last executing test programs: 12m33.466576568s ago: executing program 32 (id=69): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x4, 0x8}, 0x48) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_emit_ethernet(0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x3, 0xffff2d34, 0xffffff01, 0x6, 0x4, 0x10003, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x7, 0x7, 0x6, 0x0, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0xc, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0xb, 0x6c7, 0x9, 0xfffffffc, 0x1000, 0x0, 0x0, 0x205, 0x442f, 0x200000e, 0x6, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4402, 0x401, 0x6, 0x1, 0xfc, 0x6, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x7, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x80000000, 0x5, 0xf, 0x4, 0x6, 0x805, 0x5, 0x8, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x1ff, 0x2, 0x2, 0x2, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800006, 0x200, 0x1006a, 0x40000001, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x20000005, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x9db, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x7ff, 0x7fff, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x9, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x69, 0x10, 0xa8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 11m55.482939017s ago: executing program 1 (id=296): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x44000000}, 0x20044040) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) process_vm_writev(0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) 11m52.223038909s ago: executing program 1 (id=310): move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x34, r1, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000140)={0x2, 0x40}, 0x20) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0x80}}, 0x20000805) (async, rerun: 64) r2 = shmget$private(0x0, 0xd000, 0x0, &(0x7f0000009000/0xd000)=nil) (rerun: 64) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async, rerun: 32) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32) madvise(&(0x7f0000450000/0x3000)=nil, 0x3000, 0x12) 11m47.93466688s ago: executing program 1 (id=321): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000a40)=0x8000, 0x4) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x38) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[], 0x48) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r6, &(0x7f0000000040)='add syz0 ::', 0xb) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="f80000000206030000000000000000000700000505000400010000000900020073797a310000e5000900020073797a3000000000050005000a00000014000300686173683a69702c706f72742c69700005000400000000005c00078018000280140002400000000000000000000000000000000108001340fffffffe080008400000002808000840000000c20800094000000001060004404e2000001800028014000240fe800000000000000000000000000004000000060005404e23000018000280140000000500070004000000080006400000006b08000b4000000003"], 0xf8}, 0x1, 0x0, 0x0, 0x2400880a}, 0x80) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xec, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fc"}, {0x18, 0x0, 0x800, "c133a12a91872b3730"}, {0x38, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b21"}, {0x28, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0xc, 0x113, 0x9}, {0xc, 0x110, 0x4}], 0x17c}, 0x4000c010) 11m47.803866687s ago: executing program 1 (id=322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000003"], 0x14}}, 0x0) 11m47.725313555s ago: executing program 1 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x4, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00', 0x10}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x74}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4001) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$random(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtaction={0x112c, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1118, 0x1, [@m_police={0x1114, 0x1, 0x0, 0x0, {{0xb}, {0x10e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x25242e8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0xad8, 0x10001, 0x8001, 0x5, 0x7fff, 0xfffffff6, 0xfffffff4, 0x46, 0x5, 0x8, 0x0, 0x1, 0xd7, 0x0, 0x97, 0x8000, 0xa3, 0x3, 0x7, 0x100, 0x44a8, 0x6, 0x8001, 0x0, 0x7, 0xc4c7, 0x7ff, 0x44, 0x3, 0x0, 0x8, 0x8, 0x28, 0x8, 0x213580fd, 0x2, 0x1, 0x0, 0x5, 0x3, 0x31, 0x7, 0x200, 0x76, 0xec8a, 0x5, 0xe, 0x101, 0x0, 0xe5, 0xc, 0x5, 0x7, 0x4, 0x2, 0x0, 0x80dd, 0xb0, 0x35a26e02, 0xffff, 0xbf, 0x83b, 0x2, 0x200000, 0x8c, 0x2bf, 0x81a8, 0x8, 0x100, 0x3, 0x400, 0x0, 0x7, 0x2, 0x0, 0xffffffff, 0x6, 0x9, 0x237, 0x8, 0xb1, 0x7, 0x11, 0x3, 0xfd, 0xb55, 0x8000, 0x5, 0x6, 0xffffffcd, 0x2, 0x4, 0x80000000, 0x9, 0x7, 0x5, 0xc56a, 0x8, 0xffff, 0x2, 0x3, 0x5c, 0x8, 0x0, 0x6, 0x3, 0x50, 0x10000, 0x8001, 0x5, 0x1, 0x6, 0x7, 0xd, 0x9, 0x10000, 0x19, 0x91d, 0x3, 0x2, 0x1, 0x3, 0x3, 0x7ff, 0x401, 0x7, 0xd70, 0x2c, 0x9, 0x3, 0x6070, 0xfff, 0x1000, 0x8, 0x4, 0x6, 0x5, 0x4, 0x7c, 0x488531db, 0x40, 0x6, 0x5, 0xfffffffb, 0x1000000, 0x1ff, 0x5, 0xc7, 0x0, 0x8, 0x5, 0x5, 0x7, 0xfffffffb, 0x5, 0x5c, 0x1000, 0x3, 0x527, 0x3, 0x5a85, 0xf6, 0xc, 0x1, 0xaa7a, 0x6, 0x1, 0xee1, 0x80000000, 0x825f, 0x9, 0x40, 0x233, 0x80000001, 0x6, 0x401, 0x9, 0x618, 0x6, 0x4, 0x1, 0x846, 0x7, 0xb46, 0x9, 0x1ff, 0xe0, 0x4, 0xd, 0x1, 0xc98, 0x3, 0xffff8000, 0xc, 0x6, 0xfe, 0x1, 0x8, 0x2, 0x2, 0x2, 0xbecd, 0x9, 0x3, 0xba, 0x400, 0x8fe1, 0x371, 0x80, 0x2, 0x8000, 0x10000, 0x9, 0x5, 0x6e36c67d, 0xbe4, 0x7f, 0x1, 0x7, 0x2, 0x3, 0x1, 0x64, 0x8843, 0x6, 0x80, 0x3, 0x6, 0xfffffe01, 0x5, 0x8001, 0xfffffff7, 0x9, 0x9, 0x3ff, 0x751, 0x0, 0x1, 0x8, 0xfffffff3, 0xe, 0x7fff, 0xff, 0x800, 0x3, 0xd, 0x80000000, 0xe, 0xc0, 0x6, 0x6397, 0x9f9, 0x239, 0x89e4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x38f43bb0}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5e5, 0x0, 0x1, 0xa, 0x2, 0x5, 0x0, 0x5, 0x7, 0x2, 0x4, 0x0, 0x2, 0x1000, 0x7fffffff, 0x80, 0x6, 0x0, 0xffffffff, 0xaffc, 0x1, 0x34, 0x1, 0x4, 0x1, 0x5, 0x9, 0x4, 0x4, 0x1, 0x151d, 0x5, 0x6, 0xfffffffa, 0xd, 0xebc, 0x8, 0x752e, 0x8, 0x289, 0x100, 0xffffffff, 0x7f, 0x7fffffff, 0x101, 0x7f, 0x2, 0x5, 0x5, 0xfffffff7, 0x1, 0x5, 0x3, 0xd, 0x0, 0x7f, 0xffff2a91, 0x3, 0x100, 0x5, 0x2ce, 0x7f, 0xc14, 0xfff, 0x6, 0xfffffff7, 0x5, 0xd9, 0xffff6d2d, 0x7e, 0x0, 0x2, 0x4, 0xd1, 0x0, 0x0, 0x85, 0x1, 0xadfb, 0xd34, 0x9, 0xf324, 0x2000, 0x1, 0x5, 0x80, 0x1000, 0x0, 0x0, 0xecc1, 0xc, 0x1000, 0x7fffffff, 0x4, 0x4, 0x0, 0xfff, 0x7, 0x4, 0x7, 0x22, 0xa, 0x3, 0x2, 0x3e78, 0x134, 0x9, 0x80000001, 0x608, 0x80e8, 0x371, 0x8, 0x6f, 0x0, 0xfffff801, 0x6, 0x0, 0x4, 0x5, 0xffff, 0x0, 0x720fbc85, 0x101, 0x1ff, 0x48, 0xa3f, 0x4, 0xf46b, 0x9, 0x0, 0x4, 0x9, 0x401, 0x81, 0x84c, 0x6, 0x3, 0x5, 0xffff, 0x6, 0x7, 0x31a, 0xa, 0x9, 0xc16, 0x3ff, 0x0, 0x8001, 0x9, 0x1ff, 0x4, 0x68000000, 0x5, 0xfff, 0x800, 0x4, 0x30e9, 0x1, 0x9, 0x6, 0xec, 0x0, 0x7, 0x1, 0x8, 0xe0000, 0x0, 0x7, 0x8000000, 0x3, 0x7f, 0x1ff, 0x2, 0x9, 0x0, 0xfffffff1, 0xeb, 0x6, 0x10000, 0x0, 0x3, 0x6, 0x9, 0xdbe, 0x1000, 0x800, 0x3, 0x2, 0x3, 0x10001, 0xa, 0x7, 0x4, 0x4, 0xffffffff, 0x8, 0x0, 0x8000, 0x7, 0x8, 0x2, 0x8, 0x9, 0x238, 0x800, 0xffffffff, 0x4, 0x5, 0x9, 0x3c, 0x8000, 0x5, 0x1, 0x400, 0x2, 0xd, 0x200, 0xc, 0x2, 0x3, 0x1ff, 0x4, 0x0, 0x212c6b57, 0x75, 0x7, 0x70, 0xfffff219, 0xffffffc0, 0x2, 0x200, 0x6c, 0x7, 0x6, 0x9, 0x6bb1, 0x6, 0x8, 0x1, 0x9, 0x6a, 0xbf, 0x2, 0x2, 0x9, 0x9, 0x2, 0x9, 0x1, 0xc, 0x9, 0x8, 0x10000, 0x7, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6000, 0x5, 0x757ab92d, 0x9b5, 0x3, {0x3, 0x0, 0x0, 0x3, 0x7, 0x8}, {0x1, 0x1, 0x3, 0xe5e, 0x7ff, 0x8}, 0xe, 0x8, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x5, 0x7fffffff, 0xfffffffe, {0x2, 0x2, 0x7, 0x8001, 0x101, 0x656}, {0x4, 0x1, 0x80, 0xfad, 0xe, 0x3}, 0x0, 0x9, 0xffff}}], [@TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0x3, 0xfffffff7, 0x1ff, 0x8, 0x4, 0x10000, 0x7fffffff, 0x0, 0x3ff, 0x9, 0x200, 0x7fff, 0x4, 0x8, 0x9000000, 0x1, 0xa, 0xffff751a, 0x1, 0x6, 0xc9e8, 0x8001, 0xffff, 0x9, 0xb, 0x8, 0x7, 0x100, 0xf, 0x2, 0x5, 0x38, 0x0, 0x5b2d, 0x0, 0x5, 0x5, 0x5, 0x9, 0x6, 0x3ff, 0x6, 0x5, 0x21, 0x1, 0x8, 0x9, 0x5, 0xf0c, 0x4, 0x1, 0xc48, 0x60000, 0x10001, 0x62e5, 0xf5, 0x3, 0x4, 0x6, 0x8, 0x6, 0x4, 0x7fff, 0x4, 0xb7, 0x4, 0x9, 0xdaff, 0xdca, 0x6711, 0x2, 0x6, 0x10001, 0x4, 0x101, 0x3, 0xde5, 0x3, 0x401, 0xffffffbc, 0x8000, 0x1, 0x6, 0xa9, 0x7, 0x9, 0x4, 0x8, 0x3, 0x1, 0xc, 0x4, 0x3, 0x6, 0x0, 0xf5, 0xf, 0x8, 0x1, 0x5, 0x3, 0x6b, 0x6, 0x8, 0x8001, 0x4, 0x0, 0x7, 0x7fff, 0x4, 0x0, 0x8, 0x9f4d, 0x9, 0x1000, 0xa10, 0x6, 0x0, 0x7, 0x7, 0x5, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x9, 0x3, 0x5, 0x717, 0x5, 0x5, 0x4, 0x75, 0x401, 0x6, 0x5, 0x7, 0xd9e, 0x0, 0x7, 0x0, 0x97e2, 0x6, 0x6, 0x1ff, 0x6, 0xfffffffa, 0x2, 0x1000, 0x4, 0x800, 0xfffffff9, 0x8001, 0x3, 0x6, 0x69, 0x0, 0x6, 0x401, 0x474, 0x6, 0x1, 0x0, 0x7b75b7e8, 0xd, 0x401, 0xff, 0x3, 0xd93a, 0x6, 0xb98, 0x0, 0x401, 0x2, 0x6, 0x58, 0x3, 0x38f08769, 0xa78e, 0x7, 0x6, 0x7fff, 0x5, 0xa1b6, 0x5e5a, 0x9, 0x1, 0x1, 0x2, 0x1, 0x6, 0x2, 0xff, 0x4000, 0x0, 0x3, 0xb, 0x9, 0xc060da9, 0x8, 0xfffffffc, 0x0, 0x0, 0x1, 0x6, 0x9, 0x10, 0xa2, 0x2, 0xfffffffc, 0x10, 0x5, 0x4, 0x7392, 0x1, 0x2, 0x6, 0x6, 0x4, 0x9, 0xb1e2, 0x2, 0x1, 0xff, 0x6281, 0x5f, 0xc, 0x0, 0x2, 0x0, 0x7, 0xf987, 0xfffffff7, 0x3, 0x8, 0x2, 0x401, 0x6, 0x2, 0xb, 0x80, 0xfffffff7, 0x1, 0xffffad25, 0xa03, 0xff, 0x0, 0x2, 0x4, 0x4, 0x81, 0x4, 0x3, 0xf]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0xd4e4, 0x40, 0x3, 0x6, 0x64b8, 0x155a, 0x1000, 0x5dd900, 0x7ff, 0x2800000, 0x401, 0x5d, 0x6, 0xffff, 0x6, 0x80, 0x101, 0x3005f5ab, 0x3b7e6b03, 0xfff, 0x5, 0x2, 0x10000, 0xe, 0x8, 0x4, 0x8, 0x2, 0x7fffffff, 0x566, 0xb1, 0x5, 0x0, 0x0, 0x4, 0x81, 0x1, 0x8, 0x10001, 0x3, 0x0, 0x30000, 0x2, 0x0, 0x1, 0x0, 0x2, 0x2, 0x1, 0x0, 0x2, 0x0, 0x5, 0x1, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x9, 0xfffffffb, 0x8, 0x3, 0xc00000, 0x5da, 0xffff7fff, 0x787, 0x7, 0x5, 0x8, 0x6a65, 0x1, 0x0, 0x5, 0xd6, 0x9, 0x6, 0x3, 0xa, 0xa0b0, 0xffffff81, 0x3ff, 0x1ff, 0xfffffff6, 0xa, 0xf, 0x6, 0x6, 0x7fffffff, 0x3, 0x10000, 0x31a2, 0x10000, 0x9, 0x5d86a571, 0x101, 0x8, 0x9, 0x1, 0x3, 0x2, 0x3, 0xa361, 0x4, 0xfffffff8, 0x80000000, 0x10001, 0xe, 0x2, 0x3d7a3cad, 0xcba, 0x7, 0x8, 0x7, 0x4, 0x800, 0x2, 0x2, 0x7, 0xfffffe00, 0x9, 0xbb7, 0x10, 0x9, 0x1, 0x5, 0x0, 0xff, 0xf, 0x45f, 0x7, 0x6, 0x9, 0x3, 0x7, 0x9, 0xfffffc01, 0x1b9, 0x1ff, 0x10000, 0x2, 0x8, 0xf, 0x5, 0x2, 0x3, 0xecd4, 0xd7, 0x7, 0x6, 0x7, 0x5, 0x7, 0x4, 0x78ad195f, 0x2, 0x6, 0xc, 0x1, 0x7, 0x76, 0xffffffff, 0x4, 0x8, 0x3, 0x7, 0x4, 0x400, 0x5, 0x0, 0x7, 0x2, 0xff, 0xbcdc, 0x40, 0x5, 0x5, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x39f6, 0xfff, 0x40, 0x5, 0xbf, 0xe8, 0x7fff, 0x2, 0x8, 0x10000, 0x80000001, 0x5, 0x3, 0xc7, 0x7ff, 0x0, 0xfffffff9, 0x3, 0xd23, 0x4, 0x66, 0x2, 0xffffffff, 0x6, 0x9, 0x5, 0x4, 0x8, 0x7, 0xd, 0x7, 0x9, 0x2, 0x5, 0xffffffd4, 0x0, 0xfff, 0x0, 0x6, 0x200, 0x0, 0x0, 0x2, 0x0, 0x7f, 0xfffff801, 0x8, 0x4, 0x9, 0x3, 0x9, 0x2, 0x0, 0xfff, 0x800, 0x9, 0x40, 0x5, 0xfffffffb, 0x8, 0x799, 0x4, 0x3, 0x9, 0x80, 0x3, 0x4, 0x7f, 0x0, 0x4, 0x57]}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x112c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="02c80045004100010002030400ff0fffff04080c000000000000000000000272ffb1d509050311000080590b000007023000050101020204000d0308000300f537e9000500060c0400070001000af0adc04d42f7845bce244ea0437e9cea38d95761f8c1e88d3c6296d1aa79d8cf59ae14f4ef6b46fc2a"], 0x4a) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000003010101000000001646741400000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x80) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="80ba9fe37fe15a4003faed2aa9e3563d271030df15105f522e579c6c6290bec90b4f8210a0f02e15b44b489261f66f7b55590ab6b57c91bdfaddcdd76da1e17c1ebd1e6fe8d347d26d9c22ca75fd4066debe5346f9f1de6ca20ded2e2265a6fe8a9d3311508e0033abbbc5dce4fd4276b6c2af72fae05562868f55a38d65bfbe0a81875ed4d0fc68df802cae8bdf976328000b906deb7ff649363e341a34c8903dbefef1cd63a4286405f603e1d0030aa2b26c16d22f0187b6dc372249d5a70f1640e3f1736951", 0xc7}, {&(0x7f0000000400)="d0b60c8e4f23a541b142399ff1171fa464f6ae93c7", 0x15}, {&(0x7f0000000440)="e9a382cb415c427737332b8793744a6be8d7063a063237bcf02ffe0958161a027232e909508c526f5c29b0100731cea6caf22ab49719088c2e23b01798773e78c866f04dfe7a527ff46ce7ae8ce7270e7781918b961b75bbb891fca4d623a9a3e44ce3ed334a95add657e440a499931b6b362c0f1822b33bc546bab04a2c5de7d9e2579627b52afa2674f1006f0fa1eddc61d85163c02964c7f1adc2afef586ebcecd72c22bf894a35299b24ae1d8ac4d64986987490912196780ef837", 0xbd}], 0x3}, 0x1) 11m47.577189073s ago: executing program 1 (id=324): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x75, 0x943f41) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_CONNECTINFO(r0, 0x4008550c, &(0x7f0000002a40)) 11m32.18609904s ago: executing program 33 (id=324): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x75, 0x943f41) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_CONNECTINFO(r0, 0x4008550c, &(0x7f0000002a40)) 10m59.620762493s ago: executing program 5 (id=538): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getrlimit(0xe, &(0x7f0000000100)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}}}}}, 0x0) write(r3, &(0x7f0000000240)='0000:00:1d.7', 0xc) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0xd, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write(r5, &(0x7f00000002c0)='0000:00:1d.7', 0xc) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 10m59.075386977s ago: executing program 5 (id=544): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000040)={0x3c}) openat$cdrom(0xffffff9c, &(0x7f0000000180), 0x4000, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000000380)) sendmmsg$unix(r3, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x30, 0x8001}}], 0x2, 0x80) bind$x25(r0, &(0x7f0000000080), 0x12) sendto$inet(r2, &(0x7f00000001c0)="73e4a01f0b1124eacf94a31b7ba641b1ae163a8b", 0x14, 0x4000081, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000}) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 10m58.08374826s ago: executing program 5 (id=548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x2000700, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1003800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x21) (fail_nth: 5) 10m58.014810378s ago: executing program 5 (id=549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000004c0)={0x224, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x210, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x12c, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '--}$\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x00\xdd\xff\xff\xff\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x97, 0x5, "5b7da63e80a662a42f577b19724fca6c3bcb56cde83dfec3eab82dfb6d831d8aa19b67eea77efd2376b3988c41a55c5c5648af46f7c98ce245fb6fc179a6fbafb70216b695a4e1606bb0d1c5692d7a5efe502fff85a11b52c4aa0cd0fd0cdd9ca72b497e2ba6d8039d64443fedb1b3c17216aa0b50ab42036093d314ac4048a8a7c6f698c6c71e5c524a3f5f044d9f6b0833cc"}]}]}, 0x224}, 0x1, 0x0, 0x0, 0xc001}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24008044}, 0x4000004) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x1e5a, 0x100, 0x1, 0x2ff}, &(0x7f0000000200), &(0x7f00000001c0), &(0x7f0000000000)) r4 = eventfd2(0x10001, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000040)=r4, 0x1) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) r6 = syz_open_dev$cec(&(0x7f0000000a40), 0x0, 0x10200) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f0000000a80)={0x0, 0x7fff, 0x80000000, 0x2, 0x0, 0x3, "55b4c3d5387af1cb0324fc8d16c3561a", 0x0, 0x4, 0xfd, 0xf, 0x0, 0x8, 0x1}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000980)={r2, 0x600}, &(0x7f00000009c0)={'enc=', 'oaep', ' hash=', {'blake2s-128\x00'}}, &(0x7f00000015c0)="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", 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r5, 0x1f5}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x4, 0x4, 0x460, 0xffffffff, 0x288, 0x288, 0x0, 0xfeffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x154, 0x19c, 0x0, {}, [@common=@srh1={{0x8c}, {0x2c, 0x0, 0x40, 0x31, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff000000, 0xffffffff, 0xff], [0xffffff00, 0xff, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0x843ffed65da7c136], 0x208, 0x6c}}, @common=@ipv6header={{0x24}, {0x10, 0x16, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'syzkaller0\x00', {0x4}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x80}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0xffffffff, 0xff000000, 0x0, 0xff], [0xff000000, 0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'bridge0\x00', {}, {}, 0x3c, 0xb, 0x6, 0x21}, 0x0, 0xa4, 0x110}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x3, 0xffb, 0x7, 0x1, 0x0, "4a24b3123320fbc5ef86f0d111d171d6b7d44a38d5630b11a40cc26dbaa0a201652821e4b9532f31f48b9868fe4340e5da03d5390082ef51717628c8f69f8b97"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4bc) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) openat$dir(0xffffff9c, &(0x7f00000001c0)='./file0\x00', 0x18000, 0x21) 10m58.013986281s ago: executing program 5 (id=550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400f2000000000009000000850000000f0000008500000007000000"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10m57.943878999s ago: executing program 5 (id=551): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@dev, @in6}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f00000191c0)=0xe4) syz_open_dev$usbfs(&(0x7f00000002c0), 0xffffff69, 0x1a1480) bind$x25(r0, &(0x7f0000000080), 0x12) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r5}) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000400)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000019080)={@local, @local, 0x1, "521b79040000020100000000000022e700000000000093890600", 0x1000, 0x2, 0x7, 0x7}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000019100)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', r5, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000190c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9, r5}) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r10 = epoll_create1(0x80000) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r11, &(0x7f0000000340)=""/170, 0xaa) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) 10m42.954000454s ago: executing program 34 (id=551): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@dev, @in6}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f00000191c0)=0xe4) syz_open_dev$usbfs(&(0x7f00000002c0), 0xffffff69, 0x1a1480) bind$x25(r0, &(0x7f0000000080), 0x12) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r5}) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000400)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000019080)={@local, @local, 0x1, "521b79040000020100000000000022e700000000000093890600", 0x1000, 0x2, 0x7, 0x7}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000019100)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', r5, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000190c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9, r5}) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r10 = epoll_create1(0x80000) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r11, &(0x7f0000000340)=""/170, 0xaa) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) 10m13.915321344s ago: executing program 3 (id=767): mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000011, 0x32, 0xffffffffffffffff, 0x8000000) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000003f80), 0x82}], 0x1, 0x0, 0x0, 0x1) openat$dma_heap(0xffffff9c, &(0x7f0000000040), 0x105042, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xfffffffffffffc82, 0x0, &(0x7f00000001c0)={0x23, 0x95, 0x81, 0x2}, 0x10) r1 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x9840) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 10m12.915446139s ago: executing program 3 (id=772): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7, 0x79, 0x1}, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x97}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}}, 0x0) 10m12.914901883s ago: executing program 3 (id=773): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 10m12.693556224s ago: executing program 3 (id=775): unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x60, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x20, 0x0, 0x8}}) (async) syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xc3b0, 0x4, 0x1, 0x82}, &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='coredump_filter\x00') write$cgroup_int(r1, &(0x7f0000000040)=0xffff, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000f93f0000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="ffe900000000008600000085000000110000009500000000000000a3b03f8ca55c5c0f2d364cb0a813a28d150aec6c7ff8b3de4213e022cac04877582027e5912d3bde79674f5588604b6dcd7972016494eadb05c7f196aca55f35bb928d84305bfd624f610b21ccee529f024eac0d8939fbf5dea3e21464dc00"/134], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setscheduler(r2, 0x0, &(0x7f0000000280)=0x5) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) (async) r5 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) (async) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r6, r6, r6, 0x0) (async) r7 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x5, 0x64, 0x9, 0x6}, {0x0, 0xfd, 0x11, 0x7fffffff}]}) 10m12.531833868s ago: executing program 3 (id=778): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 10m12.413746535s ago: executing program 3 (id=780): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) mkdir(0x0, 0x1ff) r2 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000003c0)={'wlan0\x00', {0x2, 0x4e24, @empty=0xcf05fdfd}}) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002"], 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe4) setresuid(r5, 0xee01, r6) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 9m57.30639093s ago: executing program 35 (id=780): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) mkdir(0x0, 0x1ff) r2 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000003c0)={'wlan0\x00', {0x2, 0x4e24, @empty=0xcf05fdfd}}) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002"], 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe4) setresuid(r5, 0xee01, r6) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 8m13.35424739s ago: executing program 6 (id=1233): r0 = openat$mice(0xffffff9c, &(0x7f0000000180), 0x222000) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000001c0)={0x7}) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000004880)=@newchain={0x1c04, 0x64, 0x104, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0x0, 0xf05e26e3b4a04a9e}, {0xffe0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_cgroup={{0xb}, {0x1ba0, 0x2, [@TCA_CGROUP_EMATCHES={0x1514, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}, @TCA_EMATCH_TREE_LIST={0x308, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x110, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x401}, [@TCA_EM_IPT_MATCH_DATA={0xe7, 0x5, "08d2df4f806141122dc582aa1434c8435eb9fcb6711854f6f9f563b41c810b88a78138cbca11e82e1bca51469452eccaac4d0507d8f91deb278846f218110c8871fbe671a4eb8f3726c664e573e076fef956ee757007ea4fabb1e105c3c5743b0ca20ce78f8640b484e67bad44075ceabc3eeb7368254ce0d7582b9f4a40dfef01e7b8e64d96dabf13c3f98d7c102001e1469982c73bf1906a9bab5b64a79eccae10f3a997365426b715938f16aa52aa583751ce0a033cef99a6cb6226ac69eb0e8f31e30ab74eb44aae3896543d7d7fed4b7e3f97c6c3d071fb811e9649003f062947"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_CONTAINER={0xc0, 0x1, 0x0, 0x0, {{0xa0c, 0x0, 0x2}, "7701303f4c0ca07b1daf7d6e245f71fb281bad6dc48c57d8867f9a992cc63bc0231e9854d8310b461617069ad12477dff33a25a10ff4af4bdd79b2940f275618196591fbfd12ad50567c1dc260298d670ff1d41c2711459271f11607eb624041e5104eefe41def2957ac517154466340717767ca04a892ce3c0126ed8966ee3bca22cb99f195ca2b982104f0a74ab8011bc47fe1b66d1abaf7d9fcc16d73994a1994058cbaf3ebe5927a29f65a26a9bada5c03bf"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x708}, {{0x4, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_META={0xa8, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="c965", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="89a3db"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x9, 0x2}, {0x2, 0x1, 0x1}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_VAR="96", @TCF_META_TYPE_VAR="c48c1f0313", @TCF_META_TYPE_VAR='\tczZ', @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="35469a", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="14d8636beb7fcf", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3f, 0x40, 0x1}, {0x1, 0x2}}}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="0b7b5f3e88f4", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="e57116145e6672228afc", @TCF_META_TYPE_VAR="3d2c0fb5caad29772f"]}]}}, @TCF_EM_CONTAINER={0x78, 0x3, 0x0, 0x0, {{0x5}, "7113f0fbd187c5c9549ecea4efd8aa99c4cb61fbda71028ee4dbec58071b2dd1ac5a69634de1ae15a584c3e45129eb21179ac57c799b82de4922363841775f2f72830196782492dc99bf3f88f1f9b85557030da7d1ba28d18027d4fed01add223b3cd82be4ce9773ff6ca4bb"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x76}}, @TCA_EMATCH_TREE_LIST={0x11e8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x11c8, 0x3, 0x0, 