last executing test programs: 4.253215519s ago: executing program 0 (id=960): r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$pmem0(0xffffff9c, &(0x7f0000000080), 0x2080, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f00000000c0)=0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r5, 0x89e2) r6 = openat$cgroup_root(0xffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) syz_emit_ethernet(0xf2, &(0x7f00000002c0)={@empty, @local, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0x81, 0x0, 0x1}, {0x9}, {0x3}, {0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x8a}, {0xe, 0x0, 0x1}, {0x7}], @generic="ebb1f015cf01c7c12092754b99dfb30317c59b9f3a08e967f642f1de032fae13b903fa36b37f11b82da55f2c8f47094c84f9047eb63ad66fb6b2d4fdb3151fab53ce37461d38249787639c8e7cbe975c9fb80dc1b2ef2d03b12a28aad01b61dd56bf50a78994f097f7f67f6f26304bd80df8b64eb77db2c46e0ca831708052c10a7a0c3f0f56157abe6c80aa65c56415b2062a64e84921a39078a6e8b15ae89fc50f20ad02f910391cd28316672ff1a58e3809c8da99d3a1"}}}}, &(0x7f00000003c0)={0x1, 0x4, [0xaab, 0x512, 0x5, 0xd2]}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r7) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x120, r8, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x530}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4d}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3bad}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x120}}, 0x40084) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000640), &(0x7f0000000680)={'U-', 0x4}, 0x16, 0x3) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x70}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xfc, 0x2, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0xfc}, 0x1, 0x0, 0x0, 0x2000c815}, 0x40080) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r3) sendmsg$IPVS_CMD_FLUSH(r9, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x70, r10, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$NFT_BATCH(r7, &(0x7f0000001600)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x9c4, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x124, 0x3, 0x0, 0x1, [{0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xc0, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x55a}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}]}}}, {0x60, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x43, 0x6, 0x1, 0x0, "ab7649f51770d417dc2f1045e4b1f042be431109a1f7517467bd838da291a405d5c77786d3dfadf05cdda93e63ba00998069ef92b2041aa98d79d154e19ae9"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x84c, 0x3, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x128, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}, {0x218, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x54, 0x1, "ee6a02a1ebf59995aae096b4c911bd5a91fec4413f98930d585e07c6959616965fff227f11615a820c41cc2a4310b6c3113181854072376443697af1a4321484508bbb0aaa205bdf7c8a6058ffbc5c3d"}, @NFTA_DATA_VALUE={0xe4, 0x1, "c77e37a16b6b842358ec3a44c176bc2c6ef872f73ee42c7160b199ad2917c46d25d7401b647571fc3f7e6153337a49b3cf294572694bf3b4085079f271e656be8e5477e16f0b1c3a9cd3c3548e1c52fb480acab056fd5ddcf55f35c99c267da2eaf594300158dc6e02ae000367825147fade17e9cfd275350a2b2d17bba5cad03adcf066dc9fed9bda027ae54f89d55c2d315e89bb4b6166cc195b0701d480dfe50c66f2f1c1625458d24bf126d932195f9e128ba30a4a0abe48414a48abe04faf992f2a4985477c16d7031e78969520337c8e5c9e03ec2535cc526ea6c47601"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x53}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "96abbea89e9b9908b4c8b87039fda5bfad504e6eaeef590fdda291ec553e2422b7e9a5d2eb8c6bdbe6e4bd8f92"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x2c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x84, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "69609e16a9a0f7922448fc85a58581a304d3eff624df0080ef2224e4398ecf6cd1a8cee8a2134ef5b335528a38bc11f753"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7c, 0x1, "8b7f8d808d878185407cfe26eb54d3eef4ee2c2ede9ca67b7b750fb8ca2e05e99e89f6076628c98571b7143bd4b0d4e1313632bba8ce469b7cdb2a552c4ac567a0eb2980dc9e8b3aed4708dad97650c415cf57f9601e02adc7ee84998db413f316948262fe8fe2609c10803927ce571b03f8e41c0597a971"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xf3, 0x6, 0x1, 0x0, "3e599ec45a783f3cf223efbf5e23e53241bafc696a451c3e485427f4b2f27913c953f9d6c1068e26a449af2130f0dd9b25dfef29e3e365cc753f57e10d0dc867d1a5481b5f93ce330ae58482ca2c1e491aa637cdc051e369a681084aa915f60c2572871659e66840568b77f144bdb30762d3e4724b6de9e6feeb2be2cbec5a2a2c79c4db391e777e8ebb6d32ddaf5ca530aeadc403bca0fcb31588f2c9a5474bae86716096f61f4cbfcd3b1d24fa873c0a2e9322b10379627381041759393a4b0c41571abcc4cb0fde4ab01ffafdc758b48e37c4b3a9cfafd6adce628fa4cc5f6b0ccc1e6803e954a72f6380707437"}]}, {0x20c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x1fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "77ef42816923aefcf349a1ec471d146e347656631a617390493b3488e263d3cfa561484ff6d0949ba41c70aa94c4d2ec60dea09e3999e849ba13c993734c2950f7cca901614a21922efe282920ce6551de26d055f6ad3da1b1755f5ed0bbfed8ab6450657523449610af67cc1f9077b472286853c59e04fe1b42eeb71d2b5bcc1b0281b3f7aacd2a92b12f6e441b560379b5764a3480155326f605a395b29c78dedf6704e239ab1d1c4f4bb3d61564a0398c1c825daff58fbbe93b59e844d0328e058889c97826a836ccd010579350f8f9c1df117e976bb6a5be45e00c84b7e0cd2a3ee0881c9e616b97b6ae1eea19"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4c}, 0x1, 0x0, 0x0, 0x80}, 0x20004800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000001640)=0x8, 0x8) gettid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000001680)=[@in6={0xa, 0x4e24, 0x1200, @private0, 0x80}, @in6={0xa, 0x4e24, 0x3, @mcast1}, @in6={0xa, 0x4e20, 0x5, @private2, 0xc6}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0xffffffcb, @remote, 0x80000001}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x1ff, @empty, 0x8000}, @in={0x2, 0x4e21, @remote}], 0xbc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000001740)={{0x1, 0x1, 0x18, r9, {r0}}, './file0\x00'}) sendmsg$NFT_BATCH(r11, &(0x7f0000004280)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004240)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_DELSETELEM={0x2898, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2884, 0x3, 0x0, 0x1, [{0x194, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x190, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8b, 0x1, "00bc426a55dfc7bac56989bb5f08600395f8a5dfcd0e4c07a88d2b8e5f5107cdd9397719537cdc28a12ff839d3853062ef7b14d1caaffc36333ade119028bdb6c84f088633d824efe3b91f722efb18de18a662702ae395f3fbe5d6b95ed6f96862c4ae7ebd64ea909d7d0bc59b9273227212a7184010cedf85d3023b92ffe734b7093820177adc"}, @NFTA_DATA_VALUE={0xe8, 0x1, "049f049b08c3af2eaea2fe77a9afab84edd5d832ca215c75685abd79b2765f323d951be180e192b74d3b02265fc22aa1b3428ec88a8481e85df700067b4c5c125d7944349c624045239d49a5fb2bd278324a9a3d55022de7ea966ababc1508741ebef0b0e387b49c52aa8aea43c7472b6f45adfd741373cf19120d893c641ca629ff07cb2a826ea687085d301d0ccb92c961b8d9c6c3fd19c0d22f4710d6ba75d341e20f33230739baffcc198a99ef94797e0ae818087e2f2edcea988b50fc098f9fb1800bfbb1821c8d36e54e202e12527f92ec8cbcccfeebab169ad2635996edd0aac3"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0xe8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xe3, 0x6, 0x1, 0x0, "f021bfc3b5bf8eeb197fbbfcb89483a4aed56034ef0ab0f8b05f5177b48eedda6b22cef836edb6462cc1b2e6714eb959e5dfbed058abd7535fc636ed9d516e4f5d95c6e4e5aa28816e7b049adf0a6368515456c09280a3c4b9c6cdf2688e309f474519b5ff140c7538108bc848cb7490a916e6fde30375c4b2c97dfc313cad39d672edccc203b7f2a04dbfac278b0507ba21722e93e89f37c2ccb3861ea904452f0ce27b49b838a83a1597283bae36a08a382cb3a96c35931fd7a3207b3cf9421e3625a376cd62c140b498a90816a06ec275519049d652a06e0a8036725614"}]}, {0x21d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'icmp\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x2128, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xa8, 0x1, "0c0539c2540a43e263c29a4466ea669d40a5233dba08a4a1f6a3be8a6c8e8c9c88bbcdc024ce435184b0d446a648b07aff5359a7f933471ab006853ab86b7a8f9180e3aaa0755514afffba4739034ff6613582e8977de81bb4df23cd678af6103199ade62dfcdd8d7c698fb75bea487231a2e869bc281501c1705a8bcb3c18f1ae951f11e1babfbb18b375ca69a2b3b39a07b34dbd806092e4a9beb73287216cd7214e17"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0x374, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x180, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "e5b5108c3103c3d4d24d7d83f8c7789baf270f06d26f189aa8a35743fc033400beb73730956ec7da91b15619d1dda33bc9d021c149c540020631d5b7dc8ecfc285a44dc763bec75ff528477d20f0326c466f051ab78723c92f7a2c0d0bd56a11eec5db29bd01da0036d337f02203d84101a83b000423ba41c3731e6ef0c7d933426c6bb94fe2e5bbe842ff35fd6ec20b15770b60edc878f737ae509e23140ffe5fcf44084762642791af98841653d7675eef5ba3edf7306b256b447b4c271b5257df78ab5969dc82748b5ea19fc6d564b6556d69f4a9"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7d}, @NFTA_SET_ELEM_DATA={0x18c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdc, 0x1, "8f84290ebf597ec687b9e6ba9aa75d26dfaeeaaa6c0f868bd57d7980a19c022b9aa8a26f471fd3c0c6fd2c8ae880585a16ec0de10f6392e576307b0285f4d0f88dfe0e8848087c571a0416db953445a8ac45fd41e6d4deceb6490b83cd89847a4fc8ab84b8eeb8a1c6b03680933ed6b17268c0326b15828ff83ef500555360dd180413edca878e26d9670ef1ea427282d37161da33f33c96eed18b509180a9d20c8cbd7aa2e979d5adc14fd16fa3d362e89733e8172d4d9aeacdfa0fcfd1218f9815b418de89190f4ffa0957fc0be33310c8ae7a007a7628"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x62, 0x1, "6665d91581858bf92bb7df8c7bb6577f8a0cd52a5ccf1af3d777bd86f95c5ae0ff9f8afc7ed7f32769dffde2becea81cdd16de7f1834ea183c2b964a5e44d8cbfcbc6aeb358822d9f19cb50819b842defe64b4709fd6c3870dbdae9bf3b7"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfd}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x59}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, {0x74, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "92e506149423c8ab7b2ce343433cdd0df44eb247f03988d12b3f43680ebee706bc73d6de1b4596b8"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10001}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffe}]}]}]}, @NFT_MSG_DELTABLE={0xe4, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x8f, 0x6, "90f09b91a2d71f8e325966b802acc90f2724e25731dbc9ca4baa921b6edbc989d1652fc5fb10cf7b32f779416f07a7a0c788052bc03173a736469a4dfaf9e74011ec7563acad09329998cbea059b664ba2ed174f59617d1c66d017500a232b28e437d06cede7992b751b507872cfdad03c68930293aea1d482a8001c49c4ed36824edcf8f3493051817d31"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x34, 0x6, "21db1dca6fab8b3de20f8ea61640c301f90189d9777cbbfb94925a30de2e0ad81dc320d4d6894f3dea0ac95d785db9f0"}]}, @NFT_MSG_DELRULE={0x98, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x84, 0x7, 0x1, 0x0, "b419e0488cc272fb596598b5c7f44e038bd02dfec359f417e4e133184bfc22198ed1b437347e22e9eeb4058f90268d20af12b59c39639ac17a712b043bc1d7490fb4e288d62866cc20a255ce2199b13098f25423932f4a89c0ea7fc6edb99c6007362f440449e9eeb14857797f8e2abc19dadf6be0de0cb69cac7f0f74860a9d"}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2a74}, 0x1, 0x0, 0x0, 0x4040010}, 0x40010) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000004440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000004400)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000004480)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000042c0)=[{0x1a, 0x0, [0x3, 0x3e, 0xdf80, 0xf5, 0xfffffffd, 0x3, 0x0, 0xfffffffc, 0xa969, 0x4, 0x4, 0x401, 0x0, 0x9490, 0x6, 0xfffffff8]}, {0x1, 0x0, [0xb, 0x6, 0xf811, 0x3ff, 0x1, 0x3, 0xfffffffa, 0x7, 0xdd3, 0xe1, 0x1000, 0x10001, 0x1000, 0x7, 0x4, 0x66e]}, {0x10, 0x0, [0x400, 0x0, 0x80000001, 0x3, 0x40, 0x800, 0x100, 0x100000, 0x1, 0x3, 0x5, 0xb7, 0x2, 0x30, 0x8, 0x1]}, {0x12, 0x0, [0x2, 0x3, 0x8, 0x5, 0x8, 0x1, 0x7, 0x2, 0x8, 0x5, 0x2a1d29cc, 0x2ad, 0x7, 0xa, 0x0, 0x9]}], r12, 0x1, 0x1, 0x120}}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004780)={&(0x7f00000044c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x163, 0x163, 0x7, [@ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @datasec={0xa, 0x6, 0x0, 0xf, 0x3, [{0x5, 0x8, 0x2}, {0x5, 0x5, 0x7}, {0x1, 0xfba, 0x8}, {0x1, 0x9, 0x280}, {0x5, 0x7fffffff, 0x401}, {0x5, 0x8, 0x2}], "a4c416"}, @enum={0x4, 0x8, 0x0, 0x6, 0x4, [{0xa, 0x10}, {0xf, 0x9}, {0xe, 0x4e74}, {0xe, 0x2f}, {0x9, 0x4}, {0x8}, {0x4, 0x1}, {0x8, 0x6}]}, @union={0x3, 0x7, 0x0, 0x5, 0x1, 0x7, [{0xb, 0x4}, {0x1, 0x4, 0xfffff000}, {0x8, 0x1, 0x769}, {0x5, 0x0, 0xffffffbd}, {0x7, 0x2, 0x80}, {0x4, 0x3}, {0x9, 0x2, 0x17d}]}, @enum={0x3, 0x9, 0x0, 0x6, 0x4, [{0x5, 0x7}, {0xb, 0xf69f}, {0xb}, {0x6, 0x9}, {0x4, 0x7}, {0x2}, {0xf, 0x8}, {0x3, 0x6}, {0x2, 0xea}]}]}, {0x0, [0x0, 0x30, 0x2e, 0x51, 0x28]}}, &(0x7f0000004680)=""/197, 0x183, 0xc5, 0x0, 0x2, 0x10000, @value=r7}, 0x28) 4.063926558s ago: executing program 0 (id=962): socket$alg(0x26, 0x5, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) write$UHID_INPUT(r1, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r4, &(0x7f0000000780)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b4, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x310) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000019080)='\x00', 0x1) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102341, 0x18fc5, 0xc2a) sendmmsg$sock(r5, &(0x7f00000194c0)=[{{&(0x7f00000190c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x0, &(0x7f0000019140)=[{&(0x7f00000191c0)="219f206db14314d9b030d601265edc13122211cb03cd2f1fbfd49b76bf6717882a30e09378bc4a772d85d7b111682240343417b419ad4c01665c7a985f099e571fc8057d39bf3e0189a5bbb6f135e94e1065e59c447a8d58ca77321676c1c9a44f3aec62d9aa0c6e3ef9ef9ba9b870326c573f35cf64d7c612760a2637843e196592e4daf3472c49820201e314fb3dbcea79257f98b454f2f2537935830dd580277969680c442d298a9e61cbbf4bab8f6198862eaa516fc03324dbc317ecc7cf54ef"}, {&(0x7f00000192c0)="3bb1be185e5727db93fa43b1806e6b3306fb84c713bad2661d9d32d1c0619ec2b238061dfc7681901d3d2cd22f4d6d6136f49c74303aee5f1710ed9a4a4fd317f7e6c70c06d576b2bff9859388324472481d0112"}, {&(0x7f0000019340)="0a09945549c350d04a10833eb3d7403c9d23078b37e66c0304ee78bd5f38edef33936b909fb0fd5ee2104a90a11d57ca31c305675c8beb91dc8801b196861e068303d6a89d5a22d97515858d1fca08735d2fc4d7033f6b68f79560cfd3dcb64157075b8db4e00dea855874b78fbbd13e265d34492e62c77eb78f917c471564717d8ea3b402c3611690a2830f199e2b2ad11d8d3ebd4eaafdd3fe4fffabf6900f9dc5f532530c6b510e0090f8bc10b02216c939478abe94ba62215b1e5cba77cb1368bef85e780b885c06a7fe49c3cf8bbb9dfb677bb8cb668082ec87fa4f"}, {&(0x7f0000019440)="e526a38d456768fe2f0def09dfba63e92f14b28819135f0e03f707b3ac49b6980c9ae4cbd78237f759429db4cf43ad7206a97026730d84858852f4525732b000fcd3208d8c4b3a98559238db42cbc27da7690df8a4dd630ff7a8623934c78861148527077cf99cd5f162b2e26d8744645f17e8cbae2526a7a53444"}]}}], 0x32, 0x40050) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x50009405, &(0x7f0000000100)) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000180), &(0x7f0000019180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) mknod$loop(0x0, 0xfff, 0x0) 3.913914883s ago: executing program 3 (id=964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0201000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) openat$mixer(0xffffff9c, &(0x7f0000000100), 0x4001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b19061d28a4ee4ed552affb18f31399f9909a32099d0886235d431b669c0ab85218fce3eb8c9d2cde807d917b73edaf37188f3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x8, 0x0, 0x0}}, 0x10) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000500)=ANY=[@ANYRES64], &(0x7f0000000040)='syzkaller\x00', 0xb, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x82, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x1, 0xa, 0xb}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.264047402s ago: executing program 0 (id=967): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x881) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000000060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e7465720004000280140000800900019a6c617374000000000400028008000340000001"], 0xb8}, 0x1, 0x0, 0x0, 0x81}, 0x54800) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x0) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r6, 0x7}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r5}) close(r4) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r0, &(0x7f00000000c0)=0x58, 0x5) 3.083996225s ago: executing program 2 (id=971): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9f, 0x6, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_settime(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$hpet(0xffffff9c, 0x0, 0x200000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)=r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r5}, 0x10) 3.083541125s ago: executing program 0 (id=972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x881) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000000060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e7465720004000280140000800900019a6c617374000000000400028008000340000001"], 0xb8}, 0x1, 0x0, 0x0, 0x81}, 0x54800) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd(0x0) r7 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r7, 0x7}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r6}) close(r5) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r0, &(0x7f00000000c0)=0x58, 0x5) 2.972385567s ago: executing program 3 (id=973): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1ae1, &(0x7f0000000200)={0x0, 0x1ffffe, 0xc36b40867ae2bd79}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4d, 0x0, 0x1}, {}, {0x16}]}) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4008, 0x0, 0x0, 0x22) r5 = socket$inet6(0xa, 0x2, 0x3a) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3422a61a}], 0x1, 0x10102, 0x0) syz_open_dev$mouse(&(0x7f0000000140), 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="48d2f7a821d42c8f570d28a0357ab7312a000000100001000000000008000094fe3f0d00", @ANYRES32=r7, @ANYBLOB="0020000000000000280012800e0001006970366772657461700000001400028006001100000000000600100000000000"], 0x48}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2.383863192s ago: executing program 0 (id=974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000140)={0xd, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88101) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x250) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x6}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x47aa4, &(0x7f00000004c0)={0x0, 0x0, 0x400, 0x3ffffffe, 0x0, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b0be074db53baf758059533fed183e8ca901a563ea71e0c5541bfd304dad456122572b1056f84981e9ebfa8339e41c8ba5775962b7c31328e79224d284bde748ea71db5f596c313cc1a3e096b0d27a18d4b29a776aec8db8e32410f488d20b807221ed699bb140e53b43c49ad98ed4df0794080627a8d", @ANYRESHEX=r4, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES32, @ANYRES8=r2, @ANYRESHEX=r4, @ANYRES32=r1, @ANYRES8=r1]) read$FUSE(r7, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x0, 0x5, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) sendto$l2tp(r3, &(0x7f0000000340)="6c3ef7cbdd5a4da448ff95ed9e105744f9808ccecefbe9874a1a7f48dfc5130634ae37dfecfad67cbdd79ae62c66e99ba5cbc7c905c46ab5cb6f66b81b7492e97df9f71496d7a8bf59a9f53601553c49b907fc601b2344d9595ce0ece574e34760368fb7f7cb4f30bb4bf4d59b71c8417ba18bb034bf87a887ad03c2889641a076c5170446856aab2e7669ddf7e494562b6d8f104fb694", 0x97, 0x40, &(0x7f0000000400)={0x2, 0x0, @loopback, 0x2}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x1, r9, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) r10 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x118) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xd) openat$snapshot(0xffffff9c, &(0x7f0000001180), 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={r11, r12+60000000}, 0x0) 2.199762697s ago: executing program 2 (id=976): syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) syz_emit_ethernet(0x62, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa060202", @ANYBLOB="fac0c59b508c47"], 