last executing test programs: 9m50.875611034s ago: executing program 1 (id=1518): io_uring_setup(0x79ae, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) open(0x0, 0x20002, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000540)="6f5d92e864876a347bad22fefd3b1a973d67b37855e50cec0ed6d2c93cd43672f8f78abbf028ddaf448edbe8e68586244967d1ba80555ef6aecfde54f7ab5a14cb52c3258e178a5bdbe4acc596c00fd70fcd875d2e6960c98336ebbb911ce6e42f6dc9f703f3af7f51e8a80852d7192440e833ffa2f66e3f9332904d436206ff1a67f117e6b83874dde8af391e61f19798d8bfaf2fef41845c448c28a8c3ebb41b2258cb247725f4d59639da2a09b341254bb5a700608e8b95407896cf5d085d6a7ad7", 0xc3}], 0x1}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6026e0000fc020000000000000000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa14172170a013589317d2af31ba554311bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645e"], 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r6 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="a81ea7adf7a8ef1444aa6167fd531d5328dff1de695415defd24fda17ee74ad61d0112b1629b2d8d0000600072bdbf090000a96fed48b08a7e23172abad780ca335f9c70378cdd52ed1ad8b09fce9d1c1550d01c8b858cf486e304f7857d98ab96c3d0952714471e88985aef579ae438957547e4af5c129b404932687d", 0x7d, r6) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, r7, r7}, &(0x7f0000000040)=""/217, 0xd9, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 9m49.985566614s ago: executing program 1 (id=1521): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000bc0)={@val={0x2f3a, 0xf8}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2, 0x28, 0x68, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x141a, 0x0, 0x15f1}}}}, 0x36) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r2}, 0x10) getrusage(0x0, &(0x7f0000000500)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000f3ffffffffffffff0000000000000089d39694000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000400)=@ng={0x4, 0x12}, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 9m49.843339814s ago: executing program 1 (id=1524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) r1 = dup2(r0, r0) r2 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x400, 0x1, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "5c0a0551"}, 0x0, 0x1, {0x0}, 0x2, 0x20000000, r1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000001080)={0x6, 0x10, 0x2, 0x5, 0xfe, 0x9, 0x2, 0x7f, 0x1, 0x71, 0x4, 0x53, 0xb}, 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000140)) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 9m45.18553664s ago: executing program 1 (id=1537): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000480)={0x6, @pix_mp={0x3, 0x6, 0x41416770, 0x2, 0xc, [{0x5, 0x5}, {0x3, 0x6}, {0x8, 0x40}, {0x5a36, 0x8}, {0x81, 0x2}, {0x9, 0x8}, {0x2d6a3, 0x400}, {0x1, 0x2}], 0xa, 0x2, 0x3, 0x1, 0x1}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x2, 0x0) read$msr(r5, &(0x7f0000000380)=""/59, 0x3b) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r7], 0x1}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00003d387c004eb0000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000200fe8000000000000000000000000000aa"], 0x2c}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x32000812) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000003340)}) 9m44.265492371s ago: executing program 1 (id=1539): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x8}, &(0x7f0000000200)=0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x104010, 0xffffffffffffffff, 0x8000000) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r4, &(0x7f0000000000)={{0x3, @default, 0x8}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup3(r4, r5, 0x0) syz_io_uring_setup(0x731, &(0x7f0000000580)={0x0, 0xc5e3, 0x40, 0x3, 0x148}, &(0x7f0000000600), &(0x7f0000000640)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') setpgid(0x0, r7) mkdir(&(0x7f0000002440)='./file2\x00', 0x106) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="50010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000980)=@IORING_OP_WRITEV={0x2, 0x8, 0x2004, @fd=r2, 0x35, &(0x7f0000000940)=[{&(0x7f0000000680)="8fe7889a70ffbdfa64afc73c28558104e7311f5b4769d81a16cfbbb39920d59712739ffdae2b102c928f46017cfa2b0bf46792affef47e96b4c49d1b9d0d4be3f31911956faa2f4de2509fa8986df29518254e8b66f8a99c4c05e6c5fa9ee3aad4b4b9bd848a58c3a6c841ea94e86a1762195c93b4b4a8249ecd1b1772", 0x7d}, {&(0x7f0000000700)="8f1de22cc2d4204be6605f5edbcbca06402eb8f80da3ac8bbf9706cb73f69cc4e731d668fa816decec99143cecd35836c43c5311f9b80cc077354bd06027945bc7128b01065082afef8105a67238d9555dd1a8a3e286e8c10a509ac61b13195d4e1deb4c06282576828e0c72c1bb1e05a65c3b83ab336025ee567f87a1ab25d3a97d67e97b31566c7611e212ab11b180ffb2c63b3cc6c20bb01617a42ceb978d2cc78fbfc3967e7bdf52e5f1a1df544d2a45d5bc38b4b2", 0xb7}, {&(0x7f00000007c0)="2f22361f8f6b97622012115fa74d7cb1600c3faa0ba196c785ba9a630920d25e20a82cb7adedbef9c0a66951b7325b60b4d709b1171995dea3b471f60d78a3f02addb360eeb0bc4a20a7b7a23e986f4913de026be01b4bccac90306be10f8cf3f9e13e30b6c391d73f9058a805512f527a60484b09f256589ef1e62d129451848313ef10a58ff1e3f92cd94ed3bab094ea60f7c5233406690e0419c0e5e76b3dc9b8907c15747a7426e941cb71011bb00b6df660a77e38897d5d4525f09acf5728aad93ffc3709f5c0f5d9a875b00aaa0eea", 0xd2}, {&(0x7f00000008c0)="79a5389487e4d2e54d0570975e27794bb9c7a0e3f922740d21110c6a0b836b79cfe19031e388331eae879455a04fd6e34cccebf0c48e4af8325e848510a0f287f1d6048574eee1e281f30ec47478", 0x4e}], 0x4, 0x8, 0x1, {0x2, r9}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 9m43.980735616s ago: executing program 1 (id=1542): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x20000000, 0x500, 0x4], [0x3]], '\x00', [{0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}], '\x00', 0x6b4}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x880) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9m28.701091135s ago: executing program 32 (id=1542): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x20000000, 0x500, 0x4], [0x3]], '\x00', [{0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}], '\x00', 0x6b4}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x880) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 8m26.204159849s ago: executing program 3 (id=1890): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x4}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x3, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50) 8m26.06482128s ago: executing program 3 (id=1892): read(0xffffffffffffffff, &(0x7f0000001b00)=""/192, 0xc0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000000000000", @ANYBLOB="4539f7cc0a21d9c945b6ccf810db6b96a8f073c2500c693f176d19096e4f78f818555fb36dbf0c77da5ae1850ddb7ddf21844bd5cc787835b5ca5e1ab55eefc17fd06932e4f28385394f9b1f25b91303"]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@delqdisc={0x174, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x1, 0x7}, {0x3, 0x3}}, [@TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xf7, 0xffff, 0x2, 0x0, 0xc, 0x6, 0x1}}, {0x6, 0x2, [0xfc01]}}, {{0x1c, 0x1, {0x2, 0x8, 0x4, 0x5, 0x2, 0x72b, 0x50, 0x3}}, {0xa, 0x2, [0xa0d2, 0x1ff, 0x1]}}, {{0x1c, 0x1, {0x6, 0x4, 0x0, 0x4, 0x2, 0x8, 0x5, 0x2}}, {0x8, 0x2, [0x3ff, 0x5b0]}}, {{0x1c, 0x1, {0xb, 0xcb, 0x6, 0x2, 0x0, 0x8, 0x1dbd, 0x7}}, {0x12, 0x2, [0x0, 0x7, 0x6, 0xfca9, 0x632, 0x5, 0x7]}}]}, @TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1000}, @TCA_RATE={0x6, 0x5, {0x60, 0x1}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x80, 0x10001, 0x1, 0x4, 0xf, 0x7}}, {0x12, 0x2, [0x61c8, 0x7, 0x5, 0x8, 0x7, 0x2, 0x9]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x54, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xe}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x8}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000004}, 0x11) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x4, 0x183000) r3 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x1) writev(r3, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x5, "2a000000000000005a957fe0213b2e100af028f0030b2eff0b61e6e66b8f37ff"}) 8m24.493722443s ago: executing program 3 (id=1905): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x28, 0x5, 0x0) listen(r3, 0x0) socket(0x28, 0x5, 0x0) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 8m24.124177749s ago: executing program 3 (id=1907): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="d677af04b0ef0e33040b00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006340)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1f7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e500003fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0xfffffffffffffff5, 0xfffffffffffffffc, {0x400000000000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x8, 0x4, 0x280}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0xa00, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x2004, @fd_index=0x5, 0x6, 0xc, 0x0, 0x1c, 0x1, {0x3, r8}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) dup2(r3, r1) socket(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r10, r9, 0x0, 0x3a) 8m23.88184336s ago: executing program 3 (id=1910): syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x49, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xfb, 0x3, 0x4}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x4, 0x8, 0xc, 0x40, 0x4f}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42a}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x12, 0x1, 0x0, 0x0, 0x0}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x80) ioctl$EVIOCGSND(r7, 0x8040451a, &(0x7f0000000080)=""/159) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r8 = add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000004c0)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r8, &(0x7f0000001ac0)=[{&(0x7f0000000540)="4d31cc506223947c5ac8d37e1e38fc76b5bd367a7e47d7900314824c82b0931912de46094b12ef78d536b040b689e101d66539bb9140dd5d3cec4bcf9c185f01381185e4dfd34409fffb35a86e14944c702123f30af9797793fc15f99557ba59640868993fce31c52c63ab068d735a6c1f61e1ec693f55b642f4a11f25778cc183dd66edcfe49445c82c80caf761718961c1084dc028258cb6fcc095ec85e5b71bd009c6978aca50323f937cc53e06fced0eaf0d47823216292ef56dd51d0ac81ce1d2d16ef38ee9b54902bde91e1b5e72523fae441e40e49d99c30282c08f1a7059", 0xe2}, {&(0x7f0000000640)="430bffd4cac429e3acdd155be5942e9c2c931514813e2a2d9b7e2ab98a7952ec58907fe86e68bd48bd23f2ee156ffefa33e7ae72b862110701bbc27306146ef31f0fcf360ab9ead5f2d7a5d4fa1e923547644b67f1b0d16c9a7663d00071d557363e039d991f2f2d7434195114a01b9ef7c0fc5935a7f6438768a3e077aa5e4ae187eb6426f5a2f760c3ce4a1389b089a08dfddd7e4a3a0e79881a000f4c0ffe5e", 0xa1}, {&(0x7f0000000700)="088515db240eed8e91ca96cc2f03d51392d1df9e66f4309b5a9a6e7274111b0c5ffeb7d80f50f945f652ec7f0799373f39ca30586e1faf0fe9456c07f7afae1b4639b5527e5d70e3dafd0d358ddc50ca6fc5d1e2f26bf50290d489", 0x5b}, {&(0x7f0000000780)="fe0ab94366", 0x5}, {&(0x7f00000007c0)="1aa1f2f57586a0f676000808b562be6e3d5c8b7c084b4d6bfced86ea91ca193484f6a0b504bf867c5368460dfa56c01f880d15d6cbac57f7bac0effd62685b081d5c17f923e9a66bed129c6fa75ee3fd128e0c83bd9152014dc41a2a4ceb35267c49254b261f0bc98730da3363b34e56814b1e65023e32731bc42db3c52f40fd1e6117f228a522728bffe67277538a79d6ad911dd5c2781862348dbf01c3ef7a5f7f39cadd", 0xa5}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="f250413dccfa355187052d513011de23a2474edcfb0a4c10107816", 0x1b}, {&(0x7f00000018c0)="580eb6cc228faaab563ecb5ed5ae77e3e348dd5be61cc322b0390041331a2204863b5fa89e8dc18849692e196fe433bb1f5082ac66fc37b4f17f4ee7b964e3beb66360d978f05f3be76c5298ed099a5fd6cb1cb03ab9ac9a41254cbae3b08bce5f684f35b93832d2f11179412e4e14590226e246dc003e23d380c343d2c0414ee5ab525ab7ac2376a4a5b36fe3535de0ce61c4ff0badcfb78981b3d8dcd73680013278f6a35a890c0b2a39b43911c7aaa3ec92cf43dc293bb1ee9c3fb0b6a8edcc27e4776842ed9aa70db58bb477dd", 0xcf}, {&(0x7f00000019c0)="0c672cbd5035c6c0b9bc8ea59c67e9d068d72623ce693e46c05625463489269ae82720d8aaeb630d2b71d49338293dcc4436701da44de53bc64ac7a043718fed8e0a74e36afb1429b2bde106154b0d30881d3a542ca49759be1423252fca401c0c60bd9a44ac67f01b4b9b895493c7619437cb8c9e0161d00a9a282e81e9c15be8d0b1791776cf529e5f5c827d0e43029a300612f6a2d8127131539b30a168dac499e084728266daaba13e464f2ffc2d2dfca79200dc396c7c6e2261a754c004bd40dac6829c6d1648fe985b63fda6bdc4b2bd45650b209bfae0af591b3a4e68988227", 0xe3}], 0x9, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000080601020000000000000000030000070500010007000000050001000700000005000100070000007f538970"], 0x2c}, 0x1, 0x0, 0x0, 0x24000003}, 0x0) 8m23.693023019s ago: executing program 3 (id=1912): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 8m23.64038094s ago: executing program 33 (id=1912): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 6m6.683147317s ago: executing program 0 (id=2672): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x8, 0x700, 0x7, 0x80000001, {{0x28, 0x4, 0x0, 0x25, 0xa0, 0x65, 0x0, 0x3, 0x54, 0x0, @private=0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0xb5, 0x1, 0x4, [{@loopback, 0x9}, {@rand_addr=0x64010100, 0x401}, {@loopback, 0xf}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x100}, {@local, 0x1ff}]}, @generic={0x86, 0x10, "a4eb28fdaebb94f14059b60b4118"}, @timestamp_prespec={0x44, 0x2c, 0x6b, 0x3, 0x1, [{@broadcast, 0x40001}, {@rand_addr=0x64010102, 0x8}, {@multicast2, 0x8ce}, {@empty, 0xd}, {@loopback, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0xba, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x3ff}]}, @timestamp_prespec={0x44, 0x4, 0xed, 0x3, 0x1}, @end]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xe, 0x0, 0x1, 0x5, '\x00', r0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x800004, 0x0, "7e12ddc5a89047bf00"}) syz_open_pts(0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20004041) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x1800) 6m6.123489487s ago: executing program 0 (id=2680): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x110000, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=interleave=statc', @ANYRESOCT]) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@loopback, 0x7c, r4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) renameat2(r0, 0x0, r0, 0x0, 0x2) openat2$dir(0xffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x20200, 0x42}, 0x18) 6m5.215961732s ago: executing program 0 (id=2683): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f80)={r3, 0x0, 0x0}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = openat$hpet(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000040)=0xfffffd9d) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x40}, {r0, 0x400}, {r3, 0x5040}, {r6, 0x8}, {r2, 0x30a8}, {r2, 0x6408}], 0x6, &(0x7f0000000300)={r7, r8+10000000}, &(0x7f0000000340)={[0x101, 0x7fffffff]}, 0x8) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES64=r3, @ANYRES8=r5], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) r10 = fcntl$dupfd(r0, 0x406, r1) ioctl$TCFLSH(r10, 0x400455c8, 0x8) 6m5.102593167s ago: executing program 0 (id=2684): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x5) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) timer_create(0x0, &(0x7f0000000200)={0x0, 0x11, 0x4}, &(0x7f0000000100)) socket(0x80000000000000a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsmount(r0, 0x1, 0x7b) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond0\x00'}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_clone(0xa0320080, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2b, 0xa, 0x7) mount$afs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x23000e9, &(0x7f0000000080)=ANY=[@ANYBLOB="7b2c6479730da300000000632c"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) 6m4.222131971s ago: executing program 0 (id=2693): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000000000e4ff0000000000000400000000020000000000000402000000020000000000000e0300000000000000000061"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x5}, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8010550e, &(0x7f0000000200)=ANY=[]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0xd29, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {}, {0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000300), 0x96a, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x6001, 0x0, 0x0, 0x0, 0x80, 0x1}) socket$inet6(0xa, 0x6, 0x80) getsockname$packet(r3, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000700), 0x8000, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000740)=r6, 0x4) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0x800, 0xfffb, {0x4, 0x1}, {0x3a, 0x2}, @cond=[{0x7, 0x5, 0x1fe, 0xfe2d, 0xb, 0x3d8}, {0x0, 0x400, 0xfffb, 0x5, 0x0, 0x529}]}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) 6m3.912586948s ago: executing program 0 (id=2696): connect$inet6(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800060000000000000400"/24], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000300)=ANY=[@ANYRES16=r7, @ANYRES64=r2, @ANYRESOCT=r4, @ANYRESHEX=r1, @ANYRESDEC=r5, @ANYBLOB="6ac291a11c8f4e27546826e656ef6eb1d460631314cbf9b5409d7554d0be22a9b279866ef51b9618e84497d26d783f958ce6d3da1cd049ffeb848383adee6657e2299679f950e49b8bcae971a6e1ed22db08170ed1ab08", @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xa533b346aaba2ecc, &(0x7f0000000280)) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000022000103780000000000000001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000a00)={0x0, 0xd3, &(0x7f00000009c0)={&(0x7f0000000100)={0x24, r6, 0x200, 0xfffffffd, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xffffffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0e05403, &(0x7f0000000480)={{0x1, 0x1, 0x300, 0x3, 0x4}, 0x3, 0x1, 'id0\x00', 'timer1\x00', 0x0, 0x6, 0xd2, 0x4, 0x7}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000170000/0x3000)=nil, 0x3000}, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) 6m3.82325071s ago: executing program 34 (id=2696): connect$inet6(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800060000000000000400"/24], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000300)=ANY=[@ANYRES16=r7, @ANYRES64=r2, @ANYRESOCT=r4, @ANYRESHEX=r1, @ANYRESDEC=r5, @ANYBLOB="6ac291a11c8f4e27546826e656ef6eb1d460631314cbf9b5409d7554d0be22a9b279866ef51b9618e84497d26d783f958ce6d3da1cd049ffeb848383adee6657e2299679f950e49b8bcae971a6e1ed22db08170ed1ab08", @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xa533b346aaba2ecc, &(0x7f0000000280)) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000022000103780000000000000001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000a00)={0x0, 0xd3, &(0x7f00000009c0)={&(0x7f0000000100)={0x24, r6, 0x200, 0xfffffffd, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xffffffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0e05403, &(0x7f0000000480)={{0x1, 0x1, 0x300, 0x3, 0x4}, 0x3, 0x1, 'id0\x00', 'timer1\x00', 0x0, 0x6, 0xd2, 0x4, 0x7}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000170000/0x3000)=nil, 0x3000}, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) 3m30.371622255s ago: executing program 4 (id=3670): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x9, @any, 0xf}, 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) accept4(r3, &(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000440)=0x80, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r5}) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340100001a0001000000000000000000fc374edc2be56be14400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000a00000000000000480003006465666c61746500"/236], 0x134}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x844) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c00108008000b00", @ANYRES32, @ANYBLOB="080002"], 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) 3m29.591313103s ago: executing program 4 (id=3677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xfc}}, 0x0) 3m29.590031034s ago: executing program 4 (id=3680): io_uring_setup(0x79ae, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) open(0x0, 0x20002, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000540)="6f5d92e864876a347bad22fefd3b1a973d67b37855e50cec0ed6d2c93cd43672f8f78abbf028ddaf448edbe8e68586244967d1ba80555ef6aecfde54f7ab5a14cb52c3258e178a5bdbe4acc596c00fd70fcd875d2e6960c98336ebbb911ce6e42f6dc9f703f3af7f51e8a80852d7192440e833ffa2f66e3f9332904d436206ff1a67f117e6b83874dde8af391e61f19798d8bfaf2fef41845c448c28a8c3ebb41b2258cb247725f4d59639da2a09b341254bb5a700608e8b95407896cf5d085d6a7ad7", 0xc3}], 0x1}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_emit_ethernet(0x2a4, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r6 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="a81ea7adf7a8ef1444aa6167fd531d5328dff1de695415defd24fda17ee74ad61d0112b1629b2d8d0000600072bdbf090000a96fed48b08a7e23172abad780ca335f9c70378cdd52ed1ad8b09fce9d1c1550d01c8b858cf486e304f7857d98ab96c3d0952714471e88985aef579ae438957547e4af5c129b404932687d", 0x7d, r6) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, r7, r7}, &(0x7f0000000040)=""/217, 0xd9, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r8, 0x540a, 