0x0, {{0xa3b, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "bc349baf4ae73f99bebb52033bb6cef1c978b617d7cad944759061f766a481dfe4cc1e7e06a1f9ad52bc5b0854376183489c7458b8fa29d1044d78010ba9e47ddb15887927be00989bda4f2f9fd4a085da28a509dd9220624395ae4b13ecb379838bb7dc98cf0ebeff66460bfbf3dcb918dd09af0b526e17f51b29152a18337fb77c374a4c7eec78f733c5158ac8bf14d3724b94843733b6be4a6c91555c946091bc89862e5da5f4334657239d5e19f97608daf567edfee8abeb8b3e42cff0221fab814d43893615024c717717d7c1cf2cf17aa44cdd07d37e3403ab33c5023b3f604855fc239aaf0d0d788802630ae7db3c543e1f127ad5c199edd7428c1e55a2d73e1b40790c963b87e6a8791713d939cc5499f6e0a868a2c4d07d96d429ab71358cc07b51250114cfd9ea6a9c45b1ccd43204b34d3b0b8d79f93621488914e0b21c426c915e94bd831d7ad10dcef7139bb82500bf61f76bbe5f98e3d5a63f3f3093fc49d7ed1cbfaf415ee10d3e056f0b37322c8b486e1648f1ca0460b1e761447687ba87b2aca0ea1d3c642256a74bf0a5d41b4ee8d2ea0e48247bfdeb4911ac4a2b4fc263436c88f8960985aa1df555b2ae3f99507050eda7f01a5bb54a94a9c8b12fad3ccc4a2158fd5132cac2aae474d5ec112d26eeade6354278d29c412e805f7f39360eeeac06af069c294f1dee76edd9bf07ecd9f82e9023c7e084835e1a9d60554bbc4c20c9605a4423977935b4d7db8002fe90f3dc3eac86bee593629dd4c1cade788380e60bb96f000e7a09a88c2c200c643b33180691cdfb3d8e0c34eb314cd44695d56a3ab9cc0b19c8650925766fa68b21749cde136c3a8b2baf4b030d40591fb3bec29b4eb2c66fb7f5486ac7231b63ad20a6a80263ed23d18d8a3dd425389b2a7151450166e3fa83d59c2f82e458b7fa18eb28e5489f32bcd36acd921be784ad393de7f81c82c572b6b628bd6f25a7d81ad40b82bcfe2da8ad314a7e4d5850d796f9a2e4f614ce289d59d4049dc531e77337821684b1813ee12ec054d88a255ab3c271fe018da60e8dc20496b2f0f4595a3e5c0c9afdba0ca775a54b7eb43a32311cccee3cc1568c5d54818a5f3ef7a8d85e0b2f4a674242fa82f8601196044b016af3156d56ead60e06eab2c89d5dad862b1ad1bcab406ec25ea4b0c7cf1a71b3bc1b699cb5d779e24a54feac2296e082adacc7d821aef00681499e8306e113081c15f526457357804942e3b6a9fce3833b5870785e38a444b5c3bcec253032870a11454714baf703923d8b0f31c61423a7728d8b7ac4ac9f1709c1e078153a1793bd35b440b3cd75f96b8df31352430cd221bd9e5bc1f605b3ffffaa8ce4571a78b619c0c26d39e0e05ed6c6bc6f98c961fd0295dd75129e25135bb74a651b05af9ba46c2cfd72e3b64a0e3dab7433a2d73d6ee94b9e5359b812c7faf55d7d51f047e1b6b8f30fbe55b43f9cef0527da213627a3865600550e832fc62b891800d6b03efa0c1126b7d06e098e3884b13237ac6ce8099818576d8623e8d78c09b43631b7fa0cc82ee5b03764b8b4a913a043dfe2492038359480abaa4a686fb6a9e207f1ea709be3a5de5cc9a08296d5ef46c99cb30bd9d6f5540a0cc12f2d7cca8ff4c87086d8414dd1e2e3c95160644b8d9cdf4184a3c62cefc38a6056c69c7e5e613e99a44329b5c48d79676c9a89d6f6a62a703f6c62197807ace613c71005a821d4840d13b73e707a231a0e3904fdc37b1907e393fbc31eb4840f61e6e0e90e6363e690614bafcea7f7b36e457e072e95e4449ee9d1ddb14865f5c158ae718ad05af1afbe5509817581eca1ce77525d7304e0e460a04109d30298ecc79c217c052d3c71aff459291321f5f813fc4f83ed35ef7c4bf25577244794b3923774a335aefa8e1825db5c033914dd30e7481042ccb5b5186fa48bfbb619f3e6da2f6c321ba4a0ad9589160b0ae841114815b51252582db295669d3e6e5fa5cd9840e35c36f39de2e7dcdf06d2aa1fdcb4a8e560b173b0f59a9ff282aab3e3c2132066f7389518fe851080ed70adf63749492b253960479549aaff63117f497fa2a6ecebcc70e496ecab5b5cbd55e2f64b4c5e199932bcb2586d022d66484a40c10f0f08c22ec1db978e01a9c4b5d57609885c9ceedeab3c0062b98f8770c8a95d11c5644a24f76c5eca483e3c794805658193476fb6b2a5c4080980200dd0f8e9f0087733c64e1d4181a0df99be078590fd1e7f9b0ab1844e196d84ca6c5a1418aceb285a61edee2fa89f8561f209e7340fb2121ffa99e171deed23fd2f715a82d790f2f984a9c4d7c559ca97a61f1bc1fc6694d6a2faa103a40d45d1367159111ec6f30c5f69546965d5a7cda6e35700cfec4f44408bb63a556303efaa362891eada9c5abd3cdfdb4ad7563a5e5df76357ff494159cd4e9306bc2b37d91cade02c511d10a9fb2a3a2807c80493161e6ee96f889fd84aba8c41b6671eec835fc1da402689200bfeff2a4fe6f6b7a9ae8c4eabef4947d1880786528b091b7c72f568e99b359321d4f2c5f032f6f30a527f53b7f0d489915a85d7d2f4245041590a0da267cb7cc969e435822c9b2e47d4f6ac6b217e175a49e05f3524effba5e76f9e6082662b6cfd331cc0653838b2d91b4742cf6cf94abecbe0f1057b234bb859bfdf0c03cfb9eeebf3536f0f9ffde9addf4a94d2dde54a06e1995b62846dbb3c3e0293d04851eefa2cb72e3aca496ea9950bfce388aa5ba9e18a1c3c80381bcba4059b4ad258b19296589c17cdda1e71a12da75210d6ac8466468e702d453826cf8a1aede10763d8a911c61379ea64c3963ea3753d5c9190d8677528aa61ae5e5245a57b3dbb32976b4789123dc93708a63af29a3a15a59ef1acfa99da7abdcef245e484624657998874c2380052c5bc208e23fb7d286b7ff12901b24073adf86c3f8461b9207d06e1338f4a07468ca568273c9a882f22d6e662e975e66f08e306b52e5040f3f1d8e108f9dac571af70cb3b4f6111686d60ecab48d501e10feae1ab8cf46465a989141e2e7fc428b039ec064ec2b6747df6f474737ddf98e6d9b5567e5b20fa26cba6c1331a690afdb95bbd9d9e82cca00868b1829b95de621b95bd665ed077d9044967eb0f45686d2a7db62596e3b4ca8f80b955cb89275df50194262bfbd5ad71dd31de348f4806348c6460bde8830a08e5efe3fc85d3fc838a894b02df91c6f76680341b0c01617e4ba18ae607f4f687fa6f373349665a21e34395afd71af1f07648e758f7d1de14ce3c863e52b0d95d55b3ac9b55ae33f20e3d9ecdf7a8639387ba2e95c95fe19768f4de5dab73acbebc48527bcd670866e68fb05ca5862e4c26cc59a11e94fb578ff6ff7521c8fa782a6d1215563766175a6671e282e65a33501fa23be0536163a2d1801685beeb815b08437ec01d32bedb54d2cb8c1f58b2792110a1c5b48e9345d7d496b66adb8500cab02ec051799c1ade24c90a7f00bcc8cdeabb4d6efaa95e642a5fa88f43b9f54fe20e5afdc22c0a89baf44fd1a0bee2f0c9f4c872d53c409666031045db8f0b399363a24b8544361f34a80ed77e37c0142aad46f47c918f866dd4ad3b3ba88182bcb55328cc0584e7eb5d3eb8878cdf9686040e67d7fc4f8a95a586839e573704b9159e2ff8ae9ee9296845b589826f1bc72586ba71c931b1b3dc2a88393cfafce2d8f677be34dd0e701c19dd0b1806455b8f44046faea1d82aeb724b2520f92066331cdc63ee9d747a61bb796283ededa613671cf487a57d62ee0bee664b5d52d1e3af8d4ccda32633393603c4ccb5eb534ac54dc39be518ef5bfaaef63f156296f611cd97954873271589a842bc8efaa575a06fc145d7693f353177dfed6810a3eb9c5d59db54eb598ec5521957d823cea6360b37af33594c7069cdc79432566da88caf4c8a92bff287fe371082503e53fd6d9f04e002d4beb674aedfe6e842afbf8ca810114ef5e43d4c863f850f6d92021dc0534abba97ece11094807463561102c6b5dd89075b5917b33f57b881539495da4638412ffa612ec50bd6e7252184df8823dfb537cb4926ef1809fbc2f17efd957f609d567f477100f6505873e78a4f59f2653f237880106633b9b68e1795d05faf0322a24b3cd1295d7b7379988fbc19a0e02c5444b59976f81ed058be89b429125b4c28184deade3c28015076720b2cdb4a92b967494e229fb1c0b6e04b58b0c25278c47e949dd84206d2aa00ffbad07861cac494cc11b8bab300c0b4c833ffec1fbadd402de4cb0d375601ba18fc469c913030524d890c27f40b542f8325d1b4391616756a8f2d9bc114d006c144fe63c1ebe269dc835756ba7b4d3fdfd2e86526f7678548dcd8f4035d4f27bed00e0ed5dd4759ecda0b1c72bf80f292a8201a79d6ef779c6d656c300b41c78db94e2e99aa446a7b5e96a877e829c005e427513cd82c05162cda999022278e46b17a65c7af1c1c43230979b449b0d42870ccd9b75dd88dc0e85a5bb739f21f6178cfda88f1b548df8829b1846d3ffbf0fb633633fb4792075e2d0ab7ce9e863de1200c502c2339e9dbcb8fbc9c57196ac25227c55825682e7e00749f43d71a12091eefbc29c07a9a5c23f080e5ad0b47718a18e2c990e3758af81d70883deeefb118bcc6422e10e38e2117d8860b36667dc8704af2bf3611f86860194a34c380900f5b18b04897de05034964a0cf2760d83102c1488fd5bcf401562d4b857be9a5b8862a75acf0719dfe6e61858a398b2f9378f20b620e6079b6746f98165b8b6dacf8c3a5d607f78fde7d9133e081ae57b99c3ec6f62fc1c64c95070c0325c8c07528762c266fe9de80c2fa86fb47a022c6af018246f90d63c789fe279fd1e6ff269a62beb931958427b214488d96a54bcf082ba8ec1667948400a8a98eb4cb891f32fb6bc690b8f66637067ab01d73d3509099b6ab7abaeac21bd82083e158c4b4b756e8c0a57884a1ba2b1d5b6cea61a822125e74fd4bc3a99f73fa7e3cc751126a45471e568cfc7316edd936b79308c36408ee6a6bfbb1ca591938fc7d41834903130469f88434881a30c03a702c316251c3dd3edd35a6471a1c0eb1bee23140a2cd85dd4bf775beb456edf05dafd981c83107c5cae53cab35c4734fa335d1bc34a9226dbf876ca1ba8fc3c799815d21d60eda2b3097152baf82614ab1d69ccb8b781120d2b3291cf710443be308a1259c1fedb17f4cb2c2941049aeba27be219c8c48ec23d308803a497f1a328a1719a071423655af0ae057cd56001b5ff36a58a2701367750e3cfbe8d26984a8e2ea5c0b1770ecbd839ff6592e0906cefe49284fb5c2eeadb45486659904bc5225ae6c053f66919dd2e068e42d3cccd5aa4c3123c797448575852e0ca3e67f282a9756658cd925b4a9f73ae58c5f7498c30513903c284437c73176f57042673f93ab0e6b386c886684a9176e17da4c794b211e8b9447d92969a6d7ffc919f9306c5a337c6e6952d6ef933f3c94dcd00ec896481a5f18a959164473cbcfa9a6210e42072758687fb7efdcbb04b497583980b83a965771f935aa5e80505188bb8a07af9cc407e6edc6b48f4a3295c01588b1375011ccee230d3b213429aa7339e9bb2713a7fe574cad898cefd25fcaa590270fdd56475a2dd57d78819bbde7be73098fa91f98afe53db1934407fc0822452e1b608831875abb4e568a8d5475b92995ad4aaa86aed052654e42ae056aebab88b0012ace610c15c594f4a171b3e208a4a267ea1fedfed919762dc"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xa1, 0x5, "347f953aeca3ba6d33f09d319977961ab3be44b01f73bede51d183ed434c974c4be216d436d0081839cd3092ad27df5e15a42d69f7a8ac4e64f4a067108734c6fe8d23c9f3674cb146b137f6dacc84ceb396a11550b8150eca4300a1d8b3f24b3999be27c07c524a7af8cb47a9f12106aecdaba7d129153de538578e62822e36fff1a896857d797d36fb870e5b7795db90b95efd04605bddeb94f340cb"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xed, 0x5, "507ba407b531e4aa8a38833df00d37aba3b4e49a0c40d8dd276c42c1e9d675b32299396ba81e8d29f87c1c837e4f2b529214351140007061d525ab19d03e572fd54d7fd77530d16156f00311011a4e29378aa3318db15ac213a2bbe9c68c1811193649d2a4487838038a29c25c3c0da5050316ddd7bb7fd7122f171865a7efa62810af44506f921f105deb8fd1e1bf1993c2c43a079903684ec0d57e7e522edf5cccb5ec8f2db9c9a64edff2f8c8ee4787c9d6819c7615d577825557badfecaaa7e105fae5e015664b433b91b40c7470e26eb8be42acde6b4b57b0502f238855293c77070f0e9b42c3"}]}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x2, 0xd}, {0x3, 0xa, 0x2, "b590fa12e32179d94eb3"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}]}, @TCA_CGROUP_EMATCHES={0xa8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x0, 0x0, 0x0, {{0xf, 0x9, 0x6}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x8}, {0xfffd, 0xa, 0x1, "38080000000000000087"}}}, @TCF_EM_IPT={0x68, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x9a}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x14, 0x5, "a81373229aa65839dd678a1a0722374c"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}, @TCA_CGROUP_ACT={0x5e0, 0x1, [@m_ife={0xcc, 0x1e, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x29}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xea7}, @IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xff}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0xff}, @TCA_IFE_TYPE={0x6}]}, {0x19, 0x6, "92fd7e8f21e9e8114fb68b5ab5fe92e0ffcc0e029f"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}, @m_skbedit={0xcc, 0x8, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xf}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x40, 0x1, 0x5, 0x673b}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x13}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xf}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x58, 0x6, "b7812b18843b10e03c52b869c67637bbe2a436c27e6e61169c6962a0b7c679baae28e84988d3a9a91cb319ac5f3cdc208f4ca23f814423095775d8ffab06a364c90dc11bb4524544e0e8d18f52acc4b1c3fe0910"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x158, 0x2, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x6, 0x20000003, 0x7, 0x4000000}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x867dd}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x70, 0x18, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xa, 0x4, 0x0, 0xf0000000, 0x10001}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe, 0xd33, 0x8, 0x80000001, 0x80000000}}]}, {0x11, 0x6, "8f5ef508e24b73ef211a87802a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x70, 0x1e, 0x0, 0x0, {{0xa}, {0x4}, {0x41, 0x6, "753fb99bd50ab306e4fa2b27e460ee101e93ec3889a72ad05e791a991bcd8a6667de911f04024ac4b4a1b5699a30e3092a9c4fe8de6ac7376425069dec"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x100, 0x3, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x2, 0x6, 0xff, 0x40000}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xb235}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x43}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}]}, {0x6c, 0x6, "6e3ac6ec939410952b817b374665d15351a9e0d5c28b7d56e3c2e6f401b58e09abbba7853f735971feec0c6a917f785de848d58f6406a1b3188f6efd96f291fea6677bb119dc6cc2cbcce8b349ca8bb834b7451cc6e4990e1555e6a86cd953b6f977a8d164c53140"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x10c, 0x20, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf6}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0xa}]}, {0xb7, 0x6, "e1825baf167a059d9cd1d1f9d9013abcc3fb7ca0f2c819e801c0c0a3f3456650f2a612edcc65525c13704e363cbde2c734219b88f57603ca5212911380c5ec2dd419917e9ee4635ef037f0e52ae6bbe97d8063f495c3002f47ab4578bae57b270e9bf55fa0c632cd9ff193ec5e55b31b1ddbb9ebf14c1f2816f5587c91d0b31dcbde5b465d5092b559a7d5ebca47e69359d21506e59dd0e84763b3f67e9ad8994389e03fcc9566badc90eafbddfbf51b50df9a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}]}, 0x1c04}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x300, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc048aeca, &(0x7f0000000300)={0x4, 0x0, [{0xc0011022, 0x0, 0x5}, {0xa9c, 0x0, 0x2000000000}, {0xc0010141, 0x0, 0x1}, {0x91f, 0x0, 0x3}]}) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000040)={0x7}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40048050}, 0x4004) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) syz_open_dev$sndmidi(&(0x7f0000000380), 0x10001, 0x88000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) pipe(&(0x7f0000000080)) timer_settime(r1, 0x1, &(0x7f0000000240)={{0x0, 0x3938700}}, &(0x7f00000002c0)) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 8m13.154357013s ago: executing program 6 (id=1235): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="7800000000010104000001000000000002000000240001af3c4df8e2dce80000e000000108000200e00000010c0400000000000000000000300002802c000180140003000000000000000000000000000000000014000400fc000000000000000000c4070000000000000740000000000800034000000000"], 0x78}}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000540)={'\x00', 0x6, 0x7, 0x1, 0x50, 0x47, r0}) syz_clone3(&(0x7f00000005c0)={0x1a000200, &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000003c0), {0x34}, &(0x7f0000000400)=""/27, 0x1b, &(0x7f0000000440)=""/220, &(0x7f0000000580)=[r0, r0, r0, r0, r0, r4], 0x6}, 0x58) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newtaction={0x488, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x6, 0x4, 0xfffffc00, 0x9b, 0x7, 0x5, 0x400, 0xd2, 0x3038, 0x6, 0x2, 0x3ff, 0x6, 0x9, 0x3, 0xef2, 0xeb, 0x7ac, 0x40, 0x4, 0x3, 0x2227, 0x5, 0xffff0001, 0x7, 0x1, 0xe, 0xfff, 0x3, 0x5, 0x2, 0x1000, 0xfde, 0x22f, 0x4, 0x9, 0x7, 0x1, 0x3ff, 0x9, 0xa968, 0x9, 0x7, 0x0, 0x8, 0x6, 0x9, 0x2, 0x8, 0x6, 0x623c, 0x6, 0x0, 0x5, 0x3, 0x4, 0x9, 0x20, 0xe, 0x10000, 0x7, 0x200, 0x69d5ce83, 0xfffffff9, 0x0, 0x2, 0x4, 0x8, 0xee2, 0xffffffff, 0xfff, 0x7, 0x200, 0x8e, 0xe, 0x0, 0xde2, 0x7, 0x49, 0x0, 0x9, 0x8, 0x7, 0x5, 0x5, 0xfffffffb, 0x200000, 0x0, 0xffffa7a4, 0x8a, 0x0, 0x1, 0xffffffff, 0x1, 0x3, 0x0, 0x3, 0xfffff000, 0x4, 0x0, 0x1, 0x3, 0x6, 0x6, 0x1, 0x1e, 0xe77b, 0x7, 0x5, 0xd, 0xb, 0x1ff, 0x7, 0x1, 0x2, 0x8, 0x8, 0x0, 0x1, 0x0, 0x4, 0x6, 0x4, 0x9, 0x9, 0x1, 0x2, 0xe, 0xe0, 0xf44, 0x800, 0xa, 0x6, 0x6, 0x100, 0xfffffff9, 0x80000000, 0x5, 0x1ff, 0x9, 0x100, 0xff, 0x7fff, 0x1, 0xffff8000, 0x3, 0x7, 0x9, 0x2, 0x1, 0x0, 0x4, 0x9, 0x9, 0x0, 0x3, 0x7, 0x363d, 0x17, 0xffc, 0x7fffffff, 0xfffffffa, 0x5, 0x6, 0x6, 0x0, 0x0, 0x10000000, 0x395, 0x5, 0xe, 0x7, 0x10000, 0x0, 0x2, 0x0, 0x4, 0x3, 0x6, 0x2, 0x400, 0x5, 0x0, 0x6, 0x40, 0x17, 0x7a6, 0x9, 0x4, 0x2, 0x1, 0xf47, 0x1ff, 0x556c, 0x4, 0x6, 0x9, 0x1, 0xe5, 0xce, 0x5, 0x9, 0x10001, 0xc, 0x2, 0x8, 0x1d6, 0x7a6a1c20, 0x4, 0x0, 0x7, 0x9, 0x2, 0x1, 0x0, 0x2, 0xfffffffd, 0x4, 0x0, 0x0, 0xe4, 0xfffffff8, 0x7, 0x9, 0x9, 0x6, 0x7, 0xfffffffb, 0xe, 0xfffffc00, 0x8, 0x2, 0x7, 0x2, 0x0, 0x1, 0x6, 0x8, 0x5, 0x6, 0x7, 0x400, 0x3, 0x6, 0x9, 0x9, 0xc949, 0x14f9, 0x5, 0x62, 0x7, 0x4, 0x5]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x10, 0x4, 0x0, 0x9, 0x3, 0xfffa, 0x6, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) openat$ocfs2_control(0xffffff9c, 0x0, 0x400, 0x0) 8m12.19505292s ago: executing program 6 (id=1242): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x700, 0x3, 0xe, "0060000000000000000001030040000000f600"}) (fail_nth: 1) 8m11.898407035s ago: executing program 6 (id=1245): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe4) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000500)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) r4 = getgid() stat(&(0x7f0000000540)='./file1\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x60a3c682d3e6a53a}, [{0x2, 0x4, 0xee00}, {0x2, 0x2, r0}, {0x2, 0x3, r1}, {0x2, 0x0, r2}], {0x4, 0x1}, [{0x8, 0x4, r3}, {0x8, 0x2, r4}, {0x8, 0x4, r5}], {0x10, 0x1}, {0x20, 0x2}}, 0x5c, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 8m11.844291508s ago: executing program 6 (id=1246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x4, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00', 0x10}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x74}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4001) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$random(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtaction={0x112c, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1118, 0x1, [@m_police={0x1114, 0x1, 0x0, 0x0, {{0xb}, {0x10e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x25242e8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0xad8, 0x10001, 0x8001, 0x5, 0x7fff, 0xfffffff6, 0xfffffff4, 0x46, 0x5, 0x8, 0x0, 0x1, 0xd7, 0x0, 0x97, 0x8000, 0xa3, 0x3, 0x7, 0x100, 0x44a8, 0x6, 0x8001, 0x0, 0x7, 0xc4c7, 0x7ff, 0x44, 0x3, 0x0, 0x8, 0x8, 0x28, 0x8, 0x213580fd, 0x2, 0x1, 0x0, 0x5, 0x3, 0x31, 0x7, 0x200, 0x76, 0xec8a, 0x5, 0xe, 0x101, 0x0, 0xe5, 0xc, 0x5, 0x7, 0x4, 0x2, 0x0, 0x80dd, 0xb0, 0x35a26e02, 0xffff, 0xbf, 0x83b, 0x2, 0x200000, 0x8c, 0x2bf, 0x81a8, 0x8, 0x100, 0x3, 0x400, 0x0, 0x7, 0x2, 0x0, 0xffffffff, 0x6, 0x9, 0x237, 0x8, 0xb1, 0x7, 0x11, 0x3, 0xfd, 0xb55, 0x8000, 0x5, 0x6, 0xffffffcd, 0x2, 0x4, 0x80000000, 0x9, 0x7, 0x5, 0xc56a, 0x8, 0xffff, 0x2, 0x3, 0x5c, 0x8, 0x0, 0x6, 0x3, 0x50, 0x10000, 0x8001, 0x5, 0x1, 0x6, 0x7, 0xd, 0x9, 0x10000, 0x19, 0x91d, 0x3, 0x2, 0x1, 0x3, 0x3, 0x7ff, 0x401, 0x7, 0xd70, 0x2c, 0x9, 0x3, 0x6070, 0xfff, 0x1000, 0x8, 0x4, 0x6, 0x5, 0x4, 0x7c, 0x488531db, 0x40, 0x6, 0x5, 0xfffffffb, 0x1000000, 0x1ff, 0x5, 0xc7, 0x0, 0x8, 0x5, 0x5, 0x7, 0xfffffffb, 0x5, 0x5c, 0x1000, 0x3, 0x527, 0x3, 0x5a85, 0xf6, 0xc, 0x1, 0xaa7a, 0x6, 0x1, 0xee1, 0x80000000, 0x825f, 0x9, 0x40, 0x233, 0x80000001, 0x6, 0x401, 0x9, 0x618, 0x6, 0x4, 0x1, 0x846, 0x7, 0xb46, 0x9, 0x1ff, 0xe0, 0x4, 0xd, 0x1, 0xc98, 0x3, 0xffff8000, 0xc, 0x6, 0xfe, 0x1, 0x8, 0x2, 0x2, 0x2, 0xbecd, 0x9, 0x3, 0xba, 0x400, 0x8fe1, 0x371, 0x80, 0x2, 0x8000, 0x10000, 0x9, 0x5, 0x6e36c67d, 0xbe4, 0x7f, 0x1, 0x7, 0x2, 0x3, 0x1, 0x64, 0x8843, 0x6, 0x80, 0x3, 0x6, 0xfffffe01, 0x5, 0x8001, 0xfffffff7, 0x9, 0x9, 0x3ff, 0x751, 0x0, 0x1, 0x8, 0xfffffff3, 0xe, 0x7fff, 0xff, 0x800, 0x3, 0xd, 0x80000000, 0xe, 0xc0, 0x6, 0x6397, 0x9f9, 0x239, 0x89e4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x38f43bb0}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5e5, 0x0, 0x1, 0xa, 0x2, 0x5, 0x0, 0x5, 0x7, 0x2, 0x4, 0x0, 0x2, 0x1000, 0x7fffffff, 0x80, 0x6, 0x0, 0xffffffff, 0xaffc, 0x1, 0x34, 0x1, 0x4, 0x1, 0x5, 0x9, 0x4, 0x4, 0x1, 0x151d, 0x5, 0x6, 0xfffffffa, 0xd, 0xebc, 0x8, 0x752e, 0x8, 0x289, 0x100, 0xffffffff, 0x7f, 0x7fffffff, 0x101, 0x7f, 0x2, 0x5, 0x5, 0xfffffff7, 0x1, 0x5, 0x3, 0xd, 0x0, 0x7f, 0xffff2a91, 0x3, 0x100, 0x5, 0x2ce, 0x7f, 0xc14, 0xfff, 0x6, 0xfffffff7, 0x5, 0xd9, 0xffff6d2d, 0x7e, 0x0, 0x2, 0x4, 0xd1, 0x0, 0x0, 0x85, 0x1, 0xadfb, 0xd34, 0x9, 0xf324, 0x2000, 0x1, 0x5, 0x80, 0x1000, 0x0, 0x0, 0xecc1, 0xc, 0x1000, 0x7fffffff, 0x4, 0x4, 0x0, 0xfff, 0x7, 0x4, 0x7, 0x22, 0xa, 0x3, 0x2, 0x3e78, 0x134, 0x9, 0x80000001, 0x608, 0x80e8, 0x371, 0x8, 0x6f, 0x0, 0xfffff801, 0x6, 0x0, 0x4, 0x5, 0xffff, 0x0, 0x720fbc85, 0x101, 0x1ff, 0x48, 0xa3f, 0x4, 0xf46b, 0x9, 0x0, 0x4, 0x9, 0x401, 0x81, 0x84c, 0x6, 0x3, 0x5, 0xffff, 0x6, 0x7, 0x31a, 0xa, 0x9, 0xc16, 0x3ff, 0x0, 0x8001, 0x9, 0x1ff, 0x4, 0x68000000, 0x5, 0xfff, 0x800, 0x4, 0x30e9, 0x1, 0x9, 0x6, 0xec, 0x0, 0x7, 0x1, 0x8, 0xe0000, 0x0, 0x7, 0x8000000, 0x3, 0x7f, 0x1ff, 0x2, 0x9, 0x0, 0xfffffff1, 0xeb, 0x6, 0x10000, 0x0, 0x3, 0x6, 0x9, 0xdbe, 0x1000, 0x800, 0x3, 0x2, 0x3, 0x10001, 0xa, 0x7, 0x4, 0x4, 0xffffffff, 0x8, 0x0, 0x8000, 0x7, 0x8, 0x2, 0x8, 0x9, 0x238, 0x800, 0xffffffff, 0x4, 0x5, 0x9, 0x3c, 0x8000, 0x5, 0x1, 0x400, 0x2, 0xd, 0x200, 0xc, 0x2, 0x3, 0x1ff, 0x4, 0x0, 0x212c6b57, 0x75, 0x7, 0x70, 0xfffff219, 0xffffffc0, 0x2, 0x200, 0x6c, 0x7, 0x6, 0x9, 0x6bb1, 0x6, 0x8, 0x1, 0x9, 0x6a, 0xbf, 0x2, 0x2, 0x9, 0x9, 0x2, 0x9, 0x1, 0xc, 0x9, 0x8, 0x10000, 0x7, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6000, 0x5, 0x757ab92d, 0x9b5, 0x3, {0x3, 0x0, 0x0, 0x3, 0x7, 0x8}, {0x1, 0x1, 0x3, 0xe5e, 0x7ff, 0x8}, 0xe, 0x8, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x5, 0x7fffffff, 0xfffffffe, {0x2, 0x2, 0x7, 0x8001, 0x101, 0x656}, {0x4, 0x1, 0x80, 0xfad, 0xe, 0x3}, 0x0, 0x9, 0xffff}}], [@TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0x3, 0xfffffff7, 0x1ff, 0x8, 0x4, 0x10000, 0x7fffffff, 0x0, 0x3ff, 0x9, 0x200, 0x7fff, 0x4, 0x8, 0x9000000, 0x1, 0xa, 0xffff751a, 0x1, 0x6, 0xc9e8, 0x8001, 0xffff, 0x9, 0xb, 0x8, 0x7, 0x100, 0xf, 0x2, 0x5, 0x38, 0x0, 0x5b2d, 0x0, 0x5, 0x5, 0x5, 0x9, 0x6, 0x3ff, 0x6, 0x5, 0x21, 0x1, 0x8, 0x9, 0x5, 0xf0c, 0x4, 0x1, 0xc48, 0x60000, 0x10001, 0x62e5, 0xf5, 0x3, 0x4, 0x6, 0x8, 0x6, 0x4, 0x7fff, 0x4, 0xb7, 0x4, 0x9, 0xdaff, 0xdca, 0x6711, 0x2, 0x6, 0x10001, 0x4, 0x101, 0x3, 0xde5, 0x3, 0x401, 0xffffffbc, 0x8000, 0x1, 0x6, 0xa9, 0x7, 0x9, 0x4, 0x8, 0x3, 0x1, 0xc, 0x4, 0x3, 0x6, 0x0, 0xf5, 0xf, 0x8, 0x1, 0x5, 0x3, 0x6b, 0x6, 0x8, 0x8001, 0x4, 0x0, 0x7, 0x7fff, 0x4, 0x0, 0x8, 0x9f4d, 0x9, 0x1000, 0xa10, 0x6, 0x0, 0x7, 0x7, 0x5, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x9, 0x3, 0x5, 0x717, 0x5, 0x5, 0x4, 0x75, 0x401, 0x6, 0x5, 0x7, 0xd9e, 0x0, 0x7, 0x0, 0x97e2, 0x6, 0x6, 0x1ff, 0x6, 0xfffffffa, 0x2, 0x1000, 0x4, 0x800, 0xfffffff9, 0x8001, 0x3, 0x6, 0x69, 0x0, 0x6, 0x401, 0x474, 0x6, 0x1, 0x0, 0x7b75b7e8, 0xd, 0x401, 0xff, 0x3, 0xd93a, 0x6, 0xb98, 0x0, 0x401, 0x2, 0x6, 0x58, 0x3, 0x38f08769, 0xa78e, 0x7, 0x6, 0x7fff, 0x5, 0xa1b6, 0x5e5a, 0x9, 0x1, 0x1, 0x2, 0x1, 0x6, 0x2, 0xff, 0x4000, 0x0, 0x3, 0xb, 0x9, 0xc060da9, 0x8, 0xfffffffc, 0x0, 0x0, 0x1, 0x6, 0x9, 0x10, 0xa2, 0x2, 0xfffffffc, 0x10, 0x5, 0x4, 0x7392, 0x1, 0x2, 0x6, 0x6, 0x4, 0x9, 0xb1e2, 0x2, 0x1, 0xff, 0x6281, 0x5f, 0xc, 0x0, 0x2, 0x0, 0x7, 0xf987, 0xfffffff7, 0x3, 0x8, 0x2, 0x401, 0x6, 0x2, 0xb, 0x80, 0xfffffff7, 0x1, 0xffffad25, 0xa03, 0xff, 0x0, 0x2, 0x4, 0x4, 0x81, 0x4, 0x3, 0xf]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0xd4e4, 0x40, 0x3, 0x6, 0x64b8, 0x155a, 0x1000, 0x5dd900, 0x7ff, 0x2800000, 0x401, 0x5d, 0x6, 0xffff, 0x6, 0x80, 0x101, 0x3005f5ab, 0x3b7e6b03, 0xfff, 0x5, 0x2, 0x10000, 0xe, 0x8, 0x4, 0x8, 0x2, 0x7fffffff, 0x566, 0xb1, 0x5, 0x0, 0x0, 0x4, 0x81, 0x1, 0x8, 0x10001, 0x3, 0x0, 0x30000, 0x2, 0x0, 0x1, 0x0, 0x2, 0x2, 0x1, 0x0, 0x2, 0x0, 0x5, 0x1, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x9, 0xfffffffb, 0x8, 0x3, 0xc00000, 0x5da, 0xffff7fff, 0x787, 0x7, 0x5, 0x8, 0x6a65, 0x1, 0x0, 0x5, 0xd6, 0x9, 0x6, 0x3, 0xa, 0xa0b0, 0xffffff81, 0x3ff, 0x1ff, 0xfffffff6, 0xa, 0xf, 0x6, 0x6, 0x7fffffff, 0x3, 0x10000, 0x31a2, 0x10000, 0x9, 0x5d86a571, 0x101, 0x8, 0x9, 0x1, 0x3, 0x2, 0x3, 0xa361, 0x4, 0xfffffff8, 0x80000000, 0x10001, 0xe, 0x2, 0x3d7a3cad, 0xcba, 0x7, 0x8, 0x7, 0x4, 0x800, 0x2, 0x2, 0x7, 0xfffffe00, 0x9, 0xbb7, 0x10, 0x9, 0x1, 0x5, 0x0, 0xff, 0xf, 0x45f, 0x7, 0x6, 0x9, 0x3, 0x7, 0x9, 0xfffffc01, 0x1b9, 0x1ff, 0x10000, 0x2, 0x8, 0xf, 0x5, 0x2, 0x3, 0xecd4, 0xd7, 0x7, 0x6, 0x7, 0x5, 0x7, 0x4, 0x78ad195f, 0x2, 0x6, 0xc, 0x1, 0x7, 0x76, 0xffffffff, 0x4, 0x8, 0x3, 0x7, 0x4, 0x400, 0x5, 0x0, 0x7, 0x2, 0xff, 0xbcdc, 0x40, 0x5, 0x5, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x39f6, 0xfff, 0x40, 0x5, 0xbf, 0xe8, 0x7fff, 0x2, 0x8, 0x10000, 0x80000001, 0x5, 0x3, 0xc7, 0x7ff, 0x0, 0xfffffff9, 0x3, 0xd23, 0x4, 0x66, 0x2, 0xffffffff, 0x6, 0x9, 0x5, 0x4, 0x8, 0x7, 0xd, 0x7, 0x9, 0x2, 0x5, 0xffffffd4, 0x0, 0xfff, 0x0, 0x6, 0x200, 0x0, 0x0, 0x2, 0x0, 0x7f, 0xfffff801, 0x8, 0x4, 0x9, 0x3, 0x9, 0x2, 0x0, 0xfff, 0x800, 0x9, 0x40, 0x5, 0xfffffffb, 0x8, 0x799, 0x4, 0x3, 0x9, 0x80, 0x3, 0x4, 0x7f, 0x0, 0x4, 0x57]}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x112c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="02c80045004100010002030400ff0fffff04080c000000000000000000000272ffb1d509050311000080590b000007023000050101020204000d0308000300f537e9000500060c0400070001000af0adc04d42f7845bce244ea0437e9cea38d95761f8c1e88d3c6296d1aa79d8cf59ae14f4ef6b46fc2a"], 0x4a) flock(0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000003010101000000001646741400000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x80) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="80ba9fe37fe15a4003faed2aa9e3563d271030df15105f522e579c6c6290bec90b4f8210a0f02e15b44b489261f66f7b55590ab6b57c91bdfaddcdd76da1e17c1ebd1e6fe8d347d26d9c22ca75fd4066debe5346f9f1de6ca20ded2e2265a6fe8a9d3311508e0033abbbc5dce4fd4276b6c2af72fae05562868f55a38d65bfbe0a81875ed4d0fc68df802cae8bdf976328000b906deb7ff649363e341a34c8903dbefef1cd63a4286405f603e1d0030aa2b26c16d22f0187b6dc372249d5a70f1640e3f1736951", 0xc7}, {&(0x7f0000000400)="d0b60c8e4f23a541b142399ff1171fa464f6ae93c7", 0x15}, {&(0x7f0000000440)="e9a382cb415c427737332b8793744a6be8d7063a063237bcf02ffe0958161a027232e909508c526f5c29b0100731cea6caf22ab49719088c2e23b01798773e78c866f04dfe7a527ff46ce7ae8ce7270e7781918b961b75bbb891fca4d623a9a3e44ce3ed334a95add657e440a499931b6b362c0f1822b33bc546bab04a2c5de7d9e2579627b52afa2674f1006f0fa1eddc61d85163c02964c7f1adc2afef586ebcecd72c22bf894a35299b24ae1d8ac4d64986987490912196780ef837", 0xbd}], 0x3}, 0x1) 8m11.372949922s ago: executing program 6 (id=1250): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 8m10.624161565s ago: executing program 36 (id=1250): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1m26.287669437s ago: executing program 0 (id=3085): socket(0xa, 0x803, 0x0) socket(0x10, 0x80000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000084}, 0x0) ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, &(0x7f00000000c0)=0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2c5082, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000640)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x240, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) 1m25.318524886s ago: executing program 0 (id=3078): socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ofb(cast6))\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000000e0a01020000000000000000010000000000000000000100000a7fc2e4bb7a3f8d67bf5609d58197f9eba851a450478a72"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) userfaultfd(0x80001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x801) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, &(0x7f0000000140)=0xc) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="89d56a6fc2ff6a07", 0x8, 0x10, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1m24.357372706s ago: executing program 0 (id=3086): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008894}, 0x20004890) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x8, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_queues(r2, r7, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r2}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc3, 0x0, 0x0, 0x58049}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8000) memfd_secret(0x0) 1m23.20116859s