last executing test programs: 21.977159974s ago: executing program 3 (id=230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) fsopen(&(0x7f0000000040)='bdev\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'\x00', 0x1}) sendmsg$netlink(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="780000002e000305000000000000000068000080080000000000000008000000", @ANYRES32, @ANYBLOB="0445520c35b993750d5ed3f1d91c88106baedadf8f481149b82f6d98b69f340364f3d2116621302789616aa82eff0fed5f1cd6c667866abaa865bc5eb7b9a15519e3234cf9a0d0f522734703811ff5a528cef5ad5d7fa6c0a59f284c23e0e77f15b4150541e5c89e0cac0a6b0beb77ed5fc99173e7fd1515b6199c00"/138], 0x78}], 0x1}, 0x0) 21.059609257s ago: executing program 3 (id=231): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @tail_call], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x69, &(0x7f0000000380)=""/105, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x3, 0xffff, 0x80}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000480)=[{0x1, 0x1, 0xb, 0x4}, {0x0, 0x1, 0x8, 0x3}, {0x4, 0x5, 0x8, 0x1}], 0x10, 0x9, @void, @value}, 0x94) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r8, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') r10 = userfaultfd(0x1) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x46a8, 0x0, &(0x7f0000000100), &(0x7f0000000140)) preadv(r9, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 20.993813534s ago: executing program 1 (id=233): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000000)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x134, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty}, {@in, 0x0, 0x6c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x640200, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x14800, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x63) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 20.00775959s ago: executing program 2 (id=236): syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000003000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x20a0}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700", 0x12) r3 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='%(}#\xd6T!]^+:]\xf1]@%,^-.($+|^\x00', 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, 0x0, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_flags_allowed], 0x10000000000000ed) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r6, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @mcast1, @private1, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0xd, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x64020005}, 0x800) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) 19.887584829s ago: executing program 3 (id=237): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18050000000000000000000002000000b7480000000000007b8af8ff00200000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000680)=""/155, 0x9b}, {&(0x7f0000000500)}, {&(0x7f0000000740)=""/131, 0x83}, {&(0x7f0000000800)=""/101, 0x65}, {&(0x7f0000000880)=""/97, 0x61}, {&(0x7f0000000900)=""/169, 0xa9}], 0x7, &(0x7f0000000a00)=""/149, 0x95}}, {{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/14, 0xe}, {&(0x7f0000000b80)=""/108, 0x6c}], 0x2, &(0x7f0000001700)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000000c80)=@generic, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001340)}, 0x6}], 0x3, 0x2085, 0x0) write(r3, &(0x7f0000000000)="38000300010003", 0x7) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r5) request_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='syz', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain) r6 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000002740)={&(0x7f0000000440)=[{0xb9, 0x1800, 0x0, 0x0}, {0x1, 0x1000, 0x1, &(0x7f0000000280)="9d"}], 0x2}) 19.7828879s ago: executing program 1 (id=239): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0xa4, 0x0, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0xa4}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xec) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x6, 0x0, @void}, 0x10) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020842500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa0842, 0x0) splice(r5, 0x0, r6, 0x0, 0xffffffe1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x16c, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x840) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x10, 0x0, 0x7, {[@noop]}}}], 0x28}, 0x0) 19.093681492s ago: executing program 1 (id=240): setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000180), 0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000000)={0x0, r8, r7}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000ac0)={&(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0], 0x9, 0x0, 0x0, 0x10, 0xfff, 0x3ff, 0x3, {0x5, 0x8, 0x7, 0x10, 0xf8, 0x0, 0x2, 0x6, 0x8000, 0x4, 0x2, 0x2c, 0x8, 0x7ff, "6360a63a96390bdb159482c234d0e30cd5524f787142c5184e2420bb1743963f"}}) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4f0, 0x228, 0x228, 0xffffffff, 0x228, 0x0, 0x45c, 0x45c, 0xffffffff, 0x45c, 0x45c, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0xffffffff, 0x0, 'pim6reg\x00', 'dvmrp0\x00', {0x284867cb942d9816}, {}, 0xbc4f28a3537236dc}, 0xac030000, 0x1f4, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x800, 0x81, 0x16, 0x1, 0x11000, 0x3, 0x3, 0x6, 0x0, 0x20}, {0x4}}}, @common=@addrtype={{0x2c}, {0x2}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @private=0xa010102, @icmp_id=0x66, @port=0x4e20}}}}, {{@uncond, 0x0, 0xb8, 0xec, 0x0, {}, [@common=@unspec=@state={{0x24}, {0x10}}, @common=@inet=@set2={{0x24}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @broadcast, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id, @port=0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00, 0xffffff00, 'virt_wifi0\x00', 'ipvlan1\x00', {0xff}, {}, 0x62, 0x2, 0x14}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @gre_key=0x81, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x54c) socket$inet6_tcp(0xa, 0x1, 0x0) 19.008265314s ago: executing program 2 (id=241): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xc, 0x7}, {0x5, 0x2, 0x13, 0x4}, {0x5, 0x1, 0x8, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f00000002c0)={0x0, 0x2}, 0x0) setreuid(0x0, 0x0) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) setresuid(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) 18.932529595s ago: executing program 3 (id=242): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000a00000005000400000000000900020073797a31000000001500030068617368"], 0x64}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) bind$inet(r6, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) recvmmsg(r6, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x230}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r10, 0xf3a, 0x0) vmsplice(r0, &(0x7f0000000840)=[{&(0x7f00000004c0)="cf", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) 17.977126768s ago: executing program 2 (id=244): r0 = syz_io_uring_setup(0xdaa, &(0x7f0000000380)={0x0, 0x0, 0x13291, 0x0, 0x2000}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x1, 0xffffffff, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf800, 0x100000001}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() unshare(0x6a040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd02003200030030000000600000000028320081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = socket$inet(0x2, 0x6, 0x0) shutdown(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x144, 0x2b8, 0x182, 0x144, 0x0, 0x250, 0x3a8, 0x3a8, 0x250, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xdc, 0x144, 0x0, {0x0, 0x1800}, [@common=@unspec=@connbytes={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x374) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 17.965254734s ago: executing program 1 (id=245): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000000)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x134, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty}, {@in, 0x0, 0x6c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x640200, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x14800, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x63) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 17.782928459s ago: executing program 0 (id=246): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0xac, 0x0, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0xac}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xec) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x6, 0x0, @void}, 0x10) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020842500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa0842, 0x0) splice(r5, 0x0, r6, 0x0, 0xffffffe1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x16c, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x840) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x10, 0x0, 0x7, {[@noop]}}}], 0x28}, 0x0) 17.421562538s ago: executing program 3 (id=247): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000000)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x134, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty}, {@in, 