0x2) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 3m28.63963452s ago: executing program 4 (id=3689): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) unlinkat(r4, &(0x7f0000000480)='./bus\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x105, 0xfffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r7, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x118) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x542f, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={r2, 0x0, 0x0, 0x0, 0x0}) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0xa, @remote, 'veth1_virt_wifi\x00'}}, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1\xd1\x11\xf0\xc2Gj+kV\x00'/179, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='attr/exec\x00') socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) r11 = syz_io_uring_setup(0x235, &(0x7f00000002c0)={0x0, 0xf91, 0x10100, 0x0, 0x8002b1}, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r11, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 3m27.721452303s ago: executing program 4 (id=3696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) 3m27.416420237s ago: executing program 4 (id=3699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000d40)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x8a, &(0x7f0000000240)=0xffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r6}, 0x18) openat$nullb(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffdc6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000180)={0x2, 0xeeef0000, 0xfffffffb, 0x0, 0xf00000}) 3m27.347338973s ago: executing program 35 (id=3699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000d40)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x8a, &(0x7f0000000240)=0xffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r6}, 0x18) openat$nullb(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffdc6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000180)={0x2, 0xeeef0000, 0xfffffffb, 0x0, 0xf00000}) 3m25.189890974s ago: executing program 7 (id=3700): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x9, @any, 0xf}, 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) accept4(r3, &(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000440)=0x80, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r5}) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340100001a0001000000000000000000fc374edc2be56be14400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000a00000000000000480003006465666c61746500"/236], 0x134}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x844) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c00108008000b00", @ANYRES32, @ANYBLOB="080002"], 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) 3m25.186307641s ago: executing program 7 (id=3721): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x110000, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=interleave=statc:', @ANYRESOCT]) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@loopback, 0x7c, r3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x20200, 0x42}, 0x18) 3m24.260415923s ago: executing program 7 (id=3730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) 3m24.151084136s ago: executing program 7 (id=3732): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x2e1599d47c8268ad, 0x10, 0xff, 0x6, {{0x39, 0x4, 0x0, 0x1, 0xe4, 0x65, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2d}, {[@rr={0x7, 0x1b, 0xdf, [@loopback, @rand_addr=0x64010100, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @timestamp={0x44, 0x28, 0xd0, 0x0, 0x4, [0x1, 0xfff, 0x5, 0x3ff, 0xfffffffc, 0x3, 0x2, 0x7, 0x7fff]}, @cipso={0x86, 0x6a, 0x0, [{0x6, 0xc, "2871f53b8444a691cd72"}, {0x0, 0x3, '>'}, {0x0, 0x12, "4acc79ef6f3ed00aa9b69ebd5f100166"}, {0x7, 0x9, "3dcd31f0b06510"}, {0x6, 0x9, "55c7f923177743"}, {0x0, 0xe, "07da6ea31ddab0b560625f4e"}, {0x6, 0xd, "e54b7e1f5cad97994208c3"}, {0x5, 0x4, "d535"}, {0x6, 0x12, "cc3fdffb1648c07ccadbaff9107a85f7"}]}, @ssrr={0x89, 0x1f, 0x21, [@multicast1, @remote, @local, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}}}) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r7}, 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmsg(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000063c0)=""/4097, 0x1001}], 0x1}, 0x102) 3m22.999129054s ago: executing program 7 (id=3740): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r1, 0x7}, 0x8) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) 3m22.928313521s ago: executing program 7 (id=3742): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x1, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x500]}}) 3m7.550284169s ago: executing program 36 (id=3742): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x1, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x500]}}) 6.111941805s ago: executing program 2 (id=4934): timer_create(0x0, 0x0, &(0x7f0000000000)) syz_clone3(&(0x7f0000000540)={0x280002000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/167, 0xa7, &(0x7f0000000400)=""/235, &(0x7f0000000500)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f00000005c0)={r0, 0x6, 0x6e, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$hpet(0xffffff9c, &(0x7f0000000040), 0x40943, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x6802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r5, 0x2) prlimit64(0x0, 0x5, &(0x7f00000006c0)={0x8000, 0x11ae}, &(0x7f0000000700)) mkdir(&(0x7f0000000140)='./file0\x00', 0x63) r6 = accept4$rose(r1, &(0x7f0000000600)=@full={0xb, @remote, @netrom, 0x0, [@default, @null, @rose, @null, @default, @null]}, &(0x7f0000000740)=0x40, 0x0) ioctl$SIOCRSSL2CALL(r6, 0x89e2, &(0x7f0000000680)=@bcast) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ufs\x00', 0x8403, 0x0) 5.119193481s ago: executing program 2 (id=4941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mem_connect\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) getsockopt$nfc_llcp(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x7, 0x32315559, 0x8, 0x203, 0x2, 0x8, 0x6, 0x1, 0x2, 0x0, 0x1}}) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4.18610678s ago: executing program 6 (id=4946): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x9, @any, 0xf}, 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) accept4(r3, &(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000440)=0x80, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r5}) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340100001a0001000000000000000000fc374edc2be56be14400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000a00000000000000480003006465666c6174650000"], 0x134}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x844) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c00108008000b00", @ANYRES32, @ANYBLOB="080002"], 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) 3.959065394s ago: executing program 2 (id=4948): bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000180)) r0 = socket$l2tp(0x2, 0x2, 0x73) sync_file_range(r0, 0x6, 0x800, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x3c}}, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000001c0)=""/107) 3.337322642s ago: executing program 6 (id=4949): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x9, @any, 0xf}, 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) accept4(r3, &(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000440)=0x80, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r5}) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340100001a0001000000000000000000fc374edc2be56be14400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000a00000000000000480003006465666c61746500"/207], 0x134}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x844) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c00108008000b00", @ANYRES32, @ANYBLOB="080002"], 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) 3.281393675s ago: executing program 5 (id=4950): r0 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000180), 0x80000, 0x0) syz_clone3(&(0x7f0000000540)={0x280002000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/167, 0xa7, &(0x7f0000000400)=""/235, &(0x7f0000000500)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000005c0)={r1, 0x6, 0x6e, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$hpet(0xffffff9c, &(0x7f0000000040), 0x40943, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x6802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r6, 0x2) prlimit64(0x0, 0x5, &(0x7f00000006c0)={0x8000, 0x11ae}, &(0x7f0000000700)) mkdir(&(0x7f0000000140)='./file0\x00', 0x63) r7 = accept4$rose(r2, &(0x7f0000000600)=@full={0xb, @remote, @netrom, 0x0, [@default, @null, @rose, @null, @default, @null]}, &(0x7f0000000740)=0x40, 0x0) ioctl$SIOCRSSL2CALL(r7, 0x89e2, &(0x7f0000000680)=@bcast) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ufs\x00', 0x8403, 0x0) 2.399895302s ago: executing program 6 (id=4952): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000480)={0x6, @pix_mp={0x3, 0x6, 0x41416770, 0x2, 0xc, [{0x5, 0x5}, {0x3, 0x6}, {0x8, 0x40}, {0x5a36, 0x8}, {0x81, 0x2}, {0x9, 0x8}, {0x2d6a3, 0x400}, {0x1, 0x2}], 0xa, 0x2, 0x3, 0x1, 0x1}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x2, 0x0) read$msr(r5, &(0x7f0000000380)=""/59, 0x3b) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r7], 0x1}) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0xb, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00003d387c004eb0000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000200fe8000000000000000000000000000aa"], 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, 0x0) 2.279429817s ago: executing program 5 (id=4953): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.180036693s ago: executing program 5 (id=4954): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req={0x200, 0xfffffff9, 0x0, 0x7f}, 0x10) recvmmsg$unix(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/251, 0xfb}], 0x1}}], 0x1, 0x40010020, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, r1, 0x5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8001}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x80) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0x13c, 0x10, 0x1d4, 0x2a8, 0x2a8, 0x1d4, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x140}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2c4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) 1.919451961s ago: executing program 8 (id=4956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x20000000000000ed, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xc810}, 0x20000004) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0xc090002) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xfce1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_ima(0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f060000000000000162"], 0xa, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="0c00238008001600fffbffff"], 0x28}}, 0x20000810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x81}, {0x6}]}, 0x8) 1.869982746s ago: executing program 8 (id=4957): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x13}]}, 0x24}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x2, 0x4, 0x548, 0xffffffff, 0x31c, 0x0, 0x31c, 0xfeffffff, 0xffffffff, 0x480, 0x480, 0x480, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x20c, 0x230, 0x0, {}, [@common=@rt={{0x11f}, {0x0, [0x7, 0x3f3], 0x48004, 0x9, 0x0, [@local, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @empty, @private2={0xfc, 0x2, '\x00', 0x2}, @loopback, @empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1b}, @private1, @dev={0xfe, 0x80, '\x00', 0x40}, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}], 0xe}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0x0, 0x3, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'syzkaller1\x00', {0x4}}}}, {{@uncond, 0x0, 0x130, 0x164, 0x0, {}, [@common=@srh1={{0x8c}, {0x6774475f98909cb4, 0x0, 0x6, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0xff, 0xff000000, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000], 0xa9c, 0x1801}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5a4) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x76) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000140)={0xfff, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40106435, &(0x7f0000000180)={0x0, r7}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x0, 0x14, 0x6a, &(0x7f00000001c0)="6e21c9ac2af5f144f55a43f97cce2cd518d90872", &(0x7f0000000200)=""/106, 0xfffffffb, 0x0, 0x7a, 0xf, &(0x7f0000000280)="a7bde78725432e0d52d1f8c504ff95c90a8e9dd919bb20b18aa229922c2a77ca5dfa41fcfb31813f0e5ad57e2938eb98b370b9bc9fab8412c076e3f21d29afce14d3b3d897e8cd802a0b032e6615f71e2791d3d9c9f31525b98e97089983a4cf5e0107646264421ffc5a1744595bbb7c3b1eca25bcb7773a78a6", &(0x7f0000000300)="de52582679ca524bf1440e88b186d0", 0x0, 0x0, 0x9}, 0x4c) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(r4, r9, 0x0) sendfile(r3, r3, 0x0, 0x40000000000004) 1.699854342s ago: executing program 8 (id=4958): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000fedbdf250b000000080003", @ANYRES32=r1, @ANYBLOB="34005080050002000300000005000900000000000800030013ac0f001100010048bc68"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 1.699076336s ago: executing program 8 (id=4959): io_uring_setup(0x79ae, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) open(0x0, 0x20002, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000540)="6f5d92e864876a347bad22fefd3b1a973d67b37855e50cec0ed6d2c93cd43672f8f78abbf028ddaf448edbe8e68586244967d1ba80555ef6aecfde54f7ab5a14cb52c3258e178a5bdbe4acc596c00fd70fcd875d2e6960c98336ebbb911ce6e42f6dc9f703f3af7f51e8a80852d7192440e833ffa2f66e3f9332904d436206ff1a67f117e6b83874dde8af391e61f19798d8bfaf2fef41845c448c28a8c3ebb41b2258cb247725f4d59639da2a09b341254bb5a700608e8b95407896cf5d085d6a7ad7", 0xc3}], 0x1}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6026e0000fc020000000000000000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa14172170a013589317d2af31ba554311bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645e"], 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r6 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="a81ea7adf7a8ef1444aa6167fd531d5328dff1de695415defd24fda17ee74ad61d0112b1629b2d8d0000600072bdbf090000a96fed48b08a7e23172abad780ca335f9c70378cdd52ed1ad8b09fce9d1c1550d01c8b858cf486e304f7857d98ab96c3d0952714471e88985aef579ae438957547e4af5c129b404932687d", 0x7d, r6) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, r7, r7}, &(0x7f0000000040)=""/217, 0xd9, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r8, 0x540a, 0x2) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 1.499713967s ago: executing program 6 (id=4960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mem_connect\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x7, 0x32315559, 0x8, 0x203, 0x2, 0x8, 0x6, 0x1, 0x2, 0x0, 0x1}}) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.110124832s ago: executing program 5 (id=4961): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x4002) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) add_key(&(0x7f0000000ac0)='asymmetric\x00', &(0x7f0000000b00)={'syz', 0x2}, &(0x7f0000000b40)="fc479c5868cc5f3be60ca131267200c06c823825055e14240e97093029f9654a25f0f3013e2a3d99", 0xfffff, 0xffffffffffffffff) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x5, 0x0, 0x7, 0x0, 0x0, [{{r0}, 0xfffffffffffffffd}, {{r0}, 0x800}, {{r0}, 0x6}, {{r1}}, {{}, 0x423c}, {{r0}, 0x6}, {{r0}, 0x1}]}) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x80000001) 1.107110701s ago: executing program 5 (id=4962): r0 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000180), 0x80000, 0x0) syz_clone3(&(0x7f0000000540)={0x280002000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/167, 0xa7, &(0x7f0000000400)=""/235, &(0x7f0000000500)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000005c0)={r1, 0x6, 0x6e, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$hpet(0xffffff9c, &(0x7f0000000040), 0x40943, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x6802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r6, 0x2) prlimit64(0x0, 0x5, &(0x7f00000006c0)={0x8000, 0x11ae}, &(0x7f0000000700)) mkdir(&(0x7f0000000140)='./file0\x00', 0x63) r7 = accept4$rose(r2, &(0x7f0000000600)=@full={0xb, @remote, @netrom, 0x0, [@default, @null, @rose, @null, @default, @null]}, &(0x7f0000000740)=0x40, 0x0) ioctl$SIOCRSSL2CALL(r7, 0x89e2, &(0x7f0000000680)=@bcast) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ufs\x00', 0x8403, 0x0) 898.581352ms ago: executing program 2 (id=4963): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 898.241585ms ago: executing program 2 (id=4964): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80000003) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r3 = eventfd2(0x4000000, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000100)={0x0, r3}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000019440)={0x6, 0x0, [{0xeeee0000, 0xfa, &(0x7f0000019180)=""/250}, {0xdddd1000, 0xeb, &(0x7f0000019280)=""/235}, {0x2000, 0xa, &(0x7f0000019540)=""/10}, {0xd5d6c004, 0xa2, &(0x7f0000019380)=""/162}, {0x10000, 0x1000, &(0x7f0000032680)=""/4096}, {0x2000, 0x4b, &(0x7f0000019580)=""/75}]}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000240)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000004b80)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000040)=0x6e, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000033680)={0x11, 0xb, &(0x7f0000019080)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1c, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) 618.408783ms ago: executing program 8 (id=4965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x20000000000000ed, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xc810}, 0x20000004) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0xc090002) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xfce1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_ima(0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f060000000000000162"], 0xa, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="0c00238008001600fffbffff"], 0x28}}, 0x20000810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x81}, {0x6}]}, 0x8) 469.966652ms ago: executing program 8 (id=4966): read(0xffffffffffffffff, &(0x7f0000001b00)=""/192, 0xc0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000000000000", @ANYBLOB="4539f7cc0a21d9c945b6ccf810db6b96a8f073c2500c693f176d19096e4f78f818555fb36dbf0c77da5ae1850ddb7ddf21844bd5cc787835b5ca5e1ab55eefc17fd06932e4f28385394f9b1f25b91303"]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@delqdisc={0x2bc, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x1, 0x7}, {0x3, 0x3}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xf7, 0xffff, 0x2, 0x0, 0xc, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x8, 0x4, 0x5, 0x2, 0x72b, 0x50, 0x3}}, {0xa, 0x2, [0xa0d2, 0x1ff, 0x1]}}, {{0x1c, 0x1, {0x6, 0x4, 0x0, 0x4, 0x2, 0x8, 0x5, 0x2}}, {0x8, 0x2, [0x3ff, 0x5b0]}}, {{0x1c, 0x1, {0xb, 0xcb, 0x6, 0x2, 0x0, 0x8, 0x1dbd, 0x7}}, {0x12, 0x2, [0x0, 0x7, 0x6, 0xfca9, 0x632, 0x5, 0x7]}}]}, @TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x65, 0x1, 0xc787, 0x3, 0x9, 0x1dee, 0x3}}, {0xa, 0x2, [0x5, 0xbe, 0xebc]}}, {{0x1c, 0x1, {0x2, 0xff, 0x1, 0x5, 0x0, 0x7fffffff, 0xd, 0x6}}, {0x10, 0x2, [0xa01, 0xc, 0x6, 0xfff, 0x7fff, 0x7]}}, {{0x1c, 0x1, {0x64, 0xa, 0x4, 0x7, 0x98801e3a08a75e03, 0x3, 0x4, 0x8}}, {0x14, 0x2, [0xfa00, 0x8ba, 0xfffa, 0x8, 0xe, 0x4e, 0x80, 0x9]}}, {{0x1c, 0x1, {0xff, 0x9, 0x1ff, 0xbf, 0x0, 0x5f, 0x7, 0x3}}, {0xa, 0x2, [0xdf4, 0x800, 0x5]}}, {{0x1c, 0x1, {0x1, 0x9, 0xf6, 0xfffffff2, 0x2, 0x5, 0x6, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x28a, 0x7}}, {0x12, 0x2, [0x7, 0x9, 0x7f, 0x2, 0x0, 0x6, 0x9]}}, {{0x1c, 0x1, {0x2, 0x1, 0x7, 0x0, 0x2, 0x80, 0xffff, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x3, 0x3, 0x1, 0x8, 0x1, 0x0, 0x2, 0x3}}, {0xa, 0x2, [0x33, 0x2, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1000}, @TCA_RATE={0x6, 0x5, {0x60, 0x1}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x80, 0x10001, 0x1, 0x4, 0xf, 0x7}}, {0x12, 0x2, [0x61c8, 0x7, 0x5, 0x8, 0x7, 0x2, 0x9]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x54, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xe}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x8}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20000004}, 0x11) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x4, 0x183000) r3 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x1) writev(r3, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x5, "2a000000000000005a957fe0213b2e100af028f0030b2eff0b61e6e66b8f37ff"}) 362.177934ms ago: executing program 6 (id=4967): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x13}]}, 0x24}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x2, 0x4, 0x548, 0xffffffff, 0x31c, 0x0, 0x31c, 0xfeffffff, 0xffffffff, 0x480, 0x480, 