ago: executing program 0 (id=3090): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="389cec73d0a0021fec14b761160100f73617"], 0x0, 0x37}, 0x28) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x400448ca, 0x0) ioctl(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x80000000, 0x6, 0x3, 0x2, 0x9e, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x401, 0x91}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002300)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xd93fef26d1de3546}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x4, 0x9, 0x8, 0x10, 0x9, 0x7, 0x5, 0x7, 0x9, 0x8, 0x1, 0xa, 0xb, 0x8, 0x1, 0x2], 0x1, [0x26f, 0x1ff, 0x8, 0x1d7, 0x4, 0x2, 0x9, 0x1ae, 0x39fe, 0x80, 0x6, 0xacb, 0x9, 0x0, 0x63cb, 0x1], [0xb, 0xfffa, 0x10, 0x4, 0x5, 0x226c, 0xc7, 0x5, 0x7, 0x3, 0x7, 0xd, 0x2af1, 0x40, 0x7ff, 0x81]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) write(r0, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x1c) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0xfffffffa, 0x10}, 0xc) 1m20.281402462s ago: executing program 0 (id=3107): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x30040a, &(0x7f0000000040)) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./proc/fs/nfsd\x00', 0x9801) 1m20.100552541s ago: executing program 0 (id=3108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x4, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00', 0x10}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x74}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4001) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$random(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtaction={0x112c, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1118, 0x1, [@m_police={0x1114, 0x1, 0x0, 0x0, {{0xb}, {0x10e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x25242e8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0xad8, 0x10001, 0x8001, 0x5, 0x7fff, 0xfffffff6, 0xfffffff4, 0x46, 0x5, 0x8, 0x0, 0x1, 0xd7, 0x0, 0x97, 0x8000, 0xa3, 0x3, 0x7, 0x100, 0x44a8, 0x6, 0x8001, 0x0, 0x7, 0xc4c7, 0x7ff, 0x44, 0x3, 0x0, 0x8, 0x8, 0x28, 0x8, 0x213580fd, 0x2, 0x1, 0x0, 0x5, 0x3, 0x31, 0x7, 0x200, 0x76, 0xec8a, 0x5, 0xe, 0x101, 0x0, 0xe5, 0xc, 0x5, 0x7, 0x4, 0x2, 0x0, 0x80dd, 0xb0, 0x35a26e02, 0xffff, 0xbf, 0x83b, 0x2, 0x200000, 0x8c, 0x2bf, 0x81a8, 0x8, 0x100, 0x3, 0x400, 0x0, 0x7, 0x2, 0x0, 0xffffffff, 0x6, 0x9, 0x237, 0x8, 0xb1, 0x7, 0x11, 0x3, 0xfd, 0xb55, 0x8000, 0x5, 0x6, 0xffffffcd, 0x2, 0x4, 0x80000000, 0x9, 0x7, 0x5, 0xc56a, 0x8, 0xffff, 0x2, 0x3, 0x5c, 0x8, 0x0, 0x6, 0x3, 0x50, 0x10000, 0x8001, 0x5, 0x1, 0x6, 0x7, 0xd, 0x9, 0x10000, 0x19, 0x91d, 0x3, 0x2, 0x1, 0x3, 0x3, 0x7ff, 0x401, 0x7, 0xd70, 0x2c, 0x9, 0x3, 0x6070, 0xfff, 0x1000, 0x8, 0x4, 0x6, 0x5, 0x4, 0x7c, 0x488531db, 0x40, 0x6, 0x5, 0xfffffffb, 0x1000000, 0x1ff, 0x5, 0xc7, 0x0, 0x8, 0x5, 0x5, 0x7, 0xfffffffb, 0x5, 0x5c, 0x1000, 0x3, 0x527, 0x3, 0x5a85, 0xf6, 0xc, 0x1, 0xaa7a, 0x6, 0x1, 0xee1, 0x80000000, 0x825f, 0x9, 0x40, 0x233, 0x80000001, 0x6, 0x401, 0x9, 0x618, 0x6, 0x4, 0x1, 0x846, 0x7, 0xb46, 0x9, 0x1ff, 0xe0, 0x4, 0xd, 0x1, 0xc98, 0x3, 0xffff8000, 0xc, 0x6, 0xfe, 0x1, 0x8, 0x2, 0x2, 0x2, 0xbecd, 0x9, 0x3, 0xba, 0x400, 0x8fe1, 0x371, 0x80, 0x2, 0x8000, 0x10000, 0x9, 0x5, 0x6e36c67d, 0xbe4, 0x7f, 0x1, 0x7, 0x2, 0x3, 0x1, 0x64, 0x8843, 0x6, 0x80, 0x3, 0x6, 0xfffffe01, 0x5, 0x8001, 0xfffffff7, 0x9, 0x9, 0x3ff, 0x751, 0x0, 0x1, 0x8, 0xfffffff3, 0xe, 0x7fff, 0xff, 0x800, 0x3, 0xd, 0x80000000, 0xe, 0xc0, 0x6, 0x6397, 0x9f9, 0x239, 0x89e4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x38f43bb0}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5e5, 0x0, 0x1, 0xa, 0x2, 0x5, 0x0, 0x5, 0x7, 0x2, 0x4, 0x0, 0x2, 0x1000, 0x7fffffff, 0x80, 0x6, 0x0, 0xffffffff, 0xaffc, 0x1, 0x34, 0x1, 0x4, 0x1, 0x5, 0x9, 0x4, 0x4, 0x1, 0x151d, 0x5, 0x6, 0xfffffffa, 0xd, 0xebc, 0x8, 0x752e, 0x8, 0x289, 0x100, 0xffffffff, 0x7f, 0x7fffffff, 0x101, 0x7f, 0x2, 0x5, 0x5, 0xfffffff7, 0x1, 0x5, 0x3, 0xd, 0x0, 0x7f, 0xffff2a91, 0x3, 0x100, 0x5, 0x2ce, 0x7f, 0xc14, 0xfff, 0x6, 0xfffffff7, 0x5, 0xd9, 0xffff6d2d, 0x7e, 0x0, 0x2, 0x4, 0xd1, 0x0, 0x0, 0x85, 0x1, 0xadfb, 0xd34, 0x9, 0xf324, 0x2000, 0x1, 0x5, 0x80, 0x1000, 0x0, 0x0, 0xecc1, 0xc, 0x1000, 0x7fffffff, 0x4, 0x4, 0x0, 0xfff, 0x7, 0x4, 0x7, 0x22, 0xa, 0x3, 0x2, 0x3e78, 0x134, 0x9, 0x80000001, 0x608, 0x80e8, 0x371, 0x8, 0x6f, 0x0, 0xfffff801, 0x6, 0x0, 0x4, 0x5, 0xffff, 0x0, 0x720fbc85, 0x101, 0x1ff, 0x48, 0xa3f, 0x4, 0xf46b, 0x9, 0x0, 0x4, 0x9, 0x401, 0x81, 0x84c, 0x6, 0x3, 0x5, 0xffff, 0x6, 0x7, 0x31a, 0xa, 0x9, 0xc16, 0x3ff, 0x0, 0x8001, 0x9, 0x1ff, 0x4, 0x68000000, 0x5, 0xfff, 0x800, 0x4, 0x30e9, 0x1, 0x9, 0x6, 0xec, 0x0, 0x7, 0x1, 0x8, 0xe0000, 0x0, 0x7, 0x8000000, 0x3, 0x7f, 0x1ff, 0x2, 0x9, 0x0, 0xfffffff1, 0xeb, 0x6, 0x10000, 0x0, 0x3, 0x6, 0x9, 0xdbe, 0x1000, 0x800, 0x3, 0x2, 0x3, 0x10001, 0xa, 0x7, 0x4, 0x4, 0xffffffff, 0x8, 0x0, 0x8000, 0x7, 0x8, 0x2, 0x8, 0x9, 0x238, 0x800, 0xffffffff, 0x4, 0x5, 0x9, 0x3c, 0x8000, 0x5, 0x1, 0x400, 0x2, 0xd, 0x200, 0xc, 0x2, 0x3, 0x1ff, 0x4, 0x0, 0x212c6b57, 0x75, 0x7, 0x70, 0xfffff219, 0xffffffc0, 0x2, 0x200, 0x6c, 0x7, 0x6, 0x9, 0x6bb1, 0x6, 0x8, 0x1, 0x9, 0x6a, 0xbf, 0x2, 0x2, 0x9, 0x9, 0x2, 0x9, 0x1, 0xc, 0x9, 0x8, 0x10000, 0x7, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6000, 0x5, 0x757ab92d, 0x9b5, 0x3, {0x3, 0x0, 0x0, 0x3, 0x7, 0x8}, {0x1, 0x1, 0x3, 0xe5e, 0x7ff, 0x8}, 0xe, 0x8, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x5, 0x7fffffff, 0xfffffffe, {0x2, 0x2, 0x7, 0x8001, 0x101, 0x656}, {0x4, 0x1, 0x80, 0xfad, 0xe, 0x3}, 0x0, 0x9, 0xffff}}], [@TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0x3, 0xfffffff7, 0x1ff, 0x8, 0x4, 0x10000, 0x7fffffff, 0x0, 0x3ff, 0x9, 0x200, 0x7fff, 0x4, 0x8, 0x9000000, 0x1, 0xa, 0xffff751a, 0x1, 0x6, 0xc9e8, 0x8001, 0xffff, 0x9, 0xb, 0x8, 0x7, 0x100, 0xf, 0x2, 0x5, 0x38, 0x0, 0x5b2d, 0x0, 0x5, 0x5, 0x5, 0x9, 0x6, 0x3ff, 0x6, 0x5, 0x21, 0x1, 0x8, 0x9, 0x5, 0xf0c, 0x4, 0x1, 0xc48, 0x60000, 0x10001, 0x62e5, 0xf5, 0x3, 0x4, 0x6, 0x8, 0x6, 0x4, 0x7fff, 0x4, 0xb7, 0x4, 0x9, 0xdaff, 0xdca, 0x6711, 0x2, 0x6, 0x10001, 0x4, 0x101, 0x3, 0xde5, 0x3, 0x401, 0xffffffbc, 0x8000, 0x1, 0x6, 0xa9, 0x7, 0x9, 0x4, 0x8, 0x3, 0x1, 0xc, 0x4, 0x3, 0x6, 0x0, 0xf5, 0xf, 0x8, 0x1, 0x5, 0x3, 0x6b, 0x6, 0x8, 0x8001, 0x4, 0x0, 0x7, 0x7fff, 0x4, 0x0, 0x8, 0x9f4d, 0x9, 0x1000, 0xa10, 0x6, 0x0, 0x7, 0x7, 0x5, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x9, 0x3, 0x5, 0x717, 0x5, 0x5, 0x4, 0x75, 0x401, 0x6, 0x5, 0x7, 0xd9e, 0x0, 0x7, 0x0, 0x97e2, 0x6, 0x6, 0x1ff, 0x6, 0xfffffffa, 0x2, 0x1000, 0x4, 0x800, 0xfffffff9, 0x8001, 0x3, 0x6, 0x69, 0x0, 0x6, 0x401, 0x474, 0x6, 0x1, 0x0, 0x7b75b7e8, 0xd, 0x401, 0xff, 0x3, 0xd93a, 0x6, 0xb98, 0x0, 0x401, 0x2, 0x6, 0x58, 0x3, 0x38f08769, 0xa78e, 0x7, 0x6, 0x7fff, 0x5, 0xa1b6, 0x5e5a, 0x9, 0x1, 0x1, 0x2, 0x1, 0x6, 0x2, 0xff, 0x4000, 0x0, 0x3, 0xb, 0x9, 0xc060da9, 0x8, 0xfffffffc, 0x0, 0x0, 0x1, 0x6, 0x9, 0x10, 0xa2, 0x2, 0xfffffffc, 0x10, 0x5, 0x4, 0x7392, 0x1, 0x2, 0x6, 0x6, 0x4, 0x9, 0xb1e2, 0x2, 0x1, 0xff, 0x6281, 0x5f, 0xc, 0x0, 0x2, 0x0, 0x7, 0xf987, 0xfffffff7, 0x3, 0x8, 0x2, 0x401, 0x6, 0x2, 0xb, 0x80, 0xfffffff7, 0x1, 0xffffad25, 0xa03, 0xff, 0x0, 0x2, 0x4, 0x4, 0x81, 0x4, 0x3, 0xf]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0xd4e4, 0x40, 0x3, 0x6, 0x64b8, 0x155a, 0x1000, 0x5dd900, 0x7ff, 0x2800000, 0x401, 0x5d, 0x6, 0xffff, 0x6, 0x80, 0x101, 0x3005f5ab, 0x3b7e6b03, 0xfff, 0x5, 0x2, 0x10000, 0xe, 0x8, 0x4, 0x8, 0x2, 0x7fffffff, 0x566, 0xb1, 0x5, 0x0, 0x0, 0x4, 0x81, 0x1, 0x8, 0x10001, 0x3, 0x0, 0x30000, 0x2, 0x0, 0x1, 0x0, 0x2, 0x2, 0x1, 0x0, 0x2, 0x0, 0x5, 0x1, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x9, 0xfffffffb, 0x8, 0x3, 0xc00000, 0x5da, 0xffff7fff, 0x787, 0x7, 0x5, 0x8, 0x6a65, 0x1, 0x0, 0x5, 0xd6, 0x9, 0x6, 0x3, 0xa, 0xa0b0, 0xffffff81, 0x3ff, 0x1ff, 0xfffffff6, 0xa, 0xf, 0x6, 0x6, 0x7fffffff, 0x3, 0x10000, 0x31a2, 0x10000, 0x9, 0x5d86a571, 0x101, 0x8, 0x9, 0x1, 0x3, 0x2, 0x3, 0xa361, 0x4, 0xfffffff8, 0x80000000, 0x10001, 0xe, 0x2, 0x3d7a3cad, 0xcba, 0x7, 0x8, 0x7, 0x4, 0x800, 0x2, 0x2, 0x7, 0xfffffe00, 0x9, 0xbb7, 0x10, 0x9, 0x1, 0x5, 0x0, 0xff, 0xf, 0x45f, 0x7, 0x6, 0x9, 0x3, 0x7, 0x9, 0xfffffc01, 0x1b9, 0x1ff, 0x10000, 0x2, 0x8, 0xf, 0x5, 0x2, 0x3, 0xecd4, 0xd7, 0x7, 0x6, 0x7, 0x5, 0x7, 0x4, 0x78ad195f, 0x2, 0x6, 0xc, 0x1, 0x7, 0x76, 0xffffffff, 0x4, 0x8, 0x3, 0x7, 0x4, 0x400, 0x5, 0x0, 0x7, 0x2, 0xff, 0xbcdc, 0x40, 0x5, 0x5, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x39f6, 0xfff, 0x40, 0x5, 0xbf, 0xe8, 0x7fff, 0x2, 0x8, 0x10000, 0x80000001, 0x5, 0x3, 0xc7, 0x7ff, 0x0, 0xfffffff9, 0x3, 0xd23, 0x4, 0x66, 0x2, 0xffffffff, 0x6, 0x9, 0x5, 0x4, 0x8, 0x7, 0xd, 0x7, 0x9, 0x2, 0x5, 0xffffffd4, 0x0, 0xfff, 0x0, 0x6, 0x200, 0x0, 0x0, 0x2, 0x0, 0x7f, 0xfffff801, 0x8, 0x4, 0x9, 0x3, 0x9, 0x2, 0x0, 0xfff, 0x800, 0x9, 0x40, 0x5, 0xfffffffb, 0x8, 0x799, 0x4, 0x3, 0x9, 0x80, 0x3, 0x4, 0x7f, 0x0, 0x4, 0x57]}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x112c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(0x0, 0x4a) flock(0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000003010101000000001646741400000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x80) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="80ba9fe37fe15a4003faed2aa9e3563d271030df15105f522e579c6c6290bec90b4f8210a0f02e15b44b489261f66f7b55590ab6b57c91bdfaddcdd76da1e17c1ebd1e6fe8d347d26d9c22ca75fd4066debe5346f9f1de6ca20ded2e2265a6fe8a9d3311508e0033abbbc5dce4fd4276b6c2af72fae05562868f55a38d65bfbe0a81875ed4d0fc68df802cae8bdf976328000b906deb7ff649363e341a34c8903dbefef1cd63a4286405f603e1d0030aa2b26c16d22f0187b6dc372249d5a70f1640e3f1736951", 0xc7}, {&(0x7f0000000400)="d0b60c8e4f23a541b142399ff1171fa464f6ae93c7", 0x15}, {&(0x7f0000000440)="e9a382cb415c427737332b8793744a6be8d7063a063237bcf02ffe0958161a027232e909508c526f5c29b0100731cea6caf22ab49719088c2e23b01798773e78c866f04dfe7a527ff46ce7ae8ce7270e7781918b961b75bbb891fca4d623a9a3e44ce3ed334a95add657e440a499931b6b362c0f1822b33bc546bab04a2c5de7d9e2579627b52afa2674f1006f0fa1eddc61d85163c02964c7f1adc2afef586ebcecd72c22bf894a35299b24ae1d8ac4d64986987490912196780ef837", 0xbd}], 0x3}, 0x1) 1m5.125810777s ago: executing program 37 (id=3108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x4, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00', 0x10}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x74}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4001) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$random(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtaction={0x112c, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1118, 0x1, [@m_police={0x1114, 0x1, 0x0, 0x0, {{0xb}, {0x10e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x25242e8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0xad8, 0x10001, 0x8001, 0x5, 0x7fff, 0xfffffff6, 0xfffffff4, 0x46, 0x5, 0x8, 0x0, 0x1, 0xd7, 0x0, 0x97, 0x8000, 0xa3, 0x3, 0x7, 0x100, 0x44a8, 0x6, 0x8001, 0x0, 0x7, 0xc4c7, 0x7ff, 0x44, 0x3, 0x0, 0x8, 0x8, 0x28, 0x8, 0x213580fd, 0x2, 0x1, 0x0, 0x5, 0x3, 0x31, 0x7, 0x200, 0x76, 0xec8a, 0x5, 0xe, 0x101, 0x0, 0xe5, 0xc, 0x5, 0x7, 0x4, 0x2, 0x0, 0x80dd, 0xb0, 0x35a26e02, 0xffff, 0xbf, 0x83b, 0x2, 0x200000, 0x8c, 0x2bf, 0x81a8, 0x8, 0x100, 0x3, 0x400, 0x0, 0x7, 0x2, 0x0, 0xffffffff, 0x6, 0x9, 0x237, 0x8, 0xb1, 0x7, 0x11, 0x3, 0xfd, 0xb55, 0x8000, 0x5, 0x6, 0xffffffcd, 0x2, 0x4, 0x80000000, 0x9, 0x7, 0x5, 0xc56a, 0x8, 0xffff, 0x2, 0x3, 0x5c, 0x8, 0x0, 0x6, 0x3, 0x50, 0x10000, 0x8001, 0x5, 0x1, 0x6, 0x7, 0xd, 0x9, 0x10000, 0x19, 0x91d, 0x3, 0x2, 0x1, 0x3, 0x3, 0x7ff, 0x401, 0x7, 0xd70, 0x2c, 0x9, 0x3, 0x6070, 0xfff, 0x1000, 0x8, 0x4, 0x6, 0x5, 0x4, 0x7c, 0x488531db, 0x40, 0x6, 0x5, 0xfffffffb, 0x1000000, 0x1ff, 0x5, 0xc7, 0x0, 0x8, 0x5, 0x5, 0x7, 0xfffffffb, 0x5, 0x5c, 0x1000, 0x3, 0x527, 0x3, 0x5a85, 0xf6, 0xc, 0x1, 0xaa7a, 0x6, 0x1, 0xee1, 0x80000000, 0x825f, 0x9, 0x40, 0x233, 0x80000001, 0x6, 0x401, 0x9, 0x618, 0x6, 0x4, 0x1, 0x846, 0x7, 0xb46, 0x9, 0x1ff, 0xe0, 0x4, 0xd, 0x1, 0xc98, 0x3, 0xffff8000, 0xc, 0x6, 0xfe, 0x1, 0x8, 0x2, 0x2, 0x2, 0xbecd, 0x9, 0x3, 0xba, 0x400, 0x8fe1, 0x371, 0x80, 0x2, 0x8000, 0x10000, 0x9, 0x5, 0x6e36c67d, 0xbe4, 0x7f, 0x1, 0x7, 0x2, 0x3, 0x1, 0x64, 0x8843, 0x6, 0x80, 0x3, 0x6, 0xfffffe01, 0x5, 0x8001, 0xfffffff7, 0x9, 0x9, 0x3ff, 0x751, 0x0, 0x1, 0x8, 0xfffffff3, 0xe, 0x7fff, 0xff, 0x800, 0x3, 0xd, 0x80000000, 0xe, 0xc0, 0x6, 0x6397, 0x9f9, 0x239, 0x89e4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x38f43bb0}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5e5, 0x0, 0x1, 0xa, 0x2, 0x5, 0x0, 0x5, 0x7, 0x2, 0x4, 0x0, 0x2, 0x1000, 0x7fffffff, 0x80, 0x6, 0x0, 0xffffffff, 0xaffc, 0x1, 0x34, 0x1, 0x4, 0x1, 0x5, 0x9, 0x4, 0x4, 0x1, 0x151d, 0x5, 0x6, 0xfffffffa, 0xd, 0xebc, 0x8, 0x752e, 0x8, 0x289, 0x100, 0xffffffff, 0x7f, 0x7fffffff, 0x101, 0x7f, 0x2, 0x5, 0x5, 0xfffffff7, 0x1, 0x5, 0x3, 0xd, 0x0, 0x7f, 0xffff2a91, 0x3, 0x100, 0x5, 0x2ce, 0x7f, 0xc14, 0xfff, 0x6, 0xfffffff7, 0x5, 0xd9, 0xffff6d2d, 0x7e, 0x0, 0x2, 0x4, 0xd1, 0x0, 0x0, 0x85, 0x1, 0xadfb, 0xd34, 0x9, 0xf324, 0x2000, 0x1, 0x5, 0x80, 0x1000, 0x0, 0x0, 0xecc1, 0xc, 0x1000, 0x7fffffff, 0x4, 0x4, 0x0, 0xfff, 0x7, 0x4, 0x7, 0x22, 0xa, 0x3, 0x2, 0x3e78, 0x134, 0x9, 0x80000001, 0x608, 0x80e8, 0x371, 0x8, 0x6f, 0x0, 0xfffff801, 0x6, 0x0, 0x4, 0x5, 0xffff, 0x0, 0x720fbc85, 0x101, 0x1ff, 0x48, 0xa3f, 0x4, 0xf46b, 0x9, 0x0, 0x4, 0x9, 0x401, 0x81, 0x84c, 0x6, 0x3, 0x5, 0xffff, 0x6, 0x7, 0x31a, 0xa, 0x9, 0xc16, 0x3ff, 0x0, 0x8001, 0x9, 0x1ff, 0x4, 0x68000000, 0x5, 0xfff, 0x800, 0x4, 0x30e9, 0x1, 0x9, 0x6, 0xec, 0x0, 0x7, 0x1, 0x8, 0xe0000, 0x0, 0x7, 0x8000000, 0x3, 0x7f, 0x1ff, 0x2, 0x9, 0x0, 0xfffffff1, 0xeb, 0x6, 0x10000, 0x0, 0x3, 0x6, 0x9, 0xdbe, 0x1000, 0x800, 0x3, 0x2, 0x3, 0x10001, 0xa, 0x7, 0x4, 0x4, 0xffffffff, 0x8, 0x0, 0x8000, 0x7, 0x8, 0x2, 0x8, 0x9, 0x238, 0x800, 0xffffffff, 0x4, 0x5, 0x9, 0x3c, 0x8000, 0x5, 0x1, 0x400, 0x2, 0xd, 0x200, 0xc, 0x2, 0x3, 0x1ff, 0x4, 0x0, 0x212c6b57, 0x75, 0x7, 0x70, 0xfffff219, 0xffffffc0, 0x2, 0x200, 0x6c, 0x7, 0x6, 0x9, 0x6bb1, 0x6, 0x8, 0x1, 0x9, 0x6a, 0xbf, 0x2, 0x2, 0x9, 0x9, 0x2, 0x9, 0x1, 0xc, 0x9, 0x8, 0x10000, 0x7, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6000, 0x5, 0x757ab92d, 0x9b5, 0x3, {0x3, 0x0, 0x0, 0x3, 0x7, 0x8}, {0x1, 0x1, 0x3, 0xe5e, 0x7ff, 0x8}, 0xe, 0x8, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x5, 0x7fffffff, 0xfffffffe, {0x2, 0x2, 0x7, 0x8001, 0x101, 0x656}, {0x4, 0x1, 0x80, 0xfad, 0xe, 0x3}, 0x0, 0x9, 0xffff}}], [@TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0x3, 0xfffffff7, 0x1ff, 0x8, 0x4, 0x10000, 0x7fffffff, 0x0, 0x3ff, 0x9, 0x200, 0x7fff, 0x4, 0x8, 0x9000000, 0x1, 0xa, 0xffff751a, 0x1, 0x6, 0xc9e8, 0x8001, 0xffff, 0x9, 0xb, 0x8, 0x7, 0x100, 0xf, 0x2, 0x5, 0x38, 0x0, 0x5b2d, 0x0, 0x5, 0x5, 0x5, 0x9, 0x6, 0x3ff, 0x6, 0x5, 0x21, 0x1, 0x8, 0x9, 0x5, 0xf0c, 0x4, 0x1, 0xc48, 0x60000, 0x10001, 0x62e5, 0xf5, 0x3, 0x4, 0x6, 0x8, 0x6, 0x4, 0x7fff, 0x4, 0xb7, 0x4, 0x9, 0xdaff, 0xdca, 0x6711, 0x2, 0x6, 0x10001, 0x4, 0x101, 0x3, 0xde5, 0x3, 0x401, 0xffffffbc, 0x8000, 0x1, 0x6, 0xa9, 0x7, 0x9, 0x4, 0x8, 0x3, 0x1, 0xc, 0x4, 0x3, 0x6, 0x0, 0xf5, 0xf, 0x8, 0x1, 0x5, 0x3, 0x6b, 0x6, 0x8, 0x8001, 0x4, 0x0, 0x7, 0x7fff, 0x4, 0x0, 0x8, 0x9f4d, 0x9, 0x1000, 0xa10, 0x6, 0x0, 0x7, 0x7, 0x5, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x9, 0x3, 0x5, 0x717, 0x5, 0x5, 0x4, 0x75, 0x401, 0x6, 0x5, 0x7, 0xd9e, 0x0, 0x7, 0x0, 0x97e2, 0x6, 0x6, 0x1ff, 0x6, 0xfffffffa, 0x2, 0x1000, 0x4, 0x800, 0xfffffff9, 0x8001, 0x3, 0x6, 0x69, 0x0, 0x6, 0x401, 0x474, 0x6, 0x1, 0x0, 0x7b75b7e8, 0xd, 0x401, 0xff, 0x3, 0xd93a, 0x6, 0xb98, 0x0, 0x401, 0x2, 0x6, 0x58, 0x3, 0x38f08769, 0xa78e, 0x7, 0x6, 0x7fff, 0x5, 0xa1b6, 0x5e5a, 0x9, 0x1, 0x1, 0x2, 0x1, 0x6, 0x2, 0xff, 0x4000, 0x0, 0x3, 0xb, 0x9, 0xc060da9, 0x8, 0xfffffffc, 0x0, 0x0, 0x1, 0x6, 0x9, 0x10, 0xa2, 0x2, 0xfffffffc, 0x10, 0x5, 0x4, 0x7392, 0x1, 0x2, 0x6, 0x6, 0x4, 0x9, 0xb1e2, 0x2, 0x1, 0xff, 0x6281, 0x5f, 0xc, 0x0, 0x2, 0x0, 0x7, 0xf987, 0xfffffff7, 0x3, 0x8, 0x2, 0x401, 0x6, 0x2, 0xb, 0x80, 0xfffffff7, 0x1, 0xffffad25, 0xa03, 0xff, 0x0, 0x2, 0x4, 0x4, 0x81, 0x4, 0x3, 0xf]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0xd4e4, 0x40, 0x3, 0x6, 0x64b8, 0x155a, 0x1000, 0x5dd900, 0x7ff, 0x2800000, 0x401, 0x5d, 0x6, 0xffff, 0x6, 0x80, 0x101, 0x3005f5ab, 0x3b7e6b03, 0xfff, 0x5, 0x2, 0x10000, 0xe, 0x8, 0x4, 0x8, 0x2, 0x7fffffff, 0x566, 0xb1, 0x5, 0x0, 0x0, 0x4, 0x81, 0x1, 0x8, 0x10001, 0x3, 0x0, 0x30000, 0x2, 0x0, 0x1, 0x0, 0x2, 0x2, 0x1, 0x0, 0x2, 0x0, 0x5, 0x1, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x9, 0xfffffffb, 0x8, 0x3, 0xc00000, 0x5da, 0xffff7fff, 0x787, 0x7, 0x5, 0x8, 0x6a65, 0x1, 0x0, 0x5, 0xd6, 0x9, 0x6, 0x3, 0xa, 0xa0b0, 0xffffff81, 0x3ff, 0x1ff, 0xfffffff6, 0xa, 0xf, 0x6, 0x6, 0x7fffffff, 0x3, 0x10000, 0x31a2, 0x10000, 0x9, 0x5d86a571, 0x101, 0x8, 0x9, 0x1, 0x3, 0x2, 0x3, 0xa361, 0x4, 0xfffffff8, 0x80000000, 0x10001, 0xe, 0x2, 0x3d7a3cad, 0xcba, 0x7, 0x8, 0x7, 0x4, 0x800, 0x2, 0x2, 0x7, 0xfffffe00, 0x9, 0xbb7, 0x10, 0x9, 0x1, 0x5, 0x0, 0xff, 0xf, 0x45f, 0x7, 0x6, 0x9, 0x3, 0x7, 0x9, 0xfffffc01, 0x1b9, 0x1ff, 0x10000, 0x2, 0x8, 0xf, 0x5, 0x2, 0x3, 0xecd4, 0xd7, 0x7, 0x6, 0x7, 0x5, 0x7, 0x4, 0x78ad195f, 0x2, 0x6, 0xc, 0x1, 0x7, 0x76, 0xffffffff, 0x4, 0x8, 0x3, 0x7, 0x4, 0x400, 0x5, 0x0, 0x7, 0x2, 0xff, 0xbcdc, 0x40, 0x5, 0x5, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x39f6, 0xfff, 0x40, 0x5, 0xbf, 0xe8, 0x7fff, 0x2, 0x8, 0x10000, 0x80000001, 0x5, 0x3, 0xc7, 0x7ff, 0x0, 0xfffffff9, 0x3, 0xd23, 0x4, 0x66, 0x2, 0xffffffff, 0x6, 0x9, 0x5, 0x4, 0x8, 0x7, 0xd, 0x7, 0x9, 0x2, 0x5, 0xffffffd4, 0x0, 0xfff, 0x0, 0x6, 0x200, 0x0, 0x0, 0x2, 0x0, 0x7f, 0xfffff801, 0x8, 0x4, 0x9, 0x3, 0x9, 0x2, 0x0, 0xfff, 0x800, 0x9, 0x40, 0x5, 0xfffffffb, 0x8, 0x799, 0x4, 0x3, 0x9, 0x80, 0x3, 0x4, 0x7f, 0x0, 0x4, 0x57]}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x112c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(0x0, 0x4a) flock(0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000003010101000000001646741400000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x80) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="80ba9fe37fe15a4003faed2aa9e3563d271030df15105f522e579c6c6290bec90b4f8210a0f02e15b44b489261f66f7b55590ab6b57c91bdfaddcdd76da1e17c1ebd1e6fe8d347d26d9c22ca75fd4066debe5346f9f1de6ca20ded2e2265a6fe8a9d3311508e0033abbbc5dce4fd4276b6c2af72fae05562868f55a38d65bfbe0a81875ed4d0fc68df802cae8bdf976328000b906deb7ff649363e341a34c8903dbefef1cd63a4286405f603e1d0030aa2b26c16d22f0187b6dc372249d5a70f1640e3f1736951", 0xc7}, {&(0x7f0000000400)="d0b60c8e4f23a541b142399ff1171fa464f6ae93c7", 0x15}, {&(0x7f0000000440)="e9a382cb415c427737332b8793744a6be8d7063a063237bcf02ffe0958161a027232e909508c526f5c29b0100731cea6caf22ab49719088c2e23b01798773e78c866f04dfe7a527ff46ce7ae8ce7270e7781918b961b75bbb891fca4d623a9a3e44ce3ed334a95add657e440a499931b6b362c0f1822b33bc546bab04a2c5de7d9e2579627b52afa2674f1006f0fa1eddc61d85163c02964c7f1adc2afef586ebcecd72c22bf894a35299b24ae1d8ac4d64986987490912196780ef837", 0xbd}], 0x3}, 0x1) 55.464194763s ago: executing program 7 (id=3204): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) pipe2$watch_queue(0x0, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xfd30, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r1, 0x6}}, 0x48) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 55.159099799s ago: executing program 7 (id=3205): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) pipe2$watch_queue(0x0, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xfd30, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r3, 0x6}}, 0x48) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 54.282617295s ago: executing program 7 (id=3207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000040000000001000000080001000000000004000480080002000100000024000880140007800800050000000c0005"], 0x4c}}, 0x0) 54.182601025s ago: executing program 7 (id=3208): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x1100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @win={{0x0, 0x7fffffff, 0x8, 0x2}, 0x0, 0xffffffff, &(0x7f0000000280)={{0x7, 0x8000, 0x108}, &(0x7f0000000100)={{0xffffff65, 0x0, 0x4, 0x5}}}, 0x6, &(0x7f00000003c0)="d2202226f196cd4f75fdcac5955c4a", 0x2}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xa00) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000440)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0) 53.265817266s ago: executing program 7 (id=3212): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) 53.162689247s ago: executing program 7 (id=3213): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4000001) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x45) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, 0x0, 0x0}, 0x1c) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, 0x0, 0x2000e880) 38.180191621s ago: executing program 38 (id=3213): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4000001) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x45) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, 0x0, 0x0}, 0x1c) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, 0x0, 0x2000e880) 6.137711522s ago: executing program 9 (id=3450): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (fail_nth: 4) 4.90707918s ago: executing program 9 (id=3461): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000500)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sendfile(0xffffffffffffffff, r1, &(0x7f00000004c0)=0x5964, 0x57) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x6d, 0x5, 0x383, 0x8, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x8000, 0x401, 0x1}}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000005c0)=""/225, 0x28, 0xe1, 0x0, 0x1, 0x10000, @value=r8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xd1, 0x1ff, 0x1ff, 0x0, r8, 0x4, '\x00', r9, r10, 0x0, 0x0, 0x4, 0x7}, 0x50) read$midi(r8, &(0x7f00000001c0)=""/70, 0xffffffd8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x28, 0x20, 0x20, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.170373551s ago: executing program 9 (id=3466): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0xa, 0x3, 0x3a) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x140b, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4845}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) 4.030284195s ago: executing program 4 (id=3468): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) pipe2$watch_queue(0x0, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xfd30, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r3, 0x6}}, 0x48) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 3.296581115s ago: executing program 2 (id=3469): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) pipe2$watch_queue(0x0, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xfd30, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r3, 0x6}}, 0x48) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 2.878049753s ago: executing program 4 (id=3471): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0x4, 0x2800) r2 = msgget$private(0x0, 0x508) msgsnd(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8, 0x800) msgrcv(r2, &(0x7f0000000680)={0x0, ""/175}, 0xb3, 0x3, 0x800) read$FUSE(r1, &(0x7f0000003640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = gettid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000005680)={{0x0, 0x0, 0x0, 0x0, r4, 0x49, 0x2}, 0x0, 0x0, 0x9, 0x6e7, 0x7f, 0x6, 0x73, 0x101, 0x6, 0x1f, 0xffffffffffffffff, r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/irq_vectors/vector_setup/id\x00', 0x0, 0x0) readv(r6, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/12, 0xc}], 0x1) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000140)={0x4, 0x7bf, 0xd, 0x4, 0x1ff, 0x0, 0x80}) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x800000000000, &(0x7f0000000040)=[{0x1}], 0x1, 0x4, 0x0, 0x2, 0x0, 0x2}) r8 = socket$key(0xf, 0x3, 0x2) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) close(0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtaction={0x488, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x692}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x4, 0x19, 0xd7de, 0x9193, 0xb, 0xffffffff, 0x8, 0x6, 0xc, 0x3, 0x2a65, 0x2, 0x7fffffff, 0x3, 0x4, 0xfffffff7, 0x4, 0x8, 0x80, 0x4, 0x8, 0xe390, 0x0, 0x9, 0x3, 0x0, 0x4, 0x20, 0x9, 0x1000, 0x4, 0x8001, 0xffffffff, 0xddd, 0x7b, 0x80000001, 0x5, 0x94, 0x5, 0x8001, 0x5, 0x1, 0x1, 0x3, 0x7ff, 0xfffffffc, 0x4, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x767, 0x6, 0x1, 0x2, 0xfffffffe, 0x4, 0x6ce6, 0x6, 0x8, 0x0, 0x3ff, 0x1200, 0x3ff, 0x3, 0x53, 0x3, 0x222, 0x3ff, 0x8, 0x101, 0x0, 0x5, 0x8, 0x8, 0x7, 0x1, 0x7fffffff, 0x0, 0x7ff, 0x9, 0x3, 0x5, 0x80000000, 0x8, 0xf9, 0x6, 0x5, 0x2, 0x7, 0xfffffff8, 0x10, 0x0, 0x8, 0x10, 0x5, 0x3, 0x24, 0x43, 0x4, 0x0, 0x10001, 0x0, 0x0, 0x5e66, 0x80000000, 0x6, 0x4, 0x400, 0x0, 0x0, 0x401, 0x3, 0x4, 0x1, 0x8, 0x8, 0xdb, 0x26c, 0xe, 0x8, 0x9, 0x8, 0x200, 0xea800000, 0x6, 0x1, 0x2, 0x7fff, 0x7, 0x8, 0x8ca4, 0x8000, 0x4, 0x0, 0xb4, 0x83c6, 0x5, 0xc95, 0x2, 0x1, 0x9, 0x22f, 0x4, 0x7, 0xffffffff, 0x2, 0xff, 0x1b, 0x9, 0x80000000, 0x1ff, 0x100, 0x9, 0x1, 0x80000001, 0x7, 0x61b, 0x5, 0x1, 0xffffffff, 0x3, 0x0, 0x1, 0x8001, 0x0, 0x3, 0x7, 0x5, 0x8, 0x4, 0x7d1, 0x6, 0x1, 0x7ba0, 0x9, 0x1, 0x2, 0x5, 0x81, 0x9, 0xc, 0x1, 0xfffffff7, 0x100, 0x800, 0x20, 0x3, 0x2, 0x1, 0x8, 0x7, 0x5, 0xf, 0x2, 0x4, 0x1, 0x76, 0x3, 0x4, 0x0, 0x100, 0xa, 0x0, 0xff, 0x3, 0x9, 0x3, 0x4, 0x6, 0xc7, 0x7, 0x9, 0x3, 0x2, 0x5, 0x5, 0xffffffb8, 0x929, 0x32, 0x1, 0x7f, 0xffff, 0x3, 0x40, 0x5, 0x996bbf39, 0x6, 0x4, 0x3, 0x4, 0x25bf, 0x4, 0x3, 0x6, 0x6, 0xe, 0xfffffffb, 0x5, 0x6, 0x1ff, 0x3, 0xfffffff8, 0x2, 0x1, 0x67f, 0x7, 0x80000000, 0x3, 0x7ff, 0x5, 0x7, 0x6]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x8084) sendmsg$nl_netfilter(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYRES32=r3], 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x8001) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r11, @ANYBLOB="01002bbd7000fedbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="33003300d0040100080211000001ffffffffffff08021100100198000f037200030303030303750001000200630e00004000330030340200ffffff000000000211000000505050505050990020004500010001002d1a8f0815040000000000c016722be9b43152000003000f001d0000000100930e00b10d"], 0x90}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020200020c0000000000000000000000020018"], 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[], 0x128}, 