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x8, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '\xdb^'}}]}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) epoll_wait(r0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x1) socket$inet6(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x4}) 2.074079947s ago: executing program 3 (id=977): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='io_uring_create\x00', r0}, 0x10) io_uring_setup(0x1170, &(0x7f0000005480)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x15, 0x0, 0xb0, 0x0}) setgroups(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0xf5, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x600458c0}, 0x0) r7 = socket(0x400000000032, 0x3, 0x4) write(r7, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000200", 0x33a) 2.073580052s ago: executing program 2 (id=978): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r1, 0xffffffffffffffff, 0x2f, 0x10, 0x4, @void, @value=r1}, 0x20) read$FUSE(r0, &(0x7f0000000f00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, r2, {{0xfffffffffffffffe, 0x0, 0x2}}}, 0x28) 1.963819647s ago: executing program 2 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRESOCT=r1], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f00000002c0)={0x0, 0x3}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842c", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) close(r5) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x9, 0x3, 0xcf, 0x3}]}) r8 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) r9 = dup2(r8, r8) mq_notify(r9, 0x0) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r7, 0x1, 0x6, @random="7d0d25071145"}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r10) 1.550171889s ago: executing program 0 (id=980): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xc, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x4, 0x2, 0x0, "72f043b00ace4f852f5edc85933ba5c228ea162fdfcd675c765fc5a06532ca9f"}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee000000", @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c0001"], 0x5c}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d0a22000002000000000000a9"], 0x118}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) r4 = add_key$fscrypt_v1(0x0, &(0x7f0000000540)={'fscrypt:', @auto=[0x31, 0x39, 0x62, 0x34, 0x32, 0x61, 0x64, 0x30, 0x65, 0x33, 0x30, 0x36, 0x0, 0x37, 0x64, 0x30]}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000400)="c8a1d79f", 0x4, r4) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x44040000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, 0x0) r5 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) lseek(r5, 0x1003ff, 0x3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfc36) 1.240501283s ago: executing program 1 (id=981): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x3000000a}) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001400010000000000020000ff16b74554934dddbfdb9ad113ebcd79b579cc9d001c4924dd115232e7ad11a82d05329ca78a6fce32d51641f926854561634328003259595f5c46e6490431a4cbd64a0add287c7e4026743e863f383a62780168a056b1aa1f0c348b64838066f5364dc489082ce0680e7cf499995eae3a128b8675ea82d008dce1f91f57a044151f28b9851adc5da4dc27686918f2c61480e6512e9c8768c77bace27b0155b85d4eaf43a9c5", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r8, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r9 = socket(0x10, 0x80000, 0x4000004) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r11 = dup(r10) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r11, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) socket$pptp(0x18, 0x1, 0x2) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r12, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$rtc(&(0x7f0000000580), 0x4, 0xccc1) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4094) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtclass={0xf0, 0x28, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff6}, {0x1, 0x9}, {0xd, 0x7}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5}}}, @TCA_RATE={0x6, 0x5, {0xfb, 0xd}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x94, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x1000, 0x9c, 0x21d}}, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x8000}}, @TCA_HFSC_FSC={0x10, 0x2, {0x1000, 0x4, 0x100}}, @TCA_HFSC_USC={0x10, 0x3, {0xd, 0xff, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7fff, 0x1, 0xfffff800}}, @TCA_HFSC_USC={0x10, 0x3, {0x15, 0x7, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x8, 0xd9}}, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0xd, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x7fff, 0x5}}]}}]}, 0xf0}}, 0x890) 1.210171565s ago: executing program 3 (id=982): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r6, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000700850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r7}, 0xc) mkdir(&(0x7f0000000280)='./file0\x00', 0x54) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1.20901044s ago: executing program 1 (id=983): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="0407"], 0x2, 0x0) dup3(r4, r3, 0x0) finit_module(r4, 0x0, 0x100000000000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x0, 0xffff, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) 1.077448753s ago: executing program 2 (id=984): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DVD_AUTH(r1, 0x31f, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12a35}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000380)={0x3c, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x8, &(0x7f0000000000)=[{0xd, 0x6, 0x4, 0x401}, {0xe, 0xeb, 0x2, 0x5}, {0xfff9, 0x7, 0xff, 0x3}, {0x8, 0x8, 0x1, 0x5}, {0x7, 0x0, 0xf8, 0xfffffff8}, {0x0, 0x2, 0x3, 0x6}, {0x8001, 0x54, 0x9, 0x9}, {0x7, 0xe, 0x7, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r10, 0x40082102, &(0x7f00000001c0)) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0xd000, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, 0x0}, 0x280) 973.543339ms ago: executing program 1 (id=985): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400009e54000000000000000000000000000000000000008b3809aec0701768a9e301b130c68899b2bd025ee9da974e70692c0602c81a60d2b1c3feab59a6c3d5d3eb2901010000575b75aba3c18af19a36a04ab1bafd555731ea5a55d1fa48d5e4dd8407516b7b33e6fd5f51de202adbefd458e00fe7657e3c5829581b8a26a71a01da68420f4aa921765e587a2d1453159b0fff7d03b476bd04c5a5ae153ca23f585626074434cfc73bbc24e1b5811e90ee22455ea602aaea0babdf"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x0, 0x6, 0x3, 0x9, 0x40}, @ldst={0x3, 0x3, 0x3, 0x6, 0x0, 0xfffffffffffffffc, 0x10}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfbc}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x71, &(0x7f0000000580)=""/113, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x3, 0xffff, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, r0], &(0x7f0000000480), 0x10, 0x9, @void, @value}, 0x94) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r7, &(0x7f0000001640)=ANY=[], 0x1a3) write$binfmt_misc(r7, &(0x7f0000000000), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000024000480200001800a00010071756f7461000000100002800c0001400000"], 0x78}}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r9, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xff, "4feda26323b172e0"}) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r10, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 323.268696ms ago: executing program 1 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x8, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a89cc640607df2e7a07", 0x2ff80}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29a7ddbe0b2b272911544465bb22aa", 0x36}, {&(0x7f00000002c0)="87c3752dd3dafc", 0x1ed}], 0x3}}], 0x4000000000001ee, 0xfff0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0410fd75b8a34b93cc02ad"], 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7c25}, 0x8) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000025f00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff2, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x25}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_emit_ethernet(0x5e, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000400000280600fe88000000000000000000000000fc01fe8000000000000000000000000000aa4e240000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000000907800001312d4c466fb196bff4ebf6f54141ff71e96642f"], 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) 319.217196ms ago: executing program 3 (id=987): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05"], 0xd8}, 0x1, 0x0, 0x0, 0x6000804}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0xb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0xfffffffffffffe62) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x348e862fb115852c) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 154.126534ms ago: executing program 1 (id=988): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff2000}]}) r3 = socket(0x2b, 0x80801, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r4, 0x4, 0x0, &(0x7f0000000580), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x2002) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fcb09fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffffd]}}) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000400)) io_submit(r4, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r5, 0x0, 0x0, 0x6}]) io_destroy(r4) r8 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) dup3(0xffffffffffffffff, r2, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x0, 0x1, 0x100000}, 0x20) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0x40186f40, 0x20000502) timerfd_settime(r9, 0x2, 0x0, &(0x7f0000000240)) sendmmsg$inet6(r9, &(0x7f0000000340)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000003c0)="f53536459dd50bafe91052de177eb5c2c2ff25e02b49a992e9545ad4c271b32b098a1dd181871d519dd880bd198656142967e45f3c6bb68b3f44d075f254ead5e7395654237e6eb27a1d0ff69bc667c80f57a063ef3dc2b9e3a9f27588468652f4057ed52f48c9f63ee74228932d0e522d9042d833167802952ebc73a7ab343a071d0fd7fe2cb25e479bf9c955ce681ef3c3e61c13d5e58777", 0x99}], 0x1, &(0x7f0000000480)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x3}}, @dstopts={{0xcc, 0x29, 0x37, {0x0, 0x16, '\x00', [@generic={0xf5, 0x94, "48807cffb6c4a26c391ce86ba44d248c8a8500e2d12878acb69ab7162915a4674764fdc451cd7a05bf184014a62222b7e1db1e96ed72fc6244906b00191bba9826120a6535ec2dc765e6d1091ef0958e96d3a88548349713757eac9c1d78e5823811b9cd345127e43587406a1de43f7b9b8a37e760e19b602198fc9b69bac00de0f7b99e0f50e2f70ad30eec64eb44f3dd8a39bc"}, @calipso={0x7, 0x8, {0x0, 0x0, 0xd, 0x4}}, @enc_lim={0x4, 0x1, 0x71}, @enc_lim={0x4, 0x1, 0x33}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5445}]}}}, @hopopts_2292={{0x14, 0x29, 0x36, {0x88}}}], 0xf0}}], 0x1, 0x8000) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0) 93.821778ms ago: executing program 3 (id=989): r0 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0xfffffffffffffff8, 0x1000000) socket(0x200000100000011, 0x3, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0100001a00010000000000000000001c"], 0x14c}}, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f0000000600)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="20ba000000000000000008000a0002000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff}], 0x1c) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x33c, 0x0, 0x11, 0x148, 0x0, 0x0, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x208, 0x4003, {}, [@common=@inet=@hashlimit2={{0x150}, {'geneve1\x00', {0x9, 0x3, 0x13, 0x3ff, 0x8, 0x6, 0x80000001, 0x80, 0x8}, {0x7}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x96a}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x398) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYRESOCT=r4], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r9, @ANYBLOB="211e45d791e338c757283b48626c71f95272dfe6"], 0x3c}}, 0x0) 93.540289ms ago: executing program 2 (id=990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x4ff9c, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) write$vhost_msg(r3, &(0x7f0000000140)={0x1, {0x0, 0x0, 0x0, 0x2, 0x4}}, 0x44) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000008704"]) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) 0s ago: executing program 1 (id=991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x4c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) write$FUSE_ENTRY(r4, &(0x7f0000000440)={0x90}, 0x90) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl}]}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0x98f910}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x800, 0xb7) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESHEX=r7, @ANYBLOB="01002cbd7000fedbdf256800000008000300", @ANYRES16=r5, @ANYBLOB="1600c7"], 0x34}}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x28, 0x5, 0x0) r11 = dup(0xffffffffffffffff) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r11, 0x2ded, 0x6e8e, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r11, 0x7b1, &(0x7f0000000200)={&(0x7f0000000400)=[0x2e, 0x81, 0x0, 0x5, 0x8, 0x7, 0xffff, 0x8, 0xed4, 0x8, 0x1, 0xd, 0x6, 0x1000, 0x79, 0x9, 0xf, 0x5, 0x8, 0x1, 0x3, 0x6, 0x72f, 0x7fff, 0xb7f2, 0x0, 0x9, 0x6, 0x5737, 0x1, 0x3, 0x37, 0x9, 0x6, 0x6, 0x7ff, 0x7, 0x2, 0x9, 0x9, 0x5, 0x102a3ff3, 0x324, 0x1, 0x1, 0x1da8000, 0x9, 0x13e82b8b, 0x3ce04e13, 0x2, 0xfffffc00, 0x9, 0x2, 0x6, 0x2b24, 0xcc96, 0x1, 0xd, 0x5, 0x1, 0xffffff15, 0x2, 0x8, 0x1000, 0x2b9, 0x10001, 0x100, 0x5, 0x7, 0xc, 0xffffffff, 0x5, 0x8001, 0x2, 0x1ff, 0x1, 0x7, 0x3, 0x5, 0x2, 0xfffffff8, 0x5, 0x10000, 0x5, 0x7, 0x2, 0x6, 0x0, 0x6, 0x4f, 0x3, 0x401, 0xc, 0x7, 0x2, 0x7fff, 0x87d, 0x2, 0x9, 0xc, 0x2, 0x9, 0xff, 0x2, 0x2, 0x3, 0xe, 0x9, 0x5, 0x7, 0x6, 0x6, 0x3, 0x1, 0x6, 0x1, 0x9, 0x1, 0xffff8000, 0x7f, 0x9, 0x3, 0x0, 0x5, 0x7, 0x1, 0xfffffff6, 0xea66, 0x6, 0x0, 0x8, 0x460b, 0x5, 0x2, 0x2, 0xff, 0x8, 0x7, 0xfffffffe, 0x400, 0x10, 0x4, 0x9d, 0x3, 0x0, 0x2, 0x401, 0x3, 0x401, 0x5, 0x4, 0x10001, 0xb, 0x4, 0xfffffffd, 0x0, 0x7ff, 0x6, 0x3ff, 0xffffffff, 0x1c00, 0x101, 0x9, 0x5, 0xfffffffa, 0x10001, 0x7f, 0x2, 0x7f, 0x0, 0x7e3, 0x3, 0x8, 0x0, 0x4, 0x8, 0x6, 0x7fff, 0x8, 0x9, 0xe7d2, 0x65, 0xc25, 0x6, 0xa, 0x10000, 0x8000, 0x9, 0x3c30000, 0x2, 0x7, 0x5, 0x40, 0x8d7, 0x2, 0x8001, 0xe, 0x6, 0xfffffeff, 0x4, 0x3, 0x9, 0x3, 0x7, 0x3, 0xc369, 0x8, 0x47f4, 0x4, 0x80000000, 0x3, 0xa2e, 0x0, 0x1, 0x6, 0xa, 0x80, 0x9, 0x1, 0x0, 0x5, 0x7d9d, 0xbba, 0x0, 0x80000001, 0x563b, 0x1, 0x2, 0xc95, 0x7f, 0x400, 0x1, 0x4, 0x800, 0xa74, 0x9, 0x7, 0x7, 0x80000001, 0xb6f, 0x1000, 0x9, 0x4, 0x4, 0x9, 0xfff, 0x6572, 0x5, 0xd48, 0x4, 0x2, 0x4, 0x5, 0x5b7a2ca0, 0x9, 0x1b, 0x7ff, 0x6, 0x81, 0x8, 0x2ea, 0x16, 0x40, 0x6, 0x361, 0xc, 0x4, 0x6, 0x9, 0x8, 0x5, 0xa3, 0x7, 0x9, 0x9, 0x7, 0x2, 0x1ff, 0x0, 0x5, 0xf965, 0xffffffff, 0x4, 0x5, 0x1, 0x1, 0x3, 0x8, 0x10000, 0x8, 0x7, 0x5, 0x385, 0x3, 0x7, 0x400, 0x0, 0xb, 0x1, 0x0, 0x7fffffff, 0xa, 0xfffffff8, 0xe, 0x9, 0x5, 0x1, 0x1ff, 0xa, 0x6, 0x3, 0xbcc, 0x9d42, 0x57d6aa6a, 0x4, 0x5, 0x1, 0xa0000, 0x2, 0xe, 0xffffffff, 0x81, 0xf, 0x3, 0x7fffffff, 0x3, 0xfae, 0x400, 0x9, 0x4, 0x5, 0x6, 0x7, 0x1, 0x1, 0x9, 0x3, 0x92, 0x1, 0x2, 0x1, 0xf, 0x4, 0x40, 0x0, 0x4, 0xd, 0x7, 0xa9b3, 0x6, 0x1000000, 0xa78, 0x9, 0x3, 0x401, 0x7, 0x3ff, 0x1, 0x2, 0x3f4, 0x7ff, 0x3, 0x1, 0x4, 0x3, 0x8, 0x7fff, 0x5, 0xf, 0xfff, 0x7fff, 0x4b, 0x7, 0x7, 0x4, 0xb8e, 0xf, 0x4, 0x3, 0xd2, 0x9, 0x6, 0xffff, 0x1, 0x1fe00, 0x3, 0xc, 0x0, 0xffffffff, 0x8, 0x4, 0x69, 0xfffffffb, 0x5, 0x7, 0x9, 0x9, 0x400, 0x7, 0x7, 0x1, 0x9, 0x6, 0x2, 0x7, 0x7, 0x200, 0x8, 0x2, 0xa8e, 0x54d3, 0x7, 0x2, 0x800, 0x6, 0xfffffbff, 0x9, 0x5, 0x6, 0x0, 0x2, 0x54fda3c8, 0x3ff, 0x92a1, 0x9, 0x0, 0x8, 0xfffffff9, 0x9a22, 0x7, 0x8, 0xa8e, 0x9, 0x6, 0x947f, 0x9, 0x10000000, 0x8, 0x5, 0x8, 0x200, 0x6, 0x1f, 0x4, 0x9, 0x603a653b, 0x0, 0x6, 0x1, 0xe440, 0x5, 0x4d, 0x6, 0x8, 0x4, 0xb9, 0x0, 0x4c529435, 0x10, 0x69100217, 0x2, 0x9, 0x70a79f41, 0x8000, 0xdb84, 0x3, 0xffffff94, 0x0, 0xd, 0x1, 0x0, 0x8001, 0x2, 0x4, 0x0, 0x6, 0x3, 0x1, 0x9fd4, 0x4b, 0x4, 0x3, 0x6, 0x0, 0xe, 0x200, 0x9, 0x6, 0x7f, 0x6, 0x3, 0x80000001, 0x6, 0x3, 0xffffffff, 0xb6, 0x1, 0x8, 0xf, 0xc, 0x9, 0x7, 0x5, 0x4c6, 0x3, 0x1ff, 0xfffffff0, 0x9, 0x25c, 0x4, 0x9, 0x47a, 0xff, 0x8, 0x3, 0x0, 0x7, 0x2, 0x7ff, 0xa24b, 0x3ff, 0x0, 0x322, 0x0, 0x7, 0x932e, 0x8, 0x0, 0x7ff, 0x2, 0x3, 0x3, 0x9, 0x2, 0x5, 0xfffffc00, 0x5, 0x8, 0xdc, 0x9, 0x8, 0xe00, 0x4, 0x827e, 0x5, 0x0, 0x6, 0x80000000, 0xc3, 0x5, 0x1, 0xc1, 0x7, 0xbc000000, 0x2, 0x7, 0x1000, 0x1, 0x1b5, 0x0, 0x4, 0xf1, 0x8, 0xff, 0xe4, 0x0, 0x200, 0x50, 0x3, 0x4, 0x2, 0xa93, 0xcfbc, 0x7fff, 0xf293, 0x1f7, 0x7, 0x9, 0x7b1, 0x7, 0x6, 0x40, 0x7, 0xdb0, 0xe, 0x7, 0xb8, 0x6, 0x7, 0x4, 0x1, 0x1, 0xffffff81, 0x100, 0x8, 0x7, 0xecc, 0x34a, 0x8, 0xfffffbff, 0x7, 0x1, 0xa, 0x1, 0x75, 0x3, 0x7, 0x0, 0x412, 0x9, 0x0, 0x100, 0x0, 0x6, 0x7, 0x80000000, 0x4, 0x10001, 0x5, 0x8, 0x3, 0x617fc9fc, 0x5, 0x4c25, 0x1, 0x7f, 0x0, 0x2, 0x1, 0x7, 0x81, 0x8, 0x4, 0x6, 0xb, 0x6, 0xffffffff, 0x5664, 0x8, 0x6, 0x4c, 0x85d, 0xfffffffd, 0x7fff, 0xffffffff, 0x401, 0xffffffff, 0xcf7, 0xfffffff5, 0x9, 0x1000, 0x3, 0x6, 0x5, 0x800, 0xfbb, 0x1, 0xff, 0x6, 0x0, 0x3, 0x8001, 0x8, 0x80000001, 0x0, 0x7, 0x1, 0x2c00, 0x0, 0xff, 0x200, 0xfffffff7, 0x80000001, 0x1, 0x0, 0x3f22, 0x8, 0x7, 0x10000, 0x3ff, 0xb2, 0xefe, 0x101, 0x2, 0x5, 0x0, 0x8, 0x7, 0x1, 0x6, 0x2, 0xb, 0x597, 0x3, 0x6, 0xfffff8bc, 0x7ff, 0x2000000, 0x4, 0x6, 0x100, 0x8, 0xee99, 0xfffffffd, 0x101, 0xd, 0xe5d, 0x7fc2, 0x2, 0x0, 0x6, 0x0, 0x24, 0x1ff, 0xffffff1b, 0x6, 0x7, 0x8, 0x2, 0xffffffbe, 0x9, 0xd, 0xd, 0x1, 0x6, 0x4, 0x8, 0x7, 0x6, 0xffffffff, 0x8, 0x400, 0x1, 0x6, 0x3, 0xff, 0x4, 0x44, 0x7, 0x8b1, 0x6, 0x80000000, 0x5, 0xfffeffff, 0xfffffff5, 0x81, 0x3, 0x736, 0x8, 0x800, 0x2, 0xffffff81, 0x11, 0xff, 0x7, 0x9d32, 0x3, 0x3, 0x401, 0x10, 0x6, 0x0, 0x4, 0xc, 0x1, 0x85, 0x6, 0xe22, 0x0, 0x5, 0x31, 0x2, 0x9, 0x2, 0x2, 0x7, 0x5c12ccc, 0x80000001, 0x7fffffff, 0xffff, 0x80, 0x8, 0xf, 0x3, 0x5, 0xb2b, 0x0, 0x40, 0x1, 0x7, 0x189, 0x1ff, 0x2, 0x6, 0xfffffff5, 0x2, 0x0, 0x40, 0x61, 0x0, 0x7, 0x3, 0x401, 0x81, 0x5, 0x6, 0x5, 0x3ff, 0x6, 0x7, 0x8e, 0x52d, 0x783, 0x7, 0x0, 0x3, 0x9, 0x5, 0x7, 0x8, 0x9, 0x520, 0x200, 0x6, 0xfff, 0xf3, 0x4, 0xff, 0x2, 0x7f, 0x98f, 0x80000001, 0x10, 0x9, 0x6, 0x2, 0x1, 0x4, 0x8, 0x8, 0x7, 0x81, 0x8, 0x1, 0x3, 0x100, 0x200, 0x4, 0x6, 0x5, 0x6, 0x0, 0x7, 0x6, 0x0, 0x9, 0x6, 0x0, 0x2, 0xfe, 0x8, 0x8, 0x656, 0x8, 0x4, 0xaa, 0x80000001, 0x4, 0x2, 0x8, 0x5, 0x0, 0x8, 0x3000, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0xe, 0x1, 0x8, 0x1, 0x1, 0x5, 0xffff0001, 0x1, 0x7f, 0x3, 0x1e, 0x7ff, 0x2, 0x40, 0xe, 0x9, 0x0, 0x8, 0xd1e, 0x5, 0x4, 0xa, 0x4c18, 0x1, 0x3, 0x2, 0x3d3, 0x7fff, 0xdcd, 0x8, 0x6, 0x5, 0x5, 0x8, 0x5, 0x2, 0xe, 0x70, 0x3, 0x5, 0x1, 0xffff, 0x5bf, 0x7, 0x4, 0x8, 0x5, 0x9, 0xd, 0x7, 0x4, 0x7d, 0x9, 0x100, 0x6, 0x0, 0x4, 0x6, 0x8, 0x6, 0x10001, 0x6, 0x1, 0x8, 0x6, 0x48, 0x2, 0x1, 0xb, 0x8, 0x8, 0x2, 0xfff, 0x7, 0xffffffff, 0xfff, 0x3, 0xfffff000, 0x4, 0x9d9, 0x2, 0x8, 0x2, 0x3ff, 0x3, 0xfffffffd, 0xe, 0x9, 0x0, 0x5, 0x7, 0x20000000, 0x1, 0x9, 0x9, 0x1, 0x1, 0x6, 0x1, 0x3, 0x6, 0x2, 0xb, 0x743c, 0x3, 0x482, 0x1, 0xfffffffd, 0x3, 0x5, 0x1, 0x9, 0x4, 0x0, 0x3, 0x8, 0x9, 0x0, 0x8, 0x7bdb1f56, 0x0, 0x0, 0x6, 0xffffffff, 0x8, 0x8, 0x7fffffff, 0x0, 0x9aba, 0x1, 0x8, 0x8, 0x8, 0xfffffff1, 0xc5e2, 0x3, 0x2, 0x2d0000, 0x200, 0x6, 0x8, 0xeca, 0x14, 0x0, 0xc], 0x3, 0x400, 0xffff7fff}) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000340)={@remote, 0x0}, &(0x7f0000000380)=0x14) sendmsg$nl_route_sched_retired(r11, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@newqdisc={0xf8, 0x24, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x1, 0x7}, {0xb}, {0x0, 