0x480, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x20c, 0x230, 0x0, {}, [@common=@rt={{0x11f}, {0x0, [0x7, 0x3f3], 0x48004, 0x9, 0x0, [@local, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @empty, @private2={0xfc, 0x2, '\x00', 0x2}, @loopback, @empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1b}, @private1, @dev={0xfe, 0x80, '\x00', 0x40}, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}], 0xe}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0x0, 0x3, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'syzkaller1\x00', {0x4}}}}, {{@uncond, 0x0, 0x130, 0x164, 0x0, {}, [@common=@srh1={{0x8c}, {0x6774475f98909cb4, 0x0, 0x6, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0xff, 0xff000000, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000], 0xa9c, 0x1801}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5a4) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x76) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000140)={0xfff, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40106435, &(0x7f0000000180)={0x0, r7}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x0, 0x14, 0x6a, &(0x7f00000001c0)="6e21c9ac2af5f144f55a43f97cce2cd518d90872", &(0x7f0000000200)=""/106, 0xfffffffb, 0x0, 0x7a, 0xf, &(0x7f0000000280)="a7bde78725432e0d52d1f8c504ff95c90a8e9dd919bb20b18aa229922c2a77ca5dfa41fcfb31813f0e5ad57e2938eb98b370b9bc9fab8412c076e3f21d29afce14d3b3d897e8cd802a0b032e6615f71e2791d3d9c9f31525b98e97089983a4cf5e0107646264421ffc5a1744595bbb7c3b1eca25bcb7773a78a6", &(0x7f0000000300)="de52582679ca524bf1440e88b186d0", 0x0, 0x0, 0x9}, 0x4c) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(r4, r9, 0x0) sendfile(r3, r3, 0x0, 0x40000000000004) 172.489264ms ago: executing program 6 (id=4968): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000480)={0x6, @pix_mp={0x3, 0x6, 0x41416770, 0x2, 0xc, [{0x5, 0x5}, {0x3, 0x6}, {0x8, 0x40}, {0x5a36, 0x8}, {0x81, 0x2}, {0x9, 0x8}, {0x2d6a3, 0x400}, {0x1, 0x2}], 0xa, 0x2, 0x3, 0x1, 0x1}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x2, 0x0) read$msr(r5, &(0x7f0000000380)=""/59, 0x3b) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r7], 0x1}) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0xb, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00003d387c004eb0000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000200fe8000000000000000000000000000aa"], 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, 0x0) 163.110466ms ago: executing program 5 (id=4969): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req={0x200, 0xfffffff9, 0x0, 0x7f}, 0x10) recvmmsg$unix(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/251, 0xfb}], 0x1}}], 0x1, 0x40010020, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, r1, 0x5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8001}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x80) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0x13c, 0x10, 0x1d4, 0x2a8, 0x2a8, 0x1d4, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x140}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2c4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) 0s ago: executing program 2 (id=4970): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) r2 = dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) lstat(&(0x7f0000002500)='./file1\x00', 0x0) stat(&(0x7f0000004b40)='./file0/file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r5, 0x0, 0x1}, 0x18) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbb9b1dbbbbbbbbaaaaaaaaaa00868cc21d9569fc74f4ad5515dd605e15b100383a00fe800000000000000000000000000000ff020000000000000000000000000001040090780000000060f9695900002100fc000000000000000000000000000000fe8800000000000000000000000000010000000000000000b73b818b753b1712a3ab4066cfddc3c2c9e9dca527bc3be6c388cee12e7eb2070ae73ded912f"], 0x0) r8 = syz_io_uring_setup(0x23a, &(0x7f0000000300)={0x0, 0x20200000, 0x80, 0x1, 0x1e8, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x5e, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 00000 [ 853.224421][T21213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 853.224426][T21213] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 853.224431][T21213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 853.224443][T21213] [ 853.265728][T21215] netlink: 137456 bytes leftover after parsing attributes in process `syz.8.4201'. [ 853.269936][T21215] netlink: zone id is out of range [ 853.273393][T21215] netlink: zone id is out of range [ 853.324155][T21215] netlink: zone id is out of range [ 853.325936][T21215] netlink: zone id is out of range [ 853.328109][T21215] netlink: zone id is out of range [ 853.329690][T21215] netlink: zone id is out of range [ 853.331488][T21215] netlink: zone id is out of range [ 853.333225][T21215] netlink: zone id is out of range [ 853.334838][T21215] netlink: zone id is out of range [ 853.341088][ T35] rc_core: IR keymap rc-hauppauge not found [ 853.342921][ T35] Registered IR keymap rc-empty [ 853.345059][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 853.349040][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input103 [ 853.487587][ T5985] usb 7-1: USB disconnect, device number 65 [ 855.202616][T21246] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4210'. [ 855.951027][ T57] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 855.973135][ T9035] vhci_hcd: vhci_device speed not set [ 856.120469][ T57] usb 13-1: Using ep0 maxpacket: 8 [ 856.123919][ T57] usb 13-1: config 0 has no interfaces? [ 856.126194][ T57] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 856.129610][ T57] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.134617][ T57] usb 13-1: config 0 descriptor?? [ 856.396717][ T6006] usb 13-1: USB disconnect, device number 6 [ 858.370617][T21207] usbtmc 10-1:16.0: usb_control_msg returned -110 [ 858.387123][ T35] usb 10-1: USB disconnect, device number 27 [ 858.952411][T21293] [U]  [ 859.569848][T21315] net_ratelimit: 2096 callbacks suppressed [ 859.569862][T21315] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 859.649739][T21326] gfs2: not a GFS2 filesystem [ 859.730593][T21329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4235'. [ 859.788227][T21329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4235'. [ 860.122234][T21351] FAULT_INJECTION: forcing a failure. [ 860.122234][T21351] name failslab, interval 1, probability 0, space 0, times 0 [ 860.125888][T21351] CPU: 3 UID: 0 PID: 21351 Comm: syz.5.4245 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 860.125902][T21351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 860.125907][T21351] Call Trace: [ 860.125911][T21351] [ 860.125915][T21351] dump_stack_lvl+0x16c/0x1f0 [ 860.125933][T21351] should_fail_ex+0x50a/0x650 [ 860.125948][T21351] should_failslab+0xc2/0x120 [ 860.125960][T21351] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 860.125972][T21351] ? trace_lock_acquire+0x14e/0x1f0 [ 860.125982][T21351] ? skb_clone+0x190/0x3f0 [ 860.125994][T21351] skb_clone+0x190/0x3f0 [ 860.126008][T21351] dev_queue_xmit_nit+0x38f/0xbc0 [ 860.126023][T21351] dev_hard_start_xmit+0x283/0x7b0 [ 860.126038][T21351] __dev_queue_xmit+0x7f0/0x43e0 [ 860.126057][T21351] ? __pfx___dev_queue_xmit+0x10/0x10 [ 860.126079][T21351] ? rcu_is_watching+0x12/0xc0 [ 860.126094][T21351] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 860.126109][T21351] ? __copy_skb_header+0x2e8/0x5b0 [ 860.126123][T21351] ? __skb_clone+0x570/0x760 [ 860.126141][T21351] netlink_deliver_tap+0xa61/0xca0 [ 860.126157][T21351] netlink_unicast+0x5e1/0x7f0 [ 860.126172][T21351] ? __pfx_netlink_unicast+0x10/0x10 [ 860.126186][T21351] ? __phys_addr_symbol+0x30/0x80 [ 860.126201][T21351] ? __check_object_size+0x488/0x710 [ 860.126215][T21351] netlink_sendmsg+0x8b8/0xd70 [ 860.126230][T21351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.126248][T21351] ____sys_sendmsg+0x9ae/0xb40 [ 860.126262][T21351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 860.126274][T21351] ? get_compat_msghdr+0x11b/0x170 [ 860.126292][T21351] ___sys_sendmsg+0x135/0x1e0 [ 860.126303][T21351] ? __pfx____sys_sendmsg+0x10/0x10 [ 860.126318][T21351] ? __pfx_lock_release+0x10/0x10 [ 860.126329][T21351] ? trace_lock_acquire+0x14e/0x1f0 [ 860.126343][T21351] ? __fget_files+0x206/0x3a0 [ 860.126356][T21351] __sys_sendmsg+0x16e/0x220 [ 860.126367][T21351] ? __pfx___sys_sendmsg+0x10/0x10 [ 860.126385][T21351] __do_fast_syscall_32+0x73/0x120 [ 860.126395][T21351] do_fast_syscall_32+0x32/0x80 [ 860.126404][T21351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 860.126419][T21351] RIP: 0023:0xf746e579 [ 860.126427][T21351] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 860.126436][T21351] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 860.126445][T21351] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001000 [ 860.126451][T21351] RDX: 0000000020000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 860.126457][T21351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 860.126462][T21351] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 860.126467][T21351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 860.126479][T21351] [ 860.265076][T21346] ceph: No mds server is up or the cluster is laggy [ 861.646562][T21405] netlink: 'syz.6.4253': attribute type 2 has an invalid length. [ 861.655152][T21405] Tq!7: entered promiscuous mode [ 862.290866][ T5946] Bluetooth: hci1: command 0x0405 tx timeout [ 863.490534][ T6006] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 863.498025][T21443] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4265'. [ 863.797992][T21450] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 864.004624][ T6006] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 864.011996][ T6006] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 864.018481][ T6006] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 864.023323][ T6006] usb 13-1: Manufacturer: syz [ 864.028755][ T6006] usb 13-1: config 0 descriptor?? [ 864.081035][ T6006] rc_core: IR keymap rc-hauppauge not found [ 864.082852][ T6006] Registered IR keymap rc-empty [ 864.086987][ T6006] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 864.091447][ T6006] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input104 [ 864.235354][ T57] usb 13-1: USB disconnect, device number 7 [ 864.397049][T21445] [U]  [ 864.520570][ T5985] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 864.672847][ T5985] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 864.676057][ T5985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.681307][ T5985] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 864.684742][ T5985] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 864.687746][ T5985] usb 7-1: Manufacturer: syz [ 864.692590][ T5985] usb 7-1: config 0 descriptor?? [ 864.741558][ T5985] rc_core: IR keymap rc-hauppauge not found [ 864.745646][ T5985] Registered IR keymap rc-empty [ 864.748319][ T5985] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 864.752440][ T5985] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input105 [ 864.821489][T21477] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 864.923953][T21482] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4276'. [ 864.964509][ T57] usb 7-1: USB disconnect, device number 66 [ 865.780611][ T35] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 865.931750][ T35] usb 7-1: config 0 has no interfaces? [ 865.934378][ T35] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 865.937109][ T35] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 865.939387][ T35] usb 7-1: Manufacturer: syz [ 865.942366][ T35] usb 7-1: config 0 descriptor?? [ 866.028040][T21510] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4285'. [ 866.039187][T21498] syz.8.4282: attempt to access beyond end of device [ 866.039187][T21498] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 866.073922][T21507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4286'. [ 866.149626][ T9035] usb 7-1: USB disconnect, device number 67 [ 866.232358][T21513] netlink: 'syz.6.4287': attribute type 1 has an invalid length. [ 866.395722][T21527] xt_TPROXY: Can be used only with -p tcp or -p udp [ 866.410425][ T35] usb 13-1: new low-speed USB device number 8 using dummy_hcd [ 866.562198][ T35] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 866.565318][ T35] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 866.569545][ T35] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 866.574224][ T35] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 866.578577][ T35] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 866.583934][ T35] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 866.587012][ T35] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 866.591227][ T35] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 866.595895][ T35] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 866.599171][ T35] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 866.603306][ T35] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 866.605511][ T35] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 866.608598][ T35] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 866.612044][ T35] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 866.615276][ T35] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 866.620578][ T35] usb 13-1: string descriptor 0 read error: -22 [ 866.622441][ T35] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 866.625016][ T35] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.631862][ T35] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 866.839024][T21518] netlink: 'syz.8.4289': attribute type 3 has an invalid length. [ 866.844387][T21518] netlink: 'syz.8.4289': attribute type 2 has an invalid length. [ 866.846810][T21518] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4289'. [ 866.875864][T21518] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 866.946541][T21539] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4296'. [ 866.949172][T21539] netlink: 8040 bytes leftover after parsing attributes in process `syz.5.4296'. [ 867.023878][ T9999] usb 13-1: USB disconnect, device number 8 [ 867.236111][T21544] syz.5.4297: attempt to access beyond end of device [ 867.236111][T21544] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 867.350816][T21558] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4298'. [ 867.353602][T21558] netlink: 'syz.6.4298': attribute type 7 has an invalid length. [ 867.355877][T21558] netlink: 'syz.6.4298': attribute type 8 has an invalid length. [ 867.358152][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4298'. [ 867.361768][T21558] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4298'. [ 867.364731][T21558] netlink: 'syz.6.4298': attribute type 7 has an invalid length. [ 867.367003][T21558] netlink: 'syz.6.4298': attribute type 8 has an invalid length. [ 867.369355][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4298'. [ 867.687926][T21564] pimreg3: entered allmulticast mode [ 867.758400][T21573] af_packet: tpacket_rcv: packet too big, clamped from 4018 to 3952. macoff=96 [ 867.900456][ T9035] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 868.053937][ T9035] usb 7-1: config 0 has no interfaces? [ 868.056401][ T9035] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 868.059030][ T9035] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 868.064184][ T9035] usb 7-1: Manufacturer: syz [ 868.066624][ T9035] usb 7-1: config 0 descriptor?? [ 868.227372][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 868.227383][ T39] audit: type=1326 audit(1738654070.664:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21579 comm="syz.8.4305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 868.250541][ T39] audit: type=1326 audit(1738654070.664:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21579 comm="syz.8.4305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 868.257513][ T39] audit: type=1326 audit(1738654070.664:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21579 comm="syz.8.4305" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 868.266675][ T39] audit: type=1326 audit(1738654070.664:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21579 comm="syz.8.4305" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf73ae5a7 code=0x7ffc0000 [ 868.275401][ T9035] usb 7-1: USB disconnect, device number 68 [ 868.277503][ T39] audit: type=1326 audit(1738654070.664:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21579 comm="syz.8.4305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 868.287020][ T39] audit: type=1326 audit(1738654070.664:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21579 comm="syz.8.4305" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 868.293259][ T39] audit: type=1326 audit(1738654070.664:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21579 comm="syz.8.4305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 868.299485][ T39] audit: type=1326 audit(1738654070.664:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21579 comm="syz.8.4305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 868.308050][ T39] audit: type=1326 audit(1738654070.664:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21579 comm="syz.8.4305" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 868.315228][ T39] audit: type=1326 audit(1738654070.664:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21579 comm="syz.8.4305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 869.198520][T21601] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 869.529245][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.771887][T21610] netlink: 'syz.5.4313': attribute type 72 has an invalid length. [ 869.813942][T21615] input: syz0 as /devices/virtual/input/input106 [ 869.847120][T21615] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 870.100892][T21639] netlink: 'syz.5.4323': attribute type 72 has an invalid length. [ 870.103645][T21639] __nla_validate_parse: 2 callbacks suppressed [ 870.103652][T21639] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4323'. [ 870.264041][T21649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4325'. [ 870.352960][T21652] input: syz0 as /devices/virtual/input/input107 [ 871.812665][ T5947] Bluetooth: hci1: unexpected event for opcode 0x2043 [ 873.133026][T21679] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 873.186187][T21687] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4337'. [ 873.569622][T21696] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 874.591417][T21713] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4346'. [ 874.920420][ T9999] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 875.081249][ T9999] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 875.086904][ T9999] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.094363][ T9999] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 875.097048][ T9999] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 875.099354][ T9999] usb 10-1: Manufacturer: syz [ 875.101971][ T9999] usb 10-1: config 0 descriptor?? [ 875.105228][ T9999] igorplugusb 10-1:0.0: incorrect number of endpoints [ 875.313520][ T5985] usb 10-1: USB disconnect, device number 28 [ 875.883113][ T5947] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 875.885882][ T5947] Bluetooth: hci1: Injecting HCI hardware error event [ 875.891001][ T5946] Bluetooth: hci1: hardware error 0x00 [ 875.904809][T21739] mkiss: ax0: crc mode is auto. [ 876.734416][T21759] dlm: non-version read from control device 34 [ 877.559571][T21776] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4364'. [ 877.764528][T21781] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 877.807141][T21784] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4367'. [ 877.920419][T21784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4367'. [ 877.960473][ T5946] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 878.269899][T21797] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.279183][T21797] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.491920][T21777] [U]  [ 878.573213][T21809] overlayfs: missing 'workdir' [ 878.800480][ T30] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 878.951607][ T30] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 878.954199][ T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.957452][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 878.963295][ T30] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 878.966063][ T30] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 878.968439][ T30] usb 7-1: Manufacturer: syz [ 878.973648][ T30] usb 7-1: config 0 descriptor?? [ 878.976596][ T30] igorplugusb 7-1:0.0: incorrect number of endpoints [ 879.177753][ T30] usb 7-1: USB disconnect, device number 69 [ 879.269484][T21823] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4378'. [ 879.376043][T21826] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 