0x1, 0x0, 0x0, 0x4c841}, 0x50) 2.815791673s ago: executing program 9 (id=3472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000906050600000000000000000200000005000100070000000900020073797a3000000000240007800c000180080001407f0000010c000280080001407ffd000108000a40"], 0x4c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x49}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x4]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004084}, 0x800) 2.794427019s ago: executing program 4 (id=3473): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x140c}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x56}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) creat(0x0, 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 2.626915897s ago: executing program 9 (id=3474): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000d40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000111100fc010000000000000000000000000000ff020000000000000000000000001f31ead95a35d529e6ed9d50af0dcbde000100"], 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x6, 0x2, 0x0, 0x6, 0x808, 0x4003}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)={0x1c, r6, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (fail_nth: 4) 2.223557285s ago: executing program 2 (id=3476): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sendfile(0xffffffffffffffff, r1, &(0x7f00000004c0)=0x5964, 0x57) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x1b, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x6d, 0x5, 0x383, 0x8, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x8000, 0x401, 0x1}}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000005c0)=""/225, 0x28, 0xe1, 0x0, 0x1, 0x10000, @value=r8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xd1, 0x1ff, 0x1ff, 0x0, r8, 0x4, '\x00', r9, r10, 0x0, 0x0, 0x4, 0x7}, 0x50) read$midi(r8, &(0x7f00000001c0)=""/70, 0xffffffd8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.637981224s ago: executing program 9 (id=3479): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="389cec73d0a0021fec14b761160100f73617"], 0x0, 0x37}, 0x28) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x400448ca, 0x0) ioctl(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x80000000, 0x6, 0x3, 0x2, 0x9e, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x401, 0x91}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002300)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xd93fef26d1de3546}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x4, 0x9, 0x8, 0x10, 0x9, 0x7, 0x5, 0x7, 0x9, 0x8, 0x1, 0xa, 0xb, 0x8, 0x1, 0x2], 0x1, [0x26f, 0x1ff, 0x8, 0x1d7, 0x4, 0x2, 0x9, 0x1ae, 0x39fe, 0x80, 0x6, 0xacb, 0x9, 0x0, 0x63cb, 0x1], [0xb, 0xfffa, 0x10, 0x4, 0x5, 0x226c, 0xc7, 0x5, 0x7, 0x3, 0x7, 0xd, 0x2af1, 0x40, 0x7ff, 0x81]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) write(r0, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x1c) openat$null(0xffffff9c, &(0x7f0000000480), 0x808c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0xfffffffa, 0x10}, 0xc) 1.635419142s ago: executing program 4 (id=3480): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) pipe2$watch_queue(0x0, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xfd30, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r3, 0x6}}, 0x48) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 1.441851955s ago: executing program 8 (id=3481): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0x4, 0x2800) r2 = msgget$private(0x0, 0x508) msgsnd(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8, 0x800) msgrcv(r2, &(0x7f0000000680)={0x0, ""/175}, 0xb3, 0x3, 0x800) read$FUSE(r1, &(0x7f0000003640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = gettid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000005680)={{0x0, 0x0, 0x0, 0x0, r5, 0x49, 0x2}, 0x0, 0x0, 0x9, 0x6e7, 0x7f, 0x6, 0x73, 0x101, 0x6, 0x1f, 0xffffffffffffffff, r6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/irq_vectors/vector_setup/id\x00', 0x0, 0x0) readv(r7, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/12, 0xc}], 0x1) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000140)={0x4, 0x7bf, 0xd, 0x4, 0x1ff, 0x0, 0x80}) r8 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x800000000000, &(0x7f0000000040)=[{0x1}], 0x1, 0x4, 0x0, 0x2, 0x0, 0x2}) r9 = socket$key(0xf, 0x3, 0x2) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) close(0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtaction={0x488, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x692}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x4, 0x19, 0xd7de, 0x9193, 0xb, 0xffffffff, 0x8, 0x6, 0xc, 0x3, 0x2a65, 0x2, 0x7fffffff, 0x3, 0x4, 0xfffffff7, 0x4, 0x8, 0x80, 0x4, 0x8, 0xe390, 0x0, 0x9, 0x3, 0x0, 0x4, 0x20, 0x9, 0x1000, 0x4, 0x8001, 0xffffffff, 0xddd, 0x7b, 0x80000001, 0x5, 0x94, 0x5, 0x8001, 0x5, 0x1, 0x1, 0x3, 0x7ff, 0xfffffffc, 0x4, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x767, 0x6, 0x1, 0x2, 0xfffffffe, 0x4, 0x6ce6, 0x6, 0x8, 0x0, 0x3ff, 0x1200, 0x3ff, 0x3, 0x53, 0x3, 0x222, 0x3ff, 0x8, 0x101, 0x0, 0x5, 0x8, 0x8, 0x7, 0x1, 0x7fffffff, 0x0, 0x7ff, 0x9, 0x3, 0x5, 0x80000000, 0x8, 0xf9, 0x6, 0x5, 0x2, 0x7, 0xfffffff8, 0x10, 0x0, 0x8, 0x10, 0x5, 0x3, 0x24, 0x43, 0x4, 0x0, 0x10001, 0x0, 0x0, 0x5e66, 0x80000000, 0x6, 0x4, 0x400, 0x0, 0x0, 0x401, 0x3, 0x4, 0x1, 0x8, 0x8, 0xdb, 0x26c, 0xe, 0x8, 0x9, 0x8, 0x200, 0xea800000, 0x6, 0x1, 0x2, 0x7fff, 0x7, 0x8, 0x8ca4, 0x8000, 0x4, 0x0, 0xb4, 0x83c6, 0x5, 0xc95, 0x2, 0x1, 0x9, 0x22f, 0x4, 0x7, 0xffffffff, 0x2, 0xff, 0x1b, 0x9, 0x80000000, 0x1ff, 0x100, 0x9, 0x1, 0x80000001, 0x7, 0x61b, 0x5, 0x1, 0xffffffff, 0x3, 0x0, 0x1, 0x8001, 0x0, 0x3, 0x7, 0x5, 0x8, 0x4, 0x7d1, 0x6, 0x1, 0x7ba0, 0x9, 0x1, 0x2, 0x5, 0x81, 0x9, 0xc, 0x1, 0xfffffff7, 0x100, 0x800, 0x20, 0x3, 0x2, 0x1, 0x8, 0x7, 0x5, 0xf, 0x2, 0x4, 0x1, 0x76, 0x3, 0x4, 0x0, 0x100, 0xa, 0x0, 0xff, 0x3, 0x9, 0x3, 0x4, 0x6, 0xc7, 0x7, 0x9, 0x3, 0x2, 0x5, 0x5, 0xffffffb8, 0x929, 0x32, 0x1, 0x7f, 0xffff, 0x3, 0x40, 0x5, 0x996bbf39, 0x6, 0x4, 0x3, 0x4, 0x25bf, 0x4, 0x3, 0x6, 0x6, 0xe, 0xfffffffb, 0x5, 0x6, 0x1ff, 0x3, 0xfffffff8, 0x2, 0x1, 0x67f, 0x7, 0x80000000, 0x3, 0x7ff, 0x5, 0x7, 0x6]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x8084) sendmsg$nl_netfilter(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYRES32=r3], 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x8001) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r12, @ANYBLOB="01002bbd7000fedbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="33003300d0040100080211000001ffffffffffff08021100100198000f037200030303030303750001000200630e00004000330030340200ffffff000000000211000000505050505050990020004500010001002d1a8f0815040000000000c016722be9b43152000003000f001d0000000100930e00b10d"], 0x90}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020200020c0000000000000000000000020018"], 0x60}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES16, @ANYRES16=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffc}, 0x94) 1.292228788s ago: executing program 2 (id=3482): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r0, &(0x7f0000000780)="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", 0x103) 1.211917748s ago: executing program 8 (id=3483): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x409d132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) inotify_init1(0x80000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000180)={'nr0\x00'}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x88802, 0x0) r3 = openat$vsock(0xffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001440)={'syztnl1\x00', &(0x7f00000013c0)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xe, 0x2, 0x54, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x40, 0xde, 0x1}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x1a, 0x2, 0x5c, 0x9, 0x2040, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000015c0)={{r0, 0xffffffffffffffff}, &(0x7f0000001540), 0x0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x16, 0xf, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd6de}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @alu={0x7, 0x1, 0x5, 0x7, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffc}], &(0x7f0000000340)='GPL\x00', 0x8, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0x44, '\x00', r4, @flow_dissector, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x3, 0xd, 0x7fff, 0xc}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000001600)=[0xffffffffffffffff, r5, r0, r0, r0, r0, r0, r6, r0, r0], 0x0, 0x10, 0x4}, 0x94) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda8, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6}]}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x80000000, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x200000003, 0x4100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x80000002, 0xfffffffffffffffd], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.211393036s ago: executing program 2 (id=3484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) ftruncate(r1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1e3) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000080)=ANY=[]) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="774fda7117638a5f25ab5000000000000000000000100000000000a35e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000000540), &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="11223344556677889900aabbccdd", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}], 0x1}, 0x0) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000440)={r7, 0x0, 0x4, 0x4, 0xa}) readv(r3, &(0x7f0000001400)=[{&(0x7f0000000880)=""/240, 0xf0}, {0x0}], 0x2) 1.056875357s ago: executing program 8 (id=3485): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x3, 0x7, 0x525, @broadcast, 'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3ca00}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x779d}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 941.834644ms ago: executing program 8 (id=3486): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180), 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r4 = socket(0x2, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) 725.332363ms ago: executing program 4 (id=3487): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000004100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ebd9db70d5d7ec450800030006010000bdad446b9bbc7a46eb988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) (async) write$cgroup_pid(r1, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="68061e2037c0e55bce43746c0d4d8f597961573d94f85bc1ce855d78faa35badcd24c5c716f6f9c5dde364718ed7a6e888abb4433e2e16dba5c592bfa735", @ANYBLOB="44008645ee0b40aa6d5ff99036fec5366f", @ANYRESHEX=r0, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRESOCT=0x0, @ANYRESOCT=r1], 0x108}}, 0x40080) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendto$inet(r3, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) r4 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 632.431704ms ago: executing program 4 (id=3488): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x140c}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x56}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) creat(0x0, 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 199.849269ms ago: executing program 2 (id=3489): epoll_create1(0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x203f, 0xfffffffd, 0x9, 0x0, 0x0) 89.345225ms ago: executing program 2 (id=3490): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x3c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r8, 0x80044dfe, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$getregset(0x4204, r10, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=r10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r2, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) r11 = syz_ublk_setup_io_uring(0x5693, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r15 = syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x94, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x3}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r15, 0x2) 82.151909ms ago: executing program 8 (id=3491): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0x4, 0x2800) r2 = msgget$private(0x0, 0x508) msgsnd(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8, 0x800) msgrcv(r2, &(0x7f0000000680)={0x0, ""/175}, 0xb3, 0x3, 0x800) read$FUSE(r1, &(0x7f0000003640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = gettid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000005680)={{0x0, 0x0, 0x0, 0x0, r5, 0x49, 0x2}, 0x0, 0x0, 0x9, 0x6e7, 0x7f, 0x6, 0x73, 0x101, 0x6, 0x1f, 0xffffffffffffffff, r6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/irq_vectors/vector_setup/id\x00', 0x0, 0x0) readv(r7, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/12, 0xc}], 0x1) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000140)={0x4, 0x7bf, 0xd, 0x4, 0x1ff, 0x0, 0x80}) r8 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x800000000000, &(0x7f0000000040)=[{0x1}], 0x1, 0x4, 0x0, 0x2, 0x0, 0x2}) r9 = socket$key(0xf, 0x3, 0x2) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) close(0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtaction={0x488, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x692}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x4, 0x19, 0xd7de, 0x9193, 0xb, 0xffffffff, 0x8, 0x6, 0xc, 0x3, 0x2a65, 0x2, 0x7fffffff, 0x3, 0x4, 0xfffffff7, 0x4, 0x8, 0x80, 0x4, 0x8, 0xe390, 0x0, 0x9, 0x3, 0x0, 0x4, 0x20, 0x9, 0x1000, 0x4, 0x8001, 0xffffffff, 0xddd, 0x7b, 0x80000001, 0x5, 0x94, 0x5, 0x8001, 0x5, 0x1, 0x1, 0x3, 0x7ff, 0xfffffffc, 0x4, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x767, 0x6, 0x1, 0x2, 0xfffffffe, 0x4, 0x6ce6, 0x6, 0x8, 0x0, 0x3ff, 0x1200, 0x3ff, 0x3, 0x53, 0x3, 0x222, 0x3ff, 0x8, 0x101, 0x0, 0x5, 0x8, 0x8, 0x7, 0x1, 0x7fffffff, 0x0, 0x7ff, 0x9, 0x3, 0x5, 0x80000000, 0x8, 0xf9, 0x6, 0x5, 0x2, 0x7, 0xfffffff8, 0x10, 0x0, 0x8, 0x10, 0x5, 0x3, 0x24, 0x43, 0x4, 0x0, 0x10001, 0x0, 0x0, 0x5e66, 0x80000000, 0x6, 0x4, 0x400, 0x0, 0x0, 0x401, 0x3, 0x4, 0x1, 0x8, 0x8, 0xdb, 0x26c, 0xe, 0x8, 0x9, 0x8, 0x200, 0xea800000, 0x6, 0x1, 0x2, 0x7fff, 0x7, 0x8, 0x8ca4, 0x8000, 0x4, 0x0, 0xb4, 0x83c6, 0x5, 0xc95, 0x2, 0x1, 0x9, 0x22f, 0x4, 0x7, 0xffffffff, 0x2, 0xff, 0x1b, 0x9, 0x80000000, 0x1ff, 0x100, 0x9, 0x1, 0x80000001, 0x7, 0x61b, 0x5, 0x1, 0xffffffff, 0x3, 0x0, 0x1, 0x8001, 0x0, 0x3, 0x7, 0x5, 0x8, 0x4, 0x7d1, 0x6, 0x1, 0x7ba0, 0x9, 0x1, 0x2, 0x5, 0x81, 0x9, 0xc, 0x1, 0xfffffff7, 0x100, 0x800, 0x20, 0x3, 0x2, 0x1, 0x8, 0x7, 0x5, 0xf, 0x2, 0x4, 0x1, 0x76, 0x3, 0x4, 0x0, 0x100, 0xa, 0x0, 0xff, 0x3, 0x9, 0x3, 0x4, 0x6, 0xc7, 0x7, 0x9, 0x3, 0x2, 0x5, 0x5, 0xffffffb8, 0x929, 0x32, 0x1, 0x7f, 0xffff, 0x3, 0x40, 0x5, 0x996bbf39, 0x6, 0x4, 0x3, 0x4, 0x25bf, 0x4, 0x3, 0x6, 0x6, 0xe, 0xfffffffb, 0x5, 0x6, 0x1ff, 0x3, 0xfffffff8, 0x2, 0x1, 0x67f, 0x7, 0x80000000, 0x3, 0x7ff, 0x5, 0x7, 0x6]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x8084) sendmsg$nl_netfilter(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYRES32=r3], 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x8001) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r12, @ANYBLOB="01002bbd7000fedbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="33003300d0040100080211000001ffffffffffff08021100100198000f037200030303030303750001000200630e00004000330030340200ffffff000000000211000000505050505050990020004500010001002d1a8f0815040000000000c016722be9b43152000003000f001d0000000100930e00b10d"], 0x90}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020200020c0000000000000000000000020018"], 0x60}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES16, @ANYRES16=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffc}, 0x94) 0s ago: executing program 8 (id=3492): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$ttyS3(0xffffff9c, 0x0, 0x208801, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008040) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) write(r2, &(0x7f00000000c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) (fail_nth: 4) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.0.2738'. [ 665.282476][T16127] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 665.294230][T16127] pic_ioport_write: 6 callbacks suppressed [ 665.294273][T16127] kvm: pic: level sensitive irq not supported [ 665.300316][T16127] picdev_read: 6 callbacks suppressed [ 665.300332][T16127] kvm: pic: non byte read [ 665.307470][T16127] kvm: pic: level sensitive irq not supported [ 665.307747][T16127] kvm: pic: non byte read [ 665.312112][T16127] kvm: pic: level sensitive irq not supported [ 665.312394][T16127] kvm: pic: non byte read [ 665.318937][T16127] kvm: pic: level sensitive irq not supported [ 665.319291][T16127] kvm: pic: non byte read [ 665.593846][T16142] FAULT_INJECTION: forcing a failure. [ 665.593846][T16142] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 665.599442][T16142] CPU: 0 UID: 0 PID: 16142 Comm: syz.0.2746 Not tainted syzkaller #0 PREEMPT(full) [ 665.599461][T16142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 665.599468][T16142] Call Trace: [ 665.599473][T16142] [ 665.599478][T16142] dump_stack_lvl+0x100/0x190 [ 665.599497][T16142] should_fail_ex.cold+0x5/0xa [ 665.599509][T16142] ? prepare_alloc_pages+0x16d/0x5f0 [ 665.599527][T16142] should_fail_alloc_page+0xeb/0x140 [ 665.599556][T16142] prepare_alloc_pages+0x1f0/0x5f0 [ 665.599575][T16142] ? kasan_save_stack+0x3f/0x50 [ 665.599591][T16142] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 665.599606][T16142] ? tun_chr_write_iter+0xdc/0x200 [ 665.599629][T16142] ? __do_fast_syscall_32+0x13a/0x8b0 [ 665.599642][T16142] ? do_fast_syscall_32+0x32/0x70 [ 665.599654][T16142] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 665.599674][T16142] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 665.599696][T16142] ? rcu_is_watching+0x13/0xc0 [ 665.599712][T16142] ? trace_kmem_cache_alloc+0xdd/0x100 [ 665.599728][T16142] ? __kasan_slab_alloc+0x89/0x90 [ 665.599745][T16142] ? kmem_cache_alloc_node_noprof+0x2e8/0x6b0 [ 665.599766][T16142] ? __kasan_slab_alloc+0x89/0x90 [ 665.599785][T16142] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 665.599816][T16142] ? policy_nodemask+0xed/0x4f0 [ 665.599845][T16142] alloc_pages_mpol+0x1fb/0x540 [ 665.599871][T16142] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 665.599888][T16142] ? __alloc_skb+0x5b7/0x710 [ 665.599899][T16142] ? __pfx___alloc_skb+0x10/0x10 [ 665.599912][T16142] alloc_pages_noprof+0x1a/0x160 [ 665.599923][T16142] alloc_skb_with_frags+0x4e7/0x760 [ 665.599936][T16142] ? __might_fault+0xc5/0x140 [ 665.599957][T16142] sock_alloc_send_pskb+0x801/0x980 [ 665.599975][T16142] ? _copy_from_iter+0x270/0x1690 [ 665.599997][T16142] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 665.600015][T16142] ? _parse_integer_limit+0x1ac/0x220 [ 665.600037][T16142] ? iov_iter_advance+0xac/0x6d0 [ 665.600050][T16142] tun_get_user+0x7d0/0x3cc0 [ 665.600067][T16142] ? __pfx_tun_get_user+0x10/0x10 [ 665.600100][T16142] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 665.600121][T16142] ? find_held_lock+0x2b/0x80 [ 665.600136][T16142] ? tun_get+0x191/0x370 [ 665.600146][T16142] ? tun_get+0x191/0x370 [ 665.600159][T16142] tun_chr_write_iter+0xdc/0x200 [ 665.600173][T16142] vfs_write+0x6af/0x1050 [ 665.600185][T16142] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 665.600199][T16142] ? __pfx_vfs_write+0x10/0x10 [ 665.600209][T16142] ? find_held_lock+0x2b/0x80 [ 665.600232][T16142] ksys_write+0x12a/0x250 [ 665.600243][T16142] ? __pfx_ksys_write+0x10/0x10 [ 665.600254][T16142] ? ksys_write+0x1ac/0x250 [ 665.600264][T16142] ? __pfx_ksys_write+0x10/0x10 [ 665.600278][T16142] __do_fast_syscall_32+0x13a/0x8b0 [ 665.600290][T16142] ? lockdep_hardirqs_on+0x7d/0x110 [ 665.600302][T16142] do_fast_syscall_32+0x32/0x70 [ 665.600315][T16142] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 665.600329][T16142] RIP: 0023:0xf702efec [ 665.600344][T16142] Code: Unable to access opcode bytes at 0xf702efc2. [ 665.600349][T16142] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 665.600361][T16142] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480 [ 665.600368][T16142] RDX: 0000000000000fce RSI: 0000000000000000 RDI: 0000000000000000 [ 665.600374][T16142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.600380][T16142] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 665.600386][T16142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.600399][T16142] [ 666.071837][T16150] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 666.076218][T16150] CPU: 3 UID: 0 PID: 16150 Comm: syz.7.2747 Not tainted syzkaller #0 PREEMPT(full) [ 666.076252][T16150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 666.076262][T16150] Call Trace: [ 666.076268][T16150] [ 666.076274][T16150] dump_stack_lvl+0x100/0x190 [ 666.076301][T16150] sysfs_warn_dup.cold+0x1c/0x28 [ 666.076342][T16150] sysfs_create_dir_ns+0x24b/0x2b0 [ 666.076366][T16150] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 666.076383][T16150] ? find_held_lock+0x2b/0x80 [ 666.076408][T16150] ? kobject_add_internal+0x25f/0x930 [ 666.076427][T16150] ? kobject_add_internal+0x25f/0x930 [ 666.076445][T16150] ? class_dir_child_ns_type+0xd/0x60 [ 666.076472][T16150] kobject_add_internal+0x2c8/0x930 [ 666.076495][T16150] kobject_add+0x16a/0x1e0 [ 666.076516][T16150] ? __pfx_kobject_add+0x10/0x10 [ 666.076536][T16150] ? get_device_parent+0x1b3/0x4c0 [ 666.076552][T16150] ? kobject_put+0xb9/0x640 [ 666.076572][T16150] device_add+0x294/0x1970 [ 666.076589][T16150] ? lockdep_init_map_type+0x5c/0x250 [ 666.076605][T16150] ? __pfx_device_add+0x10/0x10 [ 666.076622][T16150] ? lockdep_init_map_type+0x5c/0x250 [ 666.076638][T16150] ? __init_waitqueue_head+0xca/0x150 [ 666.076659][T16150] tty_register_device_attr+0x388/0x7f0 [ 666.076682][T16150] ? lockdep_init_map_type+0x5c/0x250 [ 666.076697][T16150] ? __pfx_tty_register_device_attr+0x10/0x10 [ 666.076717][T16150] ? tty_port_init+0x156/0x1c0 [ 666.076743][T16150] gsm_activate_mux+0x155/0x2a0 [ 666.076759][T16150] gsmld_ioctl+0xbbc/0x15c0 [ 666.076780][T16150] ? __pfx_gsmld_ioctl+0x10/0x10 [ 666.076811][T16150] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 666.076829][T16150] ? __pfx_gsmld_ioctl+0x10/0x10 [ 666.076845][T16150] tty_compat_ioctl+0x396/0x420 [ 666.076859][T16150] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 666.076874][T16150] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 666.076897][T16150] __do_fast_syscall_32+0x13a/0x8b0 [ 666.076915][T16150] do_fast_syscall_32+0x32/0x70 [ 666.076930][T16150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 666.076950][T16150] RIP: 0023:0xf7f16fec [ 666.076969][T16150] Code: Unable to access opcode bytes at 0xf7f16fc2. [ 666.076975][T16150] RSP: 002b:00000000f539450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 666.076991][T16150] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000404c4701 [ 666.077001][T16150] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 666.077009][T16150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.077017][T16150] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 666.077027][T16150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.077045][T16150] [ 666.081339][T16150] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 666.296293][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2749'. [ 667.112568][T16167] FAULT_INJECTION: forcing a failure. [ 667.112568][T16167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.117514][T16167] CPU: 1 UID: 0 PID: 16167 Comm: syz.8.2752 Not tainted syzkaller #0 PREEMPT(full) [ 667.117531][T16167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 667.117538][T16167] Call Trace: [ 667.117542][T16167] [ 667.117547][T16167] dump_stack_lvl+0x100/0x190 [ 667.117567][T16167] should_fail_ex.cold+0x5/0xa [ 667.117581][T16167] _copy_from_iter+0x1f4/0x1690 [ 667.117595][T16167] ? __asan_memset+0x23/0x50 [ 667.117609][T16167] ? __pfx__copy_from_iter+0x10/0x10 [ 667.117621][T16167] ? __pfx___alloc_skb+0x10/0x10 [ 667.117637][T16167] netlink_sendmsg+0x808/0xda0 [ 667.117656][T16167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.117674][T16167] ? apparmor_socket_sendmsg+0x15b/0x270 [ 667.117688][T16167] ____sys_sendmsg+0xa4d/0xbe0 [ 667.117702][T16167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.117718][T16167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.117738][T16167] ___sys_sendmsg+0x190/0x1e0 [ 667.117753][T16167] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.117773][T16167] ? find_held_lock+0x2b/0x80 [ 667.117797][T16167] __sys_sendmsg+0x160/0x210 [ 667.117810][T16167] ? __pfx___sys_sendmsg+0x10/0x10 [ 667.117824][T16167] ? __pfx_ksys_write+0x10/0x10 [ 667.117839][T16167] __do_fast_syscall_32+0x13a/0x8b0 [ 667.117851][T16167] ? lockdep_hardirqs_on+0x7d/0x110 [ 667.117864][T16167] do_fast_syscall_32+0x32/0x70 [ 667.117876][T16167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 667.117894][T16167] RIP: 0023:0xf7f43fec [ 667.117908][T16167] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 667.117913][T16167] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 667.117924][T16167] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 667.117931][T16167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.117937][T16167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.117943][T16167] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 667.117950][T16167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.117962][T16167] [ 667.544276][T16174] syzkaller0: entered promiscuous mode [ 667.546758][T16174] syzkaller0: entered allmulticast mode [ 667.650912][T16182] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 667.662763][T16182] CacheFiles: No cache directory specified [ 667.804651][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 669.041378][T16199] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 669.071956][T16199] kvm: pic: level sensitive irq not supported [ 669.072577][T16199] kvm: pic: non byte read [ 669.077923][T16199] kvm: pic: level sensitive irq not supported [ 669.078217][T16199] kvm: pic: non byte read [ 669.084946][T16199] kvm: pic: level sensitive irq not supported [ 669.087933][T16199] kvm: pic: non byte read [ 669.094379][T16199] kvm: pic: level