0x0, 0x6c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x640200, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x14800, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x63) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 17.216680436s ago: executing program 0 (id=248): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0xa4, 0x0, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0xa4}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xec) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x6, 0x0, @void}, 0x10) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020842500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa0842, 0x0) splice(r5, 0x0, r6, 0x0, 0xffffffe1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x16c, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x840) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x10, 0x0, 0x7, {[@noop]}}}], 0x28}, 0x0) 16.604528299s ago: executing program 0 (id=249): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x0, [0x2, 0x0, 0x78, 0x7ff, 0x1951, 0x51d8, 0x7ff, 0x60f4, 0x100, 0x7, 0x8, 0x4, 0x1006, 0x8, 0xfff8, 0x0, 0x1, 0x9, 0x4, 0x71, 0x6, 0x1, 0x7, 0x7fff, 0xfffa, 0x5, 0x5, 0x8000, 0x40, 0xfd7d, 0x80, 0x3b, 0x401, 0xe, 0x7, 0xa, 0xfb, 0x5, 0x7, 0x0, 0x1, 0x9, 0x6, 0xe0d, 0x10, 0x0, 0x2, 0x5], 0x80000000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYRESOCT=0x0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESHEX=r0, @ANYBLOB]) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f0000000100)=0x10, 0x800) sendmmsg(r3, &(0x7f0000001e40)=[{{&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f00000005c0)}}, {{&(0x7f0000000900)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001b80)=[{0xc, 0x117, 0x9}, {0x50, 0x29, 0x4, "9f1158c531563c2d8af6b443094f41ee596c49446bf1f49c2865c9724cec6f65e2133c93cebff8c48b79417471afc8ad41c4874f1e72bc1d047306a7c372c71732599a"}, {0x1c, 0x104, 0x7, "6a69a2a8213a66a0f4b649e64b59"}, {0xe0, 0x116, 0x3eb5127e, "e1fe17cf2aab4f2990450e710649e50f3a8c8e7de8d238bd5ef4cf84f7e8dfc27e8d0b622d0dafdf91378362ce93a03fc47145f3524fdc7e32d94ea0b891c9eb9b495c13b222b873020957a8bb973545950c006ca25419c99a87ad31065418dc09bc2953fa6b6bbd16bf06442e7e2f62aacf4875a04b6ccda6df98f5bfdfd324ddb5b5e74d3a8a718807b92ca42495b09ebbd624d85ad8015605a3d7621a4dd19770d4b82b58e5fedc179d52154cf2dd047f410525c04fd44cce8ce355fdd959039beae4b9734f70ad02124cb8be9369ed"}, {0xac, 0x114, 0xb6, "75feb5a56925bcf378bc8f8bdb1630f364d5ee878884455de2ed75084f7dce17bf695fa8817f4411e2d616f2378842978a6c811aa8db659de61822e19cc44e7d4c0f84a3e5d770ba7e591ad421347926b2d99fbcd3253e985519b6814d65adce0718cc1e13b150ad272c48aee4bceb6b4ec6f2cf0559d49cb18bcffcfc0c3f07592efc6e4f2dd1859c13efe6186263e08dae297a9ca391b3999dec81c262a14a"}], 0x204}}], 0x2, 0x0) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = epoll_create1(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000001c0)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x8, 0x9, 0x5, 0x3, 0x7, 0x81, 0xf800000000000000, 0x6}, &(0x7f0000000a00)={0x9, 0x100000001, 0x4, 0x8cc, 0x4, 0x4, 0xc8e7, 0x80}, &(0x7f0000000a40)={0x5, 0x5e04, 0x2, 0x7, 0x10001, 0x2, 0x7, 0x2}, &(0x7f0000000b40)={0x0, 0x3938700}, &(0x7f0000000bc0)={&(0x7f0000000b80)={[0x7321cc10, 0x5]}, 0x8}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(r9) accept4$bt_l2cap(r4, &(0x7f0000000c80), 0x0, 0x1000) ioctl$KVM_ASSIGN_SET_MSIX_NR(r8, 0x4008ae73, &(0x7f0000000d00)={0x69a, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r1, 0x40384708, 0x20000000) 16.60421998s ago: executing program 2 (id=250): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f00000027c0)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000003c0), 0x0, r3) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000300)={0x0, 'vxcan1\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @remote}}}, 0x108) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'bridge0\x00', 0x3}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000800"/16], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) r8 = io_uring_setup(0x253d, &(0x7f0000000280)={0x0, 0x547a, 0x8, 0xfffffffd, 0x297}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r9, &(0x7f0000000300)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) close_range(r8, 0xffffffffffffffff, 0x0) 16.405177252s ago: executing program 3 (id=251): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigsuspend(0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000180)={0x2, "3681697a28b903eb08c45248cd46ec2b90fde4bfe866610f223de7d001a76e3a", 0x3}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) pwritev2(r3, &(0x7f00000000c0), 0x0, 0xa, 0x6e6f2b53, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x18, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000001c0)=[@register_looper, @acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x18) 16.270503949s ago: executing program 1 (id=252): socket$nl_route(0x10, 0x3, 0x0) setxattr$trusted_overlay_redirect(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x3) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={"a0453822", 0x0, 0x0, 0x1, 0x0, 0x0, "33793e77c734c4df2a87ba315ab8da", "000100", "00007f10", "8606ba80", ["d8085781ae0cff21223446fe", "51f3d17d0700", "2ce50f8a285d9500c522afe1"]}) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) socket(0x1e, 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, r5, 0x929, 0x2, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2001, 0x0, 0x0, 0x0, 0x0, 0x6}) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) bind$ax25(r7, &(0x7f0000000000)={{0x3, @null, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) r8 = memfd_create(&(0x7f0000000100)='e\x00FN\x01\xff\xfb)\x92e\x83\xe5\x88-\x00', 0x4) pwritev(r8, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r6, r8, 0x0, 0x8000fb00) 16.127058671s ago: executing program 0 (id=253): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x7800, 0x80, 0xd985, 0xb0000000, {{0x16, 0x4, 0x1, 0x1a, 0x58, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast, {[@lsrr={0x83, 0x1b, 0x50, [@local, @local, @rand_addr=0x64010101, @local, @multicast2, @local]}, @ssrr={0x89, 0x27, 0x2f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @rand_addr=0x64010100, @loopback, @multicast2]}, @end]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020007000005009aff000100000d00", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="05000000020000000200"/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) keyctl$set_timeout(0xf, 0x0, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x40000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x1, @capture={0x0, 0x0, {0x0, 0x3}}}) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x10000, &(0x7f0000000280)='\x00') 15.936396657s ago: executing program 2 (id=254): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @tail_call], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x69, &(0x7f0000000380)=""/105, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x3, 0xffff, 0x80}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000480)=[{0x1, 0x1, 0xb, 0x4}, {0x0, 0x1, 0x8, 0x3}, {0x4, 0x5, 0x8, 0x1}], 0x10, 0x9, @void, @value}, 0x94) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r8, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') r10 = userfaultfd(0x1) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x46a8, 0x0, &(0x7f0000000100), &(0x7f0000000140)) preadv(r9, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 15.476333031s ago: executing program 2 (id=255): r0 = syz_io_uring_setup(0xdaa, &(0x7f0000000380)={0x0, 0x0, 0x13291, 0x0, 0x2000}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x1, 0xffffffff, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf800, 0x100000001}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() unshare(0x6a040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd02003200030030000000600000000028320081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = socket$inet(0x2, 0x6, 0x0) shutdown(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x144, 0x2b8, 0x182, 0x144, 0x0, 0x250, 0x3a8, 0x3a8, 0x250, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xdc, 0x144, 0x0, {0x0, 0x1800}, [@common=@unspec=@connbytes={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x374) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010004bb537f90a7ef25a8bffff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800800010067747000300002800800030004000000080004000100000014000800fc010000000000000000000000000000050005"], 0x5c}}, 0x0) 15.214729734s ago: executing program 0 (id=256): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000a00000005000400000000000900020073797a31000000001500030068617368"], 0x64}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) bind$inet(r6, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) recvmmsg(r6, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x230}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r10, 0xf3a, 0x0) vmsplice(r0, &(0x7f0000000840)=[{&(0x7f00000004c0)="cf", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) 15.214424171s ago: executing program 1 (id=257): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r8, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009"], 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0x200, 0x0) 14.196985487s ago: executing program 0 (id=258): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0xa4, 0x0, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0xa4}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xec) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x6, 0x0, @void}, 0x10) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020842500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa0842, 0x0) splice(r5, 0x0, r6, 0x0, 0xffffffe1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x16c, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x840) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x10, 0x0, 0x7, {[@noop]}}}], 0x28}, 0x0) 1.497347089s ago: executing program 32 (id=251): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigsuspend(0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000180)={0x2, "3681697a28b903eb08c45248cd46ec2b90fde4bfe866610f223de7d001a76e3a", 0x3}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) pwritev2(r3, &(0x7f00000000c0), 0x0, 0xa, 0x6e6f2b53, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x18, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000001c0)=[@register_looper, @acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x18) 525.654516ms ago: executing program 33 (id=255): r0 = syz_io_uring_setup(0xdaa, &(0x7f0000000380)={0x0, 0x0, 0x13291, 0x0, 0x2000}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x1, 0xffffffff, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf800, 0x100000001}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() unshare(0x6a040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd02003200030030000000600000000028320081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = socket$inet(0x2, 0x6, 0x0) shutdown(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x144, 0x2b8, 0x182, 0x144, 0x0, 0x250, 0x3a8, 0x3a8, 0x250, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xdc, 0x144, 0x0, {0x0, 0x1800}, [@common=@unspec=@connbytes={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x374) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010004bb537f90a7ef25a8bffff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800800010067747000300002800800030004000000080004000100000014000800fc010000000000000000000000000000050005"], 0x5c}}, 0x0) 0s ago: executing program 34 (id=257): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r8, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009"], 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0x200, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:58592' (ED25519) to the list of known hosts. [ 47.060444][ T5931] cgroup: Unknown subsys name 'net' [ 47.184103][ T5931] cgroup: Unknown subsys name 'cpuset' [ 47.187184][ T5931] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.004797][ T5931] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.166962][ T5308] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.173657][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.176993][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.181915][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.192028][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.196359][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.199498][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.200135][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.203520][ T5957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.205325][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.208125][ T5957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.210968][ T5958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.212939][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.212977][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.213480][ T5957] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.213902][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.214574][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.217345][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.227466][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.237648][ T5953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.239193][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.245317][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.245515][ T5953] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.251444][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.476358][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 51.489969][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 51.555835][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 51.575523][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 51.751657][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.754869][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.757643][ T5950] bridge_slave_0: entered allmulticast mode [ 51.761684][ T5950] bridge_slave_0: entered promiscuous mode [ 51.785248][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.787685][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.790595][ T5947] bridge_slave_0: entered allmulticast mode [ 51.793260][ T5947] bridge_slave_0: entered promiscuous mode [ 51.797547][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.800732][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.803336][ T5947] bridge_slave_1: entered allmulticast mode [ 51.806285][ T5947] bridge_slave_1: entered promiscuous mode [ 51.810223][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.812905][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.815506][ T5950] bridge_slave_1: entered allmulticast mode [ 51.818427][ T5950] bridge_slave_1: entered promiscuous mode [ 51.918175][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.922617][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.925701][ T5943] bridge_slave_0: entered allmulticast mode [ 51.929090][ T5943] bridge_slave_0: entered promiscuous mode [ 51.934693][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.937326][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.940131][ T5955] bridge_slave_0: entered allmulticast mode [ 51.942959][ T5955] bridge_slave_0: entered promiscuous mode [ 51.948685][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.952579][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.957694][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.963492][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.966872][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.969746][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.971814][ T5943] bridge_slave_1: entered allmulticast mode [ 51.974116][ T5943] bridge_slave_1: entered promiscuous mode [ 51.985226][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.987114][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.989029][ T5955] bridge_slave_1: entered allmulticast mode [ 51.991371][ T5955] bridge_slave_1: entered promiscuous mode [ 52.074502][ T5947] team0: Port device team_slave_0 added [ 52.077983][ T5950] team0: Port device team_slave_0 added [ 52.081983][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.085541][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.090568][ T5947] team0: Port device team_slave_1 added [ 52.095411][ T5950] team0: Port device team_slave_1 added [ 52.100970][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.106027][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.218740][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.221310][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.229365][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.236265][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.238779][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.247654][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.255672][ T5943] team0: Port device team_slave_0 added [ 52.261023][ T5955] team0: Port device team_slave_0 added [ 52.263916][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.266040][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.274030][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.278289][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.281197][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.290026][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.299840][ T5943] team0: Port device team_slave_1 added [ 52.303930][ T5955] team0: Port device team_slave_1 added [ 52.358945][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.361678][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.371023][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.415951][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.418492][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.428154][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.433743][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.436180][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.445444][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.452412][ T5950] hsr_slave_0: entered promiscuous mode [ 52.455129][ T5950] hsr_slave_1: entered promiscuous mode [ 52.493209][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.495475][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.504591][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.518904][ T5947] hsr_slave_0: entered promiscuous mode [ 52.522112][ T5947] hsr_slave_1: entered promiscuous mode [ 52.525011][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.527841][ T5947] Cannot create hsr debugfs directory [ 52.630279][ T5955] hsr_slave_0: entered promiscuous mode [ 52.633159][ T5955] hsr_slave_1: entered promiscuous mode [ 52.636031][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.639024][ T5955] Cannot create hsr debugfs directory [ 52.647024][ T5943] hsr_slave_0: entered promiscuous mode [ 52.650256][ T5943] hsr_slave_1: entered promiscuous mode [ 52.652837][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.655401][ T5943] Cannot create hsr debugfs directory [ 52.888495][ T5950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.894802][ T5950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.899483][ T5950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.906900][ T5950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.925246][ T5947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.930164][ T5947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.942902][ T5947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.947232][ T5947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.972476][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.981046][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.985633][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.990889][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.025092][ T5955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.032209][ T5955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.040445][ T5955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.045422][ T5955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.101294][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.123082][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.128044][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.142569][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.145201][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.152350][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.154744][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.167855][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.186408][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.188817][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.194597][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.199018][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.227593][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.235994][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.257088][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.263079][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.279813][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.282291][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.291513][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.294084][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.304943][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.307584][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.310872][ T66] Bluetooth: hci3: command tx timeout [ 53.311175][ T5949] Bluetooth: hci1: command tx timeout [ 53.313513][ T66] Bluetooth: hci0: command tx timeout [ 53.315365][ T5949] Bluetooth: hci2: command tx timeout [ 53.316619][ T5950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.334872][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.337496][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.357850][ T5955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.361253][ T5955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.378215][ T5943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.383546][ T5943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.405529][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.439337][ T5947] veth0_vlan: entered promiscuous mode [ 53.452686][ T5947] veth1_vlan: entered promiscuous mode [ 53.461605][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.482185][ T5947] veth0_macvtap: entered promiscuous mode [ 53.487547][ T5947] veth1_macvtap: entered promiscuous mode [ 53.499132][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.517138][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.522018][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.528939][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.536622][ T5950] veth0_vlan: entered promiscuous mode [ 53.541774][ T5947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.544994][ T5947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.548378][ T5947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.552889][ T5947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.568732][ T5950] veth1_vlan: entered promiscuous mode [ 53.607472][ T5955] veth0_vlan: entered promiscuous mode [ 53.622910][ T5950] veth0_macvtap: entered promiscuous mode [ 53.626953][ T5950] veth1_macvtap: entered promiscuous mode [ 53.637187][ T5943] veth0_vlan: entered promiscuous mode [ 53.644835][ T5955] veth1_vlan: entered promiscuous mode [ 53.665663][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.666887][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.668588][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.676627][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.682796][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.696757][ T5943] veth1_vlan: entered promiscuous mode [ 53.701318][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.703318][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.704129][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.708492][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.709505][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.718935][ T5950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.721666][ T5950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.723985][ T5950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.726282][ T5950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.743381][ T5955] veth0_macvtap: entered promiscuous mode [ 53.752294][ T5955] veth1_macvtap: entered promiscuous mode [ 53.755593][ T5943] veth0_macvtap: entered promiscuous mode [ 53.765637][ T5943] veth1_macvtap: entered promiscuous mode [ 53.767325][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.771852][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.775609][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.779521][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.783633][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.787781][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.803689][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.806493][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.809167][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.812538][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.815876][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.842118][ T5955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.844456][ T5955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.846702][ T5955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.849947][ T5955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.856425][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.861199][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.864694][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.867693][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.871003][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.874494][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.877700][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.886273][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.888386][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.889033][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.892170][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.895511][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.899250][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.902302][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.905049][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.908219][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.918786][ T5943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.921522][ T5943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.923833][ T5943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.926412][ T5943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.940828][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.943555][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.977999][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.981184][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.005489][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.006591][ T6010] overlayfs: failed to resolve './file1': -2 [ 