3408kB pagetables:2260kB sec_pagetables:164kB all_unreclaimable? no [ 2127.772223][T12783] Node 0 DMA free:2172kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:48kB unevictable:60kB writepending:0kB present:15992kB managed:15360kB mlocked:60kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2127.779775][T12783] lowmem_reserve[]: 0 294 294 294 294 [ 2127.781560][T12783] Node 0 DMA32 free:21304kB boost:0kB min:13560kB low:16948kB high:20336kB reserved_highatomic:0KB active_anon:68kB inactive_anon:84kB active_file:108kB inactive_file:604kB unevictable:4372kB writepending:24kB present:1032196kB managed:301720kB mlocked:852kB bounce:0kB free_pcp:436kB local_pcp:60kB free_cma:0kB [ 2127.789535][T12783] lowmem_reserve[]: 0 0 0 0 0 [ 2127.791081][T12783] Node 1 DMA32 free:66296kB boost:106068kB min:153212kB low:164996kB high:176780kB reserved_highatomic:0KB active_anon:6884kB inactive_anon:45704kB active_file:1588kB inactive_file:3356kB unevictable:53776kB writepending:552kB present:1048432kB managed:948252kB mlocked:50252kB bounce:0kB free_pcp:660kB local_pcp:0kB free_cma:0kB [ 2127.799440][T12783] lowmem_reserve[]: 0 0 0 0 0 [ 2127.800856][T12783] Node 0 DMA: 25*4kB (UM) 19*8kB (UM) 6*16kB (UM) 11*32kB (UM) 5*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2172kB [ 2127.805706][T12783] Node 0 DMA32: 1341*4kB (UME) 664*8kB (UME) 203*16kB (UME) 207*32kB (UME) 40*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23108kB [ 2127.810238][T12783] Node 1 DMA32: 791*4kB (UME) 764*8kB (UME) 987*16kB (UM) 483*32kB (UME) 114*64kB (UM) 49*128kB (UM) 29*256kB (UM) 7*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 67148kB [ 2127.815142][T12783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2127.817858][T12783] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2127.820534][T12783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2127.823210][T12783] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2127.825778][T12783] 25007 total pagecache pages [ 2127.827210][T12783] 527 pages in swap cache [ 2127.828447][T12783] Free swap = 62520kB [ 2127.829710][T12783] Total swap = 124996kB [ 2127.831011][T12783] 524155 pages RAM [ 2127.832079][T12783] 0 pages HighMem/MovableOnly [ 2127.833406][T12783] 207822 pages reserved [ 2127.834608][T12783] 0 pages cma reserved [ 2127.835759][T12783] Unreclaimable slab info: [ 2127.837902][T12783] Name Used Total [ 2127.839723][T12783] pid_3 31KB 31KB [ 2127.842752][T12783] pid_2 119KB 157KB [ 2127.844498][T12783] bio-360 7KB 7KB [ 2127.846245][T12783] bio-424 8KB 8KB [ 2127.848008][T12783] bio-440 8KB 8KB [ 2127.849710][T12783] bio-536 15KB 15KB [ 2127.851630][T12783] afs_inode_cache 123KB 123KB [ 2127.853357][T12783] z3fold_handle 1442KB 1575KB [ 2127.855152][T12783] zswap_entry 393KB 569KB [ 2127.856834][T12783] AF_VSOCK 122KB 122KB [ 2127.858528][T12783] sw_flow_stats 16KB 16KB [ 2127.860345][T12783] sw_flow 61KB 61KB [ 2127.862100][T12783] batadv_tt_change_cache 16KB 16KB [ 2127.863914][T12783] batadv_tl_cache 16KB 16KB [ 2127.865639][T12783] ceph_osd_request 127KB 127KB [ 2127.867383][T12783] ceph_msg 30KB 30KB [ 2127.869136][T12783] IEEE-802.15.4-MAC 126KB 126KB [ 2127.870905][T12783] IEEE-802.15.4-RAW 94KB 94KB [ 2127.872611][T12783] p9_req_t 103KB 175KB [ 2127.874324][T12783] INET_SMC 63KB 63KB [ 2127.876041][T12783] SMC6 94KB 94KB [ 2127.877760][T12783] SMC 126KB 126KB [ 2127.879492][T12783] TIPC 220KB 220KB [ 2127.881266][T12783] rds_tcp_connection 15KB 15KB [ 2127.883068][T12783] RDS 128KB 128KB [ 2127.884764][T12783] rds_connection 23KB 23KB [ 2127.886475][T12783] SCTPv6 120KB 120KB [ 2127.888170][T12783] SCTP 127KB 127KB [ 2127.889875][T12783] sctp_chunk 70KB 132KB [ 2127.891744][T12783] sctp_bind_bucket 16KB 16KB [ 2127.893472][T12783] tw_sock_DCCPv6 23KB 23KB [ 2127.895239][T12783] DCCPv6 121KB 121KB [ 2127.897016][T12783] tw_sock_DCCP 15KB 15KB [ 2127.898718][T12783] request_sock_DCCP 22KB 22KB [ 2127.900563][T12783] DCCP 126KB 126KB [ 2127.902332][T12783] ccid2_hc_tx_sock 94KB 94KB [ 2127.904025][T12783] ccid2_hc_rx_sock 11KB 11KB [ 2127.905709][T12783] dccp_ackvec_record 12KB 12KB [ 2127.907426][T12783] dccp_ackvec 47KB 47KB [ 2127.909117][T12783] dccp_bind2_bucket 16KB 16KB [ 2127.910919][T12783] dccp_bind_bucket 16KB 16KB [ 2127.912630][T12783] PNPIPE 123KB 123KB [ 2127.914338][T12783] PHONET 94KB 94KB [ 2127.916062][T12783] L2TP/IPv6 127KB 127KB [ 2127.917818][T12783] L2TP/IP 91KB 91KB [ 2127.919577][T12783] KCM 127KB 127KB [ 2127.921585][T12783] kcm_mux 63KB 63KB [ 2127.923316][T12783] RXRPC 127KB 127KB [ 