sensitive irq not supported [ 669.095097][T16199] kvm: pic: non byte read [ 670.970820][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2775'. [ 671.186043][ T7987] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 671.337680][ T7987] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 671.344019][ T7987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 671.348000][ T7987] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 671.351722][ T7987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.364631][ T7987] usb 5-1: USB2VGA dongle found at address 17 [ 671.371045][ T7987] usb 5-1: Allocated 8 output buffers [ 672.230671][T16245] afs: Unknown parameter 'dynys/bus/acpi/uevent' [ 672.380213][T16210] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 673.974588][T16277] configfs-gadget.g1 gadget.32: FS Playback: Req. wMaxPacketSize 1792 at bInterval 1 > max ISOC 1023, may drop data! [ 674.544113][T16293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2789'. [ 676.699617][T16323] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 676.708845][T16323] CacheFiles: No cache directory specified [ 677.656098][T16308] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 677.969277][T16339] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 678.229531][T16347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2803'. [ 680.177698][T16366] input: syz0 as /devices/virtual/input/input200 [ 680.272299][T16366] netlink: 'syz.8.2808': attribute type 3 has an invalid length. [ 680.388366][T16350] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 680.831819][T16373] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 680.977420][T16383] input: syz0 as /devices/virtual/input/input201 [ 681.057207][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2815'. [ 681.183788][T16387] netlink: 'syz.4.2814': attribute type 3 has an invalid length. [ 681.982375][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2827'. [ 683.117050][T16423] input: syz0 as /devices/virtual/input/input202 [ 683.202967][T16427] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 683.205515][T16423] netlink: 'syz.0.2824': attribute type 3 has an invalid length. [ 683.209630][T16427] CacheFiles: No cache directory specified [ 684.003848][T16439] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 684.264257][T16448] syzkaller0: entered promiscuous mode [ 684.269442][T16448] syzkaller0: entered allmulticast mode [ 684.477092][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2833'. [ 685.179321][T16425] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 685.239513][T16462] input: syz0 as /devices/virtual/input/input203 [ 685.326230][T16462] netlink: 'syz.7.2836': attribute type 3 has an invalid length. [ 685.329439][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 685.338175][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.830244][T16479] UBIFS error (pid: 16479): cannot open "ubi0:testvol", error -19 [ 686.258122][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2843'. [ 686.369850][T16496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2844'. [ 686.428451][T16497] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2851'. [ 686.475768][T16497] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.2851' resets device [ 687.273762][T16506] input: syz0 as /devices/virtual/input/input204 [ 687.320550][T16508] loop9: detected capacity change from 0 to 524287998 [ 687.329341][T16506] netlink: 'syz.7.2847': attribute type 3 has an invalid length. [ 687.332440][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 687.386293][T16509] netlink: 'syz.4.2846': attribute type 15 has an invalid length. [ 687.389623][T16509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2846'. [ 687.804530][T16516] ip6tnl1: entered allmulticast mode [ 687.859223][T16520] netlink: 'syz.8.2849': attribute type 15 has an invalid length. [ 687.867713][T16520] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2849'. [ 687.912506][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2853'. [ 688.269776][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2857'. [ 689.090902][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2858'. [ 689.885871][T16512] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 690.056422][T16557] syzkaller0: entered promiscuous mode [ 690.058307][T16557] syzkaller0: entered allmulticast mode [ 690.152628][T16559] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 690.162362][T16559] CacheFiles: No cache directory specified [ 690.242465][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 690.301234][T16564] syzkaller0: entered promiscuous mode [ 690.303467][T16564] syzkaller0: entered allmulticast mode [ 690.320203][T16564] syz_tun: entered allmulticast mode [ 690.756958][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2868'. [ 690.960134][T16574] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1424729573 (182365385344 ns) > initial count (134528494848 ns). Using initial count to start timer. [ 691.593330][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 691.607290][T16593] syzkaller0: entered promiscuous mode [ 691.609411][T16593] syzkaller0: entered allmulticast mode [ 691.841655][T16602] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2877'. [ 692.083288][T16621] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 692.094437][T16621] CacheFiles: No cache directory specified [ 692.610413][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2881'. [ 693.382571][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2883'. [ 693.658095][T16655] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2887'. [ 693.678898][T16655] usb usb8: usbfs: interface 0 claimed by hub while 'syz.8.2887' resets device [ 693.800428][T16654] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 693.835476][T16654] kvm: pic: level sensitive irq not supported [ 693.836076][T16654] kvm: pic: non byte read [ 694.161458][T16662] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1424729573 (182365385344 ns) > initial count (134528494848 ns). Using initial count to start timer. [ 695.018014][T16688] FAULT_INJECTION: forcing a failure. [ 695.018014][T16688] name failslab, interval 1, probability 0, space 0, times 0 [ 695.026844][T16688] CPU: 1 UID: 0 PID: 16688 Comm: syz.0.2894 Not tainted syzkaller #0 PREEMPT(full) [ 695.026863][T16688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 695.026870][T16688] Call Trace: [ 695.026875][T16688] [ 695.026881][T16688] dump_stack_lvl+0x100/0x190 [ 695.026901][T16688] should_fail_ex.cold+0x5/0xa [ 695.026933][T16688] should_failslab+0xc2/0x120 [ 695.026959][T16688] __kmalloc_cache_noprof+0x91/0x6b0 [ 695.026980][T16688] ? bpf_prog_alloc_no_stats+0x15f/0x690 [ 695.027014][T16688] bpf_prog_alloc_no_stats+0x15f/0x690 [ 695.027035][T16688] bpf_prog_alloc+0x3b/0x200 [ 695.027047][T16688] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 695.027060][T16688] bpf_prog_load+0x49e/0x2a80 [ 695.027074][T16688] ? __lock_acquire+0x4c5/0x1ec0 [ 695.027088][T16688] ? __pfx_bpf_prog_load+0x10/0x10 [ 695.027110][T16688] __sys_bpf+0x1f46/0x4a30 [ 695.027130][T16688] ? __pfx___sys_bpf+0x10/0x10 [ 695.027145][T16688] ? find_held_lock+0x2b/0x80 [ 695.027161][T16688] ? get_pid_task+0xfc/0x250 [ 695.027176][T16688] ? get_pid_task+0xfc/0x250 [ 695.027195][T16688] ? proc_fail_nth_write+0x9f/0x220 [ 695.027208][T16688] ? find_held_lock+0x2b/0x80 [ 695.027226][T16688] ? rcu_read_lock_any_held+0x6a/0x90 [ 695.027244][T16688] ? find_held_lock+0x2b/0x80 [ 695.027259][T16688] ? ksys_write+0x190/0x250 [ 695.027270][T16688] ? ksys_write+0x190/0x250 [ 695.027290][T16688] ? fput+0x7c/0x100 [ 695.027305][T16688] ? __ia32_sys_bpf+0xcc/0x170 [ 695.027319][T16688] __ia32_sys_bpf+0xcc/0x170 [ 695.027335][T16688] ? __do_fast_syscall_32+0xb3/0x8b0 [ 695.027349][T16688] __do_fast_syscall_32+0x13a/0x8b0 [ 695.027375][T16688] ? lockdep_hardirqs_on+0x7d/0x110 [ 695.027387][T16688] do_fast_syscall_32+0x32/0x70 [ 695.027399][T16688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 695.027414][T16688] RIP: 0023:0xf702efec [ 695.027428][T16688] Code: Unable to access opcode bytes at 0xf702efc2. [ 695.027433][T16688] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 695.027445][T16688] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 695.027452][T16688] RDX: 00000000000000e8 RSI: 0000000000000000 RDI: 0000000000000000 [ 695.027458][T16688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 695.027464][T16688] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 695.027470][T16688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 695.027483][T16688] [ 695.048775][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2895'. [ 695.243557][T16701] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2896'. [ 696.491283][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2900'. [ 696.685511][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2901'. [ 697.878085][T16729] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1424729573 (182365385344 ns) > initial count (134528494848 ns). Using initial count to start timer. [ 698.100172][T16739] X25: received unknown 00 with LCI 000 [ 698.367386][ T9560] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 698.426193][T16748] input: syz0 as /devices/virtual/input/input205 [ 698.517642][ T9560] usb 9-1: Using ep0 maxpacket: 8 [ 698.522470][ T9560] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 698.527652][ T9560] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 698.530971][ T9560] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 698.534944][ T9560] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 698.539292][ T9560] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 698.543213][ T9560] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.548706][ T9560] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.558595][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2909'. [ 698.564766][T16748] netlink: 'syz.0.2907': attribute type 3 has an invalid length. [ 698.712941][T16757] syzkaller0: entered promiscuous mode [ 698.715336][T16757] syzkaller0: entered allmulticast mode [ 698.742842][T16757] syz_tun: entered allmulticast mode [ 698.767636][ T9560] usb 9-1: usb_control_msg returned -32 [ 698.770069][ T9560] usbtmc 9-1:16.0: can't read capabilities [ 700.186595][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'. [ 700.192168][T16772] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 700.269015][T16772] kvm: pic: level sensitive irq not supported [ 700.269368][T16772] kvm: pic: non byte read [ 700.634678][T16781] usb usb8: usbfs: interface 0 claimed by hub while 'syz.8.2917' resets device [ 700.669206][T16783] input: syz0 as /devices/virtual/input/input206 [ 700.729329][T16783] netlink: 'syz.8.2918': attribute type 3 has an invalid length. [ 700.812678][T16787] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 700.844028][T16787] CacheFiles: No cache directory specified [ 701.449895][ T41] usb 9-1: USB disconnect, device number 24 [ 701.720125][T16806] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 702.960708][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2924'. [ 703.904303][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2928'. [ 704.844810][T16850] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 704.850102][T16850] CacheFiles: No cache directory specified [ 704.932790][T16852] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2932'. [ 705.973262][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2937'. [ 706.376162][T16845] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 708.494238][T16918] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 708.499022][T16918] CacheFiles: No cache directory specified [ 708.778861][T16922] syzkaller0: entered promiscuous mode [ 708.780642][T16922] syzkaller0: entered allmulticast mode [ 709.503313][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2948'. [ 710.529456][T16938] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 710.534594][T16938] CacheFiles: No cache directory specified [ 710.946370][T16924] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 712.714556][T16963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 713.106054][T16942] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 713.824547][T16979] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2958'. [ 714.607413][T16991] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 714.612795][T16991] CacheFiles: No cache directory specified [ 714.694853][T16988] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 714.727020][T16993] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 714.730471][T16988] kvm: pic: level sensitive irq not supported [ 714.730836][T16988] kvm: pic: non byte read [ 714.736845][T16988] kvm: pic: level sensitive irq not supported [ 714.737762][T16988] kvm: pic: non byte read [ 714.738548][T16993] kvm: pic: level sensitive irq not supported [ 714.741003][T16988] kvm: pic: level sensitive irq not supported [ 714.741597][T16993] kvm: pic: non byte read [ 714.743601][T16988] kvm: pic: non byte read [ 714.746691][T16993] kvm: pic: level sensitive irq not supported [ 714.750377][T16993] kvm: pic: non byte read [ 714.751802][T16988] kvm: pic: level sensitive irq not supported [ 714.753207][T16993] kvm: pic: level sensitive irq not supported [ 714.754328][T16988] kvm: pic: non byte read [ 714.756564][T16993] kvm: pic: non byte read [ 714.762323][T16993] kvm: pic: level sensitive irq not supported [ 714.762597][T16993] kvm: pic: non byte read [ 714.956161][T17004] input: syz0 as /devices/virtual/input/input207 [ 715.059248][T17004] netlink: 'syz.8.2965': attribute type 3 has an invalid length. [ 715.076987][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2966'. [ 716.325645][T17022] input: syz0 as /devices/virtual/input/input208 [ 716.418331][T17022] netlink: 'syz.7.2970': attribute type 3 has an invalid length. [ 716.422335][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 716.743588][T17033] FAULT_INJECTION: forcing a failure. [ 716.743588][T17033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.749072][T17033] CPU: 3 UID: 0 PID: 17033 Comm: syz.0.2974 Not tainted syzkaller #0 PREEMPT(full) [ 716.749097][T17033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 716.749109][T17033] Call Trace: [ 716.749116][T17033] [ 716.749124][T17033] dump_stack_lvl+0x100/0x190 [ 716.749160][T17033] should_fail_ex.cold+0x5/0xa [ 716.749183][T17033] _copy_from_user+0x2e/0xd0 [ 716.749205][T17033] get_compat_msghdr+0xb3/0x480 [ 716.749241][T17033] ? __pfx_get_compat_msghdr+0x10/0x10 [ 716.749273][T17033] ___sys_sendmsg+0x1b6/0x1e0 [ 716.749299][T17033] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.749334][T17033] ? find_held_lock+0x2b/0x80 [ 716.749375][T17033] __sys_sendmsg+0x160/0x210 [ 716.749395][T17033] ? __pfx___sys_sendmsg+0x10/0x10 [ 716.749420][T17033] ? __pfx_ksys_write+0x10/0x10 [ 716.749444][T17033] __do_fast_syscall_32+0x13a/0x8b0 [ 716.749465][T17033] ? lockdep_hardirqs_on+0x7d/0x110 [ 716.749483][T17033] do_fast_syscall_32+0x32/0x70 [ 716.749500][T17033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 716.749522][T17033] RIP: 0023:0xf702efec [ 716.749544][T17033] Code: Unable to access opcode bytes at 0xf702efc2. [ 716.749552][T17033] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 716.749571][T17033] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080008fc0 [ 716.749583][T17033] RDX: 0000000000004040 RSI: 0000000000000000 RDI: 0000000000000000 [ 716.749594][T17033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 716.749604][T17033] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 716.749615][T17033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 716.749639][T17033] [ 716.886969][T17038] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 716.933163][T17038] kvm: pic: level sensitive irq not supported [ 716.933761][T17038] kvm: pic: non byte read [ 716.941657][T17038] kvm: pic: level sensitive irq not supported [ 716.942194][T17038] kvm: pic: non byte read [ 717.160457][T17043] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 718.376158][T17023] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 719.602778][T17076] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 719.696256][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2986'. [ 721.256926][T17067] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 721.728966][T17107] input: syz0 as /devices/virtual/input/input209 [ 721.882405][T17107] netlink: 'syz.4.2993': attribute type 3 has an invalid length. [ 723.336413][T17089] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 724.527719][T17140] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 724.533049][T17140] CacheFiles: No cache directory specified [ 726.004500][T17173] input: syz0 as /devices/virtual/input/input210 [ 726.108985][T17173] netlink: 'syz.4.3013': attribute type 3 has an invalid length. [ 726.690457][T17142] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 730.532892][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3030'. [ 730.999143][T17247] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 731.176758][T17247] pic_ioport_write: 10 callbacks suppressed [ 731.176848][T17247] kvm: pic: level sensitive irq not supported [ 731.204511][T17247] picdev_read: 10 callbacks suppressed [ 731.204548][T17247] kvm: pic: non byte read [ 731.256129][T17221] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 731.420499][T17247] kvm: pic: level sensitive irq not supported [ 731.420842][T17247] kvm: pic: non byte read [ 731.616842][T17247] kvm: pic: level sensitive irq not supported [ 731.617292][T17247] kvm: pic: non byte read [ 731.621836][T17247] kvm: pic: level sensitive irq not supported [ 731.622345][T17247] kvm: pic: non byte read [ 731.627763][T17247] kvm: pic: level sensitive irq not supported [ 731.628116][T17247] kvm: pic: non byte read [ 731.632825][T17247] kvm: pic: level sensitive irq not supported [ 731.633096][T17247] kvm: pic: non byte read [ 731.638264][T17247] kvm: pic: level sensitive irq not supported [ 731.638536][T17247] kvm: pic: non byte read [ 731.643380][T17247] kvm: pic: level sensitive irq not supported [ 731.643669][T17247] kvm: pic: non byte read [ 731.650323][T17247] kvm: pic: level sensitive irq not supported [ 731.650765][T17247] kvm: pic: non byte read [ 731.656408][T17247] kvm: pic: level sensitive irq not supported [ 731.657134][T17247] kvm: pic: non byte read [ 731.787174][T17251] ip6t_srh: unknown srh match flags 4000 [ 732.319625][T17229] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 733.625831][T17291] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 734.868203][T17278] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 735.522452][T17316] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 735.780987][T17325] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 736.885465][T13796] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 736.889504][T13796] bridge0 (unregistering): left promiscuous mode [ 736.898212][T13796] bond0 (unregistering): Released all slaves [ 736.904819][T13796] bond1 (unregistering): Released all slaves [ 736.946098][T17308] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 737.033767][T13796] : left promiscuous mode [ 737.103911][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3056'. [ 737.107768][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3055'. [ 737.275153][T13796] tipc: Left network mode [ 737.998148][T17356] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 738.015198][T17356] CacheFiles: No cache directory specified [ 739.300491][T13796] hsr_slave_0: left promiscuous mode [ 739.305538][T13796] hsr_slave_1: left promiscuous mode [ 739.352057][T13796] veth1_macvtap: left promiscuous mode [ 739.354860][T13796] veth0_macvtap: left promiscuous mode [ 739.359818][T13796] veth1_vlan: left promiscuous mode [ 739.362388][T13796] veth0_vlan: left promiscuous mode [ 740.056092][T17358] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 741.329567][T17384] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 741.339541][T17384] pic_ioport_write: 24 callbacks suppressed [ 741.339555][T17384] kvm: pic: level sensitive irq not supported [ 741.341894][T17384] picdev_read: 24 callbacks suppressed [ 741.341904][T17384] kvm: pic: non byte read [ 741.348624][T17384] kvm: pic: level sensitive irq not supported [ 741.348947][T17384] kvm: pic: non byte read [ 741.353817][T17384] kvm: pic: level sensitive irq not supported [ 741.354492][T17384] kvm: pic: non byte read [ 741.360961][T17384] kvm: pic: level sensitive irq not supported [ 741.361288][T17384] kvm: pic: non byte read [ 741.365768][T17384] kvm: pic: level sensitive irq not supported [ 741.366124][T17384] kvm: pic: non byte read [ 741.370982][T17384] kvm: pic: level sensitive irq not supported [ 741.371431][T17384] kvm: pic: non byte read [ 741.376758][T17384] kvm: pic: level sensitive irq not supported [ 741.392350][T17384] kvm: pic: non byte read [ 741.407586][T17384] kvm: pic: level sensitive irq not supported [ 741.408521][T17384] kvm: pic: non byte read [ 741.418666][T17384] kvm: pic: level sensitive irq not supported [ 741.419528][T17384] kvm: pic: non byte read [ 741.427351][T17384] kvm: pic: level sensitive irq not supported [ 741.427810][T17384] kvm: pic: non byte read [ 741.641038][T17388] input: syz0 as /devices/virtual/input/input211 [ 741.822408][T17392] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 742.032938][T17396] netlink: 'syz.4.3065': attribute type 3 has an invalid length. [ 742.041990][ T64] Bluetooth: hci1: link tx timeout [ 742.044291][ T64] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 742.851013][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3071'. [ 743.645562][T17422] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 743.653594][T17422] CacheFiles: No cache directory specified [ 744.013936][T17434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3076'. [ 744.136376][ T5737] Bluetooth: hci1: command 0x0406 tx timeout [ 744.706049][T17403] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 744.941218][T17441] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 745.773665][T17413] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 745.927190][T17455] FAULT_INJECTION: forcing a failure. [ 745.927190][T17455] name failslab, interval 1, probability 0, space 0, times 0 [ 745.931255][T17455] CPU: 3 UID: 0 PID: 17455 Comm: syz.7.3081 Not tainted syzkaller #0 PREEMPT(full) [ 745.931272][T17455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 745.931279][T17455] Call Trace: [ 745.931284][T17455] [ 745.931289][T17455] dump_stack_lvl+0x100/0x190 [ 745.931322][T17455] should_fail_ex.cold+0x5/0xa [ 745.931343][T17455] should_failslab+0xc2/0x120 [ 745.931369][T17455] __kmalloc_noprof+0xfc/0x820 [ 745.931393][T17455] ? rcu_is_watching+0x13/0xc0 [ 745.931415][T17455] ? tomoyo_realpath_from_path+0xb6/0x690 [ 745.931442][T17455] tomoyo_realpath_from_path+0xb6/0x690 [ 745.931461][T17455] tomoyo_path_number_perm+0x23c/0x580 [ 745.931474][T17455] ? tomoyo_path_number_perm+0x22e/0x580 [ 745.931489][T17455] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 745.931503][T17455] ? get_pid_task+0x106/0x250 [ 745.931537][T17455] ? find_held_lock+0x2b/0x80 [ 745.931559][T17455] ? __fget_files+0x215/0x3d0 [ 745.931577][T17455] ? hook_file_ioctl_common+0x140/0x440 [ 745.931596][T17455] ? __fget_files+0x215/0x3d0 [ 745.931610][T17455] ? __fget_files+0x21f/0x3d0 [ 745.931624][T17455] security_file_ioctl_compat+0xd3/0x230 [ 745.931640][T17455] __ia32_compat_sys_ioctl+0xc2/0x360 [ 745.931660][T17455] __do_fast_syscall_32+0x13a/0x8b0 [ 745.931686][T17455] ? lockdep_hardirqs_on+0x7d/0x110 [ 745.931698][T17455] do_fast_syscall_32+0x32/0x70 [ 745.931728][T17455] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 745.931745][T17455] RIP: 0023:0xf7f16fec [ 745.931760][T17455] Code: Unable to access opcode bytes at 0xf7f16fc2. [ 745.931766][T17455] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 745.931777][T17455] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085203 [ 745.931784][T17455] RDX: 000000008000fec0 RSI: 0000000000000000 RDI: 0000000000000000 [ 745.931791][T17455] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 745.931797][T17455] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 745.931803][T17455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.931816][T17455] [ 745.931821][T17455] ERROR: Out of memory at tomoyo_realpath_from_path. [ 746.240643][T17466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3083'. [ 746.778710][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.061206][T17497] input: syz0 as /devices/virtual/input/input212 [ 748.294744][T17497] netlink: 'syz.4.3092': attribute type 3 has an invalid length. [ 748.300509][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 748.383623][T17508] input: syz0 as /devices/virtual/input/input213 [ 748.589486][T17508] netlink: 'syz.8.3096': attribute type 3 has an invalid length. [ 749.195736][T17520] gadgetfs: bound to dummy_udc driver [ 749.388061][T17528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3101'. [ 749.914268][T17535] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3103'. [ 750.079809][T17493] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 750.775255][T17546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.185317][ T42] audit: type=1400 audit(1787275797.739:11070): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=17578 comm="syz.4.3115" name="unknown" offset=16 [ 753.384085][T17588] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 753.390154][T17588] CacheFiles: No cache directory specified [ 754.456173][ T6438] usb 13-1: Failed to early initialize device [ 754.473046][ T6438] usb 13-1: USB disconnect, device number 11 [ 754.771861][T17597] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 754.796109][T17597] pic_ioport_write: 35 callbacks suppressed [ 754.796132][T17597] kvm: pic: level sensitive irq not supported [ 754.799061][T17597] picdev_read: 35 callbacks suppressed [ 754.799084][T17597] kvm: pic: non byte read [ 754.806292][T17597] kvm: pic: level sensitive irq not supported [ 754.807344][T17597] kvm: pic: non byte read [ 754.814509][T17597] kvm: pic: level sensitive irq not supported [ 