54.007727][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.031539][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.033667][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.034994][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.044853][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.367512][ T6010] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 54.454793][ T6021] xt_connbytes: Forcing CT accounting to be enabled [ 54.468474][ T6021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.479096][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2'. [ 54.665178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.033454][ T6022] fuse: Unknown parameter 'd' [ 55.080485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.436023][ T5949] Bluetooth: hci0: command tx timeout [ 55.437538][ T5949] Bluetooth: hci1: command tx timeout [ 55.439280][ T5949] Bluetooth: hci3: command tx timeout [ 55.442100][ T5949] Bluetooth: hci2: command tx timeout [ 55.691711][ T6013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.093428][ T6035] mkiss: ax0: crc mode is auto. [ 56.183356][ T6038] Zero length message leads to an empty skb [ 56.527693][ T6049] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.212455][ T6056] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 57.339900][ T6056] evm: overlay not supported [ 57.470076][ T5953] Bluetooth: hci2: command tx timeout [ 57.471856][ T5953] Bluetooth: hci3: command tx timeout [ 57.473541][ T5953] Bluetooth: hci1: command tx timeout [ 57.475667][ T5953] Bluetooth: hci0: command tx timeout [ 57.799877][ T6063] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11'. [ 58.099874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 58.110156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 58.175424][ T6072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'. [ 58.329884][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.499729][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 58.503573][ T8] usb 7-1: config 0 has no interfaces? [ 58.506999][ T8] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 58.509488][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.511643][ T8] usb 7-1: Product: syz [ 58.512801][ T8] usb 7-1: Manufacturer: syz [ 58.514000][ T8] usb 7-1: SerialNumber: syz [ 58.521594][ T8] usb 7-1: config 0 descriptor?? [ 58.839886][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 58.844782][ T6084] unsupported nlmsg_type 40 [ 59.156341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 59.158982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.492901][ T6084] orangefs_mount: mount request failed with -4 [ 59.560044][ T5949] Bluetooth: hci0: command tx timeout [ 59.562053][ T5949] Bluetooth: hci1: command tx timeout [ 59.564418][ T5949] Bluetooth: hci3: command tx timeout [ 59.566430][ T5949] Bluetooth: hci2: command tx timeout [ 59.566930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.726321][ T58] usb 7-1: USB disconnect, device number 2 [ 61.121019][ T6110] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.165660][ T6110] capability: warning: `syz.0.22' uses deprecated v2 capabilities in a way that may be insecure [ 61.648131][ T6122] netlink: 168 bytes leftover after parsing attributes in process `syz.3.24'. [ 61.666696][ T6122] loop9: detected capacity change from 0 to 6 [ 61.669883][ T5953] Bluetooth: hci0: command tx timeout [ 61.768342][ T6122] Dev loop9: unable to read RDB block 6 [ 61.770164][ T6122] loop9: unable to read partition table [ 61.772057][ T6122] loop9: partition table beyond EOD, truncated [ 61.773769][ T6122] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 61.773769][ T6122] ) failed (rc=-5) [ 62.170015][ T40] audit: type=1804 audit(1733252124.827:2): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.26" name="/newroot/6/bus/file0" dev="overlay" ino=58 res=1 errno=0 [ 62.741673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.744002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.746498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.843966][ T6140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.853729][ T6140] Cannot find set identified by id 0 to match [ 63.135151][ T6146] mkiss: ax0: crc mode is auto. [ 63.687563][ T6149] mkiss: ax0: crc mode is auto. [ 64.148957][ T6162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'. [ 64.152296][ T6162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'. [ 64.916977][ T40] audit: type=1804 audit(1733252127.657:3): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.36" name="/newroot/9/bus/file0" dev="overlay" ino=83 res=1 errno=0 [ 66.478178][ T6211] pimreg: entered allmulticast mode [ 66.786391][ T40] audit: type=1804 audit(1733252129.527:4): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.45" name="/newroot/10/bus/file0" dev="overlay" ino=91 res=1 errno=0 [ 66.848391][ T6220] netlink: 'syz.0.46': attribute type 1 has an invalid length. [ 66.920664][ T6066] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 68.387424][ T6261] dlm: no local IP address has been set [ 68.390639][ T6261] dlm: cannot start dlm midcomms -107 [ 68.907144][ T6265] Bluetooth: MGMT ver 1.23 [ 77.117438][ T40] audit: type=1804 audit(1733252139.857:5): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.54" name="/newroot/15/bus/file0" dev="overlay" ino=134 res=1 errno=0 [ 77.159512][ T6298] netlink: 'syz.3.57': attribute type 4 has an invalid length. [ 77.185466][ T6298] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 77.187483][ T6298] overlayfs: failed to set xattr on upper [ 77.188982][ T6298] overlayfs: ...falling back to redirect_dir=nofollow. [ 77.191519][ T6298] overlayfs: ...falling back to index=off. [ 77.193086][ T6298] overlayfs: ...falling back to uuid=null. [ 77.903846][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.905607][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.207711][ T40] audit: type=1804 audit(1733252140.947:6): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.59" name="/newroot/14/bus/file0" dev="overlay" ino=121 res=1 errno=0 [ 78.451481][ T6322] netlink: 'syz.2.63': attribute type 1 has an invalid length. [ 78.495001][ T6322] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 78.916979][ T6327] pimreg: entered allmulticast mode [ 78.943169][ T40] audit: type=1804 audit(1733252141.677:7): pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.66" name="/newroot/17/bus/file0" dev="overlay" ino=155 res=1 errno=0 [ 79.730170][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 80.051785][ T6353] Cannot find set identified by id 0 to match [ 80.273407][ T6363] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.198995][ T6385] fuse: Bad value for 'fd' [ 81.328194][ T40] audit: type=1804 audit(1733252144.067:8): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.75" name="/newroot/20/bus/file0" dev="overlay" ino=181 res=1 errno=0 [ 81.348139][ T6390] xt_connbytes: Forcing CT accounting to be enabled [ 81.363298][ T6390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.116987][ T9] cfg80211: failed to load regulatory.db [ 90.333190][ T6425] mkiss: ax0: crc mode is auto. [ 90.432720][ T6429] binder: 6411:6429 ioctl c0046209 0 returned -22 [ 90.494670][ T6428] sp0: Synchronizing with TNC [ 91.365185][ T6448] overlayfs: failed to resolve './file1': -2 [ 92.090092][ T6463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.246135][ T6463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.376395][ T6445] syz.3.83 (6445): drop_caches: 2 [ 92.387790][ T6448] syz.3.83 (6448): drop_caches: 2 [ 92.392517][ T6448] syz.3.83 (6448): drop_caches: 2 [ 92.394718][ T6445] syz.3.83 (6445): drop_caches: 2 [ 92.423042][ T40] audit: type=1804 audit(1733252155.167:9): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.86" name="/newroot/18/bus/file0" dev="overlay" ino=126 res=1 errno=0 [ 92.561658][ T6475] xt_connbytes: Forcing CT accounting to be enabled [ 92.563568][ T6475] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.852444][ T40] audit: type=1804 audit(1733252155.597:10): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.90" name="/newroot/23/bus/file0" dev="overlay" ino=172 res=1 errno=0 [ 92.989465][ T6486] Cannot find set identified by id 0 to match [ 93.312485][ T6490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.672648][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.93'. [ 94.164117][ T6508] dlm: no local IP address has been set [ 94.166435][ T6508] dlm: cannot start dlm midcomms -107 [ 94.401934][ T40] audit: type=1804 audit(1733252157.147:11): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.97" name="/newroot/26/bus/file0" dev="overlay" ino=223 res=1 errno=0 [ 94.519698][ T6515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.554039][ T6515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.583660][ T40] audit: type=1804 audit(1733252157.327:12): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.99" name="/newroot/27/bus/file0" dev="overlay" ino=239 res=1 errno=0 [ 95.231831][ T6527] pimreg: entered allmulticast mode [ 95.770827][ T6537] binder: BINDER_SET_CONTEXT_MGR already set [ 95.772838][ T6537] binder: 6536:6537 ioctl 4018620d 