2127.925058][T12783] rxrpc_call_jar 324KB 446KB [ 2127.926804][T12783] can_gw 15KB 15KB [ 2127.928526][T12783] can_receiver 35KB 55KB [ 2127.930360][T12783] net_bridge_fdb_entry 66KB 66KB [ 2127.932153][T12783] xfrm6_tunnel_spi 4KB 4KB [ 2127.933841][T12783] MPTCPv6 127KB 127KB [ 2127.935541][T12783] ip6-frags 31KB 31KB [ 2127.937229][T12783] fib6_node 130KB 148KB [ 2127.938919][T12783] ip6_dst_cache 158KB 273KB [ 2127.940747][T12783] mfc6_cache 4KB 4KB [ 2127.942576][T12783] PINGv6 127KB 127KB [ 2127.944315][T12783] RAWv6 350KB 350KB [ 2127.946033][T12783] UDPLITEv6 127KB 127KB [ 2127.947741][T12783] UDPv6 191KB 191KB [ 2127.949453][T12783] tw_sock_TCPv6 31KB 31KB [ 2127.951297][T12783] request_sock_TCPv6 31KB 31KB [ 2127.953056][T12783] TCPv6 411KB 546KB [ 2127.954811][T12783] nf_conntrack 39KB 39KB [ 2127.956553][T12783] fq_flow_cache 15KB 15KB [ 2127.958341][T12783] wg_peer 216KB 216KB [ 2127.960038][T12783] allowedips_node 27KB 27KB [ 2127.961849][T12783] ubi_wl_entry_slab 3KB 3KB [ 2127.963618][T12783] t10_alua_lu_gp_cache 7KB 7KB [ 2127.965371][T12783] scsi_sense_cache 44KB 44KB [ 2127.967075][T12783] virtio_scsi_cmd 16KB 16KB [ 2127.968771][T12783] bio-136 75KB 100KB [ 2127.971072][T12783] io_buffer 56KB 92KB [ 2127.972785][T12783] io_kiocb 78KB 156KB [ 2127.974492][T12783] bio-264 31KB 31KB [ 2127.976159][T12783] mqueue_inode_cache 121KB 121KB [ 2127.977897][T12783] f2fs_bio_post_read_ctx 23KB 23KB [ 2127.979732][T12783] jfs_mp 7KB 7KB [ 2127.981563][T12783] fuse_request 31KB 31KB [ 2127.983254][T12783] cifs_small_rq 16KB 16KB [ 2127.984957][T12783] cifs_request 67KB 67KB [ 2127.986733][T12783] cifs_mpx_ids 4KB 4KB [ 2127.988441][T12783] cifs_io_subrequest 39KB 39KB [ 2127.990336][T12783] cifs_io_request 95KB 95KB [ 2127.992027][T12783] nfs_commit_data 15KB 15KB [ 2127.993753][T12783] nfs_write_data 63KB 63KB [ 2127.995550][T12783] ecryptfs_sb_cache 15KB 15KB [ 2127.997281][T12783] jbd2_inode 15KB 15KB [ 2127.998994][T12783] ext4_system_zone 3KB 3KB [ 2128.000890][T12783] ext4_io_end_vec 15KB 15KB [ 2128.002614][T12783] kioctx 127KB 127KB [ 2128.004335][T12783] aio_kiocb 31KB 31KB [ 2128.006049][T12783] userfaultfd_ctx_cache 63KB 63KB [ 2128.007873][T12783] fanotify_path_event 3KB 3KB [ 2128.009613][T12783] fanotify_mark 11KB 11KB [ 2128.011485][T12783] dnotify_mark 15KB 15KB [ 2128.013249][T12783] dnotify_struct 15KB 15KB [ 2128.014970][T12783] fasync_cache 15KB 15KB [ 2128.016667][T12783] pid_namespace 30KB 30KB [ 2128.018373][T12783] posix_timers_cache 31KB 31KB [ 2128.020218][T12783] kvm_vcpu 402KB 587KB [ 2128.021987][T12783] kvm_mmu_page_header 108KB 127KB [ 2128.023739][T12783] pte_list_desc 133KB 153KB [ 2128.025483][T12783] x86_emulator 270KB 270KB [ 2128.027235][T12783] rpc_buffers 127KB 127KB [ 2128.028977][T12783] rpc_tasks 31KB 31KB [ 2128.030723][T12783] UNIX-STREAM 185KB 185KB [ 2128.032499][T12783] UNIX 381KB 680KB [ 2128.034233][T12783] ip4-frags 31KB 31KB [ 2128.035933][T12783] mfc_cache 4KB 4KB [ 2128.037619][T12783] UDP-Lite 186KB 186KB [ 2128.039331][T12783] MPTCP 120KB 120KB [ 2128.041224][T12783] request_sock_subflow_v4 7KB 7KB [ 2128.050227][T12783] tcp_bind2_bucket 16KB 16KB [ 2128.051957][T12783] tcp_bind_bucket 16KB 16KB [ 2128.053639][T12783] inet_peer 16KB 16KB [ 2128.055363][T12783] xfrm_dst 15KB 15KB [ 2128.057051][T12783] xfrm_state 286KB 605KB [ 2128.058733][T12783] ip_fib_trie 53KB 68KB [ 2128.070191][T12783] ip_fib_alias 93KB 110KB [ 2128.071876][T12783] rtable 74KB 124KB [ 2128.073536][T12783] PING 91KB 91KB [ 2128.075231][T12783] RAW 151KB 151KB [ 2128.076924][T12783] UDP 222KB 403KB [ 2128.078647][T12783] tw_sock_TCP 23KB 23KB [ 2128.080392][T12783] request_sock_TCP 15KB 15KB [ 2128.082170][T12783] TCP 430KB 701KB [ 2128.090153][T12783] hugetlbfs_inode_cache 126KB 126KB [ 2128.101958][T12783] fscache_cookie_jar 30KB 30KB [ 2128.103673][T12783] netfs_subrequest 109KB 148KB [ 2128.105409][T12783] netfs_request 236KB 236KB [ 2128.107110][T12783] bio-256 15KB 15KB [ 2128.108808][T12783] ep_head 16KB 16KB [ 2128.114858][T12783] eventpoll_pwq 19KB 19KB [ 2128.116561][T12783] eventpoll_epi 86KB 86KB [ 2128.118249][T12783] inotify_inode_mark 19KB 19KB [ 2128.119951][T12783] sgpool-128 29KB 29KB [ 2128.121676][T12783] sgpool-64 31KB 31KB [ 2128.123362][T12783] sgpool-32 283KB 283KB [ 2128.125040][T12783] sgpool-16 156KB 156KB [ 2128.126736][T12783] sgpool-8 117KB 156KB [ 2128.128434][T12783] bio_crypt_ctx 7KB 7KB [ 2128.130173][T12783] request_queue 229KB 238KB [ 2128.131856][T12783] blkdev_ioc 39KB 39KB [ 2128.133538][T12783] bio-200 156KB 203KB [ 