754.815616][T17597] kvm: pic: non byte read [ 754.822251][T17597] kvm: pic: level sensitive irq not supported [ 754.822658][T17597] kvm: pic: non byte read [ 755.257995][T17581] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 756.368188][T17617] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 756.381830][T17617] CacheFiles: No cache directory specified [ 756.686292][ T9] usb 12-1: new low-speed USB device number 17 using dummy_hcd [ 756.836682][ T9] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 756.840931][ T9] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 756.843941][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 756.847294][ T9] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 756.850927][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 756.854273][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 756.858889][ T9] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 756.861253][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 756.864499][ T9] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 756.868185][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 756.871429][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 756.875441][ T9] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 756.877983][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 756.881150][ T9] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 756.884825][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 756.888503][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 756.894252][ T9] usb 12-1: string descriptor 0 read error: -22 [ 756.896655][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.906773][ T9] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 757.916081][ T9] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 758.076520][ T9] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 758.080429][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 758.083648][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 758.087735][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.100166][ T9] usb 9-1: USB2VGA dongle found at address 25 [ 758.104873][ T9] usb 9-1: Allocated 8 output buffers [ 759.351902][T17573] usb 12-1: USB disconnect, device number 17 [ 760.145587][T17649] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 760.165864][T17649] kvm: pic: level sensitive irq not supported [ 760.167494][T17649] kvm: pic: non byte read [ 760.174546][T17649] kvm: pic: level sensitive irq not supported [ 760.178885][T17649] kvm: pic: non byte read [ 760.185703][T17649] kvm: pic: level sensitive irq not supported [ 760.187237][T17649] kvm: pic: non byte read [ 760.194465][T17649] kvm: pic: level sensitive irq not supported [ 760.194898][T17649] kvm: pic: non byte read [ 760.572995][ T5737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 760.579278][ T5737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 760.584275][ T5737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 760.595708][ T5737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 760.605381][ T5737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 761.059978][T13796] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.197491][T13796] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.358127][T13796] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.384330][T17655] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.387091][T17655] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.389990][T17655] bridge_slave_0: entered allmulticast mode [ 761.396601][T17655] bridge_slave_0: entered promiscuous mode [ 761.401927][T17655] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.406266][T17655] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.408806][T17655] bridge_slave_1: entered allmulticast mode [ 761.411764][T17655] bridge_slave_1: entered promiscuous mode [ 761.434973][T17655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.441363][T17655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.463259][T17655] team0: Port device team_slave_0 added [ 761.467957][T17655] team0: Port device team_slave_1 added [ 761.511985][T17655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.514463][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.523145][T17655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.544036][T17655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.547754][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.558272][T17655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.625448][T17655] hsr_slave_0: entered promiscuous mode [ 761.628001][T17655] hsr_slave_1: entered promiscuous mode [ 761.630145][T17655] debugfs: 'hsr0' already exists in 'hsr' [ 761.631939][T17655] Cannot create hsr debugfs directory [ 761.772689][T13796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.777143][T13796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.780683][T13796] bond0 (unregistering): Released all slaves [ 762.157198][ T5441] 8021q: adding VLAN 0 to HW filter on device eth22 [ 762.336094][ T5909] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 762.378929][T13796] hsr_slave_0: left promiscuous mode [ 762.381549][T13796] hsr_slave_1: left promiscuous mode [ 762.383556][T13796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.385829][T13796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.388658][T13796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.390828][T13796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.399210][T13796] veth1_macvtap: left promiscuous mode [ 762.400889][T13796] veth0_macvtap: left promiscuous mode [ 762.402683][T13796] veth1_vlan: left promiscuous mode [ 762.404289][T13796] veth0_vlan: left promiscuous mode [ 762.517232][ T5909] usb 13-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 762.521032][ T5909] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 762.524082][ T5909] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 762.528260][ T5909] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.544935][ T5909] usb 13-1: USB2VGA dongle found at address 12 [ 762.552296][T13796] team0 (unregistering): Port device team_slave_1 removed [ 762.554079][ T5909] usb 13-1: Allocated 8 output buffers [ 762.564800][T13796] team0 (unregistering): Port device team_slave_0 removed [ 762.719301][ T5737] Bluetooth: hci4: command tx timeout [ 763.092023][T17655] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 763.100530][T17655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.104290][T17655] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 763.112052][T17655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 763.115094][T17655] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 763.120526][T17655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.123346][T17655] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 763.127412][T17655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.173329][T17655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.182965][T17655] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.190138][T16321] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.193188][T16321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.200240][T16321] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.202554][T16321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.435164][T17655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.562811][T17655] veth0_vlan: entered promiscuous mode [ 763.579978][T17655] veth1_vlan: entered promiscuous mode [ 763.596648][T17655] veth0_macvtap: entered promiscuous mode [ 763.601054][T17655] veth1_macvtap: entered promiscuous mode [ 763.613368][T17655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.621709][T17655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.667946][ T6652] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.688409][ T6652] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.715839][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.721542][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.750136][T16321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.754009][T16321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.758327][ T5831] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.766135][ T5831] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.776072][ T5737] Bluetooth: hci4: command tx timeout [ 765.054597][T17747] infiniband syz1: set active [ 765.066361][T17747] infiniband syz1: added bond0 [ 765.071766][T17747] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 765.075127][T17747] infiniband syz1: Couldn't open port 1 [ 765.086169][T17747] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 765.090946][T17747] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 765.105588][T17747] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 765.145623][T17747] RDS/IB: syz1: added [ 765.148055][T17747] smc: adding ib device syz1 with port count 1 [ 765.150816][T17747] smc: ib device syz1 port 1 has no pnetid [ 766.074580][T17779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3155'. [ 766.148854][T17783] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 766.164160][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 766.166092][T17783] CIFS mount error: No usable UNC path provided in device string! [ 766.166092][T17783] [ 766.170026][T17783] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 766.171944][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 766.220664][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 766.228023][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 766.233983][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 766.328977][T17795] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 766.355849][T13796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.376268][T17795] md: array md0 already has disks! [ 766.466297][T17795] md: could not open device unknown-block(1,1). [ 766.469018][T17795] md: error, md_import_device() returned -16 [ 766.495166][T13796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.507914][T17795] md/raid10:md0: not enough operational mirrors. [ 766.517508][T17795] md: pers->run() failed ... [ 766.556721][T17795] md: could not open device unknown-block(1,2). [ 766.558929][T17795] md: error, md_import_device() returned -16 [ 766.603988][T13796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.746197][T13796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.856101][ T5737] Bluetooth: hci4: command tx timeout [ 767.033407][T13796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.047055][T13796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.051388][T13796] bond0 (unregistering): Released all slaves [ 767.175855][T13796] tipc: Disabling bearer [ 767.176117][ T7987] usb 5-1: Failed to early initialize device [ 767.193976][ T7987] usb 5-1: USB disconnect, device number 17 [ 767.205160][T13796] tipc: Left network mode [ 767.275791][T17784] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.282049][T17784] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.289704][T17784] bridge_slave_0: entered allmulticast mode [ 767.296549][T17784] bridge_slave_0: entered promiscuous mode [ 767.313307][T17784] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.317849][T17784] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.322886][T17784] bridge_slave_1: entered allmulticast mode [ 767.330399][T17784] bridge_slave_1: entered promiscuous mode [ 767.381342][T17784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.389047][T17784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.494912][ T5441] 8021q: adding VLAN 0 to HW filter on device eth22 [ 767.509709][T17784] team0: Port device team_slave_0 added [ 767.513859][T17784] team0: Port device team_slave_1 added [ 767.547878][T17784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.562126][T17784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.572337][T17784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.603763][T17784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.611058][T17784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.626014][T17784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.692013][T17831] FAULT_INJECTION: forcing a failure. [ 767.692013][T17831] name failslab, interval 1, probability 0, space 0, times 0 [ 767.692234][T17784] hsr_slave_0: entered promiscuous mode [ 767.695925][T17831] CPU: 0 UID: 0 PID: 17831 Comm: syz.8.3163 Not tainted syzkaller #0 PREEMPT(full) [ 767.695944][T17831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 767.695951][T17831] Call Trace: [ 767.695956][T17831] [ 767.695960][T17831] dump_stack_lvl+0x100/0x190 [ 767.695987][T17831] should_fail_ex.cold+0x5/0xa [ 767.696008][T17831] should_failslab+0xc2/0x120 [ 767.696033][T17831] __kmalloc_cache_noprof+0x91/0x6b0 [ 767.696052][T17831] ? sctp_add_bind_addr+0xae/0x3e0 [ 767.696074][T17831] sctp_add_bind_addr+0xae/0x3e0 [ 767.696087][T17831] sctp_copy_one_addr.part.0+0xea/0x120 [ 767.696102][T17831] sctp_bind_addr_copy+0x1b4/0x530 [ 767.696116][T17831] sctp_connect_new_asoc+0x1c9/0x770 [ 767.696141][T17831] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 767.696157][T17831] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 767.696172][T17831] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 767.696189][T17831] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 767.696209][T17831] sctp_sendmsg+0x1743/0x22e0 [ 767.696227][T17831] ? __pfx___might_resched+0x10/0x10 [ 767.696252][T17831] ? __pfx_sctp_sendmsg+0x10/0x10 [ 767.696268][T17831] ? aa_sk_perm+0x30c/0xaa0 [ 767.696292][T17831] ? __might_fault+0xc5/0x140 [ 767.696307][T17831] ? aa_sock_msg_perm.isra.0+0x103/0x1c0 [ 767.696320][T17831] ? __pfx_sctp_sendmsg+0x10/0x10 [ 767.696336][T17831] inet_sendmsg+0x11c/0x140 [ 767.696357][T17831] __sys_sendto+0x453/0x4e0 [ 767.696380][T17831] ? __pfx_inet_sendmsg+0x10/0x10 [ 767.696393][T17831] ? __pfx___sys_sendto+0x10/0x10 [ 767.696420][T17831] ? fput+0x7c/0x100 [ 767.696439][T17831] ? ksys_write+0x1ac/0x250 [ 767.696452][T17831] __ia32_sys_sendto+0xdd/0x1b0 [ 767.696468][T17831] ? __do_fast_syscall_32+0xb3/0x8b0 [ 767.696489][T17831] ? lockdep_hardirqs_on+0x7d/0x110 [ 767.696500][T17831] __do_fast_syscall_32+0x13a/0x8b0 [ 767.696512][T17831] ? lockdep_hardirqs_on+0x7d/0x110 [ 767.696523][T17831] do_fast_syscall_32+0x32/0x70 [ 767.696535][T17831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 767.696550][T17831] RIP: 0023:0xf7f43fec [ 767.696566][T17831] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 767.696571][T17831] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 767.696582][T17831] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 767.696589][T17831] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000080000100 [ 767.696595][T17831] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 767.696601][T17831] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 767.696607][T17831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 767.696621][T17831] [ 767.797153][T17784] hsr_slave_1: entered promiscuous mode [ 767.800029][T17784] debugfs: 'hsr0' already exists in 'hsr' [ 767.801846][T17784] Cannot create hsr debugfs directory [ 767.868476][ T5441] 8021q: adding VLAN 0 to HW filter on device eth23 [ 767.959321][T17843] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3165'. [ 767.988307][T17843] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 767.998055][T17843] netlink: 'syz.8.3165': attribute type 1 has an invalid length. [ 768.000462][T17843] netlink: 'syz.8.3165': attribute type 2 has an invalid length. [ 768.010455][T13796] hsr_slave_0: left promiscuous mode [ 768.012817][T13796] hsr_slave_1: left promiscuous mode [ 768.015162][T13796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.017813][T13796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.021265][T13796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.023913][T13796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.033316][T13796] veth1_macvtap: left promiscuous mode [ 768.035188][T13796] veth0_macvtap: left promiscuous mode [ 768.038038][T13796] veth1_vlan: left promiscuous mode [ 768.039801][T13796] veth0_vlan: left promiscuous mode [ 768.212660][T13796] team0 (unregistering): Port device team_slave_1 removed [ 768.223789][T13796] team0 (unregistering): Port device team_slave_0 removed [ 768.296095][ T5737] Bluetooth: hci2: command tx timeout [ 768.701897][ T5441] 8021q: adding VLAN 0 to HW filter on device eth24 [ 768.755154][T17784] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 768.809875][T17784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.813875][T17784] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 768.821910][T17784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.826510][T17784] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 768.830535][T13796] IPVS: stop unused estimator thread 0... [ 768.832610][T17784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.840765][T17784] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 768.847816][T17784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 768.933177][T17784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.937023][ T5737] Bluetooth: hci4: command tx timeout [ 768.948818][T17784] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.960503][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.963599][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.992096][T12508] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.994563][T12508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.106902][T17815] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 769.125318][ T5441] 8021q: adding VLAN 0 to HW filter on device eth25 [ 769.435645][T17784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.581705][T17784] veth0_vlan: entered promiscuous mode [ 769.590535][T17784] veth1_vlan: entered promiscuous mode [ 769.606417][T17784] veth0_macvtap: entered promiscuous mode [ 769.610869][T17784] veth1_macvtap: entered promiscuous mode [ 769.620219][T17784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.627860][T17784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.687968][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.694539][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.737894][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.788878][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.796391][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.799771][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.859168][T16321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.861797][T16321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.052118][T17911] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 770.070629][T17911] CacheFiles: No cache directory specified [ 770.278616][T17917] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 770.306705][ T6438] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 770.376136][ T5737] Bluetooth: hci2: command tx timeout [ 770.478072][ T6438] usb 14-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 770.483435][ T6438] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 770.486814][ T6438] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 770.489886][ T6438] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.499884][ T6438] usb 14-1: USB2VGA dongle found at address 2 [ 770.503114][ T6438] usb 14-1: Allocated 8 output buffers [ 771.009963][T17936] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 771.033367][T17936] kvm: pic: level sensitive irq not supported [ 771.033880][T17936] kvm: pic: non byte read [ 772.106133][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3186'. [ 772.115387][T17964] net_ratelimit: 630 callbacks suppressed [ 772.115412][T17964] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 772.456897][ T5737] Bluetooth: hci2: command tx timeout [ 773.248280][T17985] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3191'. [ 774.536677][ T5737] Bluetooth: hci2: command tx timeout [ 774.977418][T18010] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 775.341985][T18016] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 775.351332][T18016] kvm: pic: level sensitive irq not supported [ 775.351629][T18016] kvm: pic: non byte read [ 776.476693][T18038] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 776.483047][T18038] CacheFiles: No cache directory specified [ 776.910756][T18042] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3207'. [ 776.936072][T18008] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 778.468351][T18021] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 780.769506][T18106] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 780.780925][T18106] kvm: pic: level sensitive irq not supported [ 780.781675][T18106] kvm: pic: non byte read [ 780.786884][T18106] kvm: pic: level sensitive irq not supported [ 780.787171][T18106] kvm: pic: non byte read [ 780.791906][T18106] kvm: pic: level sensitive irq not supported [ 780.792261][T18106] kvm: pic: non byte read [ 780.797302][T18106] kvm: pic: level sensitive irq not supported [ 780.797626][T18106] kvm: pic: non byte read [ 780.802642][T18110] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 781.072384][T18124] netlink: 'syz.9.3224': attribute type 23 has an invalid length. [ 781.346051][T18080] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 782.377636][T18144] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 785.060521][T18182] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 785.334861][T18187] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3244'. [ 785.340008][T18187] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3244'. [ 785.399670][T18188] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3244'. [ 785.402519][T18188] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3244'. [ 785.406936][T18188] batadv0: entered promiscuous mode [ 786.056051][T18163] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 787.584308][T18232] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 788.509658][ T42] audit: type=1800 audit(1787275833.069:11071): pid=18245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3258" name="idProduct" dev="configfs" ino=170923 res=0 errno=0 [ 788.516327][ T42] audit: type=1800 audit(1787275833.069:11072): pid=18245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3258" name="serialnumber" dev="configfs" ino=170925 res=0 errno=0 [ 788.522789][ T42] audit: type=1800 audit(1787275833.069:11073): pid=18245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3258" name="configuration" dev="configfs" ino=170927 res=0 errno=0 [ 788.580629][T18248] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 788.600632][T18248] kvm: pic: level sensitive irq not supported [ 788.601361][T18248] kvm: pic: non byte read [ 788.605714][T18248] kvm: pic: level sensitive irq not supported [ 788.606141][T18248] kvm: pic: non byte read [ 788.611178][T18248] kvm: pic: level sensitive irq not supported [ 788.611549][T18248] kvm: pic: non byte read [ 788.618187][T18248] kvm: pic: level sensitive irq not supported [ 788.618511][T18248] kvm: pic: non byte read [ 789.333437][T15521] kernel write not supported for file /input/mouse0 (pid: 15521 comm: kworker/2:1) [ 789.440702][T18268] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3266'. [ 789.514277][T18269] lo speed is unknown, defaulting to 1000 [ 789.517149][T18269] lo speed is unknown, defaulting to 1000 [ 789.527943][T18269] lo speed is unknown, defaulting to 1000 [ 789.532873][T18269] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 789.537599][T18269] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 789.543019][T18269] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 789.552666][T18269] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 789.566139][T18269] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 789.652878][T18269] lo speed is unknown, defaulting to 1000 [ 789.675008][T18269] lo speed is unknown, defaulting to 1000 [ 789.692358][T18269] lo speed is unknown, defaulting to 1000 [ 789.702407][T18269] lo speed is unknown, defaulting to 1000 [ 789.710930][T18269] lo speed is unknown, defaulting to 1000 [ 789.824580][T18270] smc: removing ib device syz0 [ 789.928582][T18270] smbdirect: ib_dev[syz0] removed [ 789.954373][T18273] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 789.960821][T18273] CacheFiles: No cache directory specified [ 790.227726][T18238] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 790.874719][T18279] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 790.885892][T18277] kvm: pic: level sensitive irq not supported [ 790.887379][T18277] kvm: pic: non byte read [ 793.017074][T18336] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3279'. [ 793.020521][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3279'. [ 793.102716][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 793.121204][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 793.126125][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 793.131857][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 793.136091][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 793.231402][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3281'. [ 793.495543][T18339] lo speed is unknown, defaulting to 1000 [ 793.655224][T18339] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.659655][T18339] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.662060][T18339] bridge_slave_0: entered allmulticast mode [ 793.665019][T18339] bridge_slave_0: entered promiscuous mode [ 793.668972][T18339] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.671417][T18339] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.673769][T18339] bridge_slave_1: entered allmulticast mode [ 793.678702][T18339] bridge_slave_1: entered promiscuous mode [ 793.694640][T18339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.699233][T18339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.719992][T18339] team0: Port device team_slave_0 added [ 793.723236][T18339] team0: Port device team_slave_1 added [ 