0xa}}, [@q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x98de}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x23}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x874}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xcd}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3e}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x4040010) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newtfilter={0x24, 0x2e, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x81, 0x0, r8, 0x101, '\x00', r13, r8, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) kernel console output (not intermixed with test programs): 49.921958][ T6372] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 49.921962][ T6372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.921972][ T6372] [ 50.100045][ T6380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.78'. [ 50.628568][ T6400] random: crng reseeded on system resumption [ 50.648069][ T6400] Unrecognized hibernate image header format! [ 50.654618][ T6400] PM: hibernation: Image mismatch: architecture specific data [ 50.872813][ T6412] trusted_key: syz.2.89 sent an empty control message without MSG_MORE. [ 50.945482][ T6419] dccp_close: ABORT with 52 bytes unread [ 50.971085][ T6421] capability: warning: `syz.2.90' uses 32-bit capabilities (legacy support in use) [ 51.202346][ T6431] Cannot find add_set index 0 as target [ 51.623092][ T6444] syz.1.95 uses obsolete (PF_INET,SOCK_PACKET) [ 52.496972][ T6466] fuse: Unknown parameter '' [ 52.501812][ T6466] can0: slcan on ptm0. [ 52.875941][ T6480] trusted_key: encrypted_key: insufficient parameters specified [ 53.338809][ T6462] can0 (unregistered): slcan off ptm0. [ 54.230059][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 54.737984][ T6526] fuse: Unknown parameter '' [ 54.742209][ T6526] can0: slcan on ptm0. [ 54.909530][ T5937] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 55.099729][ T6538] loop7: detected capacity change from 0 to 16384 [ 55.102884][ T6538] netlink: 188 bytes leftover after parsing attributes in process `syz.2.117'. [ 55.148465][ T6538] loop7: detected capacity change from 16384 to 16383 [ 55.158270][ T6539] ksmbd: Unknown IPC event: 0, ignore. [ 55.568956][ T6523] can0 (unregistered): slcan off ptm0. [ 56.609397][ T6583] can: request_module (can-proto-3) failed. [ 56.756427][ T6591] ubi: mtd0 is already attached to ubi0 [ 57.241946][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 57.245339][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 57.381474][ T6598] QAT: failed to copy from user. [ 57.489227][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 58.378171][ T6622] overlay: Unknown parameter 'defcontext' [ 58.545895][ T6636] ubi: mtd0 is already attached to ubi0 [ 58.969807][ T5937] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 58.972836][ T5937] Bluetooth: hci3: Injecting HCI hardware error event [ 58.975717][ T5937] Bluetooth: hci3: hardware error 0x00 [ 59.805016][ T6669] netlink: 6 bytes leftover after parsing attributes in process `syz.0.153'. [ 59.850343][ T6669] infiniband syz0: set down [ 59.851864][ T6669] infiniband syz0: added ipvlan1 [ 59.865585][ T6673] ubi: mtd0 is already attached to ubi0 [ 59.871647][ T6669] RDS/IB: syz0: added [ 59.873356][ T6669] smc: adding ib device syz0 with port count 1 [ 59.875389][ T6669] smc: ib device syz0 port 1 has pnetid [ 59.913245][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 60.126075][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 60.285131][ T39] audit: type=1800 audit(1737942293.497:5): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.159" name="/" dev="fuse" ino=1 res=0 errno=0 [ 61.118508][ T5937] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 61.489753][ T6714] tipc: Started in network mode [ 61.493000][ T6714] tipc: Node identity , cluster identity 4711 [ 61.868561][ T1447] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.038433][ T1447] usb 5-1: Using ep0 maxpacket: 16 [ 62.042317][ T1447] usb 5-1: config 0 has no interfaces? [ 62.047312][ T1447] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 7.36 [ 62.053720][ T1447] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.056329][ T1447] usb 5-1: Product: syz [ 62.057660][ T1447] usb 5-1: Manufacturer: syz [ 62.059214][ T1447] usb 5-1: SerialNumber: syz [ 62.065900][ T1447] usb 5-1: config 0 descriptor?? [ 62.248512][ T5937] Bluetooth: hci2: command 0x0405 tx timeout [ 62.361752][ T5977] usb 5-1: USB disconnect, device number 2 [ 62.740721][ T6732] FAULT_INJECTION: forcing a failure. [ 62.740721][ T6732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.745103][ T6732] CPU: 2 UID: 0 PID: 6732 Comm: syz.3.172 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 62.745126][ T6732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.745132][ T6732] Call Trace: [ 62.745135][ T6732] [ 62.745139][ T6732] dump_stack_lvl+0x16c/0x1f0 [ 62.745157][ T6732] should_fail_ex+0x497/0x5b0 [ 62.745169][ T6732] _copy_to_user+0x32/0xd0 [ 62.745180][ T6732] __vb2_perform_fileio+0x449/0x1620 [ 62.745195][ T6732] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 62.745209][ T6732] vb2_fop_read+0x213/0x3e0 [ 62.745221][ T6732] v4l2_read+0x226/0x360 [ 62.745234][ T6732] ? __pfx_v4l2_read+0x10/0x10 [ 62.745247][ T6732] vfs_read+0x1df/0xbf0 [ 62.745261][ T6732] ? __fget_files+0x1fc/0x3a0 [ 62.745269][ T6732] ? __pfx_lock_release+0x10/0x10 [ 62.745280][ T6732] ? __pfx_vfs_read+0x10/0x10 [ 62.745293][ T6732] ? lock_acquire+0x2f/0xb0 [ 62.745302][ T6732] ? __fget_files+0x40/0x3a0 [ 62.745311][ T6732] ? __fget_files+0x206/0x3a0 [ 62.745322][ T6732] ksys_read+0x12b/0x250 [ 62.745334][ T6732] ? __pfx_ksys_read+0x10/0x10 [ 62.745350][ T6732] do_int80_emulation+0x104/0x200 [ 62.745362][ T6732] asm_int80_emulation+0x1a/0x20 [ 62.745374][ T6732] RIP: 0023:0xf749e579 [ 62.745381][ T6732] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 62.745389][ T6732] RSP: 002b:00000000f5105500 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 62.745397][ T6732] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002140 [ 62.745402][ T6732] RDX: 0000000000002000 RSI: 00000000f748cff4 RDI: 0000000000000000 [ 62.745408][ T6732] RBP: 0000000020002140 R08: 0000000000000000 R09: 0000000000000000 [ 62.745415][ T6732] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 62.745423][ T6732] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.745439][ T6732] [ 62.894333][ T6740] qrtr: Invalid version 17 [ 63.729534][ T6756] FAULT_INJECTION: forcing a failure. [ 63.729534][ T6756] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 63.736276][ T6756] CPU: 2 UID: 0 PID: 6756 Comm: syz.0.178 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 63.736290][ T6756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.736295][ T6756] Call Trace: [ 63.736297][ T6756] [ 63.736301][ T6756] dump_stack_lvl+0x16c/0x1f0 [ 63.736316][ T6756] should_fail_ex+0x497/0x5b0 [ 63.736326][ T6756] ? fs_reclaim_acquire+0xae/0x150 [ 63.736340][ T6756] should_fail_alloc_page+0xe7/0x130 [ 63.736351][ T6756] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 63.736364][ T6756] ? hlock_class+0x4e/0x130 [ 63.736378][ T6756] __alloc_pages_noprof+0x18e/0x2470 [ 63.736389][ T6756] ? __pfx_mark_lock+0x10/0x10 [ 63.736399][ T6756] ? hlock_class+0x4e/0x130 [ 63.736411][ T6756] ? mark_lock+0xb5/0xc60 [ 63.736419][ T6756] ? mark_lock+0xb5/0xc60 [ 63.736429][ T6756] ? __pfx_mark_lock+0x10/0x10 [ 63.736438][ T6756] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 63.736448][ T6756] ? hlock_conflict+0x58/0x200 [ 63.736457][ T6756] ? __bfs+0x2fa/0x670 [ 63.736464][ T6756] ? __pfx_hlock_conflict+0x10/0x10 [ 63.736476][ T6756] ? hlock_class+0x4e/0x130 [ 63.736487][ T6756] ? __lock_acquire+0xcc5/0x3c40 [ 63.736496][ T6756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.736508][ T6756] ? policy_nodemask+0xea/0x4e0 [ 63.736519][ T6756] alloc_pages_mpol_noprof+0x2c8/0x620 [ 63.736532][ T6756] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 63.736544][ T6756] ? lockdep_unlock+0x11a/0x290 [ 63.736559][ T6756] folio_alloc_mpol_noprof+0x36/0xd0 [ 63.736571][ T6756] vma_alloc_folio_noprof+0xee/0x1b0 [ 63.736582][ T6756] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 63.736593][ T6756] ? find_held_lock+0x2d/0x110 [ 63.736608][ T6756] do_pte_missing+0x2017/0x3e00 [ 63.736622][ T6756] __handle_mm_fault+0x1166/0x2c60 [ 63.736634][ T6756] ? __pfx___handle_mm_fault+0x10/0x10 [ 63.736643][ T6756] ? follow_page_pte+0x3c3/0x1b20 [ 63.736652][ T6756] ? __pfx_lock_release+0x10/0x10 [ 63.736666][ T6756] ? follow_page_pte+0x3f7/0x1b20 [ 63.736677][ T6756] handle_mm_fault+0x3fa/0xaa0 [ 63.736688][ T6756] __get_user_pages+0x8d9/0x3b50 [ 63.736702][ T6756] ? __pfx___get_user_pages+0x10/0x10 [ 63.736709][ T6756] ? down_read_killable+0xcc/0x380 [ 63.736721][ T6756] ? __pfx_down_read_killable+0x10/0x10 [ 63.736737][ T6756] get_user_pages_unlocked+0x1c2/0x780 [ 63.736747][ T6756] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 63.736756][ T6756] ? get_user_pages_fast_only+0xaf/0x100 [ 63.736764][ T6756] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 63.736773][ T6756] ? __pfx___might_resched+0x10/0x10 [ 63.736787][ T6756] hva_to_pfn+0x8be/0xc20 [ 63.736801][ T6756] ? __pfx_hva_to_pfn+0x10/0x10 [ 63.736811][ T6756] ? __pfx_mark_lock+0x10/0x10 [ 63.736824][ T6756] ? find_held_lock+0x2d/0x110 [ 63.736837][ T6756] ? xa_load+0x14a/0x2c0 [ 63.736849][ T6756] ? __pfx_lock_release+0x10/0x10 [ 63.736860][ T6756] kvm_follow_pfn+0x29f/0x3f0 [ 63.736872][ T6756] __kvm_faultin_pfn+0x11c/0x1a0 [ 63.736884][ T6756] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 63.736901][ T6756] ? __pfx_xa_load+0x10/0x10 [ 63.736917][ T6756] kvm_mmu_faultin_pfn+0x583/0x2190 [ 63.736931][ T6756] ? __pfx_fast_page_fault+0x10/0x10 [ 63.736942][ T6756] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 63.736954][ T6756] ? __kvm_mmu_topup_memory_cache+0x330/0x600 [ 63.736969][ T6756] kvm_tdp_page_fault+0x182/0x3d0 [ 63.736979][ T6756] kvm_mmu_do_page_fault+0x587/0x6c0 [ 63.736989][ T6756] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 63.736997][ T6756] ? __switch_to+0x749/0x1190 [ 63.737009][ T6756] ? hlock_class+0x4e/0x130 [ 63.737023][ T6756] kvm_mmu_page_fault+0x20f/0x1bd0 [ 63.737034][ T6756] ? __pfx___lock_acquire+0x10/0x10 [ 63.737045][ T6756] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 63.737053][ T6756] ? __pfx_mark_lock+0x10/0x10 [ 63.737066][ T6756] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 63.737077][ T6756] handle_ept_violation+0x25a/0x640 [ 63.737091][ T6756] ? __pfx_handle_ept_violation+0x10/0x10 [ 63.737104][ T6756] vmx_handle_exit+0x6a4/0x1a30 [ 63.737118][ T6756] vcpu_run+0x2aaf/0x4c00 [ 63.737132][ T6756] ? __pfx_vcpu_run+0x10/0x10 [ 63.737143][ T6756] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 63.737159][ T6756] ? rcu_is_watching+0x12/0xc0 [ 63.737178][ T6756] ? trace_lock_acquire+0x14e/0x1f0 [ 63.737189][ T6756] ? __local_bh_enable_ip+0xa4/0x120 [ 63.737206][ T6756] ? lockdep_hardirqs_on+0x7c/0x110 [ 63.737221][ T6756] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 63.737237][ T6756] ? lock_acquire+0x2f/0xb0 [ 63.737255][ T6756] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 63.737269][ T6756] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 63.737289][ T6756] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 63.737308][ T6756] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 63.737325][ T6756] ? tomoyo_path_number_perm+0x190/0x5b0 [ 63.737347][ T6756] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 63.737367][ T6756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.737387][ T6756] ? do_vfs_ioctl+0x513/0x1950 [ 63.737406][ T6756] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 63.737439][ T6756] ? __pfx_lock_release+0x10/0x10 [ 63.737453][ T6756] ? trace_lock_acquire+0x14e/0x1f0 [ 63.737468][ T6756] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 63.737485][ T6756] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 63.737501][ T6756] ? __fget_files+0x206/0x3a0 [ 63.737517][ T6756] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 63.737532][ T6756] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 63.737553][ T6756] __do_fast_syscall_32+0x73/0x120 [ 63.737573][ T6756] do_fast_syscall_32+0x32/0x80 [ 63.737592][ T6756] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.737614][ T6756] RIP: 0023:0xf7fe6579 [ 63.737731][ T6756] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 63.737746][ T6756] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 63.737755][ T6756] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000ae80 [ 63.737760][ T6756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.737764][ T6756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.737769][ T6756] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 63.737773][ T6756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.737785][ T6756] [ 63.806515][ T6760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.199676][ T6775] FAULT_INJECTION: forcing a failure. [ 64.199676][ T6775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.204895][ T6775] CPU: 3 UID: 0 PID: 6775 Comm: syz.0.184 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 64.204907][ T6775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.204912][ T6775] Call Trace: [ 64.204916][ T6775] [ 64.204919][ T6775] dump_stack_lvl+0x16c/0x1f0 [ 64.204947][ T6775] should_fail_ex+0x497/0x5b0 [ 64.204959][ T6775] _copy_to_user+0x32/0xd0 [ 64.204970][ T6775] simple_read_from_buffer+0xd0/0x160 [ 64.204984][ T6775] proc_fail_nth_read+0x198/0x270 [ 64.204997][ T6775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.205008][ T6775] ? rw_verify_area+0xcf/0x680 [ 64.205020][ T6775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.205031][ T6775] vfs_read+0x1df/0xbf0 [ 64.205043][ T6775] ? __fget_files+0x1fc/0x3a0 [ 64.205051][ T6775] ? __pfx___mutex_lock+0x10/0x10 [ 64.205063][ T6775] ? __pfx_vfs_read+0x10/0x10 [ 64.205078][ T6775] ? __fget_files+0x206/0x3a0 [ 64.205089][ T6775] ksys_read+0x12b/0x250 [ 64.205101][ T6775] ? __pfx_ksys_read+0x10/0x10 [ 64.205117][ T6775] __do_fast_syscall_32+0x73/0x120 [ 64.205129][ T6775] do_fast_syscall_32+0x32/0x80 [ 64.205140][ T6775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.205154][ T6775] RIP: 0023:0xf7fe6579 [ 64.205161][ T6775] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 64.205169][ T6775] RSP: 002b:00000000f50e5590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 64.205177][ T6775] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f50e5620 [ 64.205182][ T6775] RDX: 000000000000000f RSI: 00000000f746cff4 RDI: 0000000000000000 [ 64.205187][ T6775] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 64.205191][ T6775] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 64.205195][ T6775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.205206][ T6775] [ 64.318518][ T5937] Bluetooth: hci2: command 0x0405 tx timeout [ 64.336233][ T6776] overlayfs: overlapping lowerdir path [ 64.345044][ T25] libceph: connect (1)[c::]:6789 error -101 [ 64.347014][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 64.350227][ T6778] ceph: No mds server is up or the cluster is laggy [ 65.220993][ T6795] qrtr: Invalid version 17 [ 65.752666][ T6803] vlan2: entered allmulticast mode [ 65.754298][ T6803] vlan1: entered allmulticast mode [ 65.755997][ T6803] veth0_vlan: entered allmulticast mode [ 65.761474][ T6803] bridge0: port 3(vlan2) entered blocking state [ 65.763497][ T6803] bridge0: port 3(vlan2) entered disabled state [ 65.765944][ T6803] vlan2: entered promiscuous mode [ 65.767701][ T6803] vlan1: entered promiscuous mode [ 65.770498][ T6803] bridge0: port 3(vlan2) entered blocking state [ 65.772696][ T6803] bridge0: port 3(vlan2) entered forwarding state [ 65.785616][ T6803] bridge_slave_0: left allmulticast mode [ 65.787481][ T6803] bridge_slave_0: left promiscuous mode [ 65.791182][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.798140][ T6803] bridge_slave_1: left allmulticast mode [ 65.801041][ T6803] bridge_slave_1: left promiscuous mode [ 65.802848][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.806584][ T6803] bond0: (slave bond_slave_0): Releasing backup interface [ 65.813916][ T6803] bond0: (slave bond_slave_1): Releasing backup interface [ 65.824893][ T6803] team0: Port device team_slave_0 removed [ 65.830349][ T6803] team0: Port device team_slave_1 removed [ 65.832521][ T6803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.834810][ T6803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.837662][ T6803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.840239][ T6803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.846279][ T6803] bond0: (slave wlan1): Releasing backup interface [ 65.850246][ T6803] vlan2: left promiscuous mode [ 65.851813][ T6803] vlan1: left promiscuous mode [ 65.853599][ T6803] bridge0: port 3(vlan2) entered disabled state [ 65.977952][ T6811] ubi: mtd0 is already attached to ubi0 [ 66.130662][ T6823] FAULT_INJECTION: forcing a failure. [ 66.130662][ T6823] name failslab, interval 1, probability 0, space 0, times 0 [ 66.134736][ T6823] CPU: 1 UID: 0 PID: 6823 Comm: syz.1.191 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 66.134759][ T6823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.134764][ T6823] Call Trace: [ 66.134767][ T6823] [ 66.134771][ T6823] dump_stack_lvl+0x16c/0x1f0 [ 66.134787][ T6823] should_fail_ex+0x497/0x5b0 [ 66.134796][ T6823] ? fs_reclaim_acquire+0xae/0x150 [ 66.134810][ T6823] should_failslab+0xc2/0x120 [ 66.134821][ T6823] __kmalloc_cache_noprof+0x68/0x420 [ 66.134835][ T6823] ? lock_acquire+0x2f/0xb0 [ 66.134845][ T6823] ? sctp_has_association+0x44/0x270 [ 66.134859][ T6823] sctp_association_new+0x97/0x28b0 [ 66.134868][ T6823] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.134880][ T6823] ? sctp_v4_scope+0x183/0x1a0 [ 66.134891][ T6823] sctp_connect_new_asoc+0x1b7/0x790 [ 66.134901][ T6823] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 66.134911][ T6823] ? lock_acquire+0x2f/0xb0 [ 66.134919][ T6823] ? sctp_endpoint_lookup_assoc+0xac/0x2a0 [ 66.134940][ T6823] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 66.134953][ T6823] sctp_sendmsg+0x162a/0x1f10 [ 66.134961][ T6823] ? __pfx___lock_acquire+0x10/0x10 [ 66.134974][ T6823] ? __pfx_sctp_sendmsg+0x10/0x10 [ 66.134989][ T6823] ? __pfx_aa_sk_perm+0x10/0x10 [ 66.135003][ T6823] ? __pfx_sctp_sendmsg+0x10/0x10 [ 66.135012][ T6823] inet_sendmsg+0x119/0x140 [ 66.135023][ T6823] __sys_sendto+0x42a/0x4f0 [ 66.135035][ T6823] ? __pfx___sys_sendto+0x10/0x10 [ 66.135055][ T6823] ? ksys_write+0x1ba/0x250 [ 66.135071][ T6823] __ia32_sys_sendto+0xdd/0x1b0 [ 66.135080][ T6823] ? lockdep_hardirqs_on+0x7c/0x110 [ 66.135091][ T6823] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 66.135102][ T6823] __do_fast_syscall_32+0x73/0x120 [ 66.135114][ T6823] do_fast_syscall_32+0x32/0x80 [ 66.135125][ T6823] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.135139][ T6823] RIP: 0023:0xf73fe579 [ 66.135146][ T6823] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 66.135154][ T6823] RSP: 002b:00000000f504455c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 66.135163][ T6823] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000300 [ 66.135168][ T6823] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000020000380 [ 66.135172][ T6823] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 66.135177][ T6823] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 66.135181][ T6823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.135192][ T6823] [ 66.291532][ T6829] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.321126][ T1220] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.354883][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 68.550473][ T6891] netlink: 200 bytes leftover after