879.655357][T21833] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4382'. [ 879.968587][T21842] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4385'. [ 879.972851][T21816] [U]  [ 880.191156][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 880.198800][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 880.203728][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 880.210307][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 880.215685][ T5947] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 880.218015][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 880.246193][T21462] bridge0: port 3(syz_tun) entered disabled state [ 880.255516][T21462] syz_tun (unregistering): left allmulticast mode [ 880.257741][T21462] syz_tun (unregistering): left promiscuous mode [ 880.259646][T21462] bridge0: port 3(syz_tun) entered disabled state [ 880.345335][T21845] chnl_net:caif_netlink_parms(): no params data found [ 880.486665][T21845] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.488924][T21845] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.491331][T21845] bridge_slave_0: entered allmulticast mode [ 880.494318][T21845] bridge_slave_0: entered promiscuous mode [ 880.498018][T21845] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.500129][T21845] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.502886][T21845] bridge_slave_1: entered allmulticast mode [ 880.505033][T21845] bridge_slave_1: entered promiscuous mode [ 880.643583][ T39] kauditd_printk_skb: 195 callbacks suppressed [ 880.643593][ T39] audit: type=1326 audit(1738654083.084:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21863 comm="syz.2.4390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7fc00000 [ 880.656763][ T39] audit: type=1326 audit(1738654083.094:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21863 comm="syz.2.4390" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x0 [ 880.707795][ T39] audit: type=1326 audit(1738654083.144:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21863 comm="syz.2.4390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7fc00000 [ 880.845587][T15836] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.904590][T21845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.909187][T21845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.959092][T15836] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.993318][T21845] team0: Port device team_slave_0 added [ 881.000668][T21845] team0: Port device team_slave_1 added [ 881.037370][T15836] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.060713][T21845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.062882][T21845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.070180][T21845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.078271][T21845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.080402][T21845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.087712][T21845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.118550][T15836] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.169203][T21845] hsr_slave_0: entered promiscuous mode [ 881.172152][T21845] hsr_slave_1: entered promiscuous mode [ 881.174877][T21845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 881.177889][T21845] Cannot create hsr debugfs directory [ 881.400127][T15836] bridge_slave_1: left allmulticast mode [ 881.402639][T15836] bridge_slave_1: left promiscuous mode [ 881.404437][T15836] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.412324][T15836] bridge_slave_0: left allmulticast mode [ 881.414029][T15836] bridge_slave_0: left promiscuous mode [ 881.415750][T15836] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.591349][T15836] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 881.619958][T21888] syz.8.4397: attempt to access beyond end of device [ 881.619958][T21888] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 882.281740][ T5947] Bluetooth: hci2: command tx timeout [ 882.417402][T15836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.424609][T15836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.429814][T15836] bond0 (unregistering): Released all slaves [ 882.508798][T15836] Tq!7: left promiscuous mode [ 882.615499][T15836] tipc: Left network mode [ 882.756648][T21915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4405'. [ 882.893010][T15836] hsr_slave_0: left promiscuous mode [ 882.894893][T15836] hsr_slave_1: left promiscuous mode [ 882.896634][T15836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.898774][T15836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.903089][T15836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.905262][T15836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.941840][T15836] veth1_macvtap: left promiscuous mode [ 882.943600][T15836] veth0_macvtap: left promiscuous mode [ 882.945778][T15836] veth1_vlan: left promiscuous mode [ 882.947924][T15836] veth0_vlan: left promiscuous mode [ 883.120407][T16064] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 883.282609][T16064] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 883.285294][T16064] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 883.288311][T16064] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 883.291337][T16064] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 883.294573][T16064] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 883.299055][T16064] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 883.302126][T16064] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 883.304599][T16064] usb 7-1: Product: syz [ 883.305898][T16064] usb 7-1: Manufacturer: syz [ 883.310130][T16064] cdc_wdm 7-1:1.0: skipping garbage [ 883.312359][T16064] cdc_wdm 7-1:1.0: skipping garbage [ 883.314640][T16064] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 883.316474][T16064] cdc_wdm 7-1:1.0: Unknown control protocol [ 883.534382][T21936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.569322][ C2] wdm_int_callback: 2 callbacks suppressed [ 883.569337][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 883.569438][T19251] usb 7-1: USB disconnect, device number 70 [ 883.571072][ C2] wdm_int_callback: 2 callbacks suppressed [ 883.571082][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 883.571090][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 883.813796][T15836] team0 (unregistering): Port device team_slave_1 removed [ 883.906284][T15836] team0 (unregistering): Port device team_slave_0 removed [ 884.365536][ T5946] Bluetooth: hci2: command tx timeout [ 884.655106][T21845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 884.659672][T21845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 884.665386][T21845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 884.669920][T21845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 884.708518][T21952] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4414'. [ 884.742172][T21845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.758688][T21845] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.763329][T15807] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.765466][T15807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.773748][T15801] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.776093][T15801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.900099][T21845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.972479][T21961] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 884.996379][T21845] veth0_vlan: entered promiscuous mode [ 885.001287][T21845] veth1_vlan: entered promiscuous mode [ 885.013576][T21845] veth0_macvtap: entered promiscuous mode [ 885.016844][T21845] veth1_macvtap: entered promiscuous mode [ 885.023128][T21845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.026567][T21845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.029380][T21845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.032496][T21845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.035801][T21845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.040604][T21845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.044297][T21845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.050960][T21845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.053849][T21845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.056614][T21845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.059614][T21845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.062607][T21845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.065565][T21845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.068991][T21845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.074648][T21845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.077201][T21845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.079701][T21845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.082701][T21845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.130219][T15801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.133598][T15801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.147688][T15807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.150015][T15807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.490520][T16064] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 885.566892][T21994] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4424'. [ 885.654582][T16064] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 885.658088][T16064] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.664064][T16064] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 885.667555][T16064] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 885.671356][T16064] usb 10-1: Manufacturer: syz [ 885.681123][T16064] usb 10-1: config 0 descriptor?? [ 885.751302][T16064] rc_core: IR keymap rc-hauppauge not found [ 885.753680][T16064] Registered IR keymap rc-empty [ 885.760615][T16064] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 885.765527][T16064] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input108 [ 885.899359][ T6006] usb 10-1: USB disconnect, device number 29 [ 886.440462][ T5946] Bluetooth: hci2: command 0x040f tx timeout [ 886.951097][T22038] nfs: Bad value for 'source' [ 887.027900][T22034] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 887.031213][T22034] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 887.040816][T22034] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 887.048721][T22034] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 887.243833][T22049] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 887.340466][ T9999] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 887.497015][ T9999] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 887.508044][ T9999] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.512979][ T9999] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 887.515617][ T9999] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 887.532386][ T9999] usb 10-1: Manufacturer: syz [ 887.534740][ T9999] usb 10-1: config 0 descriptor?? [ 887.611908][ T9999] rc_core: IR keymap rc-hauppauge not found [ 887.616218][ T9999] Registered IR keymap rc-empty [ 887.618443][ T9999] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 887.626538][ T9999] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input109 [ 887.797240][ T9999] usb 10-1: USB disconnect, device number 30 [ 888.430664][T22075] netlink: 'syz.5.4453': attribute type 6 has an invalid length. [ 888.800654][T22093] syz.5.4455: attempt to access beyond end of device [ 888.800654][T22093] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 888.951110][T22103] netlink: 'syz.6.4461': attribute type 2 has an invalid length. [ 889.000458][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout [ 889.090407][ T5947] Bluetooth: hci2: command 0x040f tx timeout [ 889.766489][T22115] random: crng reseeded on system resumption [ 889.788103][T22118] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 890.641744][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4471'. [ 890.804230][T22127] [U]  [ 891.170757][ T5947] Bluetooth: hci2: command 0x040f tx timeout [ 891.474562][T22136] bridge_slave_1: left promiscuous mode [ 891.476357][T22136] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.481226][T22136] bridge_slave_0: left allmulticast mode [ 891.482906][T22136] bridge_slave_0: left promiscuous mode [ 891.484599][T22136] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.866472][T22156] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4477'. [ 893.240467][ T5947] Bluetooth: hci2: command 0x040f tx timeout [ 893.403522][T22186] FAULT_INJECTION: forcing a failure. [ 893.403522][T22186] name failslab, interval 1, probability 0, space 0, times 0 [ 893.407643][T22186] CPU: 3 UID: 0 PID: 22186 Comm: syz.5.4486 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 893.407656][T22186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 893.407663][T22186] Call Trace: [ 893.407666][T22186] [ 893.407670][T22186] dump_stack_lvl+0x16c/0x1f0 [ 893.407708][T22186] should_fail_ex+0x50a/0x650 [ 893.407732][T22186] ? fs_reclaim_acquire+0xae/0x150 [ 893.407766][T22186] should_failslab+0xc2/0x120 [ 893.407779][T22186] __kmalloc_noprof+0xce/0x4f0 [ 893.407790][T22186] ? nla_strdup+0xc6/0x150 [ 893.407804][T22186] nla_strdup+0xc6/0x150 [ 893.407817][T22186] nf_tables_newtable+0xe08/0x1b40 [ 893.407834][T22186] ? net_generic+0xea/0x2a0 [ 893.407848][T22186] ? __pfx_nf_tables_newtable+0x10/0x10 [ 893.407865][T22186] ? __nla_parse+0x40/0x60 [ 893.407880][T22186] nfnetlink_rcv_batch+0x1a2a/0x24e0 [ 893.407902][T22186] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 893.407916][T22186] ? __pfx_lock_release+0x10/0x10 [ 893.407931][T22186] ? __local_bh_enable_ip+0xa4/0x120 [ 893.407944][T22186] ? lockdep_hardirqs_on+0x7c/0x110 [ 893.407965][T22186] ? __pfx___dev_queue_xmit+0x10/0x10 [ 893.407991][T22186] ? __nla_parse+0x40/0x60 [ 893.408006][T22186] nfnetlink_rcv+0x3c3/0x430 [ 893.408020][T22186] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 893.408037][T22186] netlink_unicast+0x53c/0x7f0 [ 893.408052][T22186] ? __pfx_netlink_unicast+0x10/0x10 [ 893.408066][T22186] ? __phys_addr_symbol+0x30/0x80 [ 893.408081][T22186] ? __check_object_size+0x488/0x710 [ 893.408095][T22186] netlink_sendmsg+0x8b8/0xd70 [ 893.408111][T22186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.408129][T22186] ____sys_sendmsg+0x9ae/0xb40 [ 893.408142][T22186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.408155][T22186] ? get_compat_msghdr+0x11b/0x170 [ 893.408173][T22186] ___sys_sendmsg+0x135/0x1e0 [ 893.408183][T22186] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.408198][T22186] ? __pfx_lock_release+0x10/0x10 [ 893.408209][T22186] ? trace_lock_acquire+0x14e/0x1f0 [ 893.408222][T22186] ? __fget_files+0x206/0x3a0 [ 893.408236][T22186] __sys_sendmsg+0x16e/0x220 [ 893.408246][T22186] ? __pfx___sys_sendmsg+0x10/0x10 [ 893.408264][T22186] __do_fast_syscall_32+0x73/0x120 [ 893.408274][T22186] do_fast_syscall_32+0x32/0x80 [ 893.408283][T22186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 893.408299][T22186] RIP: 0023:0xf7f24579 [ 893.408307][T22186] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 893.408317][T22186] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 893.408326][T22186] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 893.408332][T22186] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 893.408337][T22186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 893.408342][T22186] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 893.408347][T22186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 893.408359][T22186] [ 893.540172][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.548436][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.551523][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.554468][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.557406][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.560360][T22190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4488'. [ 893.560845][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.565924][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.568889][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.572193][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.575222][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.578115][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.581116][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.583985][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.586854][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.589617][ T9035] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 893.594210][ T9035] hid-generic 00A0:0006:0003.0009: hidraw1: HID v0.05 Device [syz1] on syz0 [ 893.739268][T22195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4489'. [ 893.810653][ T6006] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 893.960452][ T6006] usb 10-1: Using ep0 maxpacket: 16 [ 893.964887][ T6006] usb 10-1: config 0 has no interfaces? [ 893.970257][ T6006] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 893.973883][ T6006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.976502][ T6006] usb 10-1: Product: syz [ 893.977892][ T6006] usb 10-1: Manufacturer: syz [ 893.979537][ T6006] usb 10-1: SerialNumber: syz [ 893.989652][ T6006] usb 10-1: config 0 descriptor?? [ 894.202349][T22188] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4487'. [ 894.225167][ T9999] usb 10-1: USB disconnect, device number 31 [ 894.720082][T22198] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4490'. [ 895.080702][T16064] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 895.231750][T16064] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 895.239132][T16064] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 895.242424][T16064] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 895.245685][T16064] usb 7-1: Manufacturer: syz [ 895.249131][T16064] usb 7-1: config 0 descriptor?? [ 895.300675][T16064] rc_core: IR keymap rc-hauppauge not found [ 895.302929][T16064] Registered IR keymap rc-empty [ 895.305843][T16064] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 895.309848][T16064] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input110 [ 895.320499][ T5947] Bluetooth: hci2: command 0x040f tx timeout [ 895.461585][T16064] usb 7-1: USB disconnect, device number 71 [ 896.020820][T22216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4495'. [ 896.058467][T22218] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 896.402034][ T30] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 896.506230][T22226] syz.8.4499: attempt to access beyond end of device [ 896.506230][T22226] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 896.592302][ T30] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 896.595799][ T30] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 896.598784][ T30] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 896.601717][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.608114][T22220] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 896.616654][ T30] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 896.864816][T22220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.867351][T22220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.521479][T22242] syz.8.4502: attempt to access beyond end of device [ 897.521479][T22242] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 897.750533][ T30] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 897.901723][ T30] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 897.904304][ T30] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 897.908162][ T30] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 897.910993][ T30] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 897.913397][ T30] usb 10-1: Manufacturer: syz [ 897.915849][ T30] usb 10-1: config 0 descriptor?? [ 897.919516][ T30] igorplugusb 10-1:0.0: incorrect number of endpoints [ 898.126387][T19251] usb 10-1: USB disconnect, device number 32 [ 898.141886][T22244] bridge_slave_0: left allmulticast mode [ 898.143570][T22244] bridge_slave_0: left promiscuous mode [ 898.145347][T22244] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.148838][T22244] bridge_slave_1: left allmulticast mode [ 898.150748][T22244] bridge_slave_1: left promiscuous mode [ 898.152442][T22244] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.156380][T22244] bond0: (slave bond_slave_0): Releasing backup interface [ 898.161945][T22244] bond0: (slave bond_slave_1): Releasing backup interface [ 898.175538][T22244] team0: Port device team_slave_0 removed [ 898.179813][T22244] team0: Port device team_slave_1 removed [ 898.182599][T22244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.184764][T22244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.187534][T22244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.190364][T22244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.298131][T22244] pim6reg: entered allmulticast mode [ 899.050563][T16064] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 899.158168][ T35] usb 7-1: USB disconnect, device number 72 [ 899.200452][T16064] usb 10-1: Using ep0 maxpacket: 8 [ 899.204560][T16064] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 899.207674][T16064] usb 10-1: config 0 has no interface number 0 [ 899.209577][T16064] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 899.215023][T16064] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 899.218231][T16064] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 112, changing to 10 [ 899.221660][T16064] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 899.225307][T16064] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 899.227908][T16064] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.232168][T16064] usb 10-1: config 0 descriptor?? [ 899.237716][T16064] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 900.495464][T22280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4516'. [ 901.668287][T16064] usb 10-1: USB disconnect, device number 33 [ 901.672179][T16064] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 901.764124][T22300] syz.2.4520: attempt to access beyond end of device [ 901.764124][T22300] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 902.688624][T22315] xt_NFQUEUE: number of total queues is 0 [ 903.238591][T22323] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4529'. [ 903.922913][T22351] syz_tun: entered allmulticast mode [ 904.013423][T22354] tmpfs: Bad value for 'mpol' [ 904.047430][T22355] syz.2.4536: attempt to access beyond end of device [ 904.047430][T22355] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 904.476315][T22341] syz_tun: left allmulticast mode [ 904.804067][T22369] FAULT_INJECTION: forcing a failure. [ 904.804067][T22369] name failslab, interval 1, probability 0, space 0, times 0 [ 904.809822][T22369] CPU: 3 UID: 0 PID: 22369 Comm: syz.2.4543 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 904.809837][T22369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 904.809843][T22369] Call Trace: [ 904.809847][T22369] [ 904.809851][T22369] dump_stack_lvl+0x16c/0x1f0 [ 904.809869][T22369] should_fail_ex+0x50a/0x650 [ 904.809882][T22369] ? fs_reclaim_acquire+0xae/0x150 [ 904.809899][T22369] should_failslab+0xc2/0x120 [ 904.809911][T22369] __kmalloc_noprof+0xce/0x4f0 [ 904.809922][T22369] ? lsm_blob_alloc+0x68/0x90 [ 904.809938][T22369] lsm_blob_alloc+0x68/0x90 [ 904.809951][T22369] security_sb_alloc+0x28/0x230 [ 904.809967][T22369] alloc_super+0x245/0xbd0 [ 904.809976][T22369] ? lock_acquire+0x2f/0xb0 [ 904.809990][T22369] sget_fc+0x116/0xb90 [ 904.810000][T22369] ? __pfx_set_anon_super_fc+0x10/0x10 [ 904.810015][T22369] ? __pfx_mqueue_fill_super+0x10/0x10 [ 904.810028][T22369] get_tree_nodev+0x28/0x190 [ 904.810038][T22369] mqueue_get_tree+0xf1/0x130 [ 904.810051][T22369] vfs_get_tree+0x8b/0x340 [ 904.810065][T22369] fc_mount+0x16/0xc0 [ 904.810078][T22369] mq_init_ns+0x426/0x620 [ 904.810089][T22369] copy_ipcs+0x383/0x610 [ 904.810097][T22369] ? copy_utsname+0xab/0x480 [ 904.810110][T22369] create_new_namespaces+0x20a/0xad0 [ 904.810124][T22369] ? security_capable+0x7e/0x260 [ 904.810140][T22369] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 904.810154][T22369] ksys_unshare+0x45d/0xa40 [ 904.810169][T22369] ? __pfx_ksys_unshare+0x10/0x10 [ 904.810183][T22369] ? ksys_write+0x1ba/0x250 [ 904.810204][T22369] __ia32_sys_unshare+0x30/0x40 [ 904.810226][T22369] __do_fast_syscall_32+0x73/0x120 [ 904.810244][T22369] do_fast_syscall_32+0x32/0x80 [ 904.810258][T22369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 904.810283][T22369] RIP: 0023:0xf73ce579 [ 904.810296][T22369] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 904.810326][T22369] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000136 [ 904.810342][T22369] RAX: ffffffffffffffda RBX: 000000000e000480 RCX: 0000000000000000 [ 904.810352][T22369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 904.810361][T22369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 904.810369][T22369] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 904.810378][T22369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 904.810401][T22369] [ 905.094641][T22359] [U]  [ 905.172845][T22378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4546'. [ 905.336877][T22380] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 905.340143][T22380] overlayfs: missing 'lowerdir' [ 905.660664][T16064] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 905.816602][T16064] usb 13-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 905.819388][T16064] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.823020][T16064] usb 13-1: Product: syz [ 905.824401][T16064] usb 13-1: Manufacturer: syz [ 905.827411][T16064] usb 13-1: SerialNumber: syz [ 905.833894][T16064] usb 13-1: config 0 descriptor?? [ 905.916181][T22397] mac80211_hwsim hwsim20 : renamed from wlan1 [ 906.039338][T16064] usb 13-1: USB disconnect, device number 9 [ 906.151607][T22399] mac80211_hwsim hwsim30 : renamed from wlan1 (while UP) [ 906.476859][T22402] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4555'. [ 906.597222][T22409] netlink: 424 bytes leftover after parsing attributes in process `syz.8.4558'. [ 906.641934][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 906.998079][T22446] dvmrp8: entered allmulticast mode [ 907.051675][T22445] dvmrp8: left allmulticast mode [ 907.725566][ T9035] libceph: connect (1)[c::]:6789 error -101 [ 907.727923][ T9035] libceph: mon0 (1)[c::]:6789 connect error [ 907.833779][T22479] netlink: 'syz.6.4580': attribute type 9 has an invalid length. [ 907.836094][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4580'. [ 907.993417][ T9035] libceph: connect (1)[c::]:6789 error -101 [ 907.995959][ T9035] libceph: mon0 (1)[c::]:6789 connect error [ 908.140263][T22484] FAULT_INJECTION: forcing a failure. [ 908.140263][T22484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.144014][T22484] CPU: 0 UID: 0 PID: 22484 Comm: syz.5.4586 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 908.144027][T22484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 908.144033][T22484] Call Trace: [ 908.144036][T22484] [ 908.144040][T22484] dump_stack_lvl+0x16c/0x1f0 [ 908.144060][T22484] should_fail_ex+0x50a/0x650 [ 908.144074][T22484] _copy_from_user+0x2e/0xd0 [ 908.144088][T22484] cmsghdr_from_user_compat_to_kern+0x4f0/0x7c0 [ 908.144105][T22484] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 908.144122][T22484] ____sys_sendmsg+0x43d/0xb40 [ 908.144136][T22484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 908.144149][T22484] ? get_compat_msghdr+0x11b/0x170 [ 908.144166][T22484] ___sys_sendmsg+0x135/0x1e0 [ 908.144177][T22484] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.144192][T22484] ? __pfx_lock_release+0x10/0x10 [ 908.144203][T22484] ? trace_lock_acquire+0x14e/0x1f0 [ 908.144216][T22484] ? __fget_files+0x206/0x3a0 [ 908.144231][T22484] __sys_sendmsg+0x16e/0x220 [ 908.144241][T22484] ? __pfx___sys_sendmsg+0x10/0x10 [ 908.144258][T22484] __do_fast_syscall_32+0x73/0x120 [ 908.144268][T22484] do_fast_syscall_32+0x32/0x80 [ 908.144277][T22484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 908.144293][T22484] RIP: 0023:0xf7f24579 [ 908.144301][T22484] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 908.144310][T22484] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 908.144319][T22484] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000080 [ 908.144325][T22484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 908.144330][T22484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 908.144335][T22484] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 908.144340][T22484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 908.144351][T22484] [ 908.378471][T22491] Cannot find add_set index 0 as target [ 908.501338][ T9035] libceph: connect (1)[c::]:6789 error -101 [ 908.503805][ T9035] libceph: mon0 (1)[c::]:6789 connect error [ 908.556728][T22467] ceph: No mds server is up or the cluster is laggy [ 909.131526][T22518] overlayfs: failed to resolve './file1': -2 [ 909.153415][T22489] [U]  [ 909.406385][T22534] syz.8.4601: attempt to access beyond end of device [ 909.406385][T22534] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 910.013748][T22545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4606'. [ 910.017485][T22545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4606'. [ 910.087067][T22549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4608'. [ 910.091567][T22549] FAULT_INJECTION: forcing a failure. [ 910.091567][T22549] name failslab, interval 1, probability 0, space 0, times 0 [ 910.095293][T22549] CPU: 1 UID: 0 PID: 22549 Comm: syz.2.4608 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 910.095306][T22549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 910.095312][T22549] Call Trace: [ 910.095316][T22549] [ 910.095319][T22549] dump_stack_lvl+0x16c/0x1f0 [ 910.095338][T22549] should_fail_ex+0x50a/0x650 [ 910.095350][T22549] ? fs_reclaim_acquire+0xae/0x150 [ 910.095367][T22549] should_failslab+0xc2/0x120 [ 910.095379][T22549] __kmalloc_noprof+0xce/0x4f0 [ 910.095390][T22549] ? is_bpf_text_address+0x8a/0x1a0 [ 910.095402][T22549] ? tomoyo_encode2+0x100/0x3e0 [ 910.095415][T22549] tomoyo_encode2+0x100/0x3e0 [ 910.095426][T22549] ? bpf_ksym_find+0x124/0x1c0 [ 910.095441][T22549] tomoyo_encode+0x2c/0x40 [ 910.095452][T22549] tomoyo_mount_acl+0x145/0x880 [ 910.095462][T22549] ? hlock_class+0x4e/0x130 [ 910.095477][T22549] ? __lock_acquire+0x15a9/0x3c40 [ 910.095490][T22549] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 910.095503][T22549] ? __pfx___lock_acquire+0x10/0x10 [ 910.095514][T22549] ? stack_trace_save+0x95/0xd0 [ 910.095524][T22549] ? __pfx_lock_release+0x10/0x10 [ 910.095541][T22549] ? trace_lock_acquire+0x14e/0x1f0 [ 910.095550][T22549] ? tomoyo_mount_permission+0x149/0x420 [ 910.095561][T22549] ? lock_acquire+0x2f/0xb0 [ 910.095571][T22549] ? tomoyo_mount_permission+0x149/0x420 [ 910.095607][T22549] tomoyo_mount_permission+0x16e/0x420 [ 910.095624][T22549] ? tomoyo_mount_permission+0x149/0x420 [ 910.095637][T22549] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 910.095653][T22549] ? get_current_fs_domain+0x184/0x1f0 [ 910.095670][T22549] security_sb_mount+0x9b/0x260 [ 910.095686][T22549] path_mount+0x129/0x1f00 [ 910.095700][T22549] ? kmem_cache_free+0x2e2/0x4d0 [ 910.095710][T22549] ? __pfx_path_mount+0x10/0x10 [ 910.095723][T22549] ? putname+0x13c/0x180 [ 910.095737][T22549] __ia32_sys_mount+0x28d/0x310 [ 910.095748][T22549] ? __pfx___ia32_sys_mount+0x10/0x10 [ 910.095764][T22549] __do_fast_syscall_32+0x73/0x120 [ 910.095775][T22549] do_fast_syscall_32+0x32/0x80 [ 910.095784][T22549] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 910.095799][T22549] RIP: 0023:0xf73ce579 [ 910.095807][T22549] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 910.095817][T22549] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 910.095826][T22549] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 0000000020000140 [ 910.095832][T22549] RDX: 00000000200003c0 RSI: 0000000000000008 RDI: 0000000000000000 [ 910.095837][T22549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 910.095842][T22549] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 910.095848][T22549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 910.095859][T22549] [ 910.185733][ C1] vkms_vblank_simulate: vblank timer overrun [ 910.396194][T22562] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 910.401159][T16064] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 910.431076][T22563] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 910.553374][T16064] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 910.557486][T16064] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 910.560848][T16064] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 910.563920][T16064] usb 13-1: Manufacturer: syz [ 910.567901][T16064] usb 13-1: config 0 descriptor?? [ 910.610471][T16064] rc_core: IR keymap rc-hauppauge not found [ 910.612503][T16064] Registered IR keymap rc-empty [ 910.615095][T16064] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 910.619331][T16064] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input111 [ 910.776568][T16064] usb 13-1: USB disconnect, device number 10 [ 911.075777][T22576] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4619'. [ 912.180449][ T35] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 912.332107][ T35] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 912.334577][ T35] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.338003][ T35] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 912.340853][ T35] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 912.348820][ T35] usb 13-1: Manufacturer: syz [ 912.351302][ T35] usb 13-1: config 0 descriptor?? [ 912.391256][ T35] rc_core: IR keymap rc-hauppauge not found [ 912.393559][ T35] Registered IR keymap rc-empty [ 912.397013][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 912.401184][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input112 [ 912.567936][ T35] usb 13-1: USB disconnect, device number 11 [ 913.304309][T22618] bridge0: entered promiscuous mode [ 913.411657][T22622] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 913.420415][T16064] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 913.589206][T22624] syz.8.4635: attempt to access beyond end of device [ 913.589206][T22624] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 913.603786][T16064] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 913.607151][T16064] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 913.609822][T16064] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 913.612885][T16064] usb 10-1: Manufacturer: syz [ 913.616761][T16064] usb 10-1: config 0 descriptor?? [ 913.660487][T16064] rc_core: IR keymap rc-hauppauge not found [ 913.662328][T16064] Registered IR keymap rc-empty [ 913.665336][T16064] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 913.669151][T16064] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input113 [ 913.833861][T16064] usb 10-1: USB disconnect, device number 34 [ 915.207831][T22640] [U]  [ 915.880053][ T9035] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 916.207991][ T9035] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 916.211203][ T9035] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.215921][ T9035] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 916.219164][ T9035] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 916.222107][ T9035] usb 7-1: Manufacturer: syz [ 916.230727][ T9035] usb 7-1: config 0 descriptor?? [ 916.270395][ T9035] rc_core: IR keymap rc-hauppauge not found [ 916.272797][ T9035] Registered IR keymap rc-empty [ 916.291695][ T9035] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 916.295869][ T9035] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input114 [ 916.329996][T22675] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4648'. [ 916.463202][ T35] usb 7-1: USB disconnect, device number 73 [ 916.625745][T22687] syz.5.4650: attempt to access beyond end of device [ 916.625745][T22687] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 917.160484][T22703] syz.8.4654: attempt to access beyond end of device [ 917.160484][T22703] nbd8: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 917.165569][T22703] EXT4-fs (nbd8): unable to read superblock [ 918.202450][T22731] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:0 [ 918.280456][ T39] audit: type=1326 audit(1738654120.644:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22728 comm="syz.2.4664" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x0 [ 919.502809][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 919.828182][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 919.840582][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 919.862305][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 919.864807][ T5946] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 919.867894][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 920.112069][T22751] chnl_net:caif_netlink_parms(): no params data found [ 920.437592][T22751] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.439751][T22751] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.442304][T22751] bridge_slave_0: entered allmulticast mode [ 920.444548][T22751] bridge_slave_0: entered promiscuous mode [ 920.447456][T22751] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.449578][T22751] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.452227][T22751] bridge_slave_1: entered allmulticast mode [ 920.454356][T22751] bridge_slave_1: entered promiscuous mode [ 920.473317][T22762] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 920.506988][T22751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.514805][T22751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.565907][T22751] team0: Port device team_slave_0 added [ 920.569728][T22751] team0: Port device team_slave_1 added [ 920.617032][T22751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.619068][T22751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.640376][T22751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.644460][T22751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.646809][T22751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.655459][T22751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.746085][T22751] hsr_slave_0: entered promiscuous mode [ 920.748170][T22751] hsr_slave_1: entered promiscuous mode [ 920.750045][T22751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 920.770982][T22751] Cannot create hsr debugfs directory [ 921.105225][T22779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4678'. [ 921.280126][T22751] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.290395][T22751] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.612724][T15519] bond0: (slave syz_tun): Releasing backup interface [ 921.795884][T22751] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.798977][T22751] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.982203][ T5946] Bluetooth: hci3: command tx timeout [ 922.006007][T22783] Cannot find add_set index 0 as target [ 922.157825][T22751] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 922.163426][T22751] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.248147][T22786] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 923.872830][T22751] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.878134][T22751] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.013575][T22751] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 924.039767][T22751] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 924.041721][ T5946] Bluetooth: hci3: command tx timeout [ 924.054234][T22751] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 924.059499][T22751] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 924.123727][T22751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.136906][T22751] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.141853][T15828] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.144363][T15828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.149259][T15818] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.151376][T15818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.168082][T22751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 924.182182][T22751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 924.307270][T22795] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 924.319540][T22789] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.352871][T22792] pim6reg: left allmulticast mode [ 924.412685][T22795] mac80211_hwsim hwsim27 : renamed from wlan1 [ 924.471756][T22789] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.554466][T22751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.603350][T22789] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.663159][T22751] veth0_vlan: entered promiscuous mode [ 924.702650][T22789] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.718030][T22751] veth1_vlan: entered promiscuous mode [ 924.752662][T22751] veth0_macvtap: entered promiscuous mode [ 924.757842][T22751] veth1_macvtap: entered promiscuous mode [ 