793.737829][T18339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.740145][T18339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.748315][T18339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.753290][T18339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.755558][T18339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.847806][T18339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.915624][T18339] hsr_slave_0: entered promiscuous mode [ 793.918339][T18339] hsr_slave_1: entered promiscuous mode [ 793.920502][T18339] debugfs: 'hsr0' already exists in 'hsr' [ 793.922492][T18339] Cannot create hsr debugfs directory [ 794.066858][T18366] netlink: 'syz.8.3284': attribute type 4 has an invalid length. [ 794.778265][T18331] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 795.059180][T18339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 795.063847][T18339] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 795.066960][T18339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 795.071379][T18339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 795.074817][T18339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 795.082468][T18339] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 795.085622][T18339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 795.094084][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880296fdc00: rx timeout, send abort [ 795.100965][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802a13b000: rx timeout, send abort [ 795.104779][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff8880296fdc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 795.116753][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a13b000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 795.130979][T18339] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 795.176274][ T5737] Bluetooth: hci3: command tx timeout [ 795.261020][T18339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.279629][T18339] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.290265][T16321] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.293402][T16321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.302879][T16321] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.306059][T16321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.813898][T18339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.852927][T18339] veth0_vlan: entered promiscuous mode [ 795.871002][T18339] veth1_vlan: entered promiscuous mode [ 795.892427][T18339] veth0_macvtap: entered promiscuous mode [ 795.896760][T18339] veth1_macvtap: entered promiscuous mode [ 795.905165][T18339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.913820][T18339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.951434][T18452] comedi comedi0: comedi_config --init_data is deprecated [ 796.063112][T12508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.073198][T12508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.099120][T12508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.107665][T12508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.237199][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.247967][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.276076][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.282046][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.647163][T18484] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 796.757938][T18491] netlink: 'syz.4.3290': attribute type 61 has an invalid length. [ 796.879243][T18500] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3293'. [ 796.968350][T18503] siw: device registration error -23 [ 797.256032][ T5737] Bluetooth: hci3: command tx timeout [ 798.708892][T18520] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 798.730945][T18520] kvm: pic: level sensitive irq not supported [ 798.731332][T18520] kvm: pic: non byte read [ 798.785255][T18518] trusted_key: encrypted_key: hex blob is missing [ 798.833767][T18525] netdevsim netdevsim2 30: renamed from netdevsim0 (while UP) [ 798.842272][ T42] audit: type=1400 audit(1787275843.399:11074): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=18524 comm="syz.2.3300" name="p" offset=59 [ 798.895803][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3302'. [ 798.899966][T18531] netlink: 'syz.4.3302': attribute type 10 has an invalid length. [ 798.902955][T18531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3302'. [ 798.936910][T18502] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 799.336600][ T5737] Bluetooth: hci3: command tx timeout [ 799.391555][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 799.770510][T18556] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 799.777823][T18556] CacheFiles: No cache directory specified [ 801.426152][ T5737] Bluetooth: hci3: command tx timeout [ 802.056915][ T42] audit: type=1800 audit(1787275846.609:11075): pid=18601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3315" name="nexus" dev="configfs" ino=187056 res=0 errno=0 [ 802.057126][T18601] Missing 'naa.' prefix [ 802.866135][T18581] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 803.213132][T18613] binder: 18612:18613 ioctl c0306201 800001c0 returned -14 [ 803.390176][T18619] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 803.415005][T18619] kvm: pic: level sensitive irq not supported [ 803.423439][T18619] kvm: pic: non byte read [ 803.546681][T18623] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 804.522737][T18629] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 804.530807][T18629] CacheFiles: No cache directory specified [ 805.518371][T18645] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 805.529415][T18645] kvm: pic: level sensitive irq not supported [ 805.529756][T18645] kvm: pic: non byte read [ 805.531372][T18644] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 805.551286][T18644] kvm: pic: level sensitive irq not supported [ 805.551621][T18644] kvm: pic: non byte read [ 805.641873][ T42] audit: type=1400 audit(1787275850.199:11076): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=18650 comm="syz.4.3329" name="p" offset=92 [ 805.756682][T18656] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3331' sets config #1024 [ 805.764527][T18656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3331'. [ 805.768711][T18656] bridge_slave_1: left allmulticast mode [ 805.770710][T18656] bridge_slave_1: left promiscuous mode [ 805.772664][T18656] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.776689][T18656] bridge_slave_0: left allmulticast mode [ 805.778475][T18656] bridge_slave_0: left promiscuous mode [ 805.780392][T18656] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.706384][T18667] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 806.710653][T18667] CacheFiles: No cache directory specified [ 807.116021][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 807.266703][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 807.268994][ T29] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 807.273064][ T29] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 807.277507][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.280215][ T29] usb 7-1: Product: syz [ 807.281570][ T29] usb 7-1: Manufacturer: syz [ 807.283251][ T29] usb 7-1: SerialNumber: syz [ 807.286494][ T29] usb 7-1: config 0 descriptor?? [ 807.293173][ T29] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 807.296063][ T29] usb 7-1: setting power ON [ 807.297959][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 807.313662][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 807.317555][ T29] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 807.320502][ T29] usb 7-1: media controller created [ 807.334402][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 807.351493][ T29] usb 7-1: selecting invalid altsetting 6 [ 807.354457][ T29] usb 7-1: digital interface selection failed (-22) [ 807.356737][ T29] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 807.360259][ T29] usb 7-1: setting power OFF [ 807.362111][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 807.364113][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 807.366996][ T29] (NULL device *): no alternate interface [ 807.388582][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 807.519558][ T29] usb 7-1: USB disconnect, device number 3 [ 808.067846][T18686] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 808.074690][T18686] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 808.120821][T18684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.140404][T18684] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.161875][T18684] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.219871][ T29] lo speed is unknown, defaulting to 1000 [ 808.223011][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.872967][T18697] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 808.889785][T18697] kvm: pic: level sensitive irq not supported [ 808.890299][T18697] kvm: pic: non byte read [ 809.159262][T18701] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 809.182464][T18701] kvm: pic: level sensitive irq not supported [ 809.183471][T18701] kvm: pic: non byte read [ 810.237581][T18709] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3348'. [ 810.655784][T18719] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 810.662710][T18719] CacheFiles: No cache directory specified [ 810.828535][T18729] FAULT_INJECTION: forcing a failure. [ 810.828535][T18729] name failslab, interval 1, probability 0, space 0, times 0 [ 810.828606][T18726] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 810.835123][T18729] CPU: 1 UID: 0 PID: 18729 Comm: syz.9.3355 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.835143][T18729] Tainted: [L]=SOFTLOCKUP [ 810.835147][T18729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 810.835154][T18729] Call Trace: [ 810.835159][T18729] [ 810.835163][T18729] dump_stack_lvl+0x100/0x190 [ 810.835184][T18729] should_fail_ex.cold+0x5/0xa [ 810.835198][T18729] should_failslab+0xc2/0x120 [ 810.835215][T18729] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 810.835231][T18729] ? __alloc_skb+0x140/0x710 [ 810.835244][T18729] __alloc_skb+0x140/0x710 [ 810.835254][T18729] ? __alloc_skb+0x5b7/0x710 [ 810.835275][T18729] ? __pfx___alloc_skb+0x10/0x10 [ 810.835286][T18729] ? genl_rcv_msg+0x4be/0x800 [ 810.835311][T18729] netlink_ack+0x117/0xb80 [ 810.835331][T18729] netlink_rcv_skb+0x333/0x420 [ 810.835347][T18729] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.835358][T18729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 810.835380][T18729] ? netlink_deliver_tap+0x1ae/0xcc0 [ 810.835397][T18729] genl_rcv+0x28/0x40 [ 810.835413][T18729] netlink_unicast+0x585/0x850 [ 810.835450][T18729] ? __pfx_netlink_unicast+0x10/0x10 [ 810.835470][T18729] netlink_sendmsg+0x8b0/0xda0 [ 810.835488][T18729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.835506][T18729] ? apparmor_socket_sendmsg+0x15b/0x270 [ 810.835522][T18729] ____sys_sendmsg+0xa4d/0xbe0 [ 810.835536][T18729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.835552][T18729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.835572][T18729] ___sys_sendmsg+0x190/0x1e0 [ 810.835602][T18729] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.835626][T18729] ? find_held_lock+0x2b/0x80 [ 810.835660][T18729] __sys_sendmsg+0x160/0x210 [ 810.835673][T18729] ? __pfx___sys_sendmsg+0x10/0x10 [ 810.835688][T18729] ? __pfx_ksys_write+0x10/0x10 [ 810.835702][T18729] __do_fast_syscall_32+0x13a/0x8b0 [ 810.835716][T18729] ? lockdep_hardirqs_on+0x7d/0x110 [ 810.835728][T18729] do_fast_syscall_32+0x32/0x70 [ 810.835741][T18729] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 810.835756][T18729] RIP: 0023:0xf700efec [ 810.835771][T18729] Code: Unable to access opcode bytes at 0xf700efc2. [ 810.835776][T18729] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 810.835786][T18729] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 810.835793][T18729] RDX: 0000000004040084 RSI: 0000000000000000 RDI: 0000000000000000 [ 810.835800][T18729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 810.835806][T18729] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 810.835812][T18729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 810.835825][T18729] [ 810.841394][T18726] kvm: pic: level sensitive irq not supported [ 810.925398][T18726] kvm: pic: non byte read [ 811.094370][T18735] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 812.706341][T18721] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 812.859735][T18759] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3365'. [ 813.097881][T18763] netlink: 'syz.9.3365': attribute type 6 has an invalid length. [ 813.305428][T18767] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 813.311489][T18767] CacheFiles: No cache directory specified [ 813.322818][T18769] syzkaller0: entered promiscuous mode [ 813.324647][T18769] syzkaller0: entered allmulticast mode [ 813.831146][T18781] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3372'. [ 814.325597][T18788] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 814.330791][T18788] CacheFiles: No cache directory specified [ 815.556917][T18810] NILFS (loop4): device size too small [ 817.042506][T18823] typec_fusb302 0-0022: supply vbus not found, using dummy regulator [ 817.064546][T18823] typec_fusb302 0-0022: failed to request gpio_int_n [ 817.102461][T18825] typec_fusb302 1-0022: I2C/SMBus block functionality not supported! [ 817.107355][T18825] i2c i2c-1: new_device: Instantiated device typec_fusb302 at 0x22 [ 817.110393][T18823] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2 [ 817.115091][T18823] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 817.117359][T18825] Invalid option length (1047276) for dns_resolver key [ 817.496466][T18808] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 818.222388][ T42] audit: type=1400 audit(1787275862.779:11077): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=18843 comm="syz.9.3395" [ 818.260369][T18842] ptrace attach of "/syz-executor exec"[10662] was attempted by "/syz-executor exec"[18842] [ 818.295890][T18848] FAULT_INJECTION: forcing a failure. [ 818.295890][T18848] name failslab, interval 1, probability 0, space 0, times 0 [ 818.302090][T18848] CPU: 2 UID: 0 PID: 18848 Comm: syz.8.3397 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.302110][T18848] Tainted: [L]=SOFTLOCKUP [ 818.302115][T18848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 818.302121][T18848] Call Trace: [ 818.302126][T18848] [ 818.302132][T18848] dump_stack_lvl+0x100/0x190 [ 818.302152][T18848] should_fail_ex.cold+0x5/0xa [ 818.302165][T18848] should_failslab+0xc2/0x120 [ 818.302182][T18848] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 818.302198][T18848] ? __alloc_skb+0x140/0x710 [ 818.302211][T18848] __alloc_skb+0x140/0x710 [ 818.302220][T18848] ? __alloc_skb+0x5b7/0x710 [ 818.302230][T18848] ? __pfx___alloc_skb+0x10/0x10 [ 818.302239][T18848] ? trace_contention_end+0x126/0x160 [ 818.302254][T18848] ? __mutex_lock+0x26c/0x1bc0 [ 818.302268][T18848] netlink_dump+0x194/0xd00 [ 818.302286][T18848] ? __pfx_netlink_dump+0x10/0x10 [ 818.302299][T18848] ? __netlink_lookup+0x65c/0x900 [ 818.302321][T18848] __netlink_dump_start+0x6d6/0x990 [ 818.302338][T18848] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 818.302356][T18848] rtnetlink_rcv_msg+0xb3e/0xe90 [ 818.302381][T18848] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 818.302399][T18848] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 818.302411][T18848] ? __pfx_rtnl_dumpit+0x10/0x10 [ 818.302426][T18848] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 818.302445][T18848] ? ref_tracker_free+0x37e/0x6c0 [ 818.302470][T18848] netlink_rcv_skb+0x159/0x420 [ 818.302486][T18848] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 818.302499][T18848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 818.302520][T18848] ? netlink_deliver_tap+0x1ae/0xcc0 [ 818.302537][T18848] netlink_unicast+0x585/0x850 [ 818.302555][T18848] ? __pfx_netlink_unicast+0x10/0x10 [ 818.302574][T18848] netlink_sendmsg+0x8b0/0xda0 [ 818.302592][T18848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.302609][T18848] ? apparmor_socket_sendmsg+0x15b/0x270 [ 818.302624][T18848] ____sys_sendmsg+0xa4d/0xbe0 [ 818.302638][T18848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.302655][T18848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.302674][T18848] ___sys_sendmsg+0x190/0x1e0 [ 818.302690][T18848] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.302710][T18848] ? find_held_lock+0x2b/0x80 [ 818.302734][T18848] __sys_sendmsg+0x160/0x210 [ 818.302758][T18848] ? __pfx___sys_sendmsg+0x10/0x10 [ 818.302775][T18848] ? __pfx_ksys_write+0x10/0x10 [ 818.302790][T18848] __do_fast_syscall_32+0x13a/0x8b0 [ 818.302803][T18848] ? lockdep_hardirqs_on+0x7d/0x110 [ 818.302815][T18848] do_fast_syscall_32+0x32/0x70 [ 818.302827][T18848] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.302842][T18848] RIP: 0023:0xf7f43fec [ 818.302857][T18848] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 818.302862][T18848] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 818.302873][T18848] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 818.302880][T18848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 818.302887][T18848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 818.302896][T18848] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 818.302905][T18848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 818.302924][T18848] [ 819.604499][T18860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3401'. [ 820.437424][T18866] FAULT_INJECTION: forcing a failure. [ 820.437424][T18866] name failslab, interval 1, probability 0, space 0, times 0 [ 820.442254][T18866] CPU: 0 UID: 0 PID: 18866 Comm: syz.8.3403 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.442283][T18866] Tainted: [L]=SOFTLOCKUP [ 820.442289][T18866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 820.442300][T18866] Call Trace: [ 820.442308][T18866] [ 820.442317][T18866] dump_stack_lvl+0x100/0x190 [ 820.442345][T18866] should_fail_ex.cold+0x5/0xa [ 820.442365][T18866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 820.442391][T18866] should_failslab+0xc2/0x120 [ 820.442415][T18866] kmem_cache_alloc_noprof+0x91/0x6a0 [ 820.442436][T18866] ? skb_clone+0x190/0x400 [ 820.442455][T18866] skb_clone+0x190/0x400 [ 820.442471][T18866] netlink_deliver_tap+0xaed/0xcc0 [ 820.442498][T18866] netlink_unicast+0x62b/0x850 [ 820.442522][T18866] ? __pfx_netlink_unicast+0x10/0x10 [ 820.442552][T18866] netlink_sendmsg+0x8b0/0xda0 [ 820.442581][T18866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.442610][T18866] ? apparmor_socket_sendmsg+0x15b/0x270 [ 820.442632][T18866] ____sys_sendmsg+0xa4d/0xbe0 [ 820.442654][T18866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.442680][T18866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 820.442708][T18866] ___sys_sendmsg+0x190/0x1e0 [ 820.442729][T18866] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.442758][T18866] ? find_held_lock+0x2b/0x80 [ 820.442793][T18866] __sys_sendmsg+0x160/0x210 [ 820.442809][T18866] ? __pfx___sys_sendmsg+0x10/0x10 [ 820.442830][T18866] ? __pfx_ksys_write+0x10/0x10 [ 820.442850][T18866] __do_fast_syscall_32+0x13a/0x8b0 [ 820.442867][T18866] ? lockdep_hardirqs_on+0x7d/0x110 [ 820.442884][T18866] do_fast_syscall_32+0x32/0x70 [ 820.442901][T18866] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 820.442920][T18866] RIP: 0023:0xf7f43fec [ 820.442940][T18866] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 820.442947][T18866] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 820.442963][T18866] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000240 [ 820.442972][T18866] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 820.442981][T18866] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 820.442990][T18866] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 820.442998][T18866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 820.443018][T18866] [ 820.570400][ T42] audit: type=1400 audit(1787275865.129:11078): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=18867 comm="syz.8.3404" name="p" offset=48 [ 820.635603][T18872] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 820.648083][T18872] CacheFiles: No cache directory specified [ 820.654212][T18874] FAULT_INJECTION: forcing a failure. [ 820.654212][T18874] name failslab, interval 1, probability 0, space 0, times 0 [ 820.661440][T18874] CPU: 3 UID: 0 PID: 18874 Comm: syz.8.3414 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.661469][T18874] Tainted: [L]=SOFTLOCKUP [ 820.661474][T18874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 820.661484][T18874] Call Trace: [ 820.661491][T18874] [ 820.661498][T18874] dump_stack_lvl+0x100/0x190 [ 820.661524][T18874] should_fail_ex.cold+0x5/0xa [ 820.661545][T18874] should_failslab+0xc2/0x120 [ 820.661569][T18874] __kmalloc_cache_noprof+0x91/0x6b0 [ 820.661589][T18874] ? bpf_prog_alloc_no_stats+0x15f/0x690 [ 820.661624][T18874] bpf_prog_alloc_no_stats+0x15f/0x690 [ 820.661644][T18874] bpf_prog_alloc+0x3b/0x200 [ 820.661658][T18874] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 820.661678][T18874] bpf_prog_load+0x49e/0x2a80 [ 820.661700][T18874] ? __lock_acquire+0x4c5/0x1ec0 [ 820.661720][T18874] ? __pfx_bpf_prog_load+0x10/0x10 [ 820.661754][T18874] __sys_bpf+0x1f46/0x4a30 [ 820.661782][T18874] ? __pfx___sys_bpf+0x10/0x10 [ 820.661804][T18874] ? find_held_lock+0x2b/0x80 [ 820.661827][T18874] ? get_pid_task+0xfc/0x250 [ 820.661850][T18874] ? get_pid_task+0xfc/0x250 [ 820.661876][T18874] ? proc_fail_nth_write+0x9f/0x220 [ 820.661905][T18874] ? find_held_lock+0x2b/0x80 [ 820.661932][T18874] ? rcu_read_lock_any_held+0x6a/0x90 [ 820.661964][T18874] ? find_held_lock+0x2b/0x80 [ 820.661986][T18874] ? ksys_write+0x190/0x250 [ 820.662002][T18874] ? ksys_write+0x190/0x250 [ 820.662033][T18874] ? fput+0x7c/0x100 [ 820.662068][T18874] ? __ia32_sys_bpf+0xcc/0x170 [ 820.662091][T18874] __ia32_sys_bpf+0xcc/0x170 [ 820.662114][T18874] ? __do_fast_syscall_32+0xb3/0x8b0 [ 820.662135][T18874] __do_fast_syscall_32+0x13a/0x8b0 [ 820.662152][T18874] ? lockdep_hardirqs_on+0x7d/0x110 [ 820.662171][T18874] do_fast_syscall_32+0x32/0x70 [ 820.662188][T18874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 820.662209][T18874] RIP: 0023:0xf7f43fec [ 820.662234][T18874] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 820.662241][T18874] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 820.662258][T18874] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 820.662268][T18874] RDX: 00000000000000e8 RSI: 0000000000000000 RDI: 0000000000000000 [ 820.662278][T18874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 820.662287][T18874] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 820.662297][T18874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 820.662316][T18874] [ 820.965644][T18886] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 820.971125][T18886] i2c i2c-1: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 820.980301][T18886] Invalid option length (1047276) for dns_resolver key [ 821.349201][T18899] FAULT_INJECTION: forcing a failure. [ 821.349201][T18899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.359235][T18899] CPU: 3 UID: 0 PID: 18899 Comm: syz.9.3415 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.359257][T18899] Tainted: [L]=SOFTLOCKUP [ 821.359261][T18899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 821.359268][T18899] Call Trace: [ 821.359273][T18899] [ 821.359278][T18899] dump_stack_lvl+0x100/0x190 [ 821.359297][T18899] should_fail_ex.cold+0x5/0xa [ 821.359311][T18899] _copy_from_user+0x2e/0xd0 [ 821.359339][T18899] copy_ctl_value_from_user+0x3c/0x670 [ 821.359391][T18899] snd_ctl_ioctl_compat+0x733/0xbc0 [ 821.359407][T18899] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 821.359418][T18899] ? find_held_lock+0x2b/0x80 [ 821.359435][T18899] ? __fget_files+0x215/0x3d0 [ 821.359458][T18899] ? __fget_files+0x21f/0x3d0 [ 821.359472][T18899] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 821.359484][T18899] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 821.359505][T18899] __do_fast_syscall_32+0x13a/0x8b0 [ 821.359518][T18899] ? lockdep_hardirqs_on+0x7d/0x110 [ 821.359530][T18899] do_fast_syscall_32+0x32/0x70 [ 821.359542][T18899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 821.359557][T18899] RIP: 0023:0xf700efec [ 821.359571][T18899] Code: Unable to access opcode bytes at 0xf700efc2. [ 821.359576][T18899] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 821.359587][T18899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c2c45512 [ 821.359594][T18899] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 821.359600][T18899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 821.359607][T18899] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 821.359613][T18899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 821.359626][T18899] [ 821.420438][T18852] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 821.473803][T18906] FAULT_INJECTION: forcing a failure. [ 821.473803][T18906] name failslab, interval 1, probability 0, space 0, times 0 [ 821.478222][T18906] CPU: 3 UID: 0 PID: 18906 Comm: syz.8.3418 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.478241][T18906] Tainted: [L]=SOFTLOCKUP [ 821.478245][T18906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 821.478252][T18906] Call Trace: [ 821.478256][T18906] [ 821.478261][T18906] dump_stack_lvl+0x100/0x190 [ 821.478281][T18906] should_fail_ex.cold+0x5/0xa [ 821.478295][T18906] should_failslab+0xc2/0x120 [ 821.478312][T18906] __kvmalloc_node_noprof+0x116/0x970 [ 821.478327][T18906] ? find_held_lock+0x2b/0x80 [ 821.478344][T18906] ? proc_sys_call_handler+0x169/0x5a0 [ 821.478359][T18906] ? proc_sys_call_handler+0x169/0x5a0 [ 821.478373][T18906] ? proc_sys_call_handler+0x2c7/0x5a0 [ 821.478390][T18906] proc_sys_call_handler+0x2c7/0x5a0 [ 821.478406][T18906] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 821.478424][T18906] vfs_write+0x6af/0x1050 [ 821.478437][T18906] ? __pfx_proc_sys_write+0x10/0x10 [ 821.478452][T18906] ? __pfx_vfs_write+0x10/0x10 [ 821.478462][T18906] ? find_held_lock+0x2b/0x80 [ 821.478486][T18906] ksys_write+0x12a/0x250 [ 821.478497][T18906] ? __pfx_ksys_write+0x10/0x10 [ 821.478507][T18906] ? ksys_write+0x1ac/0x250 [ 