2128.135272][T12783] biovec-max 518KB 833KB [ 2128.136963][T12783] biovec-64 315KB 472KB [ 2128.138678][T12783] biovec-16 93KB 156KB [ 2128.140410][T12783] bio_integrity_payload 7KB 7KB [ 2128.142190][T12783] khugepaged_mm_slot 15KB 15KB [ 2128.143931][T12783] ksm_mm_slot 16KB 16KB [ 2128.145591][T12783] user_namespace 31KB 31KB [ 2128.147318][T12783] uid_cache 31KB 31KB [ 2128.149009][T12783] iommu_iova_magazine 1084KB 1134KB [ 2128.150811][T12783] iommu_iova 288KB 288KB [ 2128.152518][T12783] dmaengine-unmap-256 30KB 30KB [ 2128.154207][T12783] dmaengine-unmap-128 30KB 30KB [ 2128.155905][T12783] dmaengine-unmap-16 4KB 4KB [ 2128.157615][T12783] dmaengine-unmap-2 4KB 4KB [ 2128.159339][T12783] QIPCRTR 126KB 126KB [ 2128.161099][T12783] audit_buffer 19KB 19KB [ 2128.162818][T12783] skbuff_ext_cache 64KB 84KB [ 2128.164457][T12783] skbuff_small_head 489KB 879KB [ 2128.166151][T12783] skbuff_fclone_cache 265KB 328KB [ 2128.167886][T12783] skbuff_head_cache 640KB 851KB [ 2128.169570][T12783] configfs_dir_cache 16KB 16KB [ 2128.171331][T12783] file_lease_cache 55KB 87KB [ 2128.172949][T12783] file_lock_cache 71KB 150KB [ 2128.174619][T12783] file_lock_ctx 23KB 23KB [ 2128.176246][T12783] fsnotify_mark_connector 15KB 15KB [ 2128.178064][T12783] taskstats 61KB 61KB [ 2128.179711][T12783] proc_dir_entry 770KB 859KB [ 2128.181397][T12783] pde_opener 15KB 15KB [ 2128.183112][T12783] seq_file 117KB 156KB [ 2128.184746][T12783] sigqueue 78KB 98KB [ 2128.186364][T12783] shmem_inode_cache 7737KB 8097KB [ 2128.188002][T12783] kernfs_iattrs_cache 246KB 246KB [ 2128.189770][T12783] kernfs_node_cache 36240KB 37046KB [ 2128.191541][T12783] mnt_cache 118KB 181KB [ 2128.193255][T12783] bfilp 31KB 31KB [ 2128.194965][T12783] filp 660KB 693KB [ 2128.196656][T12783] names_cache 10068KB 10497KB [ 2128.198315][T12783] net_namespace 151KB 151KB [ 2128.199940][T12783] ima_iint_cache 55KB 55KB [ 2128.201622][T12783] lsm_inode_cache 2448KB 2634KB [ 2128.203246][T12783] lsm_file_cache 224KB 224KB [ 2128.204851][T12783] key_jar 31KB 31KB [ 2128.206458][T12783] uts_namespace 31KB 31KB [ 2128.208132][T12783] nsproxy 15KB 15KB [ 2128.209799][T12783] vma_lock 699KB 740KB [ 2128.211516][T12783] vm_area_struct 811KB 852KB [ 2128.213174][T12783] fs_cache 57KB 92KB [ 2128.214833][T12783] files_cache 322KB 414KB [ 2128.216457][T12783] signal_cache 831KB 1488KB [ 2128.218070][T12783] sighand_cache 1066KB 1984KB [ 2128.219687][T12783] task_struct 4069KB 4757KB [ 2128.221366][T12783] cred 172KB 292KB [ 2128.223026][T12783] anon_vma_chain 264KB 267KB [ 2128.224653][T12783] anon_vma 318KB 342KB [ 2128.226329][T12783] pid 205KB 433KB [ 2128.227980][T12783] Acpi-Operand 238KB 332KB [ 2128.229617][T12783] Acpi-ParseExt 90KB 90KB [ 2128.231283][T12783] Acpi-Parse 90KB 130KB [ 2128.232914][T12783] Acpi-State 70KB 106KB [ 2128.234540][T12783] Acpi-Namespace 52KB 52KB [ 2128.236151][T12783] shared_policy_node 8KB 8KB [ 2128.237803][T12783] numa_policy 15KB 15KB [ 2128.239445][T12783] perf_event 30KB 30KB [ 2128.241173][T12783] trace_event_file 536KB 536KB [ 2128.242894][T12783] ftrace_event_field 988KB 988KB [ 2128.244542][T12783] pool_workqueue 2077KB 2176KB [ 2128.246182][T12783] maple_node 1227KB 1280KB [ 2128.247935][T12783] task_group 61KB 61KB [ 2128.249573][T12783] mm_struct 460KB 570KB [ 2128.251380][T12783] vmap_area 766KB 1370KB [ 2128.253068][T12783] debug_objects_cache 4141KB 4543KB [ 2128.254780][T12783] page->ptl 124KB 169KB [ 2128.256424][T12783] kmalloc-cg-8k 4208KB 4576KB [ 2128.258136][T12783] kmalloc-cg-4k 18360KB 20064KB [ 2128.259802][T12783] kmalloc-cg-2k 13340KB 14656KB [ 2128.261492][T12783] kmalloc-cg-1k 2892KB 3552KB [ 2128.263169][T12783] kmalloc-cg-512 1333KB 1584KB [ 2128.264774][T12783] kmalloc-cg-256 416KB 472KB [ 2128.266388][T12783] kmalloc-cg-128 297KB 344KB [ 2128.268004][T12783] kmalloc-cg-64 92KB 108KB [ 2128.269630][T12783] kmalloc-cg-32 70KB 116KB [ 2128.271339][T12783] kmalloc-cg-16 47KB 100KB [ 2128.272971][T12783] kmalloc-cg-8 48KB 68KB [ 2128.274597][T12783] kmalloc-cg-192 214KB 248KB [ 2128.276223][T12783] kmalloc-cg-96 64KB 64KB [ 2128.277867][T12783] kmalloc-8k 5440KB 5792KB [ 2128.279484][T12783] kmalloc-4k 22072KB 22248KB [ 2128.281222][T12783] kmalloc-2k 15212KB 16096KB [ 2128.287891][T12783] kmalloc-1k 9168KB 11616KB [ 2128.289577][T12783] kmalloc-512 10379KB 11504KB [ 2128.291578][T12783] kmalloc-256 4131KB 4664KB [ 2128.293548][T12783] kmalloc-128 1167KB 1376KB [ 2128.295377][T12783] kmalloc-64 3598KB 5308KB [ 2128.297142][T12783] kmalloc-32 2066KB 2696KB [ 2128.298901][T12783] kmalloc-16 678KB 