200001c0 returned -16 [ 95.988631][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.151479][ T25] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 96.153698][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.160178][ T25] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 96.162783][ T25] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 96.164853][ T25] usb 5-1: Manufacturer: syz [ 96.174076][ T25] usb 5-1: config 0 descriptor?? [ 96.229800][ T25] rc_core: IR keymap rc-hauppauge not found [ 96.231641][ T25] Registered IR keymap rc-empty [ 96.235085][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 96.238534][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 96.465184][ T6553] usb 2-1: USB disconnect, device number 2 [ 96.583504][ T6554] hub 2-0:1.0: USB hub found [ 96.589817][ T6554] hub 2-0:1.0: 6 ports detected [ 96.614253][ T6553] mkiss: ax0: crc mode is auto. [ 96.799964][ T9] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 96.956902][ T40] audit: type=1804 audit(1733252159.697:13): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.107" name="/newroot/28/bus/file0" dev="overlay" ino=208 res=1 errno=0 [ 97.344699][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 97.348070][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 97.351265][ T9] usb 2-1: Product: QEMU USB Tablet [ 97.354129][ T9] usb 2-1: Manufacturer: QEMU [ 97.356349][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 97.388256][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input6 [ 97.473290][ T9] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 97.487886][ T8] usb 5-1: USB disconnect, device number 2 [ 98.414843][ T6595] sp0: Synchronizing with TNC [ 98.454061][ T40] audit: type=1326 audit(1733252161.197:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.1.114" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x0 [ 98.715339][ T6603] input: syz1 as /devices/virtual/input/input7 [ 100.543729][ T6628] dlm: no local IP address has been set [ 100.545767][ T6628] dlm: cannot start dlm midcomms -107 [ 103.059741][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.219871][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 103.224743][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 103.227641][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 103.231395][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.234681][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.237635][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.241961][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 103.243973][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 103.247502][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.251910][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.255568][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.260867][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 103.263877][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 103.267989][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.272561][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.276496][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.283785][ T9] usb 5-1: string descriptor 0 read error: -22 [ 103.286284][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 103.290015][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.301959][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 103.608651][ T6280] usb 5-1: USB disconnect, device number 3 [ 106.073614][ T6692] overlayfs: failed to resolve './file0': -2 [ 107.378191][ T6712] xt_connbytes: Forcing CT accounting to be enabled [ 107.380797][ T6712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.148364][ T40] audit: type=1326 audit(1733252170.887:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.0.151" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f5f579 code=0x0 [ 109.129012][ T6739] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 109.245562][ T6737] xt_connbytes: Forcing CT accounting to be enabled [ 109.247620][ T6737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.858581][ T6763] overlayfs: failed to resolve './file0': -2 [ 110.503998][ T6771] netlink: 48 bytes leftover after parsing attributes in process `syz.3.153'. [ 111.093127][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.154'. [ 112.046168][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 112.208315][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 112.527096][ T6808] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.548820][ T6810] overlayfs: failed to resolve './file1': -2 [ 112.647313][ T6807] binder_alloc: 6804: binder_alloc_buf, no vma [ 113.959294][ T6834] ata1.00: non-matching transfer count (1530558389/0) [ 114.269818][ T5949] Bluetooth: hci4: command 0x1003 tx timeout [ 114.273335][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 114.604835][ T6843] loop7: detected capacity change from 0 to 16384 [ 115.910402][ T6861] overlayfs: failed to resolve './file1': -2 [ 116.118732][ T6869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.816906][ T6883] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.824286][ T6883] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 117.128993][ T6890] Cannot find set identified by id 0 to match [ 117.543558][ T6896] ata1.00: non-matching transfer count (1530558389/0) [ 118.562280][ T6912] overlayfs: failed to resolve './file1': -2 [ 119.410081][ T6922] overlayfs: missing 'lowerdir' [ 119.554007][ T6930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.982562][ T6939] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 119.985719][ T6939] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 119.987999][ T6939] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 120.103268][ T6942] overlayfs: missing 'lowerdir' [ 121.566437][ T6962] ata1.00: non-matching transfer count (1530558389/0) [ 122.014076][ T6963] ======================================================= [ 122.014076][ T6963] WARNING: The mand mount option has been deprecated and [ 122.014076][ T6963] and is ignored by this kernel. Remove the mand [ 122.014076][ T6963] option from the mount to silence this warning. [ 122.014076][ T6963] ======================================================= [ 122.341203][ T6980] overlayfs: missing 'lowerdir' [ 122.513834][ T6980] xt_connbytes: Forcing CT accounting to be enabled [ 122.516331][ T6980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.166441][ T6988] sp0: Synchronizing with TNC [ 123.252689][ T6988] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 124.453765][ T7008] binder_alloc: 7006: binder_alloc_buf, no vma [ 125.046286][ T7045] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.279937][ T7057] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.282283][ T7057] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.291777][ T7057] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.301511][ T7057] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.303666][ T7057] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.308923][ T7057] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.322762][ T7057] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.324856][ T7057] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.327894][ T7057] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.331956][ T7057] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.334889][ T7057] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.339680][ T7057] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.391270][ T7060] netlink: 'syz.0.211': attribute type 2 has an invalid length. [ 126.396480][ T7060] netlink: 'syz.0.211': attribute type 11 has an invalid length. [ 126.403948][ T7060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.211'. [ 126.919711][ T7071] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 128.029348][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.263564][ T5953] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.350164][ T5953] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.355217][ T5953] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.931627][ T3223] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 129.398426][ T7096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.440013][ T3223] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.443400][ T3223] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 129.446025][ T3223] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.448484][ T3223] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.454436][ T7079] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.463411][ T3223] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.635213][ T7101] xt_connbytes: Forcing CT accounting to be enabled [ 129.641091][ T7101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.094694][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.164802][ T3223] usb 8-1: USB disconnect, device number 2 [ 130.305397][ T5949] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.370336][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.372347][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.571194][ T7115] usb usb7: selecting