parsing attributes in process `syz.2.212'. [ 68.553122][ T6891] netlink: 200 bytes leftover after parsing attributes in process `syz.2.212'. [ 68.568451][ T6004] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 68.970400][ T6004] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 68.975326][ T6004] usb 6-1: New USB device found, idVendor=047f, idProduct=c058, bcdDevice= 0.40 [ 68.978066][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.980597][ T6004] usb 6-1: Product: 젅烅揢虽驘⫥Ὸ챪⿐ꤡᥰ蔛⦔쬹湮걅煟Ɥ굁簐㛋쎼嘸푞懿ꢖ쭑㕂讻ᖆ꺐닙熺샛힚䷇ᙙ⌸돞ॽᕮ俆뗖끚䴍쭐栨Ꮳᝋ跀씊囵逐裨틺5펅ޓ䎫ｖ黜ྷ즱脵୅⇺醚ᙋ暔ɲ識笲怳ᦀ隭浖뮮삯✪㙼ꚿ㺯騧隀ⲁⱜ眽拍꭮素뛥䨡騟핀뛝뱴蝅噚팜῜㺆 [ 68.990272][ T6004] usb 6-1: Manufacturer: п [ 68.991651][ T6004] usb 6-1: SerialNumber: 틏⁇薠Ꭿ꥙䊴ꄼ㯓鬠綗Ʞꮤꦀ鸡핲⟓濵Ⲹ痱楓獗룟䟼탾퍙뉽庙脁鱮轭㝨ⷪ䠡ࣲ篊㘻쟚ᴮ蕜뎰螵ﺒ伭ಮ莠篬옠곇躪䵡쫡ꮉힱ甂뾰䒠⨡慜玘욦뫱㏫䠜됈䠰鴘ᱦ໽衭탬➠﹢ [ 69.237019][ T6004] usbhid 6-1:1.0: can't add hid device: -71 [ 69.239007][ T6004] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 69.243618][ T6004] usb 6-1: USB disconnect, device number 4 [ 69.385229][ T6917] fuse: Unknown parameter '' [ 69.485613][ T6921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'. [ 69.489098][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 69.492292][ T6921] netlink: 173 bytes leftover after parsing attributes in process `syz.2.219'. [ 70.075861][ T6930] netlink: 'syz.0.222': attribute type 2 has an invalid length. [ 70.821256][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.171216][ T6950] netlink: 48 bytes leftover after parsing attributes in process `syz.3.228'. [ 71.329568][ T6954] mkiss: ax0: crc mode is auto. [ 71.334770][ T6954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.230'. [ 71.344196][ T6954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.230'. [ 71.347049][ T6954] netlink: 268 bytes leftover after parsing attributes in process `syz.1.230'. [ 71.422067][ T6955] mkiss: ax0: crc mode is auto. [ 71.656991][ T6960] fuse: Unknown parameter '' [ 71.663673][ T6960] can0: slcan on ptm0. [ 71.807967][ T6971] ubi: mtd0 is already attached to ubi0 [ 71.842169][ T57] libceph: connect (1)[c::]:6789 error -101 [ 71.844269][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 72.055049][ T6984] ubi: mtd0 is already attached to ubi0 [ 72.109852][ T1447] libceph: connect (1)[c::]:6789 error -101 [ 72.112263][ T1447] libceph: mon0 (1)[c::]:6789 connect error [ 72.462229][ T6972] ceph: No mds server is up or the cluster is laggy [ 72.510539][ T6956] can0 (unregistered): slcan off ptm0. [ 72.553460][ T7011] bridge0: port 1(syz_tun) entered blocking state [ 72.557443][ T7011] bridge0: port 1(syz_tun) entered disabled state [ 72.560484][ T7011] syz_tun: entered allmulticast mode [ 72.563545][ T7011] syz_tun: entered promiscuous mode [ 72.567990][ T7011] bridge0: port 1(syz_tun) entered blocking state [ 72.570763][ T7011] bridge0: port 1(syz_tun) entered forwarding state [ 72.811568][ T6004] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.958428][ T6004] usb 7-1: Using ep0 maxpacket: 32 [ 72.961346][ T6004] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 72.964012][ T6004] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.967084][ T6004] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.970065][ T6004] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 72.973513][ T6004] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 72.978873][ T6004] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.981690][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.984073][ T6004] usb 7-1: Product: п [ 72.985326][ T6004] usb 7-1: Manufacturer: ㉬ㅡ֞醙 [ 72.986950][ T6004] usb 7-1: SerialNumber: syz [ 73.083428][ T7035] ======================================================= [ 73.083428][ T7035] WARNING: The mand mount option has been deprecated and [ 73.083428][ T7035] and is ignored by this kernel. Remove the mand [ 73.083428][ T7035] option from the mount to silence this warning. [ 73.083428][ T7035] ======================================================= [ 73.176803][ T7038] fuse: Unknown parameter '' [ 73.224844][ T6004] usb 7-1: 0:2 : does not exist [ 73.230453][ T6004] usb 7-1: USB disconnect, device number 3 [ 73.419446][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.457673][ T7046] ufs: Invalid option: "0(eLd9(@ 8L)uH\dKzLVR<%5rƌze ~I2~ [ 73.457673][ T7046] r0Rpyh:Y [ 73.457673][ T7046] O\zY" or missing value [ 73.464695][ T7046] ufs: wrong mount options [ 73.553643][ T7053] Cannot find add_set index 0 as target [ 74.120726][ T7071] xt_hashlimit: overflow, rate too high: 0 [ 74.168907][ T7064] Cannot find add_set index 0 as target [ 74.470043][ T7073] overlayfs: failed to clone upperpath [ 74.553427][ T7076] bridge0: port 3(syz_tun) entered blocking state [ 74.555517][ T7076] bridge0: port 3(syz_tun) entered disabled state [ 74.558711][ T7076] syz_tun: entered allmulticast mode [ 74.567352][ T7076] syz_tun: entered promiscuous mode [ 74.569312][ T7076] bridge0: port 3(syz_tun) entered blocking state [ 74.571510][ T7076] bridge0: port 3(syz_tun) entered forwarding state [ 75.065446][ T7084] __nla_validate_parse: 2 callbacks suppressed [ 75.065457][ T7084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.267'. [ 75.168642][ T7087] Cannot find add_set index 0 as target [ 75.367011][ T7092] fuse: Unknown parameter '' [ 75.378808][ T7092] can0: slcan on ptm0. [ 75.572811][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.275'. [ 75.920049][ T35] cfg80211: failed to load regulatory.db [ 76.075645][ T7122] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 76.093388][ T7122] bond1: entered promiscuous mode [ 76.095228][ T7122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.125142][ T7122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.129005][ T7122] bond1: (slave bond2): making interface the new active one [ 76.131772][ T7122] bond2: entered promiscuous mode [ 76.133751][ T7122] bond1: (slave bond2): Enslaving as an active interface with an up link [ 76.209035][ T7090] can0 (unregistered): slcan off ptm0. [ 76.239196][ T7132] macvtap1: entered promiscuous mode [ 76.240863][ T7132] macvtap1: entered allmulticast mode [ 76.243990][ T7132] vlan0: entered allmulticast mode [ 76.245646][ T7132] veth0_vlan: entered allmulticast mode [ 76.247337][ T7132] vlan0: entered promiscuous mode [ 76.252524][ T7132] team0: Device macvtap1 failed to register rx_handler [ 76.255455][ T7132] vlan0: left allmulticast mode [ 76.256960][ T7132] veth0_vlan: left allmulticast mode [ 76.259182][ T7132] vlan0: left promiscuous mode [ 76.289123][ T65] Bluetooth: hci1: hardware error 0x75 [ 76.394275][ T7147] netlink: 88 bytes leftover after parsing attributes in process `syz.1.281'. [ 76.398057][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 76.482027][ T7153] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 76.510745][ T7153] pim6reg527: entered allmulticast mode [ 76.757104][ T7167] fuse: Unknown parameter '' [ 77.186156][ T7190] Cannot find add_set index 0 as target [ 77.379213][ T7194] ubi: mtd0 is already attached to ubi0 [ 77.718113][ T7209] random: crng reseeded on system resumption [ 78.318560][ T65] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 78.545222][ T7226] ubi: mtd0 is already attached to ubi0 [ 78.570838][ T7229] fuse: Unknown parameter '' [ 79.490935][ T7250] Cannot find add_set index 0 as target [ 79.512468][ T7252] netlink: 88 bytes leftover after parsing attributes in process `syz.0.316'. [ 79.622753][ T7255] loop9: detected capacity change from 0 to 7 [ 79.625529][ T7255] Dev loop9: unable to read RDB block 7 [ 79.627410][ T7255] loop9: unable to read partition table [ 79.629551][ T7255] loop9: partition table beyond EOD, truncated [ 79.631596][ T7255] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 79.631596][ T7255] ) failed (rc=-5) [ 79.778172][ T7267] netlink: 'syz.3.321': attribute type 1 has an invalid length. [ 79.788856][ T7267] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.809550][ T7267] bond2: (slave gretap1): making interface the new active one [ 79.812740][ T7267] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 79.903556][ T7271] fuse: Unknown parameter '' [ 80.928163][ T7291] ubi: mtd0 is already attached to ubi0 [ 81.034040][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'. [ 81.169024][ T7301] ax25_connect(): syz.2.331 uses autobind, please contact jreuter@yaina.de [ 81.889819][ T7323] macvtap1: entered promiscuous mode [ 81.891495][ T7323] macvtap1: entered allmulticast mode [ 81.893334][ T7323] vlan0: entered allmulticast mode [ 81.894921][ T7323] vlan0: entered promiscuous mode [ 81.897288][ T7323] team0: Device macvtap1 failed to register rx_handler [ 81.900155][ T7323] vlan0: left allmulticast mode [ 81.901676][ T7323] vlan0: left promiscuous mode [ 81.950648][ T7327] gretap1: entered allmulticast mode [ 81.953495][ T7327] bridge0: port 3(gretap1) entered blocking state [ 81.955591][ T7327] bridge0: port 3(gretap1) entered disabled state [ 81.958112][ T7327] gretap1: entered promiscuous mode [ 81.960190][ T7327] bridge0: port 3(gretap1) entered blocking state [ 81.963097][ T7327] bridge0: port 3(gretap1) entered forwarding state [ 81.968135][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 82.033885][ T39] audit: type=1400 audit(1737942315.247:6): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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loop6: detected capacity change from 0 to 524288000 [ 82.165766][ T7342] C: renamed from team_slave_0 [ 82.168607][ T7342] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 82.171194][ T7342] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 82.244498][ T7347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.346'. [ 82.614787][ T7356] macvtap1: entered promiscuous mode [ 82.616451][ T7356] macvtap1: entered allmulticast mode [ 82.618215][ T7356] vlan0: entered allmulticast mode [ 82.620357][ T7356] veth0_vlan: entered allmulticast mode [ 82.622070][ T7356] vlan0: entered promiscuous mode [ 82.624424][ T7356] team0: Device macvtap1 failed to register rx_handler [ 82.627907][ T7356] vlan0: left allmulticast mode [ 82.629687][ T7356] veth0_vlan: left allmulticast mode [ 82.631298][ T7356] vlan0: left promiscuous mode [ 82.696678][ T7359] process 'syz.3.350' launched './file0' with NULL argv: empty string added [ 83.057509][ T7371] macvtap1: entered promiscuous mode [ 83.059298][ T7371] macvtap1: entered allmulticast mode [ 83.061122][ T7371] vlan0: entered allmulticast mode [ 83.062962][ T7371] vlan0: entered promiscuous mode [ 83.065135][ T7371] team0: Device macvtap1 failed to register rx_handler [ 83.068272][ T7371] vlan0: left allmulticast mode [ 83.070845][ T7371] vlan0: left promiscuous mode [ 83.262276][ T7380] syz.2.357: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 83.269061][ T7380] CPU: 2 UID: 0 PID: 7380 Comm: syz.2.357 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 83.269074][ T7380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.269079][ T7380] Call Trace: [ 83.269082][ T7380] [ 83.269085][ T7380] dump_stack_lvl+0x16c/0x1f0 [ 83.269101][ T7380] warn_alloc+0x24d/0x3a0 [ 83.269112][ T7380] ? __pfx_warn_alloc+0x10/0x10 [ 83.269125][ T7380] ? __get_vm_area_node+0x1b0/0x2f0 [ 83.269139][ T7380] ? __get_vm_area_node+0x1dc/0x2f0 [ 83.269154][ T7380] __vmalloc_node_range_noprof+0x1105/0x1530 [ 83.269166][ T7380] ? packet_set_ring+0xb13/0x18c0 [ 83.269179][ T7380] ? policy_nodemask+0xea/0x4e0 [ 83.269190][ T7380] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 83.269199][ T7380] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 83.269211][ T7380] ? rcu_is_watching+0x12/0xc0 [ 83.269224][ T7380] ? trace_kmalloc+0x2d/0xd0 [ 83.269235][ T7380] ? __kmalloc_noprof+0x23b/0x4f0 [ 83.269243][ T7380] ? packet_set_ring+0xb13/0x18c0 [ 83.269254][ T7380] vzalloc_noprof+0x6b/0x90 [ 83.269262][ T7380] ? packet_set_ring+0xb13/0x18c0 [ 83.269273][ T7380] packet_set_ring+0xb13/0x18c0 [ 83.269288][ T7380] packet_setsockopt+0x188e/0x4070 [ 83.269302][ T7380] ? __pfx_packet_setsockopt+0x10/0x10 [ 83.269314][ T7380] ? __pfx___might_resched+0x10/0x10 [ 83.269327][ T7380] ? aa_sk_perm+0x2f5/0xb20 [ 83.269341][ T7380] ? __pfx_aa_sk_perm+0x10/0x10 [ 83.269353][ T7380] ? find_held_lock+0x2d/0x110 [ 83.269367][ T7380] ? __pfx_packet_setsockopt+0x10/0x10 [ 83.269379][ T7380] do_sock_setsockopt+0x222/0x480 [ 83.269393][ T7380] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 83.269406][ T7380] ? lock_acquire+0x2f/0xb0 [ 83.269421][ T7380] __sys_setsockopt+0x1a0/0x230 [ 83.269435][ T7380] __ia32_sys_setsockopt+0xbc/0x160 [ 83.269445][ T7380] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.269455][ T7380] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 83.269466][ T7380] __do_fast_syscall_32+0x73/0x120 [ 83.269478][ T7380] do_fast_syscall_32+0x32/0x80 [ 83.269488][ T7380] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.269501][ T7380] RIP: 0023:0xf7f55579 [ 83.269509][ T7380] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.269517][ T7380] RSP: 002b:00000000f503455c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 83.269525][ T7380] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000107 [ 83.269530][ T7380] RDX: 000000000000000d RSI: 0000000020000040 RDI: 000000000000001c [ 83.269534][ T7380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.269539][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.269543][ T7380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.269553][ T7380] [ 83.269556][ T7380] Mem-Info: [ 83.353423][ T7380] active_anon:12265 inactive_anon:526 isolated_anon:0 [ 83.353423][ T7380] active_file:6068 inactive_file:41823 isolated_file:0 [ 83.353423][ T7380] unevictable:1768 dirty:353 writeback:0 [ 83.353423][ T7380] slab_reclaimable:7643 slab_unreclaimable:57142 [ 83.353423][ T7380] mapped:24050 shmem:5301 pagetables:749 [ 83.353423][ T7380] sec_pagetables:294 bounce:0 [ 83.353423][ T7380] kernel_misc_reclaimable:0 [ 83.353423][ T7380] free:35488 free_pcp:4158 free_cma:0 [ 83.368588][ T7380] Node 0 active_anon:3868kB inactive_anon:2104kB active_file:8028kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5428kB dirty:80kB writeback:0kB shmem:5088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9456kB pagetables:836kB sec_pagetables:1140kB all_unreclaimable? yes [ 83.378088][ T7380] Node 1 active_anon:45192kB inactive_anon:0kB active_file:16244kB inactive_file:167292kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:90772kB dirty:1332kB writeback:0kB shmem:16116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2724kB pagetables:2160kB sec_pagetables:36kB all_unreclaimable? no [ 83.391934][ T7380] Node 0 DMA free:2896kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:192kB inactive_anon:448kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:100kB free_cma:0kB [ 83.402217][ T7380] lowmem_reserve[]: 0 297 0 0 0 [ 83.403762][ T7380] Node 0 DMA32 free:25892kB boost:8192kB min:21864kB low:25280kB high:28696kB reserved_highatomic:4096KB active_anon:3676kB inactive_anon:1656kB active_file:7964kB inactive_file:0kB unevictable:3536kB writepending:80kB present:1032196kB managed:305108kB mlocked:0kB bounce:0kB free_pcp:180kB local_pcp:40kB free_cma:0kB [ 83.422227][ T7380] lowmem_reserve[]: 0 0 0 0 0 [ 83.423719][ T7380] Node 1 DMA32 free:74788kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:45292kB inactive_anon:0kB active_file:16244kB inactive_file:167292kB unevictable:3536kB writepending:1332kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:9540kB local_pcp:7380kB free_cma:0kB [ 83.433195][ T7380] lowmem_reserve[]: 0 0 0 0 0 [ 83.434810][ T7380] Node 0 DMA: 72*4kB (UE) 50*8kB (UE) 34*16kB (U) 12*32kB (U) 6*64kB (UE) 5*128kB (UE) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2896kB [ 83.439234][ T7391] netlink: 48 bytes leftover after parsing attributes in process `syz.0.360'. [ 83.439703][ T7380] Node 0 DMA32: 153*4kB (UMEH) 78*8kB (UMEH) 57*16kB (UMEH) 258*32kB (UMEH) 90*64kB (UMEH) 19*128kB (UME) 9*256kB (UME) 4*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 23972kB [ 83.447367][ T7380] Node 1 DMA32: 140*4kB (M) 151*8kB (ME) 292*16kB (UME) 215*32kB (UME) 159*64kB (ME) 54*128kB (UME) 24*256kB (ME) 17*512kB (ME) 11*1024kB (UME) 1*2048kB (M) 0*4096kB = 58568kB [ 83.453168][ T7380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 83.456135][ T7380] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 83.459383][ T7380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 83.462277][ T7380] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 83.465082][ T7380] 51192 total pagecache pages [ 83.466524][ T7380] 0 pages in swap cache [ 83.467795][ T7380] Free swap = 124200kB [ 83.469483][ T7380] Total swap = 124996kB [ 83.470763][ T7380] 524155 pages RAM [ 83.471903][ T7380] 0 pages HighMem/MovableOnly [ 83.473307][ T7380] 206975 pages reserved [ 83.474599][ T7380] 0 pages cma reserved [ 83.682915][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 83.765431][ T7405] lo speed is unknown, defaulting to 1000 [ 83.768559][ T1447] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 83.769307][ T7405] lo speed is unknown, defaulting to 1000 [ 83.772850][ T7405] lo speed is unknown, defaulting to 1000 [ 83.830700][ T7406] 7: renamed from lo (while UP) [ 83.928415][ T1447] usb 7-1: Using ep0 maxpacket: 8 [ 83.931840][ T1447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.935234][ T1447] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.937727][ T1447] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.985753][ T1447] usb 7-1: config 0 descriptor?? [ 84.071941][ T7405] infiniband sz1: set active [ 84.073505][ T75] 7 speed is unknown, defaulting to 1000 [ 84.076899][ T7405] infiniband sz1: added 7 [ 84.106527][ T7405] RDS/IB: sz1: added [ 84.107848][ T7405] smc: adding ib device sz1 with port count 1 [ 84.113569][ T7405] smc: ib device sz1 port 1 has pnetid [ 84.115504][ T57] 7 speed is unknown, defaulting to 1000 [ 84.119857][ T7405] 7 speed is unknown, defaulting to 1000 [ 84.163047][ T7405] 7 speed is unknown, defaulting to 1000 [ 84.196643][ T1447] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 84.238528][ T7405] 7 speed is unknown, defaulting to 1000 [ 84.289574][ T7405] 7 speed is unknown, defaulting to 1000 [ 84.332712][ T7405] syz.3.365 (7405) used greatest stack depth: 18176 bytes left [ 84.393709][ T7394] netlink: 'syz.2.361': attribute type 11 has an invalid length. [ 84.396000][ T7394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.361'. [ 84.452165][ T7413] netlink: 'syz.3.367': attribute type 21 has an invalid length. [ 84.586466][ T7424] FAULT_INJECTION: forcing a failure. [ 84.586466][ T7424] name failslab, interval 1, probability 0, space 0, times 0 [ 84.590364][ T7424] CPU: 3 UID: 0 PID: 7424 Comm: syz.1.368 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 84.590376][ T7424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.590381][ T7424] Call Trace: [ 84.590385][ T7424] [ 84.590388][ T7424] dump_stack_lvl+0x16c/0x1f0 [ 84.590403][ T7424] should_fail_ex+0x497/0x5b0 [ 84.590412][ T7424] ? fs_reclaim_acquire+0xae/0x150 [ 84.590426][ T7424] should_failslab+0xc2/0x120 [ 84.590437][ T7424] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 84.590447][ T7424] ? __alloc_skb+0x2b3/0x380 [ 84.590459][ T7424] ? bpf_lsm_capable+0x9/0x10 [ 84.590472][ T7424] __alloc_skb+0x2b3/0x380 [ 84.590483][ T7424] ? __pfx___alloc_skb+0x10/0x10 [ 84.590498][ T7424] ? genl_rcv_msg+0x4a0/0x800 [ 84.590509][ T7424] ? genl_rcv_msg+0x4bd/0x800 [ 84.590522][ T7424] netlink_ack+0x164/0xb20 [ 84.590535][ T7424] netlink_rcv_skb+0x327/0x410 [ 84.590545][ T7424] ? __pfx_genl_rcv_msg+0x10/0x10 [ 84.590556][ T7424] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.590570][ T7424] ? down_read+0xc9/0x330 [ 84.590582][ T7424] ? __pfx_down_read+0x10/0x10 [ 84.590593][ T7424] ? netlink_deliver_tap+0x1ae/0xca0 [ 84.590604][ T7424] genl_rcv+0x28/0x40 [ 