744KB [ 2128.301049][T12783] kmalloc-8 1054KB 1124KB [ 2128.302838][T12783] kmalloc-192 2321KB 2856KB [ 2128.304550][T12783] kmalloc-96 1274KB 1556KB [ 2128.306274][T12783] kmem_cache_node 226KB 228KB [ 2128.307972][T12783] kmem_cache 195KB 195KB [ 2128.309667][T12783] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz6,task=syz.6.9599,pid=12783,uid=0 [ 2128.314237][T12783] Out of memory (oom_kill_allocating_task): Killed process 12783 (syz.6.9599) total-vm:101852kB, anon-rss:12928kB, file-rss:58472kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 2143.361330][T12812] lo speed is unknown, defaulting to 1000 [ 2143.416143][T12824] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9604'. [ 2143.620367][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 2143.620379][ T40] audit: type=1326 audit(2000000000.159:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.5.9603" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f91579 code=0x0 [ 2143.950135][ T5815] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2144.112879][ T5815] usb 9-1: config 0 has no interfaces? [ 2144.114569][ T5815] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2144.117126][ T5815] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.121022][ T5815] usb 9-1: config 0 descriptor?? [ 2144.322199][T12868] overlayfs: failed to clone upperpath [ 2144.370297][ T5797] usb 9-1: USB disconnect, device number 33 [ 2144.647598][T12881] netlink: 'syz.7.9609': attribute type 10 has an invalid length. [ 2144.652536][T12881] team0: Port device netdevsim0 added [ 2144.662192][T12881] netlink: 'syz.7.9609': attribute type 10 has an invalid length. [ 2144.671722][T12881] team0: Port device netdevsim0 removed [ 2144.705980][ T40] audit: type=1326 audit(2000000001.249:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.6.9610" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ae579 code=0x0 [ 2145.666500][T12895] netlink: 'syz.7.9613': attribute type 4 has an invalid length. [ 2146.926407][T12903] netlink: 'syz.5.9615': attribute type 4 has an invalid length. [ 2147.887182][T12925] netlink: 'syz.5.9620': attribute type 10 has an invalid length. [ 2147.890951][T12925] team0: Port device netdevsim0 added [ 2147.908391][T12924] netlink: 'syz.4.9617': attribute type 10 has an invalid length. [ 2147.949381][T12926] netlink: 'syz.4.9617': attribute type 10 has an invalid length. [ 2148.046285][T12924] team0: Port device netdevsim0 added [ 2148.065632][T12926] team0: Port device netdevsim0 removed [ 2148.076760][T12929] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 2148.079365][T12929] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9622'. [ 2149.339630][ T2014] libceph: connect (1)[c::]:6789 error -101 [ 2149.341563][ T2014] libceph: mon0 (1)[c::]:6789 connect error [ 2149.447717][T12960] ceph: No mds server is up or the cluster is laggy [ 2149.497474][ T40] audit: type=1326 audit(2000000006.039:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12965 comm="syz.6.9627" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ae579 code=0x0 [ 2149.689817][T12978] overlayfs: failed to clone upperpath [ 2150.093166][T12994] netlink: 'syz.5.9632': attribute type 10 has an invalid length. [ 2150.102310][T12994] netlink: 'syz.5.9632': attribute type 10 has an invalid length. [ 2150.105893][T12994] team0: Port device netdevsim0 removed [ 2150.283962][T12990] netlink: 'syz.4.9631': attribute type 4 has an invalid length. [ 2150.983483][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9638'. [ 2151.030213][ T2014] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 2151.210163][ T2014] usb 10-1: Using ep0 maxpacket: 8 [ 2151.213740][ T2014] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 2151.216074][ T2014] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2151.219307][ T2014] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2151.222185][ T2014] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2151.224968][ T2014] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2151.228568][ T2014] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2151.231253][ T2014] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.446434][ T2014] usb 10-1: usb_control_msg returned -32 [ 2151.448065][ T2014] usbtmc 10-1:16.0: can't read capabilities [ 2151.569390][T13034] lo speed is unknown, defaulting to 1000 [ 2151.617705][T13045] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9643'. [ 2152.156997][T13070] netlink: 'syz.7.9644': attribute type 4 has an invalid length. [ 2152.649528][T13060] wireguard0: entered