invalid altsetting 6 [ 131.032715][ T7126] netlink: 'syz.1.225': attribute type 4 has an invalid length. [ 131.084930][ T7126] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 131.086913][ T7126] overlayfs: failed to set xattr on upper [ 131.089063][ T7126] overlayfs: ...falling back to redirect_dir=nofollow. [ 131.093032][ T7126] overlayfs: ...falling back to index=off. [ 131.096213][ T7126] overlayfs: ...falling back to uuid=null. [ 132.166416][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.337736][ T5953] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.420964][ T7149] netlink: 84 bytes leftover after parsing attributes in process `syz.3.230'. [ 132.589510][ T5953] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.589526][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.691393][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 133.420650][ T7165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.232'. [ 133.873013][ T7167] Cannot find set identified by id 0 to match [ 134.618598][ T7193] Bluetooth: MGMT ver 1.23 [ 135.151023][ T7197] Cannot find set identified by id 0 to match [ 136.439919][ T7226] overlayfs: missing 'lowerdir' [ 136.931431][ T7219] xt_connbytes: Forcing CT accounting to be enabled [ 136.931450][ T7219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.148315][ T7254] usb 2-1: USB disconnect, device number 3 [ 138.229507][ T7265] hub 2-0:1.0: USB hub found [ 138.232141][ T7265] hub 2-0:1.0: 6 ports detected [ 138.428670][ T9] usb 2-1: new high-speed USB device number 4 using ehci-pci [ 138.647139][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 138.659318][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 138.664955][ T9] usb 2-1: Product: QEMU USB Tablet [ 138.666711][ T9] usb 2-1: Manufacturer: QEMU [ 138.687397][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 138.755707][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0003/input/input9 [ 138.839695][ T7274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.847596][ T9] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 139.019823][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.022488][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.887331][ T5953] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.283034][ T1412] ================================================================== [ 154.285255][ T1412] BUG: KASAN: slab-use-after-free in uart_write_room+0x85e/0x940 [ 154.287474][ T1412] Read of size 8 at addr ffff888069a3e5f8 by task aoe_tx0/1412 [ 154.290749][ T1412] [ 154.292365][ T1412] CPU: 0 UID: 0 PID: 1412 Comm: aoe_tx0 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 154.295076][ T1412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.297841][ T1412] Call Trace: [ 154.298734][ T1412] [ 154.299516][ T1412] dump_stack_lvl+0x116/0x1f0 [ 154.300769][ T1412] print_report+0xc3/0x620 [ 154.302057][ T1412] ? __virt_addr_valid+0x5e/0x590 [ 154.303441][ T1412] ? __phys_addr+0xc6/0x150 [ 154.304654][ T1412] kasan_report+0xd9/0x110 [ 154.305838][ T1412] ? uart_write_room+0x85e/0x940 [ 154.307148][ T1412] ? uart_write_room+0x85e/0x940 [ 154.308445][ T1412] ? __pfx_uart_write_room+0x10/0x10 [ 154.309823][ T1412] uart_write_room+0x85e/0x940 [ 154.311092][ T1412] ? uart_write+0x2f6/0xb30 [ 154.312274][ T1412] ? __pfx_uart_write_room+0x10/0x10 [ 154.313642][ T1412] tty_write_room+0x63/0x90 [ 154.314842][ T1412] handle_tx+0x151/0x630 [ 154.315957][ T1412] dev_hard_start_xmit+0x9a/0x7b0 [ 154.317271][ T1412] __dev_queue_xmit+0x7f0/0x43e0 [ 154.318549][ T1412] ? __pfx___dev_queue_xmit+0x10/0x10 [ 154.319942][ T1412] ? __pfx___lock_acquire+0x10/0x10 [ 154.321312][ T1412] ? __pfx___lock_acquire+0x10/0x10 [ 154.322697][ T1412] ? lock_acquire.part.0+0x11b/0x380 [ 154.324672][ T1412] ? find_held_lock+0x2d/0x110 [ 154.325974][ T1412] ? find_held_lock+0x2d/0x110 [ 154.327391][ T1412] ? tx+0xa8/0x190 [ 154.328372][ T1412] ? __pfx_lock_release+0x10/0x10 [ 154.329703][ T1412] ? lock_acquire+0x2f/0xb0 [ 154.330905][ T1412] tx+0xcc/0x190 [ 154.331856][ T1412] ? __pfx_tx+0x10/0x10 [ 154.332947][ T1412] kthread+0x1e7/0x3c0 [ 154.334024][ T1412] ? __pfx_kthread+0x10/0x10 [ 154.335147][ T1412] ? __pfx_default_wake_function+0x10/0x10 [ 154.336661][ T1412] ? lockdep_hardirqs_on+0x7c/0x110 [ 154.338025][ T1412] ? __kthread_parkme+0x148/0x220 [ 154.339364][ T1412] ? __pfx_kthread+0x10/0x10 [ 154.340579][ T1412] kthread+0x2c1/0x3a0 [ 154.341675][ T1412] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.343080][ T1412] ? __pfx_kthread+0x10/0x10 [ 154.344299][ T1412] ret_from_fork+0x45/0x80 [ 154.345459][ T1412] ? __pfx_kthread+0x10/0x10 [ 154.346670][ T1412] ret_from_fork_asm+0x1a/0x30 [ 154.347939][ T1412] [ 154.348758][ T1412] [ 154.349405][ T1412] Allocated by task 6035: [ 154.350542][ T1412] kasan_save_stack+0x33/0x60 [ 154.351774][ T1412] kasan_save_track+0x14/0x30 [ 154.353012][ T1412] __kasan_kmalloc+0xaa/0xb0 [ 154.354251][ T1412] alloc_tty_struct+0x98/0x8d0 [ 154.355519][ T1412] tty_init_dev.part.0+0x1e/0x660 [ 154.356818][ T1412] tty_open+0xac1/0xf80 [ 154.357916][ T1412] chrdev_open+0x237/0x6a0 [ 154.359139][ T1412] do_dentry_open+0xf59/0x1ea0 [ 154.360411][ T1412] vfs_open+0x82/0x3f0 [ 154.361543][ T1412] path_openat+0x1e6a/0x2d60 [ 154.362767][ T1412] do_filp_open+0x20c/0x470 [ 154.363963][ T1412] do_sys_openat2+0x17a/0x1e0 [ 154.365206][ T1412] __ia32_compat_sys_openat+0x16e/0x210 [ 154.366672][ T1412] __do_fast_syscall_32+0x73/0x120 [ 154.367975][ T1412] do_fast_syscall_32+0x32/0x80 [ 154.369254][ T1412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.370912][ T1412] [ 154.371542][ T1412] Freed by task 58: [ 154.372560][ T1412] kasan_save_stack+0x33/0x60 [ 154.373765][ T1412] kasan_save_track+0x14/0x30 [ 154.374919][ T1412] kasan_save_free_info+0x3b/0x60 [ 154.376157][ T1412] __kasan_slab_free+0x51/0x70 [ 154.377354][ T1412] kfree+0x14f/0x4b0 [ 154.378347][ T1412] process_one_work+0x958/0x1b30 [ 154.379621][ T1412] worker_thread+0x6c8/0xf00 [ 154.380849][ T1412] kthread+0x2c1/0x3a0 [ 154.381952][ T1412] ret_from_fork+0x45/0x80 [ 154.383137][ T1412] ret_from_fork_asm+0x1a/0x30 [ 154.384388][ T1412] [ 154.385021][ T1412] Last potentially related work creation: [ 154.386506][ T1412] kasan_save_stack+0x33/0x60 [ 154.387723][ T1412] __kasan_record_aux_stack+0xba/0xd0 [ 154.389672][ T1412] insert_work+0x36/0x230 [ 154.390852][ T1412] __queue_work+0x97e/0x1080 [ 154.392075][ T1412] queue_work_on+0x11a/0x140 [ 154.393284][ T1412] release_tty+0x4de/0x5d0 [ 154.394462][ T1412] tty_release_struct+0xb7/0xe0 [ 154.395727][ T1412] tty_release+0xe25/0x1410 [ 154.396928][ T1412] __fput+0x3f8/0xb60 [ 154.397977][ T1412] task_work_run+0x14e/0x250 [ 154.399336][ T1412] do_exit+0xadd/0x2d70 [ 154.400535][ T1412] do_group_exit+0xd3/0x2a0 [ 154.401749][ T1412] get_signal+0x2576/0x2610 [ 154.402958][ T1412] arch_do_signal_or_restart+0x90/0x7e0 [ 154.404408][ T1412] syscall_exit_to_user_mode+0x150/0x2a0 [ 154.405891][ T1412] __do_fast_syscall_32+0x80/0x120 [ 154.407261][ T1412] do_fast_syscall_32+0x32/0x80 [ 154.408549][ T1412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.410242][ T1412] [ 154.410887][ T1412] The buggy address belongs to the object at ffff888069a3e000 [ 154.410887][ T1412] which belongs to the cache kmalloc-cg-2k of size 2048 [ 154.414526][ T1412] The buggy address is located 1528 bytes inside of [ 154.414526][ T1412] freed 2048-byte region [ffff888069a3e000, ffff888069a3e800) [ 154.418059][ T1412] [ 154.418697][ T1412] The buggy address belongs to the physical page: [ 154.420361][ T1412] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888069a3a000 pfn:0x69a38 [ 154.423005][ T1412] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 154.425166][ T1412] memcg:ffff88805ade6581 [ 154.426267][ T1412] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 154.428495][ T1412] page_type: f5(slab) [ 154.429538][ T1412] raw: 04fff00000000240 ffff88801ac50140 ffffea00013d6010 ffffea0001a45a10 [ 154.431740][ T1412] raw: ffff888069a3a000 0000000000080007 00000001f5000000 ffff88805ade6581 [ 154.433950][ T1412] head: 04fff00000000240 ffff88801ac50140 ffffea00013d6010 ffffea0001a45a10 [ 154.436188][ T1412] head: ffff888069a3a000 0000000000080007 00000001f5000000 ffff88805ade6581 [ 154.438431][ T1412] head: 04fff00000000003 ffffea0001a68e01 ffffffffffffffff 0000000000000000 [ 154.440735][ T1412] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 154.442958][ T1412] page dumped because: kasan: bad access detected [ 154.444602][ T1412] page_owner tracks the page as allocated [ 154.445908][ T1412] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6010, tgid 6009 (syz.0.1), ts 54029321825, free_ts 53980284476 [ 154.451151][ T1412] post_alloc_hook+0x2d1/0x350 [ 154.452395][ T1412] get_page_from_freelist+0xfce/0x2f80 [ 154.453802][ T1412] __alloc_pages_noprof+0x223/0x25b0 [ 154.455960][ T1412] alloc_pages_mpol_noprof+0x2c9/0x610 [ 154.457566][ T1412] new_slab+0x2c9/0x410 [ 154.458677][ T1412] ___slab_alloc+0xd1d/0x16e0 [ 154.459914][ T1412] __slab_alloc.constprop.0+0x56/0xb0 [ 154.461334][ T1412] __kmalloc_node_track_caller_noprof+0x2ee/0x520 [ 154.463040][ T1412] kmemdup_noprof+0x29/0x60 [ 154.464347][ T1412] __devinet_sysctl_register+0xbc/0x360 [ 154.465791][ T1412] devinet_init_net+0x33d/0x8f0 [ 154.467038][ T1412] ops_init+0x1df/0x5f0 [ 154.468146][ T1412] setup_net+0x21f/0x860 [ 154.469270][ T1412] copy_net_ns+0x2b4/0x6b0 [ 154.470457][ T1412] create_new_namespaces+0x3ea/0xad0 [ 154.471857][ T1412] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 154.473319][ T1412] page last free pid 5950 tgid 5950 stack trace: [ 154.474966][ T1412] free_unref_page+0x661/0x1080 [ 154.476236][ T1412] __put_partials+0x14c/0x170 [ 154.477474][ T1412] qlist_free_all+0x4e/0x120 [ 154.478713][ T1412] kasan_quarantine_reduce+0x195/0x1e0 [ 154.480215][ T1412] __kasan_slab_alloc+0x69/0x90 [ 154.481666][ T1412] __kmalloc_cache_node_noprof+0x1ee/0x3f0 [ 154.483336][ T1412] __get_vm_area_node+0x101/0x2f0 [ 154.484694][ T1412] __vmalloc_node_range_noprof+0x26a/0x1530 [ 154.486258][ T1412] vmalloc_noprof+0x6b/0x90 [ 154.487452][ T1412] xt_compat_init_offsets+0xe1/0x1f0 [ 154.488835][ T1412] compat_table_info+0xb7/0x5f0 [ 154.490117][ T1412] get_info+0x2ed/0x750 [ 154.491222][ T1412] do_ip6t_get_ctl+0x16a/0xaf0 [ 154.492499][ T1412] nf_getsockopt+0x79/0xe0 [ 154.493671][ T1412] ipv6_getsockopt+0x1f7/0x280 [ 154.494937][ T1412] tcp_getsockopt+0x9e/0x100 [ 154.496146][ T1412] [ 154.496772][ T1412] Memory state around the buggy address: [ 154.498221][ T1412] ffff888069a3e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.500293][ T1412] ffff888069a3e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.502368][ T1412] >ffff888069a3e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.504437][ T1412] ^ [ 154.506468][ T1412] ffff888069a3e600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.508515][ T1412] ffff888069a3e680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.510552][ T1412] ================================================================== [ 154.512676][ T1412] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 154.514563][ T1412] CPU: 0 UID: 0 PID: 1412 Comm: aoe_tx0 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 154.517214][ T1412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.521235][ T1412] Call Trace: [ 154.522045][ T1412] [ 154.522775][ T1412] dump_stack_lvl+0x3d/0x1f0 [ 154.524006][ T1412] panic+0x71d/0x800 [ 154.525040][ T1412] ? mark_held_locks+0x9f/0xe0 [ 154.526301][ T1412] ? __pfx_panic+0x10/0x10 [ 154.527483][ T1412] ? irqentry_exit+0x3b/0x90 [ 154.528677][ T1412] ? lockdep_hardirqs_on+0x7c/0x110 [ 154.529975][ T1412] ? check_panic_on_warn+0x1f/0xb0 [ 154.531317][ T1412] check_panic_on_warn+0xab/0xb0 [ 154.532612][ T1412] end_report+0x117/0x180 [ 154.533753][ T1412] kasan_report+0xe9/0x110 [ 154.534851][ T1412] ? uart_write_room+0x85e/0x940 [ 154.536158][ T1412] ? uart_write_room+0x85e/0x940 [ 154.537454][ T1412] ? __pfx_uart_write_room+0x10/0x10 [ 154.538846][ T1412] uart_write_room+0x85e/0x940 [ 154.540107][ T1412] ? uart_write+0x2f6/0xb30 [ 154.541397][ T1412] ? __pfx_uart_write_room+0x10/0x10 [ 154.542949][ T1412] tty_write_room+0x63/0x90 [ 154.544141][ T1412] handle_tx+0x151/0x630 [ 154.545287][ T1412] dev_hard_start_xmit+0x9a/0x7b0 [ 154.546671][ T1412] __dev_queue_xmit+0x7f0/0x43e0 [ 154.547971][ T1412] ? __pfx___dev_queue_xmit+0x10/0x10 [ 154.549355][ T1412] ? __pfx___lock_acquire+0x10/0x10 [ 154.550731][ T1412] ? __pfx___lock_acquire+0x10/0x10 [ 154.552101][ T1412] ? lock_acquire.part.0+0x11b/0x380 [ 154.553487][ T1412] ? find_held_lock+0x2d/0x110 [ 154.554765][ T1412] ? find_held_lock+0x2d/0x110 [ 154.556013][ T1412] ? tx+0xa8/0x190 [ 154.556934][ T1412] ? __pfx_lock_release+0x10/0x10 [ 154.558266][ T1412] ? lock_acquire+0x2f/0xb0 [ 154.559458][ T1412] tx+0xcc/0x190 [ 154.560410][ T1412] ? __pfx_tx+0x10/0x10 [ 154.561521][ T1412] kthread+0x1e7/0x3c0 [ 154.562604][ T1412] ? __pfx_kthread+0x10/0x10 [ 154.563815][ T1412] ? __pfx_default_wake_function+0x10/0x10 [ 154.565332][ T1412] ? lockdep_hardirqs_on+0x7c/0x110 [ 154.566683][ T1412] ? __kthread_parkme+0x148/0x220 [ 154.568015][ T1412] ? __pfx_kthread+0x10/0x10 [ 154.569222][ T1412] kthread+0x2c1/0x3a0 [ 154.570295][ T1412] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.571638][ T1412] ? __pfx_kthread+0x10/0x10 [ 154.572845][ T1412] ret_from_fork+0x45/0x80 [ 154.574008][ T1412] ? __pfx_kthread+0x10/0x10 [ 154.575204][ T1412] ret_from_fork_asm+0x1a/0x30 [ 154.576405][ T1412] [ 154.577807][ T1412] Kernel Offset: disabled [ 154.578923][ T1412] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:56:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851531d5 RDI=ffffffff9a6682c0 RBP=ffffffff9a668280 RSP=ffffc900078ff430 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000030 R14=ffffffff85153170 R15=0000000000000000 RIP=ffffffff851531ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002008c000 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000047c41b RBX=0000000000000001 RCX=ffffffff8b1ab889 RDX=0000000000000000 RSI=ffffffff8b4cd0e0 RDI=ffffffff8bb136c0 RBP=ffffed10039db910 RSP=ffffc9000047fe08 R8 =0000000000000001 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801cedc880 R14=ffffffff901cb190 R15=0000000000000000 RIP=ffffffff8b1acc6f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000200ab000 CR3=000000004c07a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=1ffffffff2d4ad58 RDX=ffff88802592c880 RSI=ffffffff81484a34 RDI=ffffffff8bb136c0 RBP=ffff888069815d00 RSP=ffffc900032ff7c8 R8 =0000000000000001 R9 =fffffbfff2d36fca R10=ffffffff969b7e57 R11=0000000000000b8f R12=0000000000000003 R13=0000000000000003 R14=ffff88802b63fc40 R15=ffffed100d302ba0 RIP=ffffffff81484a36 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f2d50210 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=6229b87eb7a68924 72fd5b8b6f965b21 6229b87eb7a68924 72fd5b8b6f965b21 6229b87eb7a68924 72fd5b8b6f965b21 6229b87eb7a68924 72fd5b8b6f965b21 ZMM18=7319243aec1bbdd3 386f7a48bd8decbb 7319243aec1bbdd3 386f7a48bd8decbb 7319243aec1bbdd3 386f7a48bd8decbb 7319243aec1bbdd3 386f7a48bd8decbb ZMM19=b208000000000000 000000000000001e b208000000000000 000000000000001d b208000000000000 000000000000001c b208000000000000 000000000000001b ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=72fd5b8b72fd5b8b 72fd5b8b72fd5b8b 72fd5b8b72fd5b8b 72fd5b8b72fd5b8b 72fd5b8b72fd5b8b 72fd5b8b72fd5b8b 72fd5b8b72fd5b8b 72fd5b8b72fd5b8b ZMM22=b7a68924b7a68924 b7a68924b7a68924 b7a68924b7a68924 b7a68924b7a68924 b7a68924b7a68924 b7a68924b7a68924 b7a68924b7a68924 b7a68924b7a68924 ZMM23=6229b87e6229b87e 6229b87e6229b87e 6229b87e6229b87e 6229b87e6229b87e 6229b87e6229b87e 6229b87e6229b87e 6229b87e6229b87e 6229b87e6229b87e ZMM24=bd8decbbbd8decbb bd8decbbbd8decbb bd8decbbbd8decbb bd8decbbbd8decbb bd8decbbbd8decbb bd8decbbbd8decbb bd8decbbbd8decbb bd8decbbbd8decbb ZMM25=386f7a48386f7a48 386f7a48386f7a48 386f7a48386f7a48 386f7a48386f7a48 386f7a48386f7a48 386f7a48386f7a48 386f7a48386f7a48 386f7a48386f7a48 ZMM26=ec1bbdd3ec1bbdd3 ec1bbdd3ec1bbdd3 ec1bbdd3ec1bbdd3 ec1bbdd3ec1bbdd3 ec1bbdd3ec1bbdd3 ec1bbdd3ec1bbdd3 ec1bbdd3ec1bbdd3 ec1bbdd3ec1bbdd3 ZMM27=7319243a7319243a 7319243a7319243a 7319243a7319243a 7319243a7319243a 7319243a7319243a 7319243a7319243a 7319243a7319243a 7319243a7319243a ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b2080000b2080000 b2080000b2080000 b2080000b2080000 b2080000b2080000 b2080000b2080000 b2080000b2080000 b2080000b2080000 b2080000b2080000 info registers vcpu 3 CPU#3 RAX=00000000001def2b RBX=0000000000000003 RCX=ffffffff8b1ab889 RDX=0000000000000000 RSI=ffffffff8b4cd0e0 RDI=ffffffff8bb136c0 RBP=ffffed10036ec488 RSP=ffffc9000049fe08 R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801b762440 R14=ffffffff901cb190 R15=0000000000000000 RIP=ffffffff8b1acc6f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f485dd3f445 CR3=00000000490ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=0000000019f801ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000021f46aa3 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 404ff8d500000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6970726100656c 69666f7270000920 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c0fe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000000000000 00000000000080fe ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000000000000 00000000000080fe ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000148000056 4a1a2e41d0000000 0000000000000072 656c6c616b7a7973 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6864203a73250070 6475646e65735f70 636864203a732500 73646e6f63657320 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d41051f56000055 4150414b40565f55 464d41051f560000 56414b4a46405605 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361657200383517 353d646970006e69 622f7273755b4907 053d5b490b1c1316 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000065676173 73656d5f70636864 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f636f746f727021 306874653d656361 667265740b0e6136 212c3d07355e060b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f6f777f7f777f 757f7f7f7f7f6f7f 667f777f7f5f7b3f 357d7f7f3f5f571f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020