84.590613][ T7424] netlink_unicast+0x53c/0x7f0 [ 84.590624][ T7424] ? __pfx_netlink_unicast+0x10/0x10 [ 84.590633][ T7424] ? __phys_addr_symbol+0x30/0x80 [ 84.590646][ T7424] ? __check_object_size+0x488/0x710 [ 84.590658][ T7424] netlink_sendmsg+0x8b8/0xd70 [ 84.590669][ T7424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.590683][ T7424] ____sys_sendmsg+0x9ae/0xb40 [ 84.590693][ T7424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.590701][ T7424] ? get_compat_msghdr+0x11b/0x170 [ 84.590715][ T7424] ___sys_sendmsg+0x135/0x1e0 [ 84.590727][ T7424] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.590743][ T7424] ? __pfx_lock_release+0x10/0x10 [ 84.590753][ T7424] ? trace_lock_acquire+0x14e/0x1f0 [ 84.590765][ T7424] ? __fget_files+0x206/0x3a0 [ 84.590776][ T7424] __sys_sendmsg+0x16e/0x220 [ 84.590787][ T7424] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.590806][ T7424] __do_fast_syscall_32+0x73/0x120 [ 84.590818][ T7424] do_fast_syscall_32+0x32/0x80 [ 84.590829][ T7424] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.590843][ T7424] RIP: 0023:0xf73fe579 [ 84.590850][ T7424] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.590858][ T7424] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 84.590867][ T7424] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200006c0 [ 84.590872][ T7424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.590876][ T7424] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.590880][ T7424] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 84.590885][ T7424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.590895][ T7424] [ 84.685340][ C3] vkms_vblank_simulate: vblank timer overrun [ 84.912001][ T6004] usb 7-1: USB disconnect, device number 4 [ 84.965102][ T7434] Cannot find add_set index 0 as target [ 85.206623][ T7443] xt_hashlimit: size too large, truncated to 1048576 [ 85.221246][ T7446] tc_dump_action: action bad kind [ 85.255908][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.378'. [ 85.335247][ T7459] netlink: 2980 bytes leftover after parsing attributes in process `syz.3.381'. [ 85.482375][ T7467] syz.1.379: attempt to access beyond end of device [ 85.482375][ T7467] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 85.493841][ T7467] XFS (nbd1): SB validate failed with error -5. [ 85.584810][ T7477] ubi: mtd0 is already attached to ubi0 [ 86.275852][ T65] Bluetooth: hci2: hardware error 0x75 [ 86.276468][ T7492] macvtap1: entered promiscuous mode [ 86.280322][ T7492] macvtap1: entered allmulticast mode [ 86.282677][ T7492] vlan0: entered allmulticast mode [ 86.284541][ T7492] veth0_vlan: entered allmulticast mode [ 86.286286][ T7492] vlan0: entered promiscuous mode [ 86.294119][ T7492] team0: Device macvtap1 failed to register rx_handler [ 86.297692][ T7492] vlan0: left allmulticast mode [ 86.299538][ T7492] veth0_vlan: left allmulticast mode [ 86.301171][ T7492] vlan0: left promiscuous mode [ 86.421756][ T7508] FAULT_INJECTION: forcing a failure. [ 86.421756][ T7508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.425711][ T7508] CPU: 0 UID: 0 PID: 7508 Comm: syz.0.393 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 86.425723][ T7508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.425729][ T7508] Call Trace: [ 86.425732][ T7508] [ 86.425736][ T7508] dump_stack_lvl+0x16c/0x1f0 [ 86.425750][ T7508] should_fail_ex+0x497/0x5b0 [ 86.425762][ T7508] _copy_to_user+0x32/0xd0 [ 86.425773][ T7508] simple_read_from_buffer+0xd0/0x160 [ 86.425787][ T7508] proc_fail_nth_read+0x198/0x270 [ 86.425817][ T7508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.425828][ T7508] ? rw_verify_area+0xcf/0x680 [ 86.425840][ T7508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.425851][ T7508] vfs_read+0x1df/0xbf0 [ 86.425863][ T7508] ? __fget_files+0x1fc/0x3a0 [ 86.425871][ T7508] ? __pfx___mutex_lock+0x10/0x10 [ 86.425883][ T7508] ? __pfx_vfs_read+0x10/0x10 [ 86.425898][ T7508] ? __fget_files+0x206/0x3a0 [ 86.425909][ T7508] ksys_read+0x12b/0x250 [ 86.425921][ T7508] ? __pfx_ksys_read+0x10/0x10 [ 86.425937][ T7508] __do_fast_syscall_32+0x73/0x120 [ 86.425950][ T7508] do_fast_syscall_32+0x32/0x80 [ 86.425961][ T7508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.425975][ T7508] RIP: 0023:0xf7fe6579 [ 86.425982][ T7508] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 86.425989][ T7508] RSP: 002b:00000000f5106590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 86.425998][ T7508] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5106620 [ 86.426003][ T7508] RDX: 000000000000000f RSI: 00000000f746cff4 RDI: 0000000000000000 [ 86.426007][ T7508] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 86.426012][ T7508] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 86.426016][ T7508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.426026][ T7508] [ 86.570116][ T7514] loop9: detected capacity change from 0 to 7 [ 86.575058][ T7514] Dev loop9: unable to read RDB block 7 [ 86.576777][ T7514] loop9: unable to read partition table [ 86.584707][ T7514] loop9: partition table beyond EOD, truncated [ 86.586722][ T7514] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 86.586722][ T7514] ) failed (rc=-5) [ 86.631122][ T7518] macvtap1: entered promiscuous mode [ 86.632954][ T7518] macvtap1: entered allmulticast mode [ 86.634915][ T7518] vlan0: entered allmulticast mode [ 86.636584][ T7518] veth0_vlan: entered allmulticast mode [ 86.642457][ T7518] vlan0: entered promiscuous mode [ 86.645572][ T7518] team0: Device macvtap1 failed to register rx_handler [ 86.650491][ T7518] vlan0: left allmulticast mode [ 86.652090][ T7518] veth0_vlan: left allmulticast mode [ 86.653947][ T7518] vlan0: left promiscuous mode [ 86.701952][ T7523] input: syz0 as /devices/virtual/input/input9 [ 86.762945][ T7523] FAULT_INJECTION: forcing a failure. [ 86.762945][ T7523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.769586][ T7523] CPU: 3 UID: 0 PID: 7523 Comm: syz.2.398 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 86.769599][ T7523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.769604][ T7523] Call Trace: [ 86.769607][ T7523] [ 86.769610][ T7523] dump_stack_lvl+0x16c/0x1f0 [ 86.769637][ T7523] should_fail_ex+0x497/0x5b0 [ 86.769649][ T7523] _copy_from_user+0x2e/0xd0 [ 86.769660][ T7523] input_event_from_user+0x22d/0x3b0 [ 86.769670][ T7523] ? __pfx_input_event_from_user+0x10/0x10 [ 86.769684][ T7523] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 86.769695][ T7523] ? input_event+0x98/0xb0 [ 86.769703][ T7523] uinput_write+0xbb6/0x12b0 [ 86.769717][ T7523] ? __pfx_uinput_write+0x10/0x10 [ 86.769728][ T7523] ? bpf_lsm_file_permission+0x9/0x10 [ 86.769739][ T7523] ? security_file_permission+0x71/0x210 [ 86.769753][ T7523] ? rw_verify_area+0xcf/0x680 [ 86.769766][ T7523] ? __pfx_uinput_write+0x10/0x10 [ 86.769775][ T7523] vfs_write+0x24c/0x1150 [ 86.769788][ T7523] ? __fget_files+0x1fc/0x3a0 [ 86.769814][ T7523] ? __pfx_lock_release+0x10/0x10 [ 86.769826][ T7523] ? __pfx_vfs_write+0x10/0x10 [ 86.769838][ T7523] ? lock_acquire+0x2f/0xb0 [ 86.769847][ T7523] ? __fget_files+0x40/0x3a0 [ 86.769856][ T7523] ? __fget_files+0x206/0x3a0 [ 86.769867][ T7523] ksys_write+0x207/0x250 [ 86.769891][ T7523] ? __pfx_ksys_write+0x10/0x10 [ 86.769907][ T7523] __do_fast_syscall_32+0x73/0x120 [ 86.769919][ T7523] do_fast_syscall_32+0x32/0x80 [ 86.769931][ T7523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.769944][ T7523] RIP: 0023:0xf7f55579 [ 86.769952][ T7523] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 86.769959][ T7523] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 86.769968][ T7523] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 86.769973][ T7523] RDX: 000000000000fe4f RSI: 0000000000000000 RDI: 0000000000000000 [ 86.769977][ T7523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.769982][ T7523] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 86.769986][ T7523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.769996][ T7523] [ 87.419021][ T39] audit: type=1326 audit(1737942320.637:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 87.425333][ T39] audit: type=1326 audit(1737942320.637:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 87.431855][ T39] audit: type=1326 audit(1737942320.637:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 87.438487][ T39] audit: type=1326 audit(1737942320.637:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 87.445179][ T39] audit: type=1326 audit(1737942320.637:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 87.451916][ T39] audit: type=1326 audit(1737942320.637:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f555a7 code=0x7ffc0000 [ 87.458911][ T39] audit: type=1326 audit(1737942320.637:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 87.465517][ T39] audit: type=1326 audit(1737942320.637:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f555a7 code=0x7ffc0000 [ 87.472294][ T39] audit: type=1326 audit(1737942320.637:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 87.478644][ T39] audit: type=1326 audit(1737942320.637:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f555a7 code=0x7ffc0000 [ 87.799434][ T7566] macvtap1: entered promiscuous mode [ 87.808458][ T7566] macvtap1: entered allmulticast mode [ 87.811889][ T7566] vlan0: entered allmulticast mode [ 87.817272][ T7566] veth0_vlan: entered allmulticast mode [ 87.823673][ T7566] vlan0: entered promiscuous mode [ 87.831929][ T7566] team0: Device macvtap1 failed to register rx_handler [ 87.840496][ T7566] vlan0: left allmulticast mode [ 87.843727][ T7566] veth0_vlan: left allmulticast mode [ 87.845920][ T7566] vlan0: left promiscuous mode [ 88.225703][ T7574] loop9: detected capacity change from 0 to 7 [ 88.228139][ T7574] Dev loop9: unable to read RDB block 7 [ 88.233259][ T7574] loop9: unable to read partition table [ 88.238562][ T7574] loop9: partition table beyond EOD, truncated [ 88.240568][ T7574] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 88.240568][ T7574] ) failed (rc=-5) [ 88.318486][ T65] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 88.320559][ T65] Bluetooth: hci2: hardware error 0x75 [ 88.672132][ T7595] macvtap1: entered promiscuous mode [ 88.673815][ T7595] macvtap1: entered allmulticast mode [ 88.675548][ T7595] vlan0: entered allmulticast mode [ 88.677223][ T7595] veth0_vlan: entered allmulticast mode [ 88.679344][ T7595] vlan0: entered promiscuous mode [ 88.681579][ T7595] team0: Device macvtap1 failed to register rx_handler [ 88.684770][ T7595] vlan0: left allmulticast mode [ 88.686371][ T7595] veth0_vlan: left allmulticast mode [ 88.687974][ T7595] vlan0: left promiscuous mode [ 88.742065][ T7602] FAULT_INJECTION: forcing a failure. [ 88.742065][ T7602] name failslab, interval 1, probability 0, space 0, times 0 [ 88.745863][ T7602] CPU: 3 UID: 0 PID: 7602 Comm: syz.2.422 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 88.745876][ T7602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.745881][ T7602] Call Trace: [ 88.745884][ T7602] [ 88.745887][ T7602] dump_stack_lvl+0x16c/0x1f0 [ 88.745902][ T7602] should_fail_ex+0x497/0x5b0 [ 88.745911][ T7602] ? fs_reclaim_acquire+0xae/0x150 [ 88.745926][ T7602] should_failslab+0xc2/0x120 [ 88.745936][ T7602] __kmalloc_node_noprof+0xd1/0x520 [ 88.745946][ T7602] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 88.745957][ T7602] __kvmalloc_node_noprof+0xad/0x1a0 [ 88.745965][ T7602] bucket_table_alloc.isra.0+0x86/0x460 [ 88.745974][ T7602] ? __raw_spin_lock_init+0x3a/0x110 [ 88.745987][ T7602] rhashtable_init_noprof+0x43b/0x7d0 [ 88.745998][ T7602] rhltable_init_noprof+0x20/0x60 [ 88.746007][ T7602] nf_tables_newtable+0xfb6/0x1b40 [ 88.746020][ T7602] ? net_generic+0xea/0x2a0 [ 88.746030][ T7602] ? __pfx_nf_tables_newtable+0x10/0x10 [ 88.746042][ T7602] ? __nla_parse+0x40/0x60 [ 88.746060][ T7602] nfnetlink_rcv_batch+0x1a2a/0x24e0 [ 88.746088][ T7602] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 88.746104][ T7602] ? __pfx_lock_release+0x10/0x10 [ 88.746123][ T7602] ? __local_bh_enable_ip+0xa4/0x120 [ 88.746139][ T7602] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.746167][ T7602] ? __pfx___dev_queue_xmit+0x10/0x10 [ 88.746204][ T7602] ? __nla_parse+0x40/0x60 [ 88.746225][ T7602] nfnetlink_rcv+0x3c3/0x430 [ 88.746241][ T7602] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 88.746264][ T7602] netlink_unicast+0x53c/0x7f0 [ 88.746283][ T7602] ? __pfx_netlink_unicast+0x10/0x10 [ 88.746300][ T7602] ? __phys_addr_symbol+0x30/0x80 [ 88.746320][ T7602] ? __check_object_size+0x488/0x710 [ 88.746336][ T7602] netlink_sendmsg+0x8b8/0xd70 [ 88.746347][ T7602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.746361][ T7602] ____sys_sendmsg+0x9ae/0xb40 [ 88.746371][ T7602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.746380][ T7602] ? get_compat_msghdr+0x11b/0x170 [ 88.746394][ T7602] ___sys_sendmsg+0x135/0x1e0 [ 88.746406][ T7602] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.746422][ T7602] ? __pfx_lock_release+0x10/0x10 [ 88.746431][ T7602] ? trace_lock_acquire+0x14e/0x1f0 [ 88.746449][ T7602] ? __fget_files+0x206/0x3a0 [ 88.746461][ T7602] __sys_sendmsg+0x16e/0x220 [ 88.746472][ T7602] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.746491][ T7602] __do_fast_syscall_32+0x73/0x120 [ 88.746503][ T7602] do_fast_syscall_32+0x32/0x80 [ 88.746514][ T7602] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.746528][ T7602] RIP: 0023:0xf7f55579 [ 88.746535][ T7602] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.746543][ T7602] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 88.746552][ T7602] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 88.746557][ T7602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.746561][ T7602] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.746565][ T7602] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 88.746570][ T7602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.746580][ T7602] [ 88.746602][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 89.259221][ T7619] fuse: Unknown parameter '' [ 90.082523][ T1447] libceph: connect (1)[c::]:6789 error -101 [ 90.084412][ T1447] libceph: mon0 (1)[c::]:6789 connect error [ 90.086561][ T1447] libceph: connect (1)[c::]:6789 error -101 [ 90.088536][ T1447] libceph: mon0 (1)[c::]:6789 connect error [ 90.134683][ T7635] ceph: No mds server is up or the cluster is laggy [ 90.188967][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 90.411855][ T65] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 90.413797][ T65] Bluetooth: hci2: hardware error 0x75 [ 90.465454][ T7658] FAULT_INJECTION: forcing a failure. [ 90.465454][ T7658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.471413][ T7658] CPU: 1 UID: 0 PID: 7658 Comm: syz.2.439 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 90.471445][ T7658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.471453][ T7658] Call Trace: [ 90.471458][ T7658] [ 90.471464][ T7658] dump_stack_lvl+0x16c/0x1f0 [ 90.471485][ T7658] should_fail_ex+0x497/0x5b0 [ 90.471496][ T7658] _copy_from_user+0x2e/0xd0 [ 90.471507][ T7658] get_compat_msghdr+0xa8/0x170 [ 90.471517][ T7658] ? __pfx_get_compat_msghdr+0x10/0x10 [ 90.471529][ T7658] ___sys_sendmsg+0x1b0/0x1e0 [ 90.471542][ T7658] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.471558][ T7658] ? __pfx_lock_release+0x10/0x10 [ 90.471569][ T7658] ? trace_lock_acquire+0x14e/0x1f0 [ 90.471580][ T7658] ? __fget_files+0x206/0x3a0 [ 90.471592][ T7658] __sys_sendmsg+0x16e/0x220 [ 90.471603][ T7658] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.471622][ T7658] __do_fast_syscall_32+0x73/0x120 [ 90.471634][ T7658] do_fast_syscall_32+0x32/0x80 [ 90.471645][ T7658] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.471659][ T7658] RIP: 0023:0xf7f55579 [ 90.471666][ T7658] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 90.471674][ T7658] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 90.471683][ T7658] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 90.471688][ T7658] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.471693][ T7658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.471697][ T7658] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 90.471702][ T7658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.471712][ T7658] [ 90.522825][ T7659] fuse: Unknown parameter '' [ 90.647658][ T7669] input: syz0 as /devices/virtual/input/input10 [ 91.408465][ T63] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.559994][ T63] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 91.563612][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.567173][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.571274][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 91.578510][ T63] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 91.581587][ T63] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 91.584989][ T63] usb 5-1: Manufacturer: syz [ 91.592741][ T63] usb 5-1: config 0 descriptor?? [ 91.620661][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.453'. [ 91.663809][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 91.714329][ T7702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.454'. [ 92.004799][ T63] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 92.008239][ T63] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 92.017550][ T63] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 92.478505][ T65] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 92.525488][ T7709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.456'. [ 92.779593][ T35] usb 5-1: USB disconnect, device number 3 [ 92.874321][ T7723] Illegal XDP return value 38 on prog (id 75) dev N/A, expect packet loss! [ 93.082807][ T7733] fuse: Unknown parameter '' [ 93.085941][ T7733] can0: slcan on ptm0. [ 93.513132][ T7749] loop9: detected capacity change from 0 to 7 [ 93.515627][ T7749] Dev loop9: unable to read RDB block 7 [ 93.517417][ T7749] loop9: unable to read partition table [ 93.519626][ T7749] loop9: partition table beyond EOD, truncated [ 93.521630][ T7749] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 93.521630][ T7749] ) failed (rc=-5) [ 93.910393][ T7729] can0 (unregistered): slcan off ptm0. [ 94.617029][ T7785] overlayfs: missing 'lowerdir' [ 94.890696][ T7792] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.120319][ T6004] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 95.244367][ T7798] program syz.1.473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.248009][ T7798] ata1.00: invalid transfer count 0 [ 95.448445][ T6004] usb 7-1: Using ep0 maxpacket: 32 [ 95.456980][ T6004] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 95.460486][ T6004] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.463517][ T6004] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.466619][ T6004] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 95.470419][ T6004] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 95.476742][ T6004] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.480392][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.483237][ T6004] usb 7-1: Product: п [ 95.484697][ T6004] usb 7-1: Manufacturer: ㉬ㅡ֞醙 [ 95.486768][ T6004] usb 7-1: SerialNumber: syz [ 95.562030][ T7809] FAULT_INJECTION: forcing a failure. [ 95.562030][ T7809] name failslab, interval 1, probability 0, space 0, times 0 [ 95.565909][ T7809] CPU: 0 UID: 0 PID: 7809 Comm: syz.0.477 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 95.565921][ T7809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.565926][ T7809] Call Trace: [ 95.565929][ T7809] [ 95.565932][ T7809] dump_stack_lvl+0x16c/0x1f0 [ 95.565947][ T7809] should_fail_ex+0x497/0x5b0 [ 95.565956][ T7809] ? fs_reclaim_acquire+0xae/0x150 [ 95.565970][ T7809] should_failslab+0xc2/0x120 [ 95.565980][ T7809] __kmalloc_cache_noprof+0x68/0x420 [ 95.565994][ T7809] ? __might_fault+0xe3/0x190 [ 95.566007][ T7809] ucma_alloc_ctx+0x41/0x370 [ 95.566021][ T7809] ucma_create_id+0x133/0x380 [ 95.566033][ T7809] ? __pfx_ucma_create_id+0x10/0x10 [ 95.566045][ T7809] ? lock_acquire+0x2f/0xb0 [ 95.566058][ T7809] ? __pfx_ucma_create_id+0x10/0x10 [ 95.566071][ T7809] ucma_write+0x1f9/0x330 [ 95.566082][ T7809] ? __pfx_ucma_write+0x10/0x10 [ 95.566092][ T7809] ? bpf_lsm_file_permission+0x9/0x10 [ 95.566102][ T7809] ? security_file_permission+0x71/0x210 [ 95.566116][ T7809] ? rw_verify_area+0xcf/0x680 [ 95.566128][ T7809] ? __pfx_ucma_write+0x10/0x10 [ 95.566138][ T7809] vfs_writev+0x6da/0xdd0 [ 95.566149][ T7809] ? find_held_lock+0x2d/0x110 [ 95.566165][ T7809] ? __pfx_vfs_writev+0x10/0x10 [ 95.566176][ T7809] ? find_held_lock+0x2d/0x110 [ 95.566190][ T7809] ? __pfx_lock_release+0x10/0x10 [ 95.566199][ T7809] ? trace_lock_acquire+0x14e/0x1f0 [ 95.566210][ T7809] ? __fget_files+0x206/0x3a0 [ 95.566221][ T7809] ? do_writev+0x297/0x340 [ 95.566232][ T7809] do_writev+0x297/0x340 [ 95.566243][ T7809] ? __pfx_do_writev+0x10/0x10 [ 95.566258][ T7809] __do_fast_syscall_32+0x73/0x120 [ 95.566269][ T7809] do_fast_syscall_32+0x32/0x80 [ 95.566280][ T7809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.566294][ T7809] RIP: 0023:0xf7fe6579 [ 95.566301][ T7809] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.566309][ T7809] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 95.566318][ T7809] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 95.566323][ T7809] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.566327][ T7809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.566331][ T7809] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 95.566336][ T7809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.566346][ T7809] [ 95.787932][ T6004] usb 7-1: 0:2 : does not exist [ 95.827925][ T6004] usb 7-1: USB disconnect, device number 5 [ 96.007218][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.060837][ T7833] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 96.622454][ T7841] mac80211_hwsim hwsim7 : renamed from wlan1 [ 96.737196][ T7847] block device autoloading is deprecated and will be removed. [ 96.793010][ T7854] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 96.872602][ T7861] loop9: detected capacity change from 0 to 7 [ 96.875311][ T7861] Dev loop9: unable to read RDB block 7 [ 96.877158][ T7861] loop9: unable to read partition table [ 96.879492][ T7861] loop9: partition table beyond EOD, truncated [ 96.881516][ T7861] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 96.881516][ T7861] ) failed (rc=-5) [ 97.116465][ T7865] loop9: detected capacity change from 0 to 7 [ 97.119547][ T7865] Dev loop9: unable to read RDB block 7 [ 97.121333][ T7865] loop9: unable to read partition table [ 97.123228][ T7865] loop9: partition table beyond EOD, truncated [ 97.125134][ T7865] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 97.125134][ T7865] ) failed (rc=-5) [ 97.472654][ T7879] netlink: 56 bytes leftover after parsing attributes in process `syz.3.498'. [ 97.475363][ T7879] netlink: 44 bytes leftover after parsing attributes in process `syz.3.498'. [ 97.622577][ T7894] fuse: Unknown parameter '' [ 97.626640][ T7894] can0: slcan on ptm0. [ 97.646934][ T7900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.653555][ T7900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.349737][ T39] kauditd_printk_skb: 162 callbacks suppressed [ 98.349748][ T39] audit: type=1326 audit(1737942331.567:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.3.499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7fc00000 [ 98.377166][ T7921] overlayfs: failed to clone lowerpath [ 98.449234][ T7892] can0 (unregistered): slcan off ptm0. [ 98.491073][ T7940] A link change request failed with some changes committed already. Interface 7 may have been left with an inconsistent configuration, please check. [ 98.496798][ T5979] 7 speed is unknown, defaulting to 1000 [ 98.706278][ T7953] fuse: Bad value for 'rootmode' [ 98.916086][ T7953] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 98.954923][ T7968] fuse: Unknown parameter '' [ 98.961299][ T7968] can0: slcan on ptm0. [ 99.668631][ T57] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 99.799680][ T7963] can0 (unregistered): slcan off ptm0. [ 99.828470][ T57] usb 7-1: Invalid ep0 maxpacket: 64 [ 99.888480][ T5979] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 99.968478][ T57] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 100.048456][ T5979] usb 6-1: Using ep0 maxpacket: 8 [ 100.051289][ T5979] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 100.054095][ T5979] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.057065][ T5979] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.060895][ T5979] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.064673][ T5979] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.068920][ T5979] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.071465][ T5979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.118492][ T57] usb 7-1: Invalid ep0 maxpacket: 64 [ 100.120330][ T57] usb usb7-port1: attempt power cycle [ 100.251523][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.280807][ T5979] usb 6-1: usb_control_msg returned -32 [ 100.282570][ T5979] usbtmc 6-1:16.0: can't read capabilities [ 100.408544][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 100.411809][ T30] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 100.414572][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.417709][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.421327][ T30] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 100.425740][ T30] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 100.432796][ T30] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.435889][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.438822][ T30] usb 5-1: Product: п [ 100.440262][ T30] usb 5-1: Manufacturer: ㉬ㅡ֞醙 [ 100.441957][ T30] usb 5-1: SerialNumber: syz [ 100.468483][ T57] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 100.489033][ T57] usb 7-1: Invalid ep0 maxpacket: 64 [ 100.618605][ T57] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 100.635267][ T8010] usbtmc 6-1:16.0: control status returned 0 [ 100.640060][ T57] usb 7-1: Invalid ep0 maxpacket: 64 [ 100.641934][ T57] usb usb7-port1: unable to enumerate USB device [ 100.708025][ T30] usb 5-1: 0:2 : does not exist [ 100.713608][ T30] usb 5-1: USB disconnect, device number 4 [ 100.838750][ T6004] usb 6-1: USB disconnect, device number 5 [ 100.882358][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.324090][ T8025] loop9: detected capacity change from 0 to 7 [ 101.326763][ T8025] Dev loop9: unable to read RDB block 7 [ 101.328744][ T8025] loop9: unable to read partition table [ 101.330622][ T8025] loop9: partition table beyond EOD, truncated [ 101.332511][ T8025] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 101.332511][ T8025] ) failed (rc=-5) [ 101.649281][ T8033] fuse: Unknown parameter '' [ 101.655430][ T8033] can0: slcan on ptm0. [ 102.509481][ T8031] can0 (unregistered): slcan off ptm0. [ 103.980512][ T8106] fuse: Unknown parameter '' [ 103.983680][ T8106] can0: slcan on ptm0. [ 104.102681][ T8114] loop9: detected capacity change from 0 to 7 [ 104.105136][ T8114] Dev loop9: unable to read RDB block 7 [ 104.106828][ T8114] loop9: unable to read partition table [ 104.108838][ T8114] loop9: partition table beyond EOD, truncated [ 104.110850][ T8114] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 104.110850][ T8114] ) failed (rc=-5) [ 104.462688][ T8119] macvtap1: entered promiscuous mode [ 104.464323][ T8119] macvtap1: entered allmulticast mode [ 104.466076][ T8119] vlan0: entered allmulticast mode [ 104.467617][ T8119] vlan0: entered promiscuous mode [ 104.472464][ T8119] team0: Device macvtap1 failed to register rx_handler [ 104.476093][ T8119] vlan0: left allmulticast mode [ 104.477608][ T8119] vlan0: left promiscuous mode [ 104.729229][ T8124] tmpfs: Bad value for 'mpol' [ 104.839146][ T8104] can0 (unregistered): slcan off ptm0. [ 105.111017][ T8153] FAULT_INJECTION: forcing a failure. [ 105.111017][ T8153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.115058][ T8153] CPU: 1 UID: 0 PID: 8153 Comm: syz.1.561 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 105.115070][ T8153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.115075][ T8153] Call Trace: [ 105.115079][ T8153] [ 105.115082][ T8153] dump_stack_lvl+0x16c/0x1f0 [ 105.115098][ T8153] should_fail_ex+0x497/0x5b0 [ 105.115109][ T8153] _copy_from_user+0x2e/0xd0 [ 105.115120][ T8153] get_compat_msghdr+0xa8/0x170 [ 105.115129][ T8153] ? __pfx_get_compat_msghdr+0x10/0x10 [ 105.115142][ T8153] ___sys_sendmsg+0x1b0/0x1e0 [ 105.115155][ T8153] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.115171][ T8153] ? trace_lock_acquire+0x14e/0x1f0 [ 105.115184][ T8153] ? __pfx___might_resched+0x10/0x10 [ 105.115198][ T8153] __sys_sendmmsg+0x2fa/0x420 [ 105.115211][ T8153] ? __pfx___sys_sendmmsg+0x10/0x10 [ 105.115226][ T8153] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.115242][ T8153] ? fput+0x67/0x440 [ 105.115252][ T8153] ? ksys_write+0x1ba/0x250 [ 105.115265][ T8153] ? __pfx_ksys_write+0x10/0x10 [ 105.115279][ T8153] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 105.115287][ T8153] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 105.115299][ T8153] __do_fast_syscall_32+0x73/0x120 [ 105.115311][ T8153] do_fast_syscall_32+0x32/0x80 [ 105.115322][ T8153] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.115336][ T8153] RIP: 0023:0xf73fe579 [ 105.115344][ T8153] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.115352][ T8153] RSP: 002b:00000000f506555c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 105.115361][ T8153] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020001540 [ 105.115366][ T8153] RDX: 00000000040001b6 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.115371][ T8153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.115376][ T8153] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.115380][ T8153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.115391][ T8153] [ 105.205807][ T8154] loop9: detected capacity change from 0 to 7 [ 105.218164][ T8154] Dev loop9: unable to read RDB block 7 [ 105.219957][ T8154] loop9: unable to read partition table [ 105.221770][ T8154] loop9: partition table beyond EOD, truncated [ 105.223648][ T8154] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 105.223648][ T8154] ) failed (rc=-5) [ 105.341983][ T8160] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 105.858748][ T8176] fuse: Unknown parameter '' [ 105.864584][ T8176] can0: slcan on ptm0. [ 106.179656][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 106.183641][ T8186] FAULT_INJECTION: forcing a failure. [ 106.183641][ T8186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.187835][ T8186] CPU: 2 UID: 0 PID: 8186 Comm: syz.2.570 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 106.187846][ T8186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.187852][ T8186] Call Trace: [ 106.187855][ T8186] [ 106.187859][ T8186] dump_stack_lvl+0x16c/0x1f0 [ 106.187874][ T8186] should_fail_ex+0x497/0x5b0 [ 106.187886][ T8186] _copy_from_user+0x2e/0xd0 [ 106.187897][ T8186] generic_map_update_batch+0x3ff/0x5f0 [ 106.187912][ T8186] ? __pfx_generic_map_update_batch+0x10/0x10 [ 106.187922][ T8186] ? __fget_files+0x206/0x3a0 [ 106.187932][ T8186] ? __pfx_generic_map_update_batch+0x10/0x10 [ 106.187943][ T8186] bpf_map_do_batch+0x576/0x640 [ 106.187954][ T8186] __sys_bpf+0x1c9f/0x57a0 [ 106.187964][ T8186] ? __pfx_lock_release+0x10/0x10 [ 106.187975][ T8186] ? __pfx___sys_bpf+0x10/0x10 [ 106.187985][ T8186] ? vfs_write+0x306/0x1150 [ 106.187999][ T8186] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 106.188018][ T8186] ? fput+0x67/0x440 [ 106.188027][ T8186] ? ksys_write+0x1ba/0x250 [ 106.188039][ T8186] ? __pfx_ksys_write+0x10/0x10 [ 106.188053][ T8186] __ia32_sys_bpf+0x76/0xe0 [ 106.188065][ T8186] __do_fast_syscall_32+0x73/0x120 [ 106.188077][ T8186] do_fast_syscall_32+0x32/0x80 [ 106.188088][ T8186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.188102][ T8186] RIP: 0023:0xf7f55579 [ 106.188109][ T8186] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 106.188117][ T8186] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 106.188126][ T8186] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000020000200 [ 106.188131][ T8186] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.188135][ T8186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.188140][ T8186] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 106.188144][ T8186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.188154][ T8186] [ 106.495661][ T8194] macvtap1: entered promiscuous mode [ 106.497636][ T8194] macvtap1: entered allmulticast mode [ 106.499596][ T8194] vlan0: entered allmulticast mode [ 106.501295][ T8194] veth0_vlan: entered allmulticast mode [ 106.503045][ T8194] vlan0: entered promiscuous mode [ 106.505495][ T8194] team0: Device macvtap1 failed to register rx_handler [ 106.508020][ T8194] vlan0: left allmulticast mode [ 106.509732][ T8194] veth0_vlan: left allmulticast mode [ 106.511347][ T8194] vlan0: left promiscuous mode [ 106.751199][ T8174] can0 (unregistered): slcan off ptm0. [ 107.039722][ T8226] loop9: detected capacity change from 0 to 7 [ 107.042394][ T8226] Dev loop9: unable to read RDB block 7 [ 107.044143][ T8226] loop9: unable to read partition table [ 107.046115][ T8226] loop9: partition table beyond EOD, truncated [ 107.048086][ T8226] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 107.048086][ T8226] ) failed (rc=-5) [ 107.483722][ T8237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.581'. [ 107.898613][ T8237] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 108.742878][ T8271] loop9: detected capacity change from 0 to 7 [ 108.745383][ T8271] Dev loop9: unable to read RDB block 7 [ 108.747295][ T8271] loop9: unable to read partition table [ 108.749655][ T8271] loop9: partition table beyond EOD, truncated [ 108.751661][ T8271] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 108.751661][ T8271] ) failed (rc=-5) [ 109.380160][ T8280] netlink: 'syz.1.592': attribute type 3 has an invalid length. [ 109.384032][ T8280] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 109.387052][ T8280] netlink: 220 bytes leftover after parsing attributes in process `syz.1.592'. [ 109.658499][ T5979] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 109.788554][ T5979] usb 6-1: device descriptor read/64, error -71 [ 109.982834][ T8297] loop9: detected capacity change from 0 to 7 [ 109.985273][ T8297] Dev loop9: unable to read RDB block 7 [ 109.987016][ T8297] loop9: unable to read partition table [ 109.990475][ T8297] loop9: partition table beyond EOD, truncated [ 109.992352][ T8297] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 109.992352][ T8297] ) failed (rc=-5) [ 110.148581][ T5979] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 110.288498][ T5979] usb 6-1: device descriptor read/64, error -71 [ 110.412270][ T5979] usb usb6-port1: attempt power cycle [ 110.589332][ T8308] loop9: detected capacity change from 0 to 7 [ 110.592569][ T8308] Dev loop9: unable to read RDB block 7 [ 110.594280][ T8308] loop9: unable to read partition table [ 110.596031][ T8308] loop9: partition table beyond EOD, truncated [ 110.597917][ T8308] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 110.597917][ T8308] ) failed (rc=-5) [ 110.776677][ T5979] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 110.818992][ T5979] usb 6-1: device descriptor read/8, error -71 [ 111.055882][ T8311] netlink: 'syz.2.603': attribute type 29 has an invalid length. [ 111.058420][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'. [ 111.118741][ T5979] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 111.150912][ T5979] usb 6-1: device descriptor read/8, error -71 [ 111.277403][ T5979] usb usb6-port1: unable to enumerate USB device [ 111.395651][ C0] vcan0: j1939_tp_rxtimer: 0xffff888000323400: rx timeout, send abort [ 111.400070][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888000323400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 111.481145][ T8322] fuse: Unknown parameter '0x0000000000000005' [ 111.873891][ T8326] loop9: detected capacity change from 0 to 7 [ 111.883514][ T8326] Dev loop9: unable to read RDB block 7 [ 111.885651][ T8326] loop9: unable to read partition table [ 111.887423][ T8326] loop9: partition table beyond EOD, truncated [ 111.889412][ T8326] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 111.889412][ T8326] ) failed (rc=-5) [ 112.458192][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 113.687756][ T8378] overlayfs: failed to clone upperpath [ 113.792929][ T8381] fuse: Unknown parameter '' [ 113.796668][ T8381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.623'. [ 113.810269][ T8360] overlayfs: statfs failed on './file0' [ 113.996375][ T8386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.625'. [ 114.217490][ T8392] Cannot find add_set index 0 as target [ 114.710749][ T39] audit: type=1326 audit(1737942347.927:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.3.631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 114.719826][ T39] audit: type=1326 audit(1737942347.927:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.3.631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 114.729063][ T39] audit: type=1326 audit(1737942347.927:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.3.631" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 114.738493][ T39] audit: type=1326 audit(1737942347.927:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.3.631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 114.747385][ T39] audit: type=1326 audit(1737942347.927:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.3.631" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 114.761661][ T39] audit: type=1326 audit(1737942347.927:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.3.631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 114.773581][ T39] audit: type=1326 audit(1737942347.927:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.3.631" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 114.782791][ T39] audit: type=1326 audit(1737942347.927:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.3.631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 114.793173][ T39] audit: type=1326 audit(1737942347.927:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.3.631" exe="/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 114.800139][ T39] audit: type=1326 audit(1737942347.927:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.3.631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 114.879545][ T8413] ubi: mtd0 is already attached to ubi0 [ 115.306590][ T8423] fuse: Unknown parameter '' [ 115.310544][ T8423] can0: slcan on ptm1. [ 115.314063][ T8423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.637'. [ 115.497611][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 115.500540][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 116.170006][ T8421] can0 (unregistered): slcan off ptm1. [ 117.060506][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 117.118593][ T8505] netlink: 'syz.0.657': attribute type 8 has an invalid length. [ 117.562616][ T8511] 9pnet_fd: Insufficient options for proto=fd [ 117.565844][ T8511] lo speed is unknown, defaulting to 1000 [ 117.568459][ T8511] lo speed is unknown, defaulting to 1000 [ 117.572637][ T8511] lo speed is unknown, defaulting to 1000 [ 117.583467][ T8511] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.593614][ T8511] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.606702][ T8511] lo speed is unknown, defaulting to 1000 [ 117.610748][ T8511] lo speed is unknown, defaulting to 1000 [ 117.614322][ T8511] lo speed is unknown, defaulting to 1000 [ 117.619210][ T8511] lo speed is unknown, defaulting to 1000 [ 118.102435][ T8527] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 118.125434][ T8527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.151710][ T8527] bond3: (slave ip6erspan0): making interface the new active one [ 118.156168][ T8527] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 118.477254][ T8534] Cannot find add_set index 0 as target [ 118.797482][ T8544] netlink: 48 bytes leftover after parsing attributes in process `syz.2.670'. [ 120.219072][ T8576] netlink: 'syz.0.678': attribute type 10 has an invalid length. [ 120.221491][ T8576] bridge0: port 1(syz_tun) entered disabled state [ 120.226854][ T8576] bridge0: port 1(syz_tun) entered blocking state [ 120.228914][ T8576] bridge0: port 1(syz_tun) entered forwarding state [ 120.239633][ T8576] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 120.244142][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 120.246815][ T8576] syz_tun: left allmulticast mode [ 120.248336][ T8576] syz_tun: left promiscuous mode [ 120.250077][ T8576] bridge0: port 1(syz_tun) entered disabled state [ 120.395244][ T8576] bond0: (slave bridge0): Releasing backup interface [ 120.890994][ T8589] fuse: Unknown parameter '' [ 120.896157][ T8589] can0: slcan on ptm0. [ 120.899446][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 120.951395][ T8592] fuse: Bad value for 'fd' [ 121.830151][ T8586] can0 (unregistered): slcan off ptm0. [ 121.951449][ T39] kauditd_printk_skb: 45 callbacks suppressed [ 121.951459][ T39] audit: type=1326 audit(1737942355.167:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 121.960031][ T39] audit: type=1326 audit(1737942355.167:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.689" exe="/syz-executor" sig=0 arch=40000003 syscall=291 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 121.966930][ T39] audit: type=1326 audit(1737942355.167:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 121.973608][ T39] audit: type=1326 audit(1737942355.167:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.689" exe="/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 121.988515][ T39] audit: type=1326 audit(1737942355.167:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 122.004026][ T39] audit: type=1326 audit(1737942355.167:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.689" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 122.023303][ T39] audit: type=1326 audit(1737942355.167:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 122.033359][ T39] audit: type=1326 audit(1737942355.167:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.689" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 122.041227][ T39] audit: type=1326 audit(1737942355.167:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 122.047535][ T39] audit: type=1326 audit(1737942355.167:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 122.527733][ T8647] fuse: Unknown parameter '' [ 122.533101][ T8647] can0: slcan on ptm0. [ 122.536289][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 122.600011][ T8654] fuse: Bad value for 'fd' [ 122.733963][ T8659] fuse: Unknown parameter '' [ 122.872940][ T8662] ubi: mtd0 is already attached to ubi0 [ 123.063911][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 123.070338][ T8670] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 123.359977][ T8645] can0 (unregistered): slcan off ptm0. [ 123.776122][ T8711] netlink: 'syz.0.707': attribute type 10 has an invalid length. [ 123.826141][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.834358][ T8711] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 123.977368][ T8715] fuse: Bad value for 'fd' [ 124.522585][ T8728] fuse: Unknown parameter '' [ 124.526143][ T8728] can0: slcan on ptm0. [ 124.533075][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 124.810734][ T8737] netlink: zone id is out of range [ 124.834483][ T8737] netlink: set zone limit has 4 unknown bytes [ 125.368489][ T30] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 125.379297][ T8726] can0 (unregistered): slcan off ptm0. [ 125.525042][ T8767] netlink: 48 bytes leftover after parsing attributes in process `syz.1.721'. [ 125.552941][ T30] usb 7-1: not running at top speed; connect to a high speed hub [ 125.556156][ T30] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 125.561311][ T30] usb 7-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.565224][ T30] usb 7-1: config 1 interface 0 has no altsetting 0 [ 125.569197][ T30] usb 7-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 125.572893][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.576352][ T30] usb 7-1: Product: syz [ 125.578147][ T30] usb 7-1: Manufacturer: ࠊ [ 125.580260][ T30] usb 7-1: SerialNumber: syz [ 125.587233][ T8745] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 126.604909][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'. [ 126.607703][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'. [ 126.673056][ T8806] /dev/nullb0: Can't open blockdev [ 127.649325][ T8818] overlay: Unknown parameter 'uid<00000000000000000000' [ 127.854935][ T8823] netlink: 48 bytes leftover after parsing attributes in process `syz.0.734'. [ 128.150108][ T30] usbhid 7-1:1.0: can't add hid device: -71 [ 128.152915][ T30] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 128.156613][ T30] usb 7-1: USB disconnect, device number 10 [ 128.206941][ T8828] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 128.619371][ T8838] fuse: Unknown parameter '' [ 128.622102][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 129.112796][ T8848] macvtap1: entered promiscuous mode [ 129.115033][ T8848] macvtap1: entered allmulticast mode [ 129.117411][ T8848] vlan0: entered allmulticast mode [ 129.119622][ T8848] veth0_vlan: entered allmulticast mode [ 129.121869][ T8848] vlan0: entered promiscuous mode [ 129.125828][ T8848] team0: Device macvtap1 failed to register rx_handler [ 129.128674][ T63] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 129.136150][ T8848] vlan0: left allmulticast mode [ 129.138184][ T8848] veth0_vlan: left allmulticast mode [ 129.140488][ T8848] vlan0: left promiscuous mode [ 129.275519][ T8851] ubi: mtd0 is already attached to ubi0 [ 129.289953][ T63] usb 5-1: not running at top speed; connect to a high speed hub [ 129.293305][ T63] usb 5-1: config 248 has an invalid interface number: 185 but max is 1 [ 129.297054][ T63] usb 5-1: config 248 has an invalid interface number: 135 but max is 1 [ 129.299900][ T63] usb 5-1: config 248 has no interface number 0 [ 129.301798][ T63] usb 5-1: config 248 has no interface number 1 [ 129.303689][ T63] usb 5-1: config 248 interface 135 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 129.307828][ T63] usb 5-1: config 248 interface 185 has no altsetting 0 [ 129.310037][ T63] usb 5-1: config 248 interface 135 has no altsetting 0 [ 129.314530][ T63] usb 5-1: string descriptor 0 read error: -22 [ 129.316455][ T63] usb 5-1: New USB device found, idVendor=12d1, idProduct=c63a, bcdDevice=1f.69 [ 129.320202][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.325767][ T63] option 5-1:248.185: GSM modem (1-port) converter detected [ 129.374793][ T8859] loop9: detected capacity change from 0 to 7 [ 129.377571][ T8859] Dev loop9: unable to read RDB block 7 [ 129.379335][ T8859] loop9: unable to read partition table [ 129.381195][ T8859] loop9: partition table beyond EOD, truncated [ 129.383137][ T8859] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 129.383137][ T8859] ) failed (rc=-5) [ 129.530072][ T5310] usb 5-1: USB disconnect, device number 5 [ 129.534892][ T5310] option 5-1:248.185: device disconnected [ 130.091012][ T8881] raw_sendmsg: syz.0.749 forgot to set AF_INET. Fix it! [ 130.291560][ T8885] ubi: mtd0 is already attached to ubi0 [ 130.356483][ T8894] ubi: mtd0 is already attached to ubi0 [ 130.412435][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'. [ 130.415675][ T8909] netlink: 100 bytes leftover after parsing attributes in process `syz.1.758'. [ 130.418471][ T8909] netlink: 100 bytes leftover after parsing attributes in process `syz.1.758'. [ 130.589287][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.749475][ T8920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.757367][ T8920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.817400][ T8920] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.820577][ T8920] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.823335][ T8920] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.826079][ T8920] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.857168][ T57] lo speed is unknown, defaulting to 1000 [ 131.041204][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 131.043926][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 131.045429][ T8935] Cannot find add_set index 0 as target [ 131.418790][ T8945] netlink: 48 bytes leftover after parsing attributes in process `syz.3.767'. [ 131.437905][ T8946] netlink: 36 bytes leftover after parsing attributes in process `syz.2.768'. [ 131.529470][ T8952] random: crng reseeded on system resumption [ 131.732069][ T8966] Cannot find add_set index 0 as target [ 131.790172][ T8967] loop9: detected capacity change from 0 to 7 [ 131.794570][ T8967] Dev loop9: unable to read RDB block 7 [ 131.796257][ T8967] loop9: unable to read partition table [ 131.798586][ T8967] loop9: partition table beyond EOD, truncated [ 131.801224][ T8967] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 131.801224][ T8967] ) failed (rc=-5) [ 131.926657][ T8972] ubi: mtd0 is already attached to ubi0 [ 131.981345][ T5359] Dev loop9: unable to read RDB block 7 [ 131.983135][ T5359] loop9: unable to read partition table [ 131.984936][ T5359] loop9: partition table beyond EOD, truncated [ 132.240193][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.384300][ T8988] mmap: syz.2.782 (8988) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.973904][ T9003] ubi: mtd0 is already attached to ubi0 [ 133.412415][ T9022] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.416638][ T9022] overlayfs: maximum fs stacking depth exceeded [ 133.526850][ T9027] netlink: 'syz.3.792': attribute type 2 has an invalid length. [ 133.531019][ T9027] netlink: 'syz.3.792': attribute type 8 has an invalid length. [ 133.533542][ T9027] netlink: 132 bytes leftover after parsing attributes in process `syz.3.792'. [ 133.843721][ T39] kauditd_printk_skb: 39 callbacks suppressed [ 133.843737][ T39] audit: type=1326 audit(1737942367.057:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.796" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 133.856166][ T39] audit: type=1326 audit(1737942367.057:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.796" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 133.867457][ T39] audit: type=1326 audit(1737942367.057:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.796" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 133.875274][ T39] audit: type=1326 audit(1737942367.057:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.796" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 133.883836][ T39] audit: type=1326 audit(1737942367.057:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.796" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 133.890373][ T39] audit: type=1326 audit(1737942367.057:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.796" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 133.896663][ T39] audit: type=1326 audit(1737942367.057:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.796" exe="/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 133.905222][ T39] audit: type=1326 audit(1737942367.067:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.796" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 133.911741][ T39] audit: type=1326 audit(1737942367.067:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.796" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 133.917992][ T39] audit: type=1326 audit(1737942367.067:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.796" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 133.934047][ T9047] devpts: called with bogus options [ 133.976253][ T9048] loop9: detected capacity change from 0 to 7 [ 133.979945][ T9048] Dev loop9: unable to read RDB block 7 [ 133.984483][ T9048] loop9: unable to read partition table [ 133.988485][ T9048] loop9: partition table beyond EOD, truncated [ 133.990573][ T9048] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 133.990573][ T9048] ) failed (rc=-5) [ 134.034794][ T9052] 7 speed is unknown, defaulting to 1000 [ 134.078177][ T9052] lo speed is unknown, defaulting to 1000 [ 135.161566][ T9096] FAULT_INJECTION: forcing a failure. [ 135.161566][ T9096] name failslab, interval 1, probability 0, space 0, times 0 [ 135.167347][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.1.813 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 135.167368][ T9096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.167378][ T9096] Call Trace: [ 135.167384][ T9096] [ 135.167390][ T9096] dump_stack_lvl+0x16c/0x1f0 [ 135.167417][ T9096] should_fail_ex+0x497/0x5b0 [ 135.167433][ T9096] ? fs_reclaim_acquire+0xae/0x150 [ 135.167461][ T9096] should_failslab+0xc2/0x120 [ 135.167481][ T9096] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 135.167500][ T9096] ? copy_process+0x49c/0x6f20 [ 135.167528][ T9096] copy_process+0x49c/0x6f20 [ 135.167563][ T9096] ? __pfx_copy_process+0x10/0x10 [ 135.167590][ T9096] ? lockdep_init_map_type+0x16d/0x7d0 [ 135.167612][ T9096] ? __raw_spin_lock_init+0x3a/0x110 [ 135.167637][ T9096] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 135.167661][ T9096] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 135.167689][ T9096] vhost_task_create+0x1bd/0x2b0 [ 135.167707][ T9096] ? __pfx_vhost_task_create+0x10/0x10 [ 135.167731][ T9096] ? __pfx_vhost_task_fn+0x10/0x10 [ 135.167758][ T9096] kvm_mmu_post_init_vm+0x273/0x380 [ 135.167779][ T9096] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 135.167798][ T9096] ? lock_acquire+0x2f/0xb0 [ 135.167814][ T9096] ? kvm_vcpu_ioctl+0x14be/0x16b0 [ 135.167838][ T9096] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 135.167857][ T9096] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 135.167873][ T9096] ? tomoyo_path_number_perm+0x190/0x5b0 [ 135.167896][ T9096] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 135.167915][ T9096] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.167937][ T9096] ? do_vfs_ioctl+0x513/0x1950 [ 135.167959][ T9096] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 135.167996][ T9096] ? __pfx_lock_release+0x10/0x10 [ 135.168012][ T9096] ? trace_lock_acquire+0x14e/0x1f0 [ 135.168031][ T9096] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 135.168051][ T9096] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 135.168072][ T9096] ? __fget_files+0x206/0x3a0 [ 135.168092][ T9096] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 135.168111][ T9096] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 135.168136][ T9096] __do_fast_syscall_32+0x73/0x120 [ 135.168160][ T9096] do_fast_syscall_32+0x32/0x80 [ 135.168181][ T9096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.168208][ T9096] RIP: 0023:0xf73fe579 [ 135.168221][ T9096] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 135.168236][ T9096] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 135.168252][ T9096] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 135.168268][ T9096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.168277][ T9096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.168286][ T9096] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 135.168295][ T9096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.168317][ T9096] [ 135.342828][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 135.593958][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 135.699281][ T9126] netlink: 48 bytes leftover after parsing attributes in process `syz.3.825'. [ 136.277505][ T9130] netlink: 48 bytes leftover after parsing attributes in process `syz.0.826'. [ 136.401904][ T9136] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.828'. [ 136.404662][ T9136] openvswitch: netlink: Flow actions attr not present in new flow. [ 136.481247][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 136.497139][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'. [ 136.500117][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 136.502901][ T9142] netlink: 'syz.2.830': attribute type 13 has an invalid length. [ 136.505435][ T9142] netlink: 'syz.2.830': attribute type 12 has an invalid length. [ 136.876204][ T9159] macvtap1: entered promiscuous mode [ 136.878711][ T9159] macvtap1: entered allmulticast mode [ 136.881243][ T9159] vlan0: entered allmulticast mode [ 136.882966][ T9159] veth0_vlan: entered allmulticast mode [ 136.884746][ T9159] vlan0: entered promiscuous mode [ 136.888270][ T9159] team0: Device macvtap1 failed to register rx_handler [ 136.894638][ T9159] vlan0: left allmulticast mode [ 136.896343][ T9159] veth0_vlan: left allmulticast mode [ 136.898277][ T9159] vlan0: left promiscuous mode [ 136.944686][ T9163] Cannot find add_set index 0 as target [ 137.232279][ T9171] netlink: 48 bytes leftover after parsing attributes in process `syz.1.839'. [ 137.270723][ T9174] ubi: mtd0 is already attached to ubi0 [ 137.909689][ T9186] input: syz0 as /devices/virtual/input/input11 [ 138.166771][ T9201] fuse: Unknown parameter '' [ 138.533420][ T9208] ubi: mtd0 is already attached to ubi0 [ 138.561188][ T9212] /dev/nullb0: Can't open blockdev [ 138.585441][ T9214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.851'. [ 139.772806][ T9243] 9pnet_fd: Insufficient options for proto=fd [ 139.896692][ T9247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.902998][ T9247] bond0: (slave rose0): Enslaving as an active interface with an up link [ 140.633354][ T9291] fuse: Bad value for 'group_id' [ 140.634897][ T9291] fuse: Bad value for 'group_id' [ 141.140491][ T9315] loop9: detected capacity change from 0 to 6 [ 141.141177][ T9315] Dev loop9: unable to read RDB block 6 [ 141.141202][ T9315] loop9: unable to read partition table [ 141.141264][ T9315] loop9: partition table beyond EOD, truncated [ 141.141272][ T9315] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 141.141272][ T9315] ) failed (rc=-5) [ 141.554854][ T9320] macvtap1: entered promiscuous mode [ 141.556684][ T9320] macvtap1: entered allmulticast mode [ 141.558617][ T9320] vlan0: entered allmulticast mode [ 141.560274][ T9320] veth0_vlan: entered allmulticast mode [ 141.562048][ T9320] vlan0: entered promiscuous mode [ 141.564391][ T9320] team0: Device macvtap1 failed to register rx_handler [ 141.567115][ T9320] vlan0: left allmulticast mode [ 141.568712][ T9320] veth0_vlan: left allmulticast mode [ 141.570323][ T9320] vlan0: left promiscuous mode [ 141.674036][ T9331] tipc: Started in network mode [ 141.675618][ T9331] tipc: Node identity d244660d02cb, cluster identity 4711 [ 141.680088][ T9331] tipc: Enabled bearer , priority 0 [ 141.695096][ T9331] syzkaller0: entered promiscuous mode [ 141.696785][ T9331] syzkaller0: entered allmulticast mode [ 141.698864][ T9331] tipc: Resetting bearer [ 141.708263][ T9330] tipc: Resetting bearer [ 142.706615][ T143] tipc: Node number set to 3499058701 [ 142.946475][ T9330] tipc: Disabling bearer [ 143.236787][ T9406] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 143.372919][ T9414] netlink: 48 bytes leftover after