924.768126][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.772563][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.776461][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.781096][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.785012][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.789138][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.795122][T22751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.801821][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.806073][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.809211][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.812706][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.815600][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.818675][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.823591][T22751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.829156][T22751] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.833049][T22751] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.835458][T22751] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.837932][T22751] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.912249][T15836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.914510][T15836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.942740][T15809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.945394][T15809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.973325][T22789] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.983834][T22789] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.010650][T22789] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.021683][T22789] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.143228][T22816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4670'. [ 925.151704][T22816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4670'. [ 925.170125][T22816] vlan2: entered promiscuous mode [ 925.180378][T22816] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 925.192866][T22816] mac80211_hwsim hwsim32 wlan1: left promiscuous mode [ 925.492284][T22829] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 926.120554][ T5946] Bluetooth: hci3: command tx timeout [ 926.137567][T22846] sock: sock_timestamping_bind_phc: sock not bind to device [ 927.586866][T22860] syz.2.4699: attempt to access beyond end of device [ 927.586866][T22860] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 927.954254][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4700'. [ 928.200556][ T5946] Bluetooth: hci3: command tx timeout [ 928.980496][T16064] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 929.142430][T16064] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 929.145016][T16064] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.149301][T16064] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 929.152773][T16064] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 929.156163][T16064] usb 13-1: Manufacturer: syz [ 929.160842][T16064] usb 13-1: config 0 descriptor?? [ 929.220467][T16064] rc_core: IR keymap rc-hauppauge not found [ 929.222761][T16064] Registered IR keymap rc-empty [ 929.225065][T16064] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 929.229782][T16064] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input115 [ 929.369746][T16064] usb 13-1: USB disconnect, device number 12 [ 930.930152][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.441186][T22925] FAULT_INJECTION: forcing a failure. [ 932.441186][T22925] name failslab, interval 1, probability 0, space 0, times 0 [ 932.446043][T22925] CPU: 3 UID: 0 PID: 22925 Comm: syz.2.4720 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 932.446064][T22925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 932.446070][T22925] Call Trace: [ 932.446074][T22925] [ 932.446078][T22925] dump_stack_lvl+0x16c/0x1f0 [ 932.446097][T22925] should_fail_ex+0x50a/0x650 [ 932.446110][T22925] ? fs_reclaim_acquire+0xae/0x150 [ 932.446127][T22925] should_failslab+0xc2/0x120 [ 932.446140][T22925] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 932.446154][T22925] ? kvrealloc_noprof+0x60/0x150 [ 932.446166][T22925] krealloc_noprof+0x157/0x360 [ 932.446178][T22925] kvrealloc_noprof+0x60/0x150 [ 932.446188][T22925] push_insn_history+0x2b2/0x6a0 [ 932.446207][T22925] do_check_common+0xb78/0xd1d0 [ 932.446220][T22925] ? bpf_tracing_func_proto+0x72/0xb20 [ 932.446238][T22925] ? raw_tp_prog_func_proto+0x76/0xa0 [ 932.446256][T22925] ? __pfx_mark_fastcall_pattern_for_call+0x10/0x10 [ 932.446272][T22925] ? __pfx_do_check_common+0x10/0x10 [ 932.446286][T22925] ? __pfx_verbose+0x10/0x10 [ 932.446299][T22925] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 932.446310][T22925] ? check_cfg+0x403/0x8e0 [ 932.446324][T22925] bpf_check+0x90d0/0xc9f0 [ 932.446346][T22925] ? __pfx_bpf_check+0x10/0x10 [ 932.446360][T22925] ? find_held_lock+0x2d/0x110 [ 932.446377][T22925] ? bpf_prog_load+0xd42/0x2480 [ 932.446388][T22925] ? __pfx_lock_release+0x10/0x10 [ 932.446400][T22925] ? trace_lock_acquire+0x14e/0x1f0 [ 932.446409][T22925] ? bpf_prog_load+0xd42/0x2480 [ 932.446422][T22925] ? lockdep_hardirqs_on+0x7c/0x110 [ 932.446438][T22925] ? read_tsc+0x9/0x20 [ 932.446447][T22925] ? ktime_get_with_offset+0x20b/0x3b0 [ 932.446457][T22925] ? bpf_obj_name_cpy+0x156/0x1b0 [ 932.446470][T22925] bpf_prog_load+0xe3c/0x2480 [ 932.446486][T22925] ? __pfx_bpf_prog_load+0x10/0x10 [ 932.446505][T22925] ? find_held_lock+0x2d/0x110 [ 932.446531][T22925] ? __might_fault+0x13b/0x190 [ 932.446558][T22925] ? __might_fault+0xe3/0x190 [ 932.446583][T22925] __sys_bpf+0x5677/0x57a0 [ 932.446601][T22925] ? __pfx_lock_release+0x10/0x10 [ 932.446619][T22925] ? __pfx___sys_bpf+0x10/0x10 [ 932.446638][T22925] ? vfs_write+0x306/0x1150 [ 932.446657][T22925] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 932.446693][T22925] ? fput+0x67/0x440 [ 932.446713][T22925] ? ksys_write+0x1ba/0x250 [ 932.446729][T22925] ? __pfx_ksys_write+0x10/0x10 [ 932.446749][T22925] __ia32_sys_bpf+0x76/0xe0 [ 932.446770][T22925] __do_fast_syscall_32+0x73/0x120 [ 932.446787][T22925] do_fast_syscall_32+0x32/0x80 [ 932.446801][T22925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 932.446824][T22925] RIP: 0023:0xf7f86579 [ 932.446838][T22925] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 932.446852][T22925] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 932.446868][T22925] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000440 [ 932.446878][T22925] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 932.446888][T22925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 932.446897][T22925] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 932.446906][T22925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 932.446925][T22925] [ 932.630793][ T9999] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 932.786330][ T9999] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 932.790923][ T9999] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 932.794442][ T9999] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 932.797539][ T9999] usb 10-1: Manufacturer: syz [ 932.801870][ T9999] usb 10-1: config 0 descriptor?? [ 932.850417][ T9999] rc_core: IR keymap rc-hauppauge not found [ 932.852854][ T9999] Registered IR keymap rc-empty [ 932.856563][ T9999] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 932.863263][ T9999] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input116 [ 933.012328][ T9999] usb 10-1: USB disconnect, device number 35 [ 933.943970][T22953] program syz.2.4729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 933.978551][T22956] netlink: 'syz.8.4730': attribute type 1 has an invalid length. [ 934.043696][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4730'. [ 934.046758][T22956] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4730'. [ 934.053857][T22956] input: syz0 as /devices/virtual/input/input117 [ 934.580420][ T9999] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 934.715178][ T9999] usb 13-1: device descriptor read/64, error -71 [ 934.960588][ T9999] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 935.095486][ T9999] usb 13-1: device descriptor read/64, error -71 [ 935.202178][ T9999] usb usb13-port1: attempt power cycle [ 935.540516][ T9999] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 935.561471][ T9999] usb 13-1: device descriptor read/8, error -71 [ 935.812037][ T9999] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 935.831031][ T9999] usb 13-1: device descriptor read/8, error -71 [ 935.945633][ T9999] usb usb13-port1: unable to enumerate USB device [ 936.091734][T22984] random: crng reseeded on system resumption [ 936.126437][ T5946] Bluetooth: hci2: command 0x040f tx timeout [ 936.130416][T15091] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 936.133801][T15091] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 937.882520][T22997] FAULT_INJECTION: forcing a failure. [ 937.882520][T22997] name failslab, interval 1, probability 0, space 0, times 0 [ 937.886196][T22997] CPU: 3 UID: 0 PID: 22997 Comm: syz.8.4740 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 937.886210][T22997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 937.886216][T22997] Call Trace: [ 937.886219][T22997] [ 937.886223][T22997] dump_stack_lvl+0x16c/0x1f0 [ 937.886242][T22997] should_fail_ex+0x50a/0x650 [ 937.886257][T22997] should_failslab+0xc2/0x120 [ 937.886270][T22997] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 937.886281][T22997] ? trace_lock_acquire+0x14e/0x1f0 [ 937.886291][T22997] ? skb_clone+0x190/0x3f0 [ 937.886304][T22997] skb_clone+0x190/0x3f0 [ 937.886314][T22997] dev_queue_xmit_nit+0x38f/0xbc0 [ 937.886328][T22997] dev_hard_start_xmit+0x283/0x7b0 [ 937.886344][T22997] __dev_queue_xmit+0x7f0/0x43e0 [ 937.886362][T22997] ? __pfx___dev_queue_xmit+0x10/0x10 [ 937.886384][T22997] ? rcu_is_watching+0x12/0xc0 [ 937.886399][T22997] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 937.886413][T22997] ? __copy_skb_header+0x2e8/0x5b0 [ 937.886427][T22997] ? __skb_clone+0x570/0x760 [ 937.886444][T22997] netlink_deliver_tap+0xa61/0xca0 [ 937.886460][T22997] netlink_unicast+0x5e1/0x7f0 [ 937.886475][T22997] ? __pfx_netlink_unicast+0x10/0x10 [ 937.886489][T22997] ? __phys_addr_symbol+0x30/0x80 [ 937.886504][T22997] ? __check_object_size+0x488/0x710 [ 937.886518][T22997] netlink_sendmsg+0x8b8/0xd70 [ 937.886534][T22997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.886552][T22997] ____sys_sendmsg+0x9ae/0xb40 [ 937.886565][T22997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 937.886578][T22997] ? get_compat_msghdr+0x11b/0x170 [ 937.886593][T22997] ? get_pid_task+0xfc/0x250 [ 937.886604][T22997] ___sys_sendmsg+0x135/0x1e0 [ 937.886615][T22997] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.886636][T22997] ? __pfx_vfs_write+0x10/0x10 [ 937.886648][T22997] __sys_sendmsg+0x16e/0x220 [ 937.886659][T22997] ? __pfx___sys_sendmsg+0x10/0x10 [ 937.886668][T22997] ? __pfx_lock_release+0x10/0x10 [ 937.886686][T22997] __do_fast_syscall_32+0x73/0x120 [ 937.886696][T22997] do_fast_syscall_32+0x32/0x80 [ 937.886705][T22997] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 937.886720][T22997] RIP: 0023:0xf73ae579 [ 937.886728][T22997] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 937.886737][T22997] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 937.886746][T22997] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000080 [ 937.886752][T22997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 937.886757][T22997] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 937.886762][T22997] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 937.886767][T22997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 937.886778][T22997] [ 938.360463][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 938.360513][T15091] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 938.364636][T15091] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 938.847507][ T5947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 938.864783][ T5947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 938.870300][ T5947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 938.874228][ T5947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 938.878218][ T5947] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 938.886533][ T5947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 938.900958][ T5946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 938.904754][ T5946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 938.907679][ T5946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 938.912066][ T5946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 938.920924][ T5946] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 938.925326][ T5946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 938.958621][T15801] Bluetooth: Error in BCSP hdr checksum [ 939.142476][T22972] chnl_net:caif_netlink_parms(): no params data found [ 939.218603][T15828] Bluetooth: Error in BCSP hdr checksum [ 939.260030][T22972] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.263571][T22972] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.266573][T22972] bridge_slave_0: entered allmulticast mode [ 939.269884][T22972] bridge_slave_0: entered promiscuous mode [ 939.312319][T22972] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.315280][T22972] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.318410][T22972] bridge_slave_1: entered allmulticast mode [ 939.322099][T22972] bridge_slave_1: entered promiscuous mode [ 939.356101][T15836] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.412202][T22972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.415915][T23024] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4744'. [ 939.417032][T22972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.471585][T15836] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.471786][T15809] Bluetooth: Error in BCSP hdr checksum [ 939.493595][T22972] team0: Port device team_slave_0 added [ 939.500252][T22972] team0: Port device team_slave_1 added [ 939.535471][T23026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4746'. [ 939.551901][T15836] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.561513][T22972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.563709][T22972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.572261][T22972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.576299][T22972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.578449][T22972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.586361][T22972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.642928][T15836] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.670882][T22972] hsr_slave_0: entered promiscuous mode [ 939.673845][T22972] hsr_slave_1: entered promiscuous mode [ 939.676471][T22972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 939.679438][T22972] Cannot create hsr debugfs directory [ 940.251093][T15836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.255830][T15836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.261996][T15836] bond0 (unregistering): Released all slaves [ 940.323743][T15836] Tq!7: left promiscuous mode [ 940.889567][T15836] hsr_slave_0: left promiscuous mode [ 940.895498][T15836] hsr_slave_1: left promiscuous mode [ 940.901317][T15836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.904607][T15836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.908762][T15836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.912180][T15836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.955876][T15836] veth1_macvtap: left promiscuous mode [ 940.957659][T15836] veth0_macvtap: left promiscuous mode [ 940.961525][T15836] veth1_vlan: left promiscuous mode [ 940.963764][T15836] veth0_vlan: left promiscuous mode [ 941.000551][ T5946] Bluetooth: hci0: command 0x1003 tx timeout [ 941.001076][ T5298] Bluetooth: hci4: command tx timeout [ 941.009629][ T5947] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 941.285068][T23057] ipt_ECN: cannot use operation on non-tcp rule [ 941.471876][T23060] netlink: 'syz.8.4750': attribute type 4 has an invalid length. [ 942.140678][T15836] team0 (unregistering): Port device team_slave_1 removed [ 942.282953][T15836] team0 (unregistering): Port device team_slave_0 removed [ 943.034822][T22972] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 943.046071][T22972] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 943.061981][T22972] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 943.080416][ T5947] Bluetooth: hci4: command tx timeout [ 943.086798][T22972] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 943.177484][T22972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.194554][T22972] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.200693][T15828] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.203631][T15828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.234186][T15828] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.237137][T15828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.384324][T22972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.413090][T23078] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4755'. [ 943.417894][T23078] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 943.506737][T22972] veth0_vlan: entered promiscuous mode [ 943.514822][T22972] veth1_vlan: entered promiscuous mode [ 943.516053][T23093] syz.8.4751: attempt to access beyond end of device [ 943.516053][T23093] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 943.533369][T22972] veth0_macvtap: entered promiscuous mode [ 943.536775][T22972] veth1_macvtap: entered promiscuous mode [ 943.544000][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.547015][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.552097][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.555658][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.558610][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.561955][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.565544][T22972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.570249][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.574261][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.577112][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.580112][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.583707][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.586701][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.590115][T22972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.594418][T22972] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.596972][T22972] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.599487][T22972] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.602109][T22972] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.630176][T15818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.632607][T15818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.646479][T15836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.648859][T15836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.024276][T23102] syz.6.4732: attempt to access beyond end of device [ 944.024276][T23102] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 945.099441][T23103] [U]  [ 945.172732][ T5298] Bluetooth: hci4: command tx timeout [ 945.190849][T23123] nbd6: detected capacity change from 0 to 12 [ 945.195993][T19817] block nbd6: Send control failed (result -89) [ 945.197960][T19817] block nbd6: Request send failed, requeueing [ 945.200687][ T5947] block nbd6: Receive control failed (result -32) [ 945.208489][T12123] block nbd6: Dead connection, failed to find a fallback [ 945.210701][T12123] block nbd6: shutting down sockets [ 945.212337][T12123] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.215429][T12123] Buffer I/O error on dev nbd6, logical block 0, async page read [ 945.218122][T19817] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.221408][T19817] Buffer I/O error on dev nbd6, logical block 0, async page read [ 945.223984][T19817] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.226644][T19817] Buffer I/O error on dev nbd6, logical block 0, async page read [ 945.229068][T19817] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.231936][T19817] Buffer I/O error on dev nbd6, logical block 0, async page read [ 945.234635][T19817] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.237228][T19817] Buffer I/O error on dev nbd6, logical block 0, async page read [ 945.239653][T19817] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.242817][T19817] Buffer I/O error on dev nbd6, logical block 0, async page read [ 945.245477][T19817] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.248351][T19817] Buffer I/O error on dev nbd6, logical block 0, async page read [ 945.251064][T19817] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.253959][T19817] Buffer I/O error on dev nbd6, logical block 0, async page read [ 945.256647][T19817] ldm_validate_partition_table(): Disk read failed. [ 945.259006][T19817] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.261861][T19817] Buffer I/O error on dev nbd6, logical block 0, async page read [ 945.266337][T19817] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.269076][T19817] Buffer I/O error on dev nbd6, logical block 0, async page read [ 945.272935][T19817] Dev nbd6: unable to read RDB block 0 [ 945.275421][T19817] nbd6: unable to read partition table [ 945.277612][T19817] nbd6: partition table beyond EOD, truncated [ 945.291893][T19817] ldm_validate_partition_table(): Disk read failed. [ 945.294180][T19817] Dev nbd6: unable to read RDB block 0 [ 945.296112][T19817] nbd6: unable to read partition table [ 945.297988][T19817] nbd6: partition table beyond EOD, truncated [ 945.325402][T23119] ldm_validate_partition_table(): Disk read failed. [ 945.327755][T23119] Dev nbd6: unable to read RDB block 0 [ 945.329456][T23119] nbd6: unable to read partition table [ 945.333388][T23119] nbd6: partition table beyond EOD, truncated [ 945.501729][T23127] ip6tnl1: entered promiscuous mode [ 946.568927][T23147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4766'. [ 946.625705][T23161] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4775'. [ 947.250653][ T5947] Bluetooth: hci4: command tx timeout [ 947.707109][T23190] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4783'. [ 947.766739][T23193] FAULT_INJECTION: forcing a failure. [ 947.766739][T23193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.773450][T23193] CPU: 3 UID: 0 PID: 23193 Comm: syz.8.4784 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 947.773474][T23193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 947.773484][T23193] Call Trace: [ 947.773490][T23193] [ 947.773497][T23193] dump_stack_lvl+0x16c/0x1f0 [ 947.773528][T23193] should_fail_ex+0x50a/0x650 [ 947.773553][T23193] _copy_to_user+0x32/0xd0 [ 947.773580][T23193] simple_read_from_buffer+0xd0/0x160 [ 947.773610][T23193] proc_fail_nth_read+0x198/0x270 [ 947.773636][T23193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 947.773663][T23193] ? rw_verify_area+0xcf/0x680 [ 947.773689][T23193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 947.773730][T23193] vfs_read+0x1df/0xbf0 [ 947.773748][T23193] ? __fget_files+0x1fc/0x3a0 [ 947.773767][T23193] ? __pfx___mutex_lock+0x10/0x10 [ 947.773794][T23193] ? __pfx_vfs_read+0x10/0x10 [ 947.773819][T23193] ? __fget_files+0x206/0x3a0 [ 947.773845][T23193] ksys_read+0x12b/0x250 [ 947.773862][T23193] ? __pfx_ksys_read+0x10/0x10 [ 947.773892][T23193] __do_fast_syscall_32+0x73/0x120 [ 947.773910][T23193] do_fast_syscall_32+0x32/0x80 [ 947.773928][T23193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 947.773955][T23193] RIP: 0023:0xf73ae579 [ 947.773969][T23193] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 947.773986][T23193] RSP: 002b:00000000f5015590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 947.774002][T23193] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f5015620 [ 947.774013][T23193] RDX: 000000000000000f RSI: 00000000f739cff4 RDI: 0000000000000000 [ 947.774023][T23193] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 947.774033][T23193] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 947.774043][T23193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 947.774067][T23193] [ 948.290234][T23200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 948.364626][T23200] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 948.366591][T23200] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 949.230467][ T30] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 949.394488][ T30] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 949.399305][ T30] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.443245][ T30] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 949.446044][ T30] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 949.449095][ T30] usb 11-1: Manufacturer: syz [ 949.479779][ T30] usb 11-1: config 0 descriptor?? [ 949.511693][ T30] igorplugusb 11-1:0.0: incorrect number of endpoints [ 949.692983][ T9999] usb 11-1: USB disconnect, device number 6 [ 950.462241][T23240] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4798'. [ 950.623061][T23243] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 950.627233][T23243] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 951.970597][T23267] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4802'. [ 952.091006][ T9035] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 952.145504][T23274] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4809'. [ 952.342257][ T9035] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 952.345196][ T9035] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.354422][ T9035] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 952.359904][ T9035] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 952.362416][ T9035] usb 11-1: Manufacturer: syz [ 952.366639][ T9035] usb 11-1: config 0 descriptor?? [ 952.371958][ T9035] igorplugusb 11-1:0.0: incorrect number of endpoints [ 952.522693][T23280] Cannot find add_set index 0 as target [ 952.573012][ T9999] usb 11-1: USB disconnect, device number 7 [ 953.126539][T23282] fuse: Bad value for 'fd' [ 953.260136][T23293] lo speed is unknown, defaulting to 1000 [ 953.269390][T23293] lo speed is unknown, defaulting to 1000 [ 953.273405][T23293] lo speed is unknown, defaulting to 1000 [ 953.314324][T23293] infiniband syz0: set active [ 953.318143][ T56] lo speed is unknown, defaulting to 1000 [ 953.320498][T23293] infiniband syz0: added lo [ 953.324241][T23293] syz0: rxe_create_cq: returned err = -12 [ 953.326331][T23293] infiniband syz0: Couldn't create ib_mad CQ [ 953.328253][T23293] infiniband syz0: Couldn't open port 1 [ 953.346067][T23293] RDS/IB: syz0: added [ 953.347710][T23293] smc: adding ib device syz0 with port count 1 [ 953.349737][T23293] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 953.352257][ T9035] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 953.356165][ T5985] lo speed is unknown, defaulting to 1000 [ 953.359727][T23293] lo speed is unknown, defaulting to 1000 [ 953.377771][T23299] syzkaller1: entered promiscuous mode [ 953.379416][T23299] syzkaller1: entered allmulticast mode [ 953.384603][T23299] random: crng reseeded on system resumption [ 953.422892][T23293] lo speed is unknown, defaulting to 1000 [ 953.459933][T23293] lo speed is unknown, defaulting to 1000 [ 953.496846][T23293] lo speed is unknown, defaulting to 1000 [ 953.523511][ T9035] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.527729][ T9035] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.531934][ T9035] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 953.534374][T23293] lo speed is unknown, defaulting to 1000 [ 953.536529][ T9035] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 953.541915][ T9035] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.546845][ T9035] usb 11-1: config 0 descriptor?? [ 953.575148][T23293] lo speed is unknown, defaulting to 1000 [ 953.616717][T23293] lo speed is unknown, defaulting to 1000 [ 953.657052][T23293] lo speed is unknown, defaulting to 1000 [ 953.880467][T16064] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 953.961600][ T9035] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 953.967601][ T9035] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 953.980002][ T9035] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 954.045714][T16064] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 954.049164][T16064] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 954.052580][T16064] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 954.054945][T16064] usb 13-1: Manufacturer: syz [ 954.057397][T16064] usb 13-1: config 0 descriptor?? [ 954.110572][T16064] rc_core: IR keymap rc-hauppauge not found [ 954.113062][T16064] Registered IR keymap rc-empty [ 954.115438][T16064] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 954.119386][T16064] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input118 [ 954.253719][ T56] usb 11-1: USB disconnect, device number 8 [ 954.281847][ T9035] usb 13-1: USB disconnect, device number 17 [ 954.860620][ T9035] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 955.015009][ T9035] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 955.018307][ T9035] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.030955][ T9035] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 955.039879][ T9035] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 955.043698][ T9035] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 955.046021][ T9035] usb 10-1: Manufacturer: syz [ 955.048616][ T9035] usb 10-1: config 0 descriptor?? [ 955.052339][ T9035] igorplugusb 10-1:0.0: incorrect number of endpoints [ 955.254140][ T9035] usb 10-1: USB disconnect, device number 36 [ 955.502554][T23346] netlink: 830 bytes leftover after parsing attributes in process `syz.8.4831'. [ 955.930595][ T35] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 956.093214][ T35] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 956.099185][ T35] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 956.103044][ T35] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 956.105437][ T35] usb 13-1: Manufacturer: syz [ 956.107801][ T35] usb 13-1: config 0 descriptor?? [ 956.150389][ T35] rc_core: IR keymap rc-hauppauge not found [ 956.152200][ T35] Registered IR keymap rc-empty [ 956.154031][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 956.157452][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input119 [ 956.319073][T23369] syz.6.4836: attempt to access beyond end of device [ 956.319073][T23369] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 956.333146][ T833] usb 13-1: USB disconnect, device number 18 [ 957.217142][T23397] netlink: 'syz.2.4843': attribute type 10 has an invalid length. [ 957.222607][T23397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.225886][T23397] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 957.250504][T21969] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 957.330466][T16064] usb 13-1: new low-speed USB device number 19 using dummy_hcd [ 957.420558][T21969] usb 11-1: Using ep0 maxpacket: 16 [ 957.424530][T21969] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.428706][T21969] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 957.432489][T21969] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 957.439919][T21969] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 957.442903][T21969] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.445374][T21969] usb 11-1: Manufacturer: и [ 957.446761][T21969] usb 11-1: SerialNumber: ⣖썘総㏘땧9댴칈歡텖器衿ష阋䋝뺎欗뇳塭㋓渚 [ 957.453353][T21969] cdc_ncm 11-1:1.0: skipping garbage [ 957.455031][T21969] cdc_ncm 11-1:1.0: CDC Union missing and no IAD found [ 957.457173][T21969] cdc_ncm 11-1:1.0: bind() failure [ 957.492211][T16064] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 957.495222][T16064] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 957.499186][T16064] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 957.503310][T16064] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 957.507496][T16064] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 957.512743][T16064] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 957.515684][T16064] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 957.519609][T16064] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 957.524093][T16064] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 957.528296][T16064] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 957.533391][T16064] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 957.536510][T16064] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 957.540718][T16064] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 957.544529][T16064] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 957.548602][T16064] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 957.554752][T16064] usb 13-1: string descriptor 0 read error: -22 [ 957.556809][T16064] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 957.559348][T16064] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.564532][T16064] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 957.658446][T16064] usb 11-1: USB disconnect, device number 9 [ 957.771888][T23396] usb 13-1: Couldn't submit interrupt_out_urb -90 [ 957.778853][T21969] usb 13-1: USB disconnect, device number 19 [ 957.975649][T23408] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4850'. [ 958.339089][T23421] netlink: 'syz.8.4853': attribute type 21 has an invalid length. [ 958.342121][T23421] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4853'. [ 958.345339][T23421] netlink: 'syz.8.4853': attribute type 5 has an invalid length. [ 958.347600][T23421] netlink: 'syz.8.4853': attribute type 6 has an invalid length. [ 958.350058][T23421] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4853'. [ 959.952116][T23449] FAULT_INJECTION: forcing a failure. [ 959.952116][T23449] name failslab, interval 1, probability 0, space 0, times 0 [ 959.955984][T23449] CPU: 1 UID: 0 PID: 23449 Comm: syz.6.4859 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 959.955997][T23449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 959.956003][T23449] Call Trace: [ 959.956006][T23449] [ 959.956010][T23449] dump_stack_lvl+0x16c/0x1f0 [ 959.956039][T23449] should_fail_ex+0x50a/0x650 [ 959.956054][T23449] ? fs_reclaim_acquire+0xae/0x150 [ 959.956070][T23449] should_failslab+0xc2/0x120 [ 959.956083][T23449] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 959.956097][T23449] ? kstrdup_const+0x63/0x80 [ 959.956113][T23449] kstrdup+0x42/0xb0 [ 959.956129][T23449] kstrdup_const+0x63/0x80 [ 959.956151][T23449] __kernfs_new_node+0x9c/0x890 [ 959.956179][T23449] ? hlock_class+0x4e/0x130 [ 959.956202][T23449] ? __pfx___kernfs_new_node+0x10/0x10 [ 959.956232][T23449] ? map_id_range_down+0x2bb/0x3a0 [ 959.956255][T23449] ? __pfx_map_id_range_down+0x10/0x10 [ 959.956268][T23449] ? __pfx___lock_acquire+0x10/0x10 [ 959.956282][T23449] kernfs_new_node+0x186/0x240 [ 959.956293][T23449] ? net_ns_get_ownership+0xf8/0x1b0 [ 959.956305][T23449] kernfs_create_dir_ns+0x4c/0x150 [ 959.956318][T23449] sysfs_create_dir_ns+0x13b/0x2b0 [ 959.956333][T23449] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 959.956348][T23449] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 959.956361][T23449] ? kobject_add_internal+0x12d/0x990 [ 959.956371][T23449] ? net_namespace+0x12/0x50 [ 959.956380][T23449] ? device_namespace+0x76/0xa0 [ 959.956394][T23449] kobject_add_internal+0x2c8/0x990 [ 959.956406][T23449] kobject_add+0x16f/0x240 [ 959.956416][T23449] ? __pfx_kobject_add+0x10/0x10 [ 959.956426][T23449] ? lock_acquire+0x2f/0xb0 [ 959.956436][T23449] ? get_device_parent+0x11f/0x4e0 [ 959.956448][T23449] ? kobject_put+0xab/0x5a0 [ 959.956458][T23449] ? device_add+0xc02/0x1a70 [ 959.956473][T23449] device_add+0x289/0x1a70 [ 959.956485][T23449] ? __pfx_dev_set_name+0x10/0x10 [ 959.956500][T23449] ? __pfx_device_add+0x10/0x10 [ 959.956514][T23449] ? __init_waitqueue_head+0xca/0x150 [ 959.956531][T23449] netdev_register_kobject+0x183/0x3a0 [ 959.956543][T23449] register_netdevice+0x147b/0x1e50 [ 959.956556][T23449] ? __pfx_register_netdevice+0x10/0x10 [ 959.956571][T23449] geneve_configure+0x765/0xae0 [ 959.956586][T23449] geneve_newlink+0x125/0x2b0 [ 959.956597][T23449] ? __pfx_geneve_newlink+0x10/0x10 [ 959.956613][T23449] ? rtnl_create_link+0xa2e/0xf10 [ 959.956629][T23449] ? __pfx_geneve_newlink+0x10/0x10 [ 959.956641][T23449] rtnl_newlink+0xbae/0x1d70 [ 959.956658][T23449] ? __pfx_rtnl_newlink+0x10/0x10 [ 959.956676][T23449] ? __pfx___lock_acquire+0x10/0x10 [ 959.956686][T23449] ? kmem_cache_free+0x2e2/0x4d0 [ 959.956697][T23449] ? aa_get_newest_label+0x376/0x680 [ 959.956711][T23449] ? find_held_lock+0x2d/0x110 [ 959.956729][T23449] ? find_held_lock+0x2d/0x110 [ 959.956744][T23449] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 959.956753][T23449] ? __pfx_lock_release+0x10/0x10 [ 959.956763][T23449] ? trace_lock_acquire+0x14e/0x1f0 [ 959.956775][T23449] ? __pfx_rtnl_newlink+0x10/0x10 [ 959.956790][T23449] rtnetlink_rcv_msg+0x95b/0xea0 [ 959.956800][T23449] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 959.956809][T23449] ? __pfx___dev_queue_xmit+0x10/0x10 [ 959.956828][T23449] netlink_rcv_skb+0x165/0x410 [ 959.956842][T23449] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 959.956852][T23449] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 959.956872][T23449] ? netlink_deliver_tap+0x1ae/0xca0 [ 959.956887][T23449] netlink_unicast+0x53c/0x7f0 [ 959.956903][T23449] ? __pfx_netlink_unicast+0x10/0x10 [ 959.956917][T23449] ? __phys_addr_symbol+0x30/0x80 [ 959.956932][T23449] ? __check_object_size+0x488/0x710 [ 959.956947][T23449] netlink_sendmsg+0x8b8/0xd70 [ 959.956962][T23449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.956985][T23449] ____sys_sendmsg+0x9ae/0xb40 [ 959.956999][T23449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 959.957012][T23449] ? get_compat_msghdr+0x11b/0x170 [ 959.957029][T23449] ___sys_sendmsg+0x135/0x1e0 [ 959.957041][T23449] ? __pfx____sys_sendmsg+0x10/0x10 [ 959.957056][T23449] ? __pfx_lock_release+0x10/0x10 [ 959.957067][T23449] ? trace_lock_acquire+0x14e/0x1f0 [ 959.957080][T23449] ? __fget_files+0x206/0x3a0 [ 959.957094][T23449] __sys_sendmsg+0x16e/0x220 [ 959.957104][T23449] ? __pfx___sys_sendmsg+0x10/0x10 [ 959.957123][T23449] __do_fast_syscall_32+0x73/0x120 [ 959.957133][T23449] do_fast_syscall_32+0x32/0x80 [ 959.957142][T23449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 959.957158][T23449] RIP: 0023:0xf7fbf579 [ 959.957167][T23449] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 959.957177][T23449] RSP: 002b:00000000f50a455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 959.957186][T23449] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 959.957192][T23449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 959.957197][T23449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 959.957203][T23449] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 959.957208][T23449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 959.957220][T23449] [ 959.957236][T23449] kobject: kobject_add_internal failed for geneve2 (error: -12 parent: net) [ 960.308351][T23461] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4866'. [ 960.341359][T23465] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4868'. [ 960.351502][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 960.353769][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 960.357024][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.357781][T23465] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4868'. [ 960.359340][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.365571][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.367988][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.370469][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.372776][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.375071][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.377399][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.379708][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.382432][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.384739][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.387028][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.389540][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.392007][ T833] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 960.394893][ T833] hid-generic 0000:3000000:0000.000B: hidraw1: HID v0.00 Device [sy] on syz0 [ 960.644222][T23445] [U]  [ 961.316022][T23480] syz.5.4871: attempt to access beyond end of device [ 961.316022][T23480] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 961.327830][T23480] XFS (nbd5): SB validate failed with error -5. [ 961.713676][T23491] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4874'. [ 962.098030][T23501] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4877'. [ 962.821104][T23515] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4881'. [ 963.007530][T23505] [U]  [ 963.393747][T23527] syz.6.4883: attempt to access beyond end of device [ 963.393747][T23527] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 963.685602][T23528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4885'. [ 964.174915][T23536] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4887'. [ 965.190816][T23549] FAULT_INJECTION: forcing a failure. [ 965.190816][T23549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.195004][T23549] CPU: 2 UID: 0 PID: 23549 Comm: syz.2.4891 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 965.195024][T23549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 965.195031][T23549] Call Trace: [ 965.195034][T23549] [ 965.195038][T23549] dump_stack_lvl+0x16c/0x1f0 [ 965.195079][T23549] should_fail_ex+0x50a/0x650 [ 965.195100][T23549] _copy_to_user+0x32/0xd0 [ 965.195115][T23549] bpf_test_finish.isra.0+0x556/0x670 [ 965.195130][T23549] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 965.195142][T23549] ? __might_fault+0xe3/0x190 [ 965.195157][T23549] ? _copy_from_user+0x59/0xd0 [ 965.195172][T23549] bpf_prog_test_run_xdp+0xa02/0x1560 [ 965.195189][T23549] ? lock_acquire+0x2f/0xb0 [ 965.195200][T23549] ? __fget_files+0x40/0x3a0 [ 965.195210][T23549] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 965.195224][T23549] ? __fget_files+0x206/0x3a0 [ 965.195236][T23549] ? fput+0x67/0x440 [ 965.195248][T23549] ? __bpf_prog_get+0xa0/0x290 [ 965.195259][T23549] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 965.195272][T23549] __sys_bpf+0x1921/0x57a0 [ 965.195284][T23549] ? __pfx_lock_release+0x10/0x10 [ 965.195295][T23549] ? __pfx___sys_bpf+0x10/0x10 [ 965.195307][T23549] ? vfs_write+0x306/0x1150 [ 965.195318][T23549] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 965.195340][T23549] ? fput+0x67/0x440 [ 965.195352][T23549] ? ksys_write+0x1ba/0x250 [ 965.195361][T23549] ? __pfx_ksys_write+0x10/0x10 [ 965.195372][T23549] __ia32_sys_bpf+0x76/0xe0 [ 965.195386][T23549] __do_fast_syscall_32+0x73/0x120 [ 965.195396][T23549] do_fast_syscall_32+0x32/0x80 [ 965.195405][T23549] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 965.195420][T23549] RIP: 0023:0xf7f86579 [ 965.195428][T23549] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 965.195438][T23549] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 965.195447][T23549] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000040 [ 965.195453][T23549] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 965.195458][T23549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 965.195463][T23549] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 965.195468][T23549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 965.195479][T23549] [ 965.568611][T23553] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4892'. [ 965.574395][T23553] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 965.893636][T23545] [U]  [ 966.135086][T23567] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4896'. [ 966.240470][ T9999] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 966.319355][T23570] netlink: 'syz.5.4897': attribute type 4 has an invalid length. [ 966.324539][ T35] lo speed is unknown, defaulting to 1000 [ 966.411711][ T9999] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 966.414799][ T9999] usb 13-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 966.419258][ T9999] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 966.422188][ T9999] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 966.424540][ T9999] usb 13-1: Manufacturer: syz [ 966.426803][ T9999] usb 13-1: config 0 descriptor?? [ 966.429645][ T9999] igorplugusb 13-1:0.0: incorrect number of endpoints [ 966.632824][ T9999] usb 13-1: USB disconnect, device number 20 [ 967.078029][T23575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4899'. [ 967.257597][T23583] xt_hashlimit: overflow, rate too high: 0 [ 968.378012][T23600] CIFS mount error: No usable UNC path provided in device string! [ 968.378012][T23600] [ 968.381578][T23600] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 968.405326][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4907'. [ 968.497400][T23601] syz.5.4906: attempt to access beyond end of device [ 968.497400][T23601] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 969.145230][T23608] 9pnet_fd: Insufficient options for proto=fd [ 969.167222][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4910'. [ 969.244587][T23611] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 969.809191][T23619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4913'. [ 969.990426][ T9999] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 970.201901][ T9999] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 970.205603][ T9999] usb 13-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 970.212008][ T9999] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 970.215878][ T9999] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 970.219052][ T9999] usb 13-1: Manufacturer: syz [ 970.222143][ T9999] usb 13-1: config 0 descriptor?? [ 970.227993][ T9999] igorplugusb 13-1:0.0: incorrect number of endpoints [ 970.293040][T23627] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4916'. [ 970.431081][ T9] usb 13-1: USB disconnect, device number 21 [ 970.788550][T23634] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4918'. [ 971.181092][T23650] Cannot find add_set index 0 as target [ 972.662664][T23672] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4929'. [ 973.650435][ T9] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 973.672250][T23683] FAULT_INJECTION: forcing a failure. [ 973.672250][T23683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.675965][T23683] CPU: 3 UID: 0 PID: 23683 Comm: syz.2.4933 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 973.675978][T23683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 973.675984][T23683] Call Trace: [ 973.675988][T23683] [ 973.675992][T23683] dump_stack_lvl+0x16c/0x1f0 [ 973.676010][T23683] should_fail_ex+0x50a/0x650 [ 973.676024][T23683] _copy_from_user+0x2e/0xd0 [ 973.676038][T23683] get_compat_msghdr+0xa8/0x170 [ 973.676051][T23683] ? __pfx_get_compat_msghdr+0x10/0x10 [ 973.676067][T23683] ___sys_sendmsg+0x1b0/0x1e0 [ 973.676081][T23683] ? __pfx____sys_sendmsg+0x10/0x10 [ 973.676106][T23683] ? __pfx_lock_release+0x10/0x10 [ 973.676126][T23683] ? trace_lock_acquire+0x14e/0x1f0 [ 973.676149][T23683] ? __fget_files+0x206/0x3a0 [ 973.676172][T23683] __sys_sendmsg+0x16e/0x220 [ 973.676190][T23683] ? __pfx___sys_sendmsg+0x10/0x10 [ 973.676222][T23683] __do_fast_syscall_32+0x73/0x120 [ 973.676238][T23683] do_fast_syscall_32+0x32/0x80 [ 973.676247][T23683] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 973.676263][T23683] RIP: 0023:0xf7f86579 [ 973.676270][T23683] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 973.676280][T23683] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 973.676290][T23683] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 973.676296][T23683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 973.676302][T23683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 973.676307][T23683] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 973.676313][T23683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 973.676323][T23683] [ 973.813060][ T9] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 973.816391][ T9] usb 13-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 973.825254][ T9] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 973.828745][ T9] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 973.832068][ T9] usb 13-1: Manufacturer: syz [ 973.835930][ T9] usb 13-1: config 0 descriptor?? [ 973.840781][ T9] igorplugusb 13-1:0.0: incorrect number of endpoints [ 973.959077][T23674] [U]  [ 973.987564][T23691] syz.2.4934: attempt to access beyond end of device [ 973.987564][T23691] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 973.988721][T23692] random: crng reseeded on system resumption [ 974.005263][T23692] fuse: Bad value for 'fd' [ 974.041179][ T9] usb 13-1: USB disconnect, device number 22 [ 975.023369][T23710] Cannot find del_set index 320 as target [ 975.521589][T23721] Cannot find del_set index 320 as target [ 976.083922][T23730] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 976.544159][T23728] [U]  [ 976.599925][T23739] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 976.722635][T23743] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 976.836961][T23746] syz.5.4950: attempt to access beyond end of device [ 976.836961][T23746] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 978.118484][T23765] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4958'. [ 978.984341][T23766] [U]  [ 978.985097][T23783] syz.5.4962: attempt to access beyond end of device [ 978.985097][T23783] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 979.610510][ T35] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 979.765559][ T35] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 979.768659][ T35] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 979.771637][ T35] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 979.780542][ T35] usb 13-1: Manufacturer: syz [ 979.786815][ T35] usb 13-1: config 0 descriptor?? [ 980.024960][ T35] rc_core: IR keymap rc-hauppauge not found [ 980.026689][ T35] Registered IR keymap rc-empty [ 980.031582][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 980.035150][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input120 [ 980.047486][ T35] usb 13-1: USB disconnect, device number 23 [ 980.054210][T23809] [ 980.055024][T23809] ====================================================== [ 980.057191][T23809] WARNING: possible circular locking dependency detected [ 980.059169][T23809] 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 Not tainted [ 980.062779][T23809] ------------------------------------------------------ [ 980.065641][T23809] syz.2.4970/23809 is trying to acquire lock: [ 980.067834][T23809] ffff88802addb940 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x452/0xbf0 [ 980.071483][T23809] [ 980.071483][T23809] but task is already holding lock: [ 980.074410][T23809] ffff888013087488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 980.077569][T23809] [ 980.077569][T23809] which lock already depends on the new lock. [ 980.077569][T23809] [ 980.081194][T23809] [ 980.081194][T23809] the existing dependency chain (in reverse order) is: [ 980.084556][T23809] [ 980.084556][T23809] -> #2 (&of->mutex){+.+.}-{4:4}: [ 980.087116][T23809] __mutex_lock+0x19b/0xb10 [ 980.089008][T23809] kernfs_fop_write_iter+0x27b/0x500 [ 980.090737][T23809] iter_file_splice_write+0x90f/0x10b0 [ 980.092491][T23809] do_splice+0x146a/0x1f70 [ 980.093956][T23809] __do_splice+0x327/0x360 [ 980.095568][T23809] __ia32_sys_splice+0x189/0x250 [ 980.097579][T23809] __do_fast_syscall_32+0x73/0x120 [ 980.099782][T23809] do_fast_syscall_32+0x32/0x80 [ 980.101278][T23809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 980.103327][T23809] [ 980.103327][T23809] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 980.105433][T23809] __mutex_lock+0x19b/0xb10 [ 980.106948][T23809] pipe_write+0x166/0x1b30 [ 980.108567][T23809] __kernel_write_iter+0x71f/0xa90 [ 980.110152][T23809] __kernel_write+0xf6/0x140 [ 980.111717][T23809] autofs_notify_daemon+0x484/0xbf0 [ 980.113318][T23809] autofs_wait+0x12ca/0x1c40 [ 980.115025][T23809] autofs_mount_wait+0x132/0x380 [ 980.117195][T23809] autofs_d_automount+0x390/0x7f0 [ 980.118980][T23809] __traverse_mounts+0x192/0x760 [ 980.120487][T23809] step_into+0x593/0x2220 [ 980.121858][T23809] path_openat+0x74c/0x2d80 [ 980.123279][T23809] do_filp_open+0x20c/0x470 [ 980.124724][T23809] do_sys_openat2+0x17a/0x1e0 [ 980.126238][T23809] __ia32_compat_sys_openat+0x16e/0x210 [ 980.127976][T23809] __do_fast_syscall_32+0x73/0x120 [ 980.129640][T23809] do_fast_syscall_32+0x32/0x80 [ 980.131156][T23809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 980.133063][T23809] [ 980.133063][T23809] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 980.135510][T23809] __lock_acquire+0x249e/0x3c40 [ 980.137371][T23809] lock_acquire.part.0+0x11b/0x380 [ 980.139291][T23809] __mutex_lock+0x19b/0xb10 [ 980.140966][T23809] autofs_notify_daemon+0x452/0xbf0 [ 980.142640][T23809] autofs_wait+0x12ca/0x1c40 [ 980.144116][T23809] autofs_mount_wait+0x132/0x380 [ 980.145682][T23809] autofs_d_automount+0x390/0x7f0 [ 980.147331][T23809] __traverse_mounts+0x192/0x760 [ 980.149034][T23809] step_into+0x593/0x2220 [ 980.150531][T23809] walk_component+0xfc/0x5b0 [ 980.152013][T23809] path_lookupat+0x17f/0x770 [ 980.153501][T23809] filename_lookup+0x221/0x5f0 [ 980.155033][T23809] kern_path+0x35/0x50 [ 980.156329][T23809] lookup_bdev+0xd9/0x280 [ 980.157727][T23809] resume_store+0x1d8/0x460 [ 980.159174][T23809] kobj_attr_store+0x55/0x80 [ 980.160638][T23809] sysfs_kf_write+0x117/0x170 [ 980.162119][T23809] kernfs_fop_write_iter+0x33d/0x500 [ 980.163778][T23809] vfs_write+0x5ae/0x1150 [ 980.165560][T23809] ksys_write+0x12b/0x250 [ 980.167078][T23809] __do_fast_syscall_32+0x73/0x120 [ 980.168673][T23809] do_fast_syscall_32+0x32/0x80 [ 980.170215][T23809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 980.172189][T23809] [ 980.172189][T23809] other info that might help us debug this: [ 980.172189][T23809] [ 980.175082][T23809] Chain exists of: [ 980.175082][T23809] &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex [ 980.175082][T23809] [ 980.178543][T23809] Possible unsafe locking scenario: [ 980.178543][T23809] [ 980.180644][T23809] CPU0 CPU1 [ 980.182266][T23809] ---- ---- [ 980.183812][T23809] lock(&of->mutex); [ 980.184981][T23809] lock(&pipe->mutex); [ 980.186831][T23809] lock(&of->mutex); [ 980.188727][T23809] lock(&sbi->pipe_mutex); [ 980.190155][T23809] [ 980.190155][T23809] *** DEADLOCK *** [ 980.190155][T23809] [ 980.192508][T23809] 4 locks held by syz.2.4970/23809: [ 980.193989][T23809] #0: ffff88802226e638 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 980.196719][T23809] #1: ffff888045af2420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 980.199253][T23809] #2: ffff888013087488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 980.201973][T23809] #3: ffff88801c72bc38 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 980.204805][T23809] [ 980.204805][T23809] stack backtrace: [ 980.206463][T23809] CPU: 0 UID: 0 PID: 23809 Comm: syz.2.4970 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 980.206475][T23809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 980.206481][T23809] Call Trace: [ 980.206486][T23809] [ 980.206491][T23809] dump_stack_lvl+0x116/0x1f0 [ 980.206508][T23809] print_circular_bug+0x490/0x760 [ 980.206521][T23809] check_noncircular+0x31a/0x400 [ 980.206532][T23809] ? __pfx_check_noncircular+0x10/0x10 [ 980.206546][T23809] ? save_trace+0x42/0xa10 [ 980.206556][T23809] ? add_lock_to_list+0x17d/0x390 [ 980.206566][T23809] __lock_acquire+0x249e/0x3c40 [ 980.206580][T23809] ? __pfx___lock_acquire+0x10/0x10 [ 980.206592][T23809] lock_acquire.part.0+0x11b/0x380 [ 980.206603][T23809] ? autofs_notify_daemon+0x452/0xbf0 [ 980.206623][T23809] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 980.206634][T23809] ? rcu_is_watching+0x12/0xc0 [ 980.206648][T23809] ? trace_lock_acquire+0x14e/0x1f0 [ 980.206656][T23809] ? autofs_notify_daemon+0x452/0xbf0 [ 980.206669][T23809] ? lock_acquire+0x2f/0xb0 [ 980.206680][T23809] ? autofs_notify_daemon+0x452/0xbf0 [ 980.206693][T23809] __mutex_lock+0x19b/0xb10 [ 980.206707][T23809] ? autofs_notify_daemon+0x452/0xbf0 [ 980.206721][T23809] ? autofs_notify_daemon+0x452/0xbf0 [ 980.206736][T23809] ? __pfx___mutex_lock+0x10/0x10 [ 980.206751][T23809] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 980.206764][T23809] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 980.206779][T23809] ? from_kgid_munged+0xa7/0x130 [ 980.206793][T23809] ? autofs_notify_daemon+0x452/0xbf0 [ 980.206806][T23809] autofs_notify_daemon+0x452/0xbf0 [ 980.206819][T23809] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 980.206832][T23809] ? sysfs_kf_write+0x117/0x170 [ 980.206844][T23809] ? kernfs_fop_write_iter+0x33d/0x500 [ 980.206855][T23809] ? vfs_write+0x5ae/0x1150 [ 980.206868][T23809] ? lockdep_init_map_type+0x16d/0x7d0 [ 980.206881][T23809] autofs_wait+0x12ca/0x1c40 [ 980.206895][T23809] ? __pfx_autofs_wait+0x10/0x10 [ 980.206907][T23809] ? find_held_lock+0x2d/0x110 [ 980.206942][T23809] ? autofs_d_automount+0x386/0x7f0 [ 980.206956][T23809] ? __pfx_lock_release+0x10/0x10 [ 980.206969][T23809] autofs_mount_wait+0x132/0x380 [ 980.206983][T23809] autofs_d_automount+0x390/0x7f0 [ 980.206998][T23809] __traverse_mounts+0x192/0x760 [ 980.207013][T23809] step_into+0x593/0x2220 [ 980.207030][T23809] ? __pfx_step_into+0x10/0x10 [ 980.207046][T23809] ? __pfx___up_read+0x10/0x10 [ 980.207059][T23809] ? lookup_fast+0x153/0x5f0 [ 980.207074][T23809] walk_component+0xfc/0x5b0 [ 980.207083][T23809] path_lookupat+0x17f/0x770 [ 980.207092][T23809] filename_lookup+0x221/0x5f0 [ 980.207102][T23809] ? __pfx_filename_lookup+0x10/0x10 [ 980.207115][T23809] ? getname_kernel+0x52/0x370 [ 980.207129][T23809] kern_path+0x35/0x50 [ 980.207137][T23809] lookup_bdev+0xd9/0x280 [ 980.207151][T23809] ? __pfx_lookup_bdev+0x10/0x10 [ 980.207163][T23809] ? __pfx___lock_acquire+0x10/0x10 [ 980.207175][T23809] resume_store+0x1d8/0x460 [ 980.207188][T23809] ? __pfx_resume_store+0x10/0x10 [ 980.207202][T23809] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 980.207213][T23809] ? rcu_is_watching+0x12/0xc0 [ 980.207227][T23809] ? __pfx_resume_store+0x10/0x10 [ 980.207239][T23809] kobj_attr_store+0x55/0x80 [ 980.207254][T23809] ? __pfx_kobj_attr_store+0x10/0x10 [ 980.207268][T23809] sysfs_kf_write+0x117/0x170 [ 980.207281][T23809] kernfs_fop_write_iter+0x33d/0x500 [ 980.207292][T23809] ? __pfx_sysfs_kf_write+0x10/0x10 [ 980.207305][T23809] vfs_write+0x5ae/0x1150 [ 980.207314][T23809] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 980.207325][T23809] ? __pfx___mutex_lock+0x10/0x10 [ 980.207339][T23809] ? __pfx_vfs_write+0x10/0x10 [ 980.207351][T23809] ksys_write+0x12b/0x250 [ 980.207360][T23809] ? __pfx_ksys_write+0x10/0x10 [ 980.207370][T23809] __do_fast_syscall_32+0x73/0x120 [ 980.207380][T23809] do_fast_syscall_32+0x32/0x80 [ 980.207388][T23809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 980.207404][T23809] RIP: 0023:0xf7f86579 [ 980.207412][T23809] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 980.207421][T23809] RSP: 002b:00000000f506455c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 980.207431][T23809] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000040 [ 980.207436][T23809] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 980.207442][T23809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 980.207447][T23809] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 980.207453][T23809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 980.207461][T23809] [ 980.668880][T23809] PM: Image not found (code -22) VM DIAGNOSIS: 07:29:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85386df5 RDI=ffffffff9aad2e20 RBP=ffffffff9aad2de0 RSP=ffffc90006fbe8f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e34312e36 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9aad2de0 R15=0000000000000000 RIP=ffffffff85386e1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000583bba0c CR3=000000005673a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff90fe7dbe RBX=0000000000000001 RCX=00000000000335c5 RDX=00000000000335c6 RSI=00000000000a4a25 RDI=00000000000335c5 RBP=ffffc9000315eda8 RSP=ffffc9000315ecf0 R8 =00000000000335c6 R9 =ffffffff90fe7bfa R10=ffffc9000315ed60 R11=0000000000010f4d R12=ffffc9000315edb0 R13=ffffc9000315ed60 R14=ffffc9000315ed95 R15=ffffffff820f4d60 RIP=ffffffff8168cad0 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2eb560 CR3=00000000693dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88802b63ff40 RCX=ffffffff81ad15d4 RDX=ffff88801d2f0000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc9000045fd10 RSP=ffffc9000045fc38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c38dd6 R12=1ffff9200008bf8c R13=0000000000000001 R14=0000000000000003 R15=ffffed10056c7fe9 RIP=ffffffff81b8e611 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000559741a76280 CR3=000000004dca0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000010 RCX=ffffffff84c30284 RDX=0000000000000010 RSI=ffffc90003ccf430 RDI=ffffc90003ccf450 RBP=ffffc90003ccf450 RSP=ffffc90003ccf2b8 R8 =0000000000000006 R9 =0000000000000002 R10=0000000000000b0c R11=0000000000000012 R12=ffffffff8bd32655 R13=ffffc90003ccf430 R14=0000000000000001 R15=0000000000000002 RIP=ffffffff84c2ed39 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007faff5c8fd00 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000559745e7f000 CR3=0000000049a4c000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0800000000000010 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=d45aaccbd45aaccb d45aaccbd45aaccb d45aaccbd45aaccb d45aaccbd45aaccb d45aaccbd45aaccb d45aaccbd45aaccb d45aaccbd45aaccb d45aaccbd45aaccb ZMM22=c7e9ddabc7e9ddab c7e9ddabc7e9ddab c7e9ddabc7e9ddab c7e9ddabc7e9ddab c7e9ddabc7e9ddab c7e9ddabc7e9ddab c7e9ddabc7e9ddab c7e9ddabc7e9ddab ZMM23=ea6e1002ea6e1002 ea6e1002ea6e1002 ea6e1002ea6e1002 ea6e1002ea6e1002 ea6e1002ea6e1002 ea6e1002ea6e1002 ea6e1002ea6e1002 ea6e1002ea6e1002 ZMM24=a34d8ff7a34d8ff7 a34d8ff7a34d8ff7 a34d8ff7a34d8ff7 a34d8ff7a34d8ff7 a34d8ff7a34d8ff7 a34d8ff7a34d8ff7 a34d8ff7a34d8ff7 a34d8ff7a34d8ff7 ZMM25=5b75e9445b75e944 5b75e9445b75e944 5b75e9445b75e944 5b75e9445b75e944 5b75e9445b75e944 5b75e9445b75e944 5b75e9445b75e944 5b75e9445b75e944 ZMM26=2b3932f92b3932f9 2b3932f92b3932f9 2b3932f92b3932f9 2b3932f92b3932f9 2b3932f92b3932f9 2b3932f92b3932f9 2b3932f92b3932f9 2b3932f92b3932f9 ZMM27=1862c2c51862c2c5 1862c2c51862c2c5 1862c2c51862c2c5 1862c2c51862c2c5 1862c2c51862c2c5 1862c2c51862c2c5 1862c2c51862c2c5 1862c2c51862c2c5 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b9210000b9210000 b9210000b9210000 b9210000b9210000 b9210000b9210000 b9210000b9210000 b9210000b9210000 b9210000b9210000 b9210000b9210000