promiscuous mode [ 2152.653485][T13060] wireguard0: entered allmulticast mode [ 2152.904053][T13085] netlink: 'syz.6.9645': attribute type 10 has an invalid length. [ 2152.906502][T13085] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 2152.911147][T13085] bond0: (slave netdevsim0): Releasing backup interface [ 2152.917396][T13085] netlink: 'syz.6.9645': attribute type 10 has an invalid length. [ 2152.924195][T13085] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2153.606293][T13105] lo speed is unknown, defaulting to 1000 [ 2153.643318][T13114] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9653'. [ 2153.916311][T13142] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9657'. [ 2154.238628][ T5815] usb 10-1: USB disconnect, device number 26 [ 2154.363499][T13166] netlink: 'syz.7.9661': attribute type 10 has an invalid length. [ 2154.371242][T13166] team0: Port device netdevsim0 added [ 2154.375070][T13166] netlink: 'syz.7.9661': attribute type 10 has an invalid length. [ 2154.384344][T13166] team0: Port device netdevsim0 removed [ 2154.640298][ T2014] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2154.800128][ T2014] usb 9-1: Using ep0 maxpacket: 8 [ 2154.802915][ T2014] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 2154.805200][ T2014] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2154.808326][ T2014] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2154.811274][ T2014] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2154.814067][ T2014] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2154.817678][ T2014] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2154.820884][ T2014] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.029390][ T2014] usb 9-1: usb_control_msg returned -32 [ 2155.031674][ T2014] usbtmc 9-1:16.0: can't read capabilities [ 2155.332365][ T2014] usb 9-1: USB disconnect, device number 34 [ 2155.370103][T13197] netlink: 'syz.5.9670': attribute type 10 has an invalid length. [ 2155.373040][T13197] team0: Port device netdevsim0 added [ 2155.377929][T13197] netlink: 'syz.5.9670': attribute type 10 has an invalid length. [ 2155.381787][T13197] team0: Port device netdevsim0 removed [ 2155.908980][ T40] audit: type=1400 audit(2000000012.449:1677): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=13224 comm="syz.4.9677" [ 2156.082534][T13236] lo speed is unknown, defaulting to 1000 [ 2156.132961][T13252] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9681'. [ 2156.465589][T13284] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9688'. [ 2156.472741][ T5814] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 2156.691801][T13296] lo speed is unknown, defaulting to 1000 [ 2156.716815][T13302] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9693'. [ 2157.263496][T13340] random: crng reseeded on system resumption [ 2157.274536][T13340] Restarting kernel threads ... done. [ 2157.492454][ T5814] Bluetooth: hci5: unknown advertising packet type: 0x70 [ 2157.492478][ T5814] Bluetooth: hci5: Dropping invalid advertising data [ 2157.497456][ T5814] Bluetooth: hci5: Malformed LE Event: 0x02 [ 2158.587882][T13381] FAULT_INJECTION: forcing a failure. [ 2158.587882][T13381] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.591666][T13381] CPU: 2 UID: 0 PID: 13381 Comm: syz.4.9711 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2158.591681][T13381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2158.591688][T13381] Call Trace: [ 2158.591700][T13381] <TASK> [ 2158.591707][T13381] dump_stack_lvl+0x16c/0x1f0 [ 2158.591726][T13381] should_fail_ex+0x50a/0x650 [ 2158.591737][T13381] ? fs_reclaim_acquire+0xae/0x150 [ 2158.591752][T13381] should_failslab+0xc2/0x120 [ 2158.591764][T13381] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 2158.591780][T13381] ? ksys_write+0x12b/0x250 [ 2158.591795][T13381] ? sock_alloc_inode+0x25/0x1c0 [ 2158.591809][T13381] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2158.591821][T13381] sock_alloc_inode+0x25/0x1c0 [ 2158.591832][T13381] alloc_inode+0x5d/0x230 [ 2158.591843][T13381] sock_alloc+0x40/0x280 [ 2158.591854][T13381] do_accept+0xf8/0x530 [ 2158.591868][T13381] ? do_raw_spin_lock+0x12d/0x2c0 [ 2158.591879][T13381] ? __pfx_do_accept+0x10/0x10 [ 2158.591901][T13381] __sys_accept4+0xfe/0x1b0 [ 2158.591915][T13381] ? __pfx___sys_accept4+0x10/0x10 [ 2158.591930][T13381] ? __pfx_ksys_write+0x10/0x10 [ 2158.591947][T13381] __ia32_sys_accept4+0x94/0x100 [ 2158.591962][T13381] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2158.591979][T13381] __do_fast_syscall_32+0x73/0x120 [ 2158.591995][T13381] do_fast_syscall_32+0x32/0x80 [ 2158.592010][T13381] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2158.592028][T13381] RIP: 0023:0xf7f78579 [ 2158.592036][T13381] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2158.592047][T13381] RSP: 002b:00000000f507555c EFLAGS: 00000296 ORIG_RAX: 000000000000016c [ 2158.592057][T13381] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000000 [ 2158.592064][T13381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2158.592070][T13381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2158.592076][T13381] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2158.592082][T13381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2158.592094][T13381] </TASK> [ 2159.290664][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 2159.307739][T13415] netlink: 'syz.7.9720': attribute type 4 has an invalid length. [ 2159.444912][ T40] audit: type=1326 audit(2000000015.989:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.4.9716" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f78579 code=0x0 [ 2159.746111][T13423] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9721'. [ 2159.749111][T13423] openvswitch: netlink: IP tunnel dst address not specified [ 2160.189528][T13449] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9729'. [ 2160.192148][T13449] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9729'. [ 2160.194850][T13449] unsupported nlmsg_type 40 [ 2161.188430][T13473] netlink: 'syz.5.9734': attribute type 4 has an invalid length. [ 2161.227752][ T40] audit: type=1400 audit(2000000017.769:1679): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="GPL" pid=13482 comm="syz.6.9739" [ 2161.234687][T13483] siw: device registration error -23 [ 2161.333754][T13489] netlink: 'syz.6.9741': attribute type 21 has an invalid length. [ 2161.335963][T13489] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9741'. [ 2161.338506][T13489] netlink: 'syz.6.9741': attribute type 4 has an invalid length. [ 2161.340703][T13489] netlink: 'syz.6.9741': attribute type 3 has an invalid length. [ 2161.343439][T13489] netlink: 3 bytes leftover after parsing attributes in process `syz.6.9741'. [ 2161.882799][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9745'. [ 2161.899163][ T40] audit: type=1326 audit(2000000018.439:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.9745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2161.911582][ T40] audit: type=1326 audit(2000000018.439:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.9745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2161.920743][ T40] audit: type=1326 audit(2000000018.449:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.9745" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2161.926746][ T40] audit: type=1326 audit(2000000018.449:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.9745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2161.935547][ T40] audit: type=1326 audit(2000000018.449:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.9745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2161.946789][ T40] audit: type=1326 audit(2000000018.449:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.9745" exe="/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2161.953322][ T40] audit: type=1326 audit(2000000018.449:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.9745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2161.959482][ T40] audit: type=1326 audit(2000000018.449:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.9745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2161.967117][ T40] audit: type=1326 audit(2000000018.449:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.9745" exe="/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2162.119999][T13514] siw: device registration error -23 [ 2162.303876][T13528] netlink: 'syz.4.9748': attribute type 10 has an invalid length. [ 2162.307068][T13528] team0: Port device netdevsim0 added [ 2162.311443][T13528] netlink: 'syz.4.9748': attribute type 10 has an invalid length. [ 2162.323820][T13528] team0: Port device netdevsim0 removed [ 2162.560418][T13540] netlink: 'syz.7.9755': attribute type 4 has an invalid length. [ 2162.566988][T13540] netlink: 'syz.7.9755': attribute type 4 has an invalid length. [ 2162.626869][T13543] netlink: 'syz.5.9753': attribute type 4 has an invalid length. [ 2163.225035][T13558] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9761'. [ 2164.596086][T13600] overlayfs: failed to clone upperpath [ 