parsing attributes in process `syz.3.895'. [ 143.534948][ T9418] netlink: 48 bytes leftover after parsing attributes in process `syz.2.896'. [ 144.311107][ T9447] netlink: 36 bytes leftover after parsing attributes in process `syz.3.907'. [ 144.433272][ T9464] FAULT_INJECTION: forcing a failure. [ 144.433272][ T9464] name failslab, interval 1, probability 0, space 0, times 0 [ 144.437104][ T9464] CPU: 0 UID: 0 PID: 9464 Comm: syz.2.913 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 144.437116][ T9464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.437121][ T9464] Call Trace: [ 144.437124][ T9464] [ 144.437128][ T9464] dump_stack_lvl+0x16c/0x1f0 [ 144.437171][ T9464] should_fail_ex+0x497/0x5b0 [ 144.437191][ T9464] ? fs_reclaim_acquire+0xae/0x150 [ 144.437214][ T9464] should_failslab+0xc2/0x120 [ 144.437230][ T9464] __kmalloc_noprof+0xce/0x4f0 [ 144.437263][ T9464] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 144.437280][ T9464] ? tomoyo_realpath_from_path+0xbf/0x710 [ 144.437298][ T9464] tomoyo_realpath_from_path+0xbf/0x710 [ 144.437314][ T9464] ? tomoyo_path_number_perm+0x235/0x5b0 [ 144.437335][ T9464] tomoyo_path_number_perm+0x248/0x5b0 [ 144.437353][ T9464] ? tomoyo_path_number_perm+0x235/0x5b0 [ 144.437374][ T9464] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 144.437414][ T9464] ? __pfx_lock_release+0x10/0x10 [ 144.437424][ T9464] ? trace_lock_acquire+0x14e/0x1f0 [ 144.437433][ T9464] ? lock_acquire+0x2f/0xb0 [ 144.437442][ T9464] ? __fget_files+0x40/0x3a0 [ 144.437452][ T9464] ? __fget_files+0x206/0x3a0 [ 144.437462][ T9464] security_file_ioctl_compat+0x9b/0x240 [ 144.437477][ T9464] __do_compat_sys_ioctl+0x4e/0x2c0 [ 144.437490][ T9464] __do_fast_syscall_32+0x73/0x120 [ 144.437503][ T9464] do_fast_syscall_32+0x32/0x80 [ 144.437514][ T9464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.437528][ T9464] RIP: 0023:0xf7f55579 [ 144.437536][ T9464] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 144.437544][ T9464] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 144.437553][ T9464] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020aed2 [ 144.437558][ T9464] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.437563][ T9464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.437567][ T9464] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 144.437572][ T9464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.437583][ T9464] [ 144.437587][ T9464] ERROR: Out of memory at tomoyo_realpath_from_path. [ 144.457235][ T9466] netlink: 48 bytes leftover after parsing attributes in process `syz.1.914'. [ 144.468458][ T143] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 144.658894][ T143] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 144.664183][ T143] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.666878][ T143] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.671750][ T143] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.674968][ T143] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.677683][ T143] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.683094][ T143] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.685824][ T143] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.689553][ T143] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.693016][ T143] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.695823][ T143] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.700734][ T143] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.703983][ T143] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.707024][ T143] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.710391][ T143] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.713714][ T143] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.716410][ T143] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.720990][ T143] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.724329][ T143] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.727403][ T143] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.731303][ T143] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.734689][ T143] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.737468][ T143] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.742541][ T143] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.748413][ T143] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.751964][ T143] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 144.754734][ T143] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 144.757372][ T143] usb 5-1: Product: syz [ 144.764751][ T143] usb 5-1: Manufacturer: syz [ 144.766233][ T143] usb 5-1: SerialNumber: syz [ 144.769039][ T143] usb 5-1: config 0 descriptor?? [ 144.772939][ T143] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 144.916745][ T9492] netlink: 48 bytes leftover after parsing attributes in process `syz.1.923'. [ 144.917622][ T9491] macvtap1: entered promiscuous mode [ 144.921216][ T9491] macvtap1: entered allmulticast mode [ 144.923122][ T9491] vlan0: entered allmulticast mode [ 144.924702][ T9491] veth0_vlan: entered allmulticast mode [ 144.926422][ T9491] vlan0: entered promiscuous mode [ 144.928941][ T9491] team0: Device macvtap1 failed to register rx_handler [ 144.931492][ T9491] vlan0: left allmulticast mode [ 144.933136][ T9491] veth0_vlan: left allmulticast mode [ 144.934795][ T9491] vlan0: left promiscuous mode [ 144.989073][ T9496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.924'. [ 145.043689][ T9499] nr0: entered promiscuous mode [ 145.089524][ T9500] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 145.256598][ T9500] 7 speed is unknown, defaulting to 1000 [ 145.291268][ T9500] lo speed is unknown, defaulting to 1000 [ 145.757103][ T9521] netlink: 48 bytes leftover after parsing attributes in process `syz.3.932'. [ 145.775559][ T9526] loop9: detected capacity change from 0 to 6 [ 145.777984][ T9526] Dev loop9: unable to read RDB block 6 [ 145.779850][ T9526] loop9: unable to read partition table [ 145.781611][ T9526] loop9: partition table beyond EOD, truncated [ 145.783451][ T9526] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 145.783451][ T9526] ) failed (rc=-5) [ 145.799837][ T9528] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 146.181385][ T9541] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 146.184257][ T9541] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 146.189996][ T9541] vhci_hcd vhci_hcd.0: Device attached [ 146.498745][ T143] vhci_hcd: vhci_device speed not set [ 146.558866][ T143] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 146.979696][ T9561] netlink: 'syz.1.941': attribute type 1 has an invalid length. [ 147.048623][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 147.051241][ C0] usb 5-1: yurex_control_callback - control failed: -32 [ 147.054260][ T1447] usb 5-1: USB disconnect, device number 6 [ 147.058073][ T1447] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 147.070843][ T9565] Cannot find add_set index 0 as target [ 147.275670][ T9568] Cannot find add_set index 0 as target [ 147.410340][ T9542] vhci_hcd: connection reset by peer [ 147.414480][ T45] vhci_hcd: stop threads [ 147.416238][ T45] vhci_hcd: release socket [ 147.418608][ T45] vhci_hcd: disconnect device [ 147.936244][ T9593] 7 speed is unknown, defaulting to 1000 [ 147.968866][ T9593] lo speed is unknown, defaulting to 1000 [ 148.863018][ T9618] fuse: Bad value for 'group_id' [ 148.865135][ T9618] fuse: Bad value for 'group_id' [ 149.597474][ T9637] bridge_slave_0: left allmulticast mode [ 149.601782][ T9637] bridge_slave_0: left promiscuous mode [ 149.606283][ T9637] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.615571][ T9637] bridge_slave_1: left allmulticast mode [ 149.619432][ T9637] bridge_slave_1: left promiscuous mode [ 149.623538][ T9637] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.631813][ T9637] bond0: (slave bond_slave_0): Releasing backup interface [ 149.638171][ T9637] bond0: (slave bond_slave_1): Releasing backup interface [ 149.646456][ T9637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.653588][ T9637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.668580][ T9638] netlink: 304 bytes leftover after parsing attributes in process `syz.1.966'. [ 149.716924][ T9637] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.721505][ T9637] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.724741][ T9637] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.727875][ T9637] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.730811][ T9637] geneve2: entered promiscuous mode [ 149.732572][ T9637] geneve2: entered allmulticast mode [ 149.735227][ T9637] batman_adv: batadv0: Adding interface: geneve2 [ 149.737553][ T9637] batman_adv: batadv0: Interface activated: geneve2 [ 150.060039][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 150.060050][ T39] audit: type=1326 audit(1737942383.277:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz.3.973" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 150.717072][ T9666] fuse: Unknown parameter ' tSX3уʐV> UAV%ro3AȺWu+|12y"M(Kt> k'K)vێ2AH "֙S 0b 90 e9 d9 e4 ff ff 90 0f 0b 90 e9 4e fb ff ff 83 bc 24 80 00 [ 153.101666][ T9745] RSP: 0018:ffffc90002f5f8f8 EFLAGS: 00010246 [ 153.103629][ T9745] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 153.106121][ T9745] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000040d40 [ 153.108645][ T9745] RBP: 000008ffffffff00 R08: 0000000000000007 R09: 0000000000000000 [ 153.111088][ T9745] R10: 000008ffffffff00 R11: 0000000000000001 R12: 0000000000000020 [ 153.113580][ T9745] R13: 1ffff920005ebf33 R14: 000008ffffffff00 R15: 0000000000000001 [ 153.116043][ T9745] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f5086b40 [ 153.118879][ T9745] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 153.120842][ T9745] CR2: 0000000020001000 CR3: 0000000073cae000 CR4: 0000000000352ef0 [ 153.123473][ T9745] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.126550][ T9745] DR3: 00000000e08e000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 153.129141][ T9745] Call Trace: [ 153.130187][ T9745] [ 153.131125][ T9745] ? __warn+0xea/0x3c0 [ 153.132449][ T9745] ? __alloc_pages_noprof+0x1f66/0x2470 [ 153.134241][ T9745] ? report_bug+0x3c0/0x580 [ 153.135656][ T9745] ? handle_bug+0x54/0xa0 [ 153.137041][ T9745] ? exc_invalid_op+0x17/0x50 [ 153.138607][ T9745] ? asm_exc_invalid_op+0x1a/0x20 [ 153.140184][ T9745] ? __alloc_pages_noprof+0x1f66/0x2470 [ 153.141945][ T9745] ? mark_held_locks+0x9f/0xe0 [ 153.143571][ T9742] geneve0: entered promiscuous mode [ 153.143684][ T9745] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 153.145380][ T9742] geneve0: entered allmulticast mode [ 153.147180][ T9745] ? kasan_quarantine_put+0x10a/0x240 [ 153.147208][ T9745] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.150681][ T9742] batman_adv: batadv0: Adding interface: geneve0 [ 153.150764][ T9745] ? p9_client_clunk+0x12a/0x170 [ 153.152462][ T9742] batman_adv: batadv0: The MTU of interface geneve0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.154467][ T9745] ? p9_client_clunk+0x12f/0x170 [ 153.154489][ T9745] ___kmalloc_large_node+0x84/0x1b0 [ 153.156245][ T9742] batman_adv: batadv0: Interface activated: geneve0 [ 153.164094][ T9745] __kmalloc_large_node_noprof+0x1c/0x70 [ 153.171419][ T9745] __kmalloc_noprof.cold+0xc/0x63 [ 153.173096][ T9745] ? lockdep_init_map_type+0x16d/0x7d0 [ 153.174820][ T9745] ? v9fs_fid_get_acl+0x7a/0x120 [ 153.176374][ T9745] ? p9_req_put+0x1c6/0x250 [ 153.177819][ T9745] v9fs_fid_get_acl+0x7a/0x120 [ 153.179378][ T9745] v9fs_get_acl+0xee/0x530 [ 153.180855][ T9745] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 153.182586][ T9745] v9fs_mount+0x4fe/0xa30 [ 153.183960][ T9745] ? __pfx_v9fs_mount+0x10/0x10 [ 153.185544][ T9745] ? apparmor_capable+0x114/0x1d0 [ 153.187130][ T9745] ? __pfx_v9fs_mount+0x10/0x10 [ 153.188736][ T9745] legacy_get_tree+0x109/0x220 [ 153.190257][ T9745] vfs_get_tree+0x8b/0x340 [ 153.191743][ T9745] path_mount+0x6e1/0x1f00 [ 153.193244][ T9745] ? kmem_cache_free+0x152/0x4c0 [ 153.194823][ T9745] ? __pfx_path_mount+0x10/0x10 [ 153.196392][ T9745] ? putname+0x13c/0x180 [ 153.197766][ T9745] __ia32_sys_mount+0x28d/0x310 [ 153.199387][ T9745] ? __pfx___ia32_sys_mount+0x10/0x10 [ 153.201140][ T9745] __do_fast_syscall_32+0x73/0x120 [ 153.202750][ T9745] do_fast_syscall_32+0x32/0x80 [ 153.204277][ T9745] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.206297][ T9745] RIP: 0023:0xf73fe579 [ 153.207557][ T9745] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 153.213686][ T9745] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 153.216282][ T9745] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200003c0 [ 153.218818][ T9745] RDX: 0000000020000b80 RSI: 0000000000000000 RDI: 0000000020000500 [ 153.221317][ T9745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.223793][ T9745] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 153.226299][ T9745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.228811][ T9745] [ 153.229794][ T9745] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.232071][ T9745] CPU: 3 UID: 0 PID: 9745 Comm: syz.1.991 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 153.235328][ T9745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.238704][ T9745] Call Trace: [ 153.239766][ T9745] [ 153.240699][ T9745] dump_stack_lvl+0x3d/0x1f0 [ 153.242208][ T9745] panic+0x71d/0x800 [ 153.243510][ T9745] ? __pfx_panic+0x10/0x10 [ 153.244931][ T9745] ? show_trace_log_lvl+0x29d/0x3d0 [ 153.246564][ T9745] ? __alloc_pages_noprof+0x1f66/0x2470 [ 153.248276][ T9745] check_panic_on_warn+0xab/0xb0 [ 153.249821][ T9745] __warn+0xf6/0x3c0 [ 153.251047][ T9745] ? __alloc_pages_noprof+0x1f66/0x2470 [ 153.252794][ T9745] report_bug+0x3c0/0x580 [ 153.254290][ T9745] handle_bug+0x54/0xa0 [ 153.255625][ T9745] exc_invalid_op+0x17/0x50 [ 153.257080][ T9745] asm_exc_invalid_op+0x1a/0x20 [ 153.258598][ T9745] RIP: 0010:__alloc_pages_noprof+0x1f66/0x2470 [ 153.260522][ T9745] Code: 24 38 41 89 c6 0f b6 c0 44 8b ac 24 84 00 00 00 89 44 24 18 e9 a8 f7 ff ff 90 0f 0b 90 e9 b6 f7 ff ff c6 05 37 47 39 0e 01 90 <0f> 0b 90 e9 d9 e4 ff ff 90 0f 0b 90 e9 4e fb ff ff 83 bc 24 80 00 [ 153.266850][ T9745] RSP: 0018:ffffc90002f5f8f8 EFLAGS: 00010246 [ 153.269392][ T9745] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 153.272712][ T9745] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000040d40 [ 153.276014][ T9745] RBP: 000008ffffffff00 R08: 0000000000000007 R09: 0000000000000000 [ 153.279318][ T9745] R10: 000008ffffffff00 R11: 0000000000000001 R12: 0000000000000020 [ 153.282303][ T9745] R13: 1ffff920005ebf33 R14: 000008ffffffff00 R15: 0000000000000001 [ 153.284950][ T9745] ? mark_held_locks+0x9f/0xe0 [ 153.286529][ T9745] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 153.288302][ T9745] ? kasan_quarantine_put+0x10a/0x240 [ 153.289998][ T9745] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.291607][ T9745] ? p9_client_clunk+0x12a/0x170 [ 153.293223][ T9745] ? p9_client_clunk+0x12f/0x170 [ 153.294791][ T9745] ___kmalloc_large_node+0x84/0x1b0 [ 153.296458][ T9745] __kmalloc_large_node_noprof+0x1c/0x70 [ 153.298548][ T9745] __kmalloc_noprof.cold+0xc/0x63 [ 153.300640][ T9745] ? lockdep_init_map_type+0x16d/0x7d0 [ 153.302720][ T9745] ? v9fs_fid_get_acl+0x7a/0x120 [ 153.304360][ T9745] ? p9_req_put+0x1c6/0x250 [ 153.305840][ T9745] v9fs_fid_get_acl+0x7a/0x120 [ 153.307408][ T9745] v9fs_get_acl+0xee/0x530 [ 153.308859][ T9745] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 153.310569][ T9745] v9fs_mount+0x4fe/0xa30 [ 153.311938][ T9745] ? __pfx_v9fs_mount+0x10/0x10 [ 153.313642][ T9745] ? apparmor_capable+0x114/0x1d0 [ 153.315189][ T9745] ? __pfx_v9fs_mount+0x10/0x10 [ 153.316695][ T9745] legacy_get_tree+0x109/0x220 [ 153.318261][ T9745] vfs_get_tree+0x8b/0x340 [ 153.319605][ T9745] path_mount+0x6e1/0x1f00 [ 153.320956][ T9745] ? kmem_cache_free+0x152/0x4c0 [ 153.322449][ T9745] ? __pfx_path_mount+0x10/0x10 [ 153.323914][ T9745] ? putname+0x13c/0x180 [ 153.325204][ T9745] __ia32_sys_mount+0x28d/0x310 [ 153.326686][ T9745] ? __pfx___ia32_sys_mount+0x10/0x10 [ 153.328321][ T9745] __do_fast_syscall_32+0x73/0x120 [ 153.329864][ T9745] do_fast_syscall_32+0x32/0x80 [ 153.331336][ T9745] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.333245][ T9745] RIP: 0023:0xf73fe579 [ 153.334472][ T9745] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 153.340215][ T9745] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 153.342687][ T9745] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200003c0 [ 153.345058][ T9745] RDX: 0000000020000b80 RSI: 0000000000000000 RDI: 0000000020000500 [ 153.347393][ T9745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.349763][ T9745] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 153.352131][ T9745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.354525][ T9745] [ 153.356070][ T9745] Kernel Offset: disabled [ 153.357469][ T9745] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:46:26 Registers: info registers vcpu 0 CPU#0 RAX=000000000059bbc9 RBX=0000000000000000 RCX=ffffffff8b45b199 RDX=0000000000000000 RSI=ffffffff8b6cd2e0 RDI=ffffffff8bd26ce0 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed1005686f7d R10=ffff88802b437beb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905fe910 R15=0000000000000000 RIP=ffffffff8b45c57f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c353401 CR3=0000000067a08000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000007ab541 RBX=0000000000000001 RCX=ffffffff8b45b199 RDX=0000000000000000 RSI=ffffffff8b6cd2e0 RDI=ffffffff8bd26ce0 RBP=ffffed1003a5f910 RSP=ffffc9000047fdd8 R8 =0000000000000001 R9 =ffffed10056a6f7d R10=ffff88802b537beb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d2fc880 R14=ffffffff905fe910 R15=0000000000000000 RIP=ffffffff810014f0 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001100 CR3=000000006aeea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=249143b0807a913d RCX=ffffffff8195eed2 RDX=1ffff110045025e3 RSI=0000000000000008 RDI=ffffffff96e1ecc0 RBP=dffffc0000000000 RSP=ffffc9000370f7f0 R8 =0000000000000000 R9 =fffffbfff2dc3d98 R10=ffffffff96e1ecc7 R11=0000000000000001 R12=ffffed10045025e3 R13=ffff888022812440 R14=0000000000000002 R15=ffff888022812f48 RIP=ffffffff8195ea67 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9d32324ba0 CR3=000000004840a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f745cff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853805c5 RDI=ffffffff9aacf4e0 RBP=ffffffff9aacf4a0 RSP=ffffc90002f5f278 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=0000000000000064 R14=ffffffff85380560 R15=0000000000000000 RIP=ffffffff853805ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=0000000073cae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000000000001 Opmask02=000000000000ffdf Opmask03=0104100080810010 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc317bd4c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff000000ff000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0eb9f2663beb5a46 737326192c9d513c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7dca811548982935 0000556a5fefba74 0000000000000081 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556f092042f0 0000000000000000 00007fd4790cacaa 00007ffc317b50c0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000556ce54c2 0000556f091efb00 00002abe26e2ba9b 00002a93386450a0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7fffdfff 00007fff3b7ffff0 00007fff7ffffffb fffffeffffffdcfd ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000556f023c5001 0000000000000020 0000306e09420045 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000020 0000306e09420045 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000