2164.665278][T13601] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9772'. [ 2164.846977][T13606] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9773'. [ 2165.258262][T13618] netlink: 'syz.7.9776': attribute type 4 has an invalid length. [ 2165.470327][ T45] page: refcount:2 mapcount:0 mapping:0000000000000000 index:0x535 pfn:0x4dbc2 [ 2165.471667][ T1146] slab kmalloc-96 [ 2165.473079][ T45] flags: 0x4fff00000010001(locked|reclaim|node=1|zone=1|lastcpupid=0x7ff) [ 2165.473134][ T1146] start ffff88802951b180 [ 2165.474308][ T45] raw: 04fff00000010001 ffffc900006c75a8 ffffc900006c75a8 ffffffff8b7e0802 [ 2165.476813][ T1146] pointer offset 0 size 96 [ 2165.476830][ T1146] list_add corruption. next->prev should be prev (ffffe8ffac239150), but was ffffffff848b1bf0. (next=ffff88802951b180). [ 2165.478189][ T45] raw: 0000000000000535 0000000000000000 00000002ffffffff 0000000000000000 [ 2165.480700][ T1146] ------------[ cut here ]------------ [ 2165.481857][ T45] page dumped because: VM_BUG_ON_PAGE(!((__builtin_constant_p(PAGE_CLAIMED) && __builtin_constant_p((uintptr_t)(&page->private) != (uintptr_t)((void *)0)) && (uintptr_t)(&page->private) != (uintptr_t)((void *)0) && __builtin_constant_p(*(const unsigned long *)(&page->private))) ? const_test_bit(PAGE_CLAIMED, &page->private) : _test_bit(PAGE_CLAIMED, &page->private))) [ 2165.485457][ T1146] kernel BUG at lib/list_debug.c:29! [ 2165.485476][ T1146] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 2165.485487][ T1146] CPU: 0 UID: 0 PID: 1146 Comm: kworker/u32:9 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 2165.488046][ T45] page_owner tracks the page as allocated [ 2165.489528][ T1146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2165.489539][ T1146] Workqueue: zswap1 compact_page_work [ 2165.489558][ T1146] RIP: 0010:__list_add_valid_or_report+0xec/0x190 [ 2165.499766][ T45] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12800(GFP_NOWAIT|__GFP_NORETRY), pid 114, tgid 114 (kswapd1), ts 2163386274393, free_ts 2163360671044 [ 2165.501137][ T1146] Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 a5 00 00 00 48 8b 55 08 48 89 e9 48 c7 c7 e0 5c d3 8b e8 b5 75 d1 fc 90 <0f> 0b 48 89 f7 48 89 34 24 e8 06 06 33 fd 48 8b 34 24 48 b8 00 00 [ 2165.501151][ T1146] RSP: 0018:ffffc90006b2fb88 EFLAGS: 00010282 [ 2165.501160][ T1146] RAX: 0000000000000075 RBX: ffff88804dbc2000 RCX: ffffffff81995739 [ 2165.501167][ T1146] RDX: 0000000000000000 RSI: ffffffff8199baae RDI: 0000000000000005 [ 2165.501174][ T1146] RBP: ffff88802951b180 R08: 0000000000000005 R09: 0000000000000000 [ 2165.501181][ T1146] R10: 0000000000000002 R11: 0000000000000007 R12: ffff88804dbc2000 [ 2165.501188][ T1146] R13: ffff88802951b188 R14: ffffea000136f080 R15: ffff88804dbc2008 [ 2165.504110][ T45] post_alloc_hook+0x181/0x1b0 [ 2165.507509][ T1146] FS: 0000000000000000(0000) GS:ffff88802b400000(0000) knlGS:0000000000000000 [ 2165.507534][ T1146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2165.509354][ T45] get_page_from_freelist+0xfce/0x2f80 [ 2165.512288][ T1146] CR2: 00000000f73d6188 CR3: 0000000013362000 CR4: 0000000000352ef0 [ 2165.512298][ T1146] Call Trace: [ 2165.512303][ T1146] <TASK> [ 2165.512307][ T1146] ? die+0x31/0x80 [ 2165.512324][ T1146] ? do_trap+0x232/0x430 [ 2165.513856][ T45] __alloc_frozen_pages_noprof+0x221/0x2470 [ 2165.515573][ T1146] ? __list_add_valid_or_report+0xec/0x190 [ 2165.515590][ T1146] ? __list_add_valid_or_report+0xec/0x190 [ 2165.520432][ T45] alloc_pages_mpol+0x1fc/0x540 [ 2165.525640][ T1146] ? do_error_trap+0xf4/0x230 [ 2165.525659][ T1146] ? __list_add_valid_or_report+0xec/0x190 [ 2165.525674][ T1146] ? handle_invalid_op+0x34/0x40 [ 2165.525686][ T1146] ? __list_add_valid_or_report+0xec/0x190 [ 2165.527572][ T45] alloc_pages_noprof+0x131/0x390 [ 2165.529677][ T1146] ? exc_invalid_op+0x2e/0x50 [ 2165.529700][ T1146] ? asm_exc_invalid_op+0x1a/0x20 [ 2165.531951][ T45] z3fold_zpool_malloc+0x853/0x14f0 [ 2165.534073][ T1146] ? __wake_up_klogd.part.0+0x99/0xf0 [ 2165.534094][ T1146] ? vprintk_emit+0x39e/0x6f0 [ 2165.536312][ T45] zswap_store+0xf9d/0x2690 [ 2165.538475][ T1146] ? __list_add_valid_or_report+0xec/0x190 [ 2165.538492][ T1146] ? __list_add_valid_or_report+0xeb/0x190 [ 2165.538506][ T1146] do_compact_page+0x10f2/0x27b0 [ 2165.539872][ T45] swap_writepage+0x3b6/0x1120 [ 2165.542275][ T1146] ? lock_acquire+0x2f/0xb0 [ 2165.542294][ T1146] ? process_one_work+0x921/0x1ba0 [ 2165.544128][ T45] pageout+0x3b2/0xaa0 [ 2165.545636][ T1146] process_one_work+0x9c5/0x1ba0 [ 2165.545655][ T1146] ? __pfx_batadv_nc_worker+0x10/0x10 [ 2165.547846][ T45] shrink_folio_list+0x2f7f/0x40c0 [ 2165.548755][ T1146] ? __pfx_process_one_work+0x10/0x10 [ 2165.549627][ T45] evict_folios+0x774/0x1ab0 [ 2165.550637][ T1146] ? assign_work+0x1a0/0x250 [ 2165.550655][ T1146] worker_thread+0x6c8/0xf00 [ 2165.550671][ T1146] ? __pfx_worker_thread+0x10/0x10 [ 2165.551894][ T45] try_to_shrink_lruvec+0x5a2/0x9a0 [ 2165.553479][ T1146] kthread+0x3af/0x750 [ 2165.553496][ T1146] ? __pfx_kthread+0x10/0x10 [ 2165.555132][ T45] shrink_one+0x3e3/0x7b0 [ 2165.556737][ T1146] ? lock_acquire+0x2f/0xb0 [ 2165.556759][ T1146] ? __pfx_kthread+0x10/0x10 [ 2165.558138][ T45] shrink_node+0x2761/0x3e60 [ 2165.559413][ T1146] ret_from_fork+0x45/0x80 [ 2165.559432][ T1146] ? __pfx_kthread+0x10/0x10 [ 2165.561131][ T45] balance_pgdat+0xbab/0x19c0 [ 2165.562465][ T1146] ret_from_fork_asm+0x1a/0x30 [ 2165.562486][ T1146] </TASK> [ 2165.562490][ T1146] Modules linked in: [ 2165.564131][ T45] kswapd+0x590/0xb70 [ 2165.565587][ T1146] ---[ end trace 0000000000000000 ]--- [ 2165.566834][ T45] page last free pid 13557 tgid 13557 stack trace: [ 2165.568209][ T1146] RIP: 0010:__list_add_valid_or_report+0xec/0x190 [ 2165.568229][ T1146] Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 a5 00 00 00 48 8b 55 08 48 89 e9 48 c7 c7 e0 5c d3 8b e8 b5 75 d1 fc 90 <0f> 0b 48 89 f7 48 89 34 24 e8 06 06 33 fd 48 8b 34 24 48 b8 00 00 [ 2165.569701][ T45] free_frozen_pages+0x6db/0xfb0 [ 2165.571194][ T1146] RSP: 0018:ffffc90006b2fb88 EFLAGS: 00010282 [ 2165.571207][ T1146] RAX: 0000000000000075 RBX: ffff88804dbc2000 RCX: ffffffff81995739 [ 2165.572547][ T45] vfree+0x174/0x950 [ 2165.573810][ T1146] RDX: 0000000000000000 RSI: ffffffff8199baae RDI: 0000000000000005 [ 2165.573821][ T1146] RBP: ffff88802951b180 R08: 0000000000000005 R09: 0000000000000000 [ 2165.573828][ T1146] R10: 0000000000000002 R11: 0000000000000007 R12: ffff88804dbc2000 [ 2165.575555][ T45] kvfree+0x33/0x50 [ 2165.577038][ T1146] R13: ffff88802951b188 R14: ffffea000136f080 R15: ffff88804dbc2008 [ 2165.577049][ T1146] FS: 0000000000000000(0000) GS:ffff88802b400000(0000) knlGS:0000000000000000 [ 2165.577069][ T1146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2165.578492][ T45] kvm_put_kvm+0x8f7/0xb40 [ 2165.579806][ T1146] CR2: 00000000f73d6188 CR3: 0000000013362000 CR4: 0000000000352ef0 [ 2165.579817][ T1146] Kernel panic - not syncing: Fatal exception [ 2165.581493][ T1146] Kernel Offset: disabled VM DIAGNOSIS: 15:51:04 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000041 RCX=ffffffff8199bcda RDX=ffff88802576c880 RSI=ffffffff8199bcc6 RDI=0000000000000001 RBP=1ffff92000d65efe RSP=ffffc90006b2f7e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=2139323a632e656b R12=0000000000000001 R13=0000000000000000 R14=ffff888040ebc880 R15=ffffc90006b2f8a8 RIP=ffffffff8199bcc8 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d6188 CR3=0000000013362000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000047c00000000 0000001100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000004e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853e9e55 RDI=ffffffff9ab71ea0 RBP=ffffffff9ab71e60 RSP=ffffc900006c6ea0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=000000000000004e R14=ffffffff9ab71e60 R15=0000000000000000 RIP=ffffffff853e9e7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000577c54c0 CR3=0000000064306000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000047c00000000 0000001100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=1ffffffff20c5742 RDX=ffff888022884880 RSI=ffffffff81689484 RDI=ffffffff81689471 RBP=ffff88804a201408 RSP=ffffc9000367f388 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff90628717 R11=0000000000000001 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b63fc80 R15=ffffed1009440281 RIP=ffffffff81689486 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057d29a80 CR3=000000004a21a000 CR4=00352ef0 DR0=fffffffffffffff7 DR1=0000000000000001 DR2=00000000000000f7 DR3=0000000000000009 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f742cff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=1ffffffff20c5742 RDX=ffff8880242d8000 RSI=ffffffff81689484 RDI=ffffffff81689471 RBP=ffff88802b73fc94 RSP=ffffc900033f7388 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff90628717 R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=ffff88802b73fc80 R15=0000000000100000 RIP=ffffffff81689486 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057b9f97c CR3=000000004ef4e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000