821.478518][T18906] ? __pfx_ksys_write+0x10/0x10 [ 821.478531][T18906] __do_fast_syscall_32+0x13a/0x8b0 [ 821.478544][T18906] ? lockdep_hardirqs_on+0x7d/0x110 [ 821.478557][T18906] do_fast_syscall_32+0x32/0x70 [ 821.478569][T18906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 821.478584][T18906] RIP: 0023:0xf7f43fec [ 821.478599][T18906] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 821.478604][T18906] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 821.478615][T18906] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 821.478622][T18906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 821.478628][T18906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 821.478634][T18906] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 821.478640][T18906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 821.478654][T18906] [ 821.948236][T18925] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3426'. [ 822.511665][T18941] FAULT_INJECTION: forcing a failure. [ 822.511665][T18941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.516282][T18941] CPU: 1 UID: 0 PID: 18941 Comm: syz.2.3430 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.516302][T18941] Tainted: [L]=SOFTLOCKUP [ 822.516306][T18941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 822.516312][T18941] Call Trace: [ 822.516328][T18941] [ 822.516335][T18941] dump_stack_lvl+0x100/0x190 [ 822.516354][T18941] should_fail_ex.cold+0x5/0xa [ 822.516368][T18941] _copy_from_iter+0x1f4/0x1690 [ 822.516394][T18941] ? __asan_memset+0x23/0x50 [ 822.516407][T18941] ? __pfx__copy_from_iter+0x10/0x10 [ 822.516418][T18941] ? __pfx___alloc_skb+0x10/0x10 [ 822.516435][T18941] netlink_sendmsg+0x808/0xda0 [ 822.516454][T18941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.516472][T18941] ? apparmor_socket_sendmsg+0x15b/0x270 [ 822.516486][T18941] ____sys_sendmsg+0xa4d/0xbe0 [ 822.516500][T18941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.516516][T18941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.516533][T18941] ? __pfx___schedule+0x10/0x10 [ 822.516553][T18941] ___sys_sendmsg+0x190/0x1e0 [ 822.516568][T18941] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.516589][T18941] ? find_held_lock+0x2b/0x80 [ 822.516614][T18941] __sys_sendmsg+0x160/0x210 [ 822.516626][T18941] ? __pfx___sys_sendmsg+0x10/0x10 [ 822.516641][T18941] ? __pfx_ksys_write+0x10/0x10 [ 822.516655][T18941] __do_fast_syscall_32+0x13a/0x8b0 [ 822.516668][T18941] ? lockdep_hardirqs_on+0x7d/0x110 [ 822.516680][T18941] do_fast_syscall_32+0x32/0x70 [ 822.516692][T18941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 822.516706][T18941] RIP: 0023:0xf6fcefec [ 822.516720][T18941] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 822.516725][T18941] RSP: 002b:00000000f537b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 822.516736][T18941] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 822.516743][T18941] RDX: 0000000000008800 RSI: 0000000000000000 RDI: 0000000000000000 [ 822.516750][T18941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 822.516756][T18941] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 822.516762][T18941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 822.516775][T18941] [ 822.851045][T18944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3432'. [ 823.338714][T18960] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 823.347311][T18960] kvm: pic: level sensitive irq not supported [ 823.348481][T18960] kvm: pic: non byte read [ 823.749395][T18972] FAULT_INJECTION: forcing a failure. [ 823.749395][T18972] name failslab, interval 1, probability 0, space 0, times 0 [ 823.755753][T18972] CPU: 2 UID: 0 PID: 18972 Comm: syz.2.3439 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.755773][T18972] Tainted: [L]=SOFTLOCKUP [ 823.755777][T18972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 823.755794][T18972] Call Trace: [ 823.755801][T18972] [ 823.755807][T18972] dump_stack_lvl+0x100/0x190 [ 823.755828][T18972] should_fail_ex.cold+0x5/0xa [ 823.755842][T18972] should_failslab+0xc2/0x120 [ 823.755859][T18972] __kmalloc_cache_noprof+0x91/0x6b0 [ 823.755873][T18972] ? sctp_has_association+0xdd/0x270 [ 823.755885][T18972] ? sctp_association_new+0xbb/0x2990 [ 823.755904][T18972] sctp_association_new+0xbb/0x2990 [ 823.755920][T18972] ? sctp_v4_scope+0x183/0x1a0 [ 823.755933][T18972] sctp_connect_new_asoc+0x1a8/0x770 [ 823.755953][T18972] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 823.755968][T18972] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 823.755982][T18972] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 823.756001][T18972] __sctp_connect+0x3e7/0xc70 [ 823.756020][T18972] ? __pfx___sctp_connect+0x10/0x10 [ 823.756041][T18972] __sctp_setsockopt_connectx+0x100/0x190 [ 823.756059][T18972] sctp_getsockopt+0x3e94/0x7090 [ 823.756076][T18972] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 823.756092][T18972] ? __lock_acquire+0x4c5/0x1ec0 [ 823.756105][T18972] ? __pfx_sctp_getsockopt+0x10/0x10 [ 823.756123][T18972] ? __lock_acquire+0x4c5/0x1ec0 [ 823.756140][T18972] ? __pfx___might_resched+0x10/0x10 [ 823.756155][T18972] ? aa_sk_perm+0x30c/0xaa0 [ 823.756172][T18972] ? __pfx_aa_sk_perm+0x10/0x10 [ 823.756188][T18972] ? pick_task_fair+0x142/0x1e00 [ 823.756209][T18972] ? lockdep_hardirqs_on+0x7d/0x110 [ 823.756229][T18972] ? aa_sock_opt_perm+0xff/0x1b0 [ 823.756274][T18972] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 823.756300][T18972] do_sock_getsockopt+0x50a/0x6e0 [ 823.756324][T18972] ? __lock_acquire+0x4c5/0x1ec0 [ 823.756347][T18972] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 823.756370][T18972] ? find_held_lock+0x2b/0x80 [ 823.756390][T18972] ? __fget_files+0x21f/0x3d0 [ 823.756406][T18972] __sys_getsockopt+0x133/0x1d0 [ 823.756421][T18972] ? __ia32_sys_getsockopt+0xbc/0x160 [ 823.756432][T18972] __ia32_sys_getsockopt+0xbc/0x160 [ 823.756442][T18972] ? __do_fast_syscall_32+0xb3/0x8b0 [ 823.756455][T18972] ? lockdep_hardirqs_on+0x7d/0x110 [ 823.756465][T18972] __do_fast_syscall_32+0x13a/0x8b0 [ 823.756477][T18972] ? lockdep_hardirqs_on+0x7d/0x110 [ 823.756489][T18972] do_fast_syscall_32+0x32/0x70 [ 823.756501][T18972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 823.756516][T18972] RIP: 0023:0xf6fcefec [ 823.756530][T18972] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 823.756535][T18972] RSP: 002b:00000000f539c50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 823.756546][T18972] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000084 [ 823.756553][T18972] RDX: 000000000000006f RSI: 00000000800000c0 RDI: 0000000080000100 [ 823.756559][T18972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 823.756566][T18972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.756572][T18972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 823.756585][T18972] [ 823.846580][T18974] use of bytesused == 0 is deprecated and will be removed in the future, [ 823.864235][T18974] use the actual size instead. [ 823.867920][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3440'. [ 824.038475][T18979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3441'. [ 824.711604][ T42] audit: type=1400 audit(1787275869.269:11079): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=18991 comm="syz.8.3445" [ 824.808185][T18996] FAULT_INJECTION: forcing a failure. [ 824.808185][T18996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.814566][T18996] CPU: 0 UID: 0 PID: 18996 Comm: syz.8.3446 Tainted: G L syzkaller #0 PREEMPT(full) [ 824.814598][T18996] Tainted: [L]=SOFTLOCKUP [ 824.814605][T18996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 824.814616][T18996] Call Trace: [ 824.814623][T18996] [ 824.814631][T18996] dump_stack_lvl+0x100/0x190 [ 824.814661][T18996] should_fail_ex.cold+0x5/0xa [ 824.814683][T18996] _copy_from_iter+0x1f4/0x1690 [ 824.814708][T18996] ? __asan_memset+0x23/0x50 [ 824.814731][T18996] ? __pfx__copy_from_iter+0x10/0x10 [ 824.814750][T18996] ? __pfx___alloc_skb+0x10/0x10 [ 824.814777][T18996] netlink_sendmsg+0x808/0xda0 [ 824.814808][T18996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.814838][T18996] ? apparmor_socket_sendmsg+0x15b/0x270 [ 824.814861][T18996] ____sys_sendmsg+0xa4d/0xbe0 [ 824.814884][T18996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.814911][T18996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 824.814946][T18996] ___sys_sendmsg+0x190/0x1e0 [ 824.814972][T18996] ? __pfx____sys_sendmsg+0x10/0x10 [ 824.815007][T18996] ? find_held_lock+0x2b/0x80 [ 824.815074][T18996] __sys_sendmsg+0x160/0x210 [ 824.815094][T18996] ? __pfx___sys_sendmsg+0x10/0x10 [ 824.815119][T18996] ? __pfx_ksys_write+0x10/0x10 [ 824.815144][T18996] __do_fast_syscall_32+0x13a/0x8b0 [ 824.815165][T18996] ? lockdep_hardirqs_on+0x7d/0x110 [ 824.815185][T18996] do_fast_syscall_32+0x32/0x70 [ 824.815206][T18996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 824.815229][T18996] RIP: 0023:0xf7f43fec [ 824.815251][T18996] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 824.815259][T18996] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 824.815278][T18996] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 824.815290][T18996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 824.815300][T18996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 824.815310][T18996] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 824.815321][T18996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 824.815344][T18996] [ 824.970608][T19001] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3448'. [ 824.989057][T19001] bond1: entered promiscuous mode [ 824.992554][T19001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 824.997606][T18998] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 825.002125][T19004] loop5: detected capacity change from 0 to 7 [ 825.024850][T18998] kvm: pic: level sensitive irq not supported [ 825.025117][T18998] kvm: pic: non byte read [ 825.071999][T19004] Dev loop5: unable to read RDB block 7 [ 825.073969][T19004] loop5: unable to read partition table [ 825.078263][T19004] loop5: partition table beyond EOD, truncated [ 825.080335][T19004] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 825.234046][T19016] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3452'. [ 825.240858][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3453'. [ 825.259128][T19014] FAULT_INJECTION: forcing a failure. [ 825.259128][T19014] name failslab, interval 1, probability 0, space 0, times 0 [ 825.264082][T19014] CPU: 1 UID: 0 PID: 19014 Comm: syz.9.3450 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.264111][T19014] Tainted: [L]=SOFTLOCKUP [ 825.264117][T19014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 825.264127][T19014] Call Trace: [ 825.264132][T19014] [ 825.264138][T19014] dump_stack_lvl+0x100/0x190 [ 825.264158][T19014] should_fail_ex.cold+0x5/0xa [ 825.264170][T19014] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 825.264187][T19014] should_failslab+0xc2/0x120 [ 825.264204][T19014] kmem_cache_alloc_noprof+0x91/0x6a0 [ 825.264220][T19014] ? skb_clone+0x190/0x400 [ 825.264233][T19014] skb_clone+0x190/0x400 [ 825.264245][T19014] netlink_deliver_tap+0xaed/0xcc0 [ 825.264264][T19014] netlink_unicast+0x62b/0x850 [ 825.264282][T19014] ? __pfx_netlink_unicast+0x10/0x10 [ 825.264302][T19014] netlink_sendmsg+0x8b0/0xda0 [ 825.264319][T19014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.264337][T19014] ? apparmor_socket_sendmsg+0x15b/0x270 [ 825.264351][T19014] sock_write_iter+0x53a/0x5b0 [ 825.264365][T19014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.264380][T19014] ? __pfx_sock_write_iter+0x10/0x10 [ 825.264397][T19014] ? bpf_lsm_file_permission+0x9/0x10 [ 825.264423][T19014] ? security_file_permission+0x76/0x210 [ 825.264439][T19014] ? rw_verify_area+0xce/0x6d0 [ 825.264458][T19014] vfs_write+0x6af/0x1050 [ 825.264469][T19014] ? __pfx_sock_write_iter+0x10/0x10 [ 825.264484][T19014] ? __pfx_vfs_write+0x10/0x10 [ 825.264494][T19014] ? find_held_lock+0x2b/0x80 [ 825.264520][T19014] ksys_write+0x1f8/0x250 [ 825.264531][T19014] ? __pfx_ksys_write+0x10/0x10 [ 825.264541][T19014] ? ksys_write+0x1ac/0x250 [ 825.264551][T19014] ? __pfx_ksys_write+0x10/0x10 [ 825.264568][T19014] __do_fast_syscall_32+0x13a/0x8b0 [ 825.264582][T19014] ? lockdep_hardirqs_on+0x7d/0x110 [ 825.264594][T19014] do_fast_syscall_32+0x32/0x70 [ 825.264606][T19014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 825.264621][T19014] RIP: 0023:0xf700efec [ 825.264635][T19014] Code: Unable to access opcode bytes at 0xf700efc2. [ 825.264640][T19014] RSP: 002b:00000000f53dc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 825.264651][T19014] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000 [ 825.264658][T19014] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 825.264664][T19014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 825.264670][T19014] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 825.264676][T19014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 825.264690][T19014] [ 825.357741][T19020] FAULT_INJECTION: forcing a failure. [ 825.357741][T19020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.361775][T19020] CPU: 2 UID: 0 PID: 19020 Comm: syz.4.3454 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.361793][T19020] Tainted: [L]=SOFTLOCKUP [ 825.361797][T19020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 825.361804][T19020] Call Trace: [ 825.361809][T19020] [ 825.361814][T19020] dump_stack_lvl+0x100/0x190 [ 825.361834][T19020] should_fail_ex.cold+0x5/0xa [ 825.361848][T19020] _copy_from_user+0x2e/0xd0 [ 825.361861][T19020] get_compat_msghdr+0xb3/0x480 [ 825.361888][T19020] ? __pfx_get_compat_msghdr+0x10/0x10 [ 825.361907][T19020] ___sys_sendmsg+0x1b6/0x1e0 [ 825.361924][T19020] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.361944][T19020] ? find_held_lock+0x2b/0x80 [ 825.361969][T19020] __sys_sendmsg+0x160/0x210 [ 825.361981][T19020] ? __pfx___sys_sendmsg+0x10/0x10 [ 825.361996][T19020] ? __pfx_ksys_write+0x10/0x10 [ 825.362010][T19020] __do_fast_syscall_32+0x13a/0x8b0 [ 825.362024][T19020] ? lockdep_hardirqs_on+0x7d/0x110 [ 825.362036][T19020] do_fast_syscall_32+0x32/0x70 [ 825.362048][T19020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 825.362063][T19020] RIP: 0023:0xf703efec [ 825.362078][T19020] Code: Unable to access opcode bytes at 0xf703efc2. [ 825.362083][T19020] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 825.362094][T19020] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 825.362101][T19020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 825.362107][T19020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 825.362113][T19020] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 825.362119][T19020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 825.362132][T19020] [ 825.560948][T19034] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 825.585835][ T42] audit: type=1326 audit(1787275870.139:11080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 825.608737][ T42] audit: type=1326 audit(1787275870.149:11081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 825.618182][ T42] audit: type=1326 audit(1787275870.149:11082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 825.627917][ T42] audit: type=1326 audit(1787275870.149:11083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 825.639530][ T42] audit: type=1326 audit(1787275870.149:11084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3457" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 825.651317][ T42] audit: type=1326 audit(1787275870.149:11085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 825.671668][ T42] audit: type=1326 audit(1787275870.149:11086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 825.689450][ T42] audit: type=1326 audit(1787275870.149:11087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3457" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 825.706082][ T42] audit: type=1326 audit(1787275870.199:11088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 826.276944][ T2321] hid-generic 0005:0010:10000.0016: unknown main item tag 0x0 [ 826.287914][ T2321] hid-generic 0005:0010:10000.0016: unknown main item tag 0x0 [ 826.291118][ T2321] hid-generic 0005:0010:10000.0016: unknown main item tag 0x0 [ 826.302695][ T2321] hid-generic 0005:0010:10000.0016: unknown main item tag 0x0 [ 826.310468][ T2321] hid-generic 0005:0010:10000.0016: unknown main item tag 0x0 [ 826.314300][ T2321] hid-generic 0005:0010:10000.0016: unknown main item tag 0x0 [ 826.318775][ T2321] hid-generic 0005:0010:10000.0016: unknown main item tag 0x0 [ 826.323288][ T2321] hid-generic 0005:0010:10000.0016: unknown main item tag 0x0 [ 826.327136][ T2321] hid-generic 0005:0010:10000.0016: unknown main item tag 0x0 [ 826.330878][ T2321] hid-generic 0005:0010:10000.0016: unknown main item tag 0x0 [ 826.383221][ T2321] hid-generic 0005:0010:10000.0016: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on syz0 [ 826.466070][T17706] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 826.623029][T17706] usb 7-1: unable to get BOS descriptor or descriptor too short [ 826.646998][T17706] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 826.656211][T17706] usb 7-1: no configurations [ 826.665321][T17706] usb 7-1: can't read configurations, error -22 [ 826.690802][T19050] fido_id[19050]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 826.721618][T19053] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3462'. [ 826.837780][T19057] xt_HMARK: proto mask must be zero with L3 mode [ 827.173049][T19072] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 827.178614][T19072] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 827.183092][T19072] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 827.188550][T19072] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 827.200402][T19072] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 827.205638][T19072] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 827.213509][T19072] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 827.218724][T19072] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 827.223668][T19072] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 827.233193][T19072] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 828.339635][T19089] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3471'. [ 828.669064][T19097] FAULT_INJECTION: forcing a failure. [ 828.669064][T19097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.690271][T19097] CPU: 1 UID: 0 PID: 19097 Comm: syz.9.3474 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.690294][T19097] Tainted: [L]=SOFTLOCKUP [ 828.690298][T19097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 828.690304][T19097] Call Trace: [ 828.690310][T19097] [ 828.690315][T19097] dump_stack_lvl+0x100/0x190 [ 828.690335][T19097] should_fail_ex.cold+0x5/0xa [ 828.690349][T19097] _copy_from_iter+0x1f4/0x1690 [ 828.690363][T19097] ? __asan_memset+0x23/0x50 [ 828.690377][T19097] ? __pfx__copy_from_iter+0x10/0x10 [ 828.690388][T19097] ? __pfx___alloc_skb+0x10/0x10 [ 828.690405][T19097] netlink_sendmsg+0x808/0xda0 [ 828.690425][T19097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.690443][T19097] ? apparmor_socket_sendmsg+0x15b/0x270 [ 828.690457][T19097] ____sys_sendmsg+0xa4d/0xbe0 [ 828.690472][T19097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.690488][T19097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 828.690506][T19097] ? rcu_is_watching+0x13/0xc0 [ 828.690525][T19097] ___sys_sendmsg+0x190/0x1e0 [ 828.690541][T19097] ? __pfx____sys_sendmsg+0x10/0x10 [ 828.690555][T19097] ? find_held_lock+0x2b/0x80 [ 828.690578][T19097] ? find_held_lock+0x2b/0x80 [ 828.690601][T19097] __sys_sendmsg+0x160/0x210 [ 828.690614][T19097] ? __pfx___sys_sendmsg+0x10/0x10 [ 828.690628][T19097] ? exit_to_user_mode_loop+0x166/0x700 [ 828.690642][T19097] ? rcu_is_watching+0x13/0xc0 [ 828.690660][T19097] __do_fast_syscall_32+0x13a/0x8b0 [ 828.690673][T19097] ? lockdep_hardirqs_on+0x7d/0x110 [ 828.690692][T19097] do_fast_syscall_32+0x32/0x70 [ 828.690704][T19097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 828.690719][T19097] RIP: 0023:0xf700efec [ 828.690733][T19097] Code: Unable to access opcode bytes at 0xf700efc2. [ 828.690738][T19097] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 828.690750][T19097] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080001680 [ 828.690757][T19097] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 828.690763][T19097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 828.690769][T19097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.690775][T19097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 828.690789][T19097] [ 828.993197][T19106] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3477'. [ 829.776703][T19128] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3481'. [ 830.010069][T19134] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 830.020015][T19134] kvm: pic: level sensitive irq not supported [ 830.020379][T19134] kvm: pic: non byte read [ 831.103252][T19158] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3491'. [ 831.155154][T19160] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 831.184126][T19160] FAULT_INJECTION: forcing a failure. [ 831.184126][T19160] name failslab, interval 1, probability 0, space 0, times 0 [ 831.189084][T19160] CPU: 3 UID: 0 PID: 19160 Comm: syz.8.3492 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.189103][T19160] Tainted: [L]=SOFTLOCKUP [ 831.189106][T19160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 831.189113][T19160] Call Trace: [ 831.189118][T19160] [ 831.189122][T19160] dump_stack_lvl+0x100/0x190 [ 831.189142][T19160] should_fail_ex.cold+0x5/0xa [ 831.189156][T19160] should_failslab+0xc2/0x120 [ 831.189173][T19160] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 831.189190][T19160] ? kvasprintf_const+0x66/0x1a0 [ 831.189206][T19160] kvasprintf+0xbc/0x150 [ 831.189218][T19160] ? __pfx_kvasprintf+0x10/0x10 [ 831.189230][T19160] ? acpi_dev_for_each_child+0x88/0xc0 [ 831.189254][T19160] ? find_held_lock+0x2b/0x80 [ 831.189273][T19160] kvasprintf_const+0x66/0x1a0 [ 831.189285][T19160] kobject_set_name_vargs+0x5a/0x140 [ 831.189302][T19160] dev_set_name+0xc7/0x100 [ 831.189325][T19160] ? __pfx_dev_set_name+0x10/0x10 [ 831.189344][T19160] ? set_primary_fwnode+0x11a/0x2a0 [ 831.189358][T19160] ? pci_dev_assign_slot+0x151/0x1b0 [ 831.189381][T19160] pci_setup_device+0x5f5/0x2500 [ 831.189402][T19160] ? __pfx_pci_setup_device+0x10/0x10 [ 831.189419][T19160] ? kasan_save_track+0x14/0x30 [ 831.189434][T19160] ? __kasan_kmalloc+0xaa/0xb0 [ 831.189448][T19160] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 831.189461][T19160] ? lockdep_init_map_type+0x5c/0x250 [ 831.189475][T19160] ? __raw_spin_lock_init+0x3a/0x110 [ 831.189492][T19160] pci_scan_single_device+0x1ac/0x240 [ 831.189509][T19160] ? __pfx_pci_scan_single_device+0x10/0x10 [ 831.189530][T19160] pci_scan_slot+0x1c9/0x7c0 [ 831.189547][T19160] ? __pfx_pci_scan_slot+0x10/0x10 [ 831.189564][T19160] ? rcu_is_watching+0x13/0xc0 [ 831.189586][T19160] pci_scan_child_bus_extend+0x6b/0x7b0 [ 831.189603][T19160] ? pci_find_next_bus+0x60/0xb0 [ 831.189617][T19160] pci_rescan_bus+0x18/0x40 [ 831.189633][T19160] rescan_store+0xfb/0x130 [ 831.189649][T19160] ? __pfx_rescan_store+0x10/0x10 [ 831.189666][T19160] ? sysfs_file_kobj+0xe4/0x290 [ 831.189679][T19160] ? __pfx_rescan_store+0x10/0x10 [ 831.189695][T19160] bus_attr_store+0x74/0xb0 [ 831.189710][T19160] ? __pfx_bus_attr_store+0x10/0x10 [ 831.189725][T19160] sysfs_kf_write+0xf2/0x150 [ 831.189737][T19160] kernfs_fop_write_iter+0x3e0/0x5f0 [ 831.189754][T19160] ? __pfx_sysfs_kf_write+0x10/0x10 [ 831.189767][T19160] vfs_write+0x6af/0x1050 [ 831.189779][T19160] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 831.189796][T19160] ? __pfx_vfs_write+0x10/0x10 [ 831.189806][T19160] ? find_held_lock+0x2b/0x80 [ 831.189831][T19160] ksys_write+0x12a/0x250 [ 831.189842][T19160] ? __pfx_ksys_write+0x10/0x10 [ 831.189852][T19160] ? ksys_write+0x1ac/0x250 [ 831.189863][T19160] ? __pfx_ksys_write+0x10/0x10 [ 831.189877][T19160] __do_fast_syscall_32+0x13a/0x8b0 [ 831.189890][T19160] ? lockdep_hardirqs_on+0x7d/0x110 [ 831.189902][T19160] do_fast_syscall_32+0x32/0x70 [ 831.189914][T19160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 831.189928][T19160] RIP: 0023:0xf7f43fec [ 831.189943][T19160] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 831.189948][T19160] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 831.189959][T19160] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000800001c0 [ 831.189966][T19160] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 831.189972][T19160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 831.189978][T19160] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 831.189984][T19160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 831.189998][T19160] [ 831.190104][T19160] pci (null): [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 831.324196][T19160] pci (null): BAR 0 [mem 0x80000000-0x80ffffff pref] [ 831.328428][T19160] pci (null): BAR 2 [mem 0x81000000-0x81000fff] [ 831.330484][T19160] pci (null): ROM [mem 0xfeae0000-0xfeaeffff pref] [ 831.337453][T19160] pci (null): Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 831.341141][T19160] ------------[ cut here ]------------ [ 831.342854][T19160] ret < 0 [ 831.342861][T19160] WARNING: drivers/pci/probe.c:2768 at pci_device_add+0x133b/0x1810, CPU#3: syz.8.3492/19160 [ 831.347163][T19160] Modules linked in: [ 831.348962][T19160] CPU: 3 UID: 0 PID: 19160 Comm: syz.8.3492 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.352317][T19160] Tainted: [L]=SOFTLOCKUP [ 831.353679][T19160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 831.356869][T19160] RIP: 0010:pci_device_add+0x133b/0x1810 [ 831.358634][T19160] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 28 f4 ff ff e8 d8 2f ad fc 90 0f 0b 90 90 0f 0b 90 e9 0e f7 ff ff e8 c6 2f ad fc 90 <0f> 0b 90 e9 7e fa ff ff e8 b8 2f ad fc 90 0f 0b 90 e9 11 fa ff ff [ 831.364528][T19160] RSP: 0018:ffffc90003a97910 EFLAGS: 00010293 [ 831.366513][T19160] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: 0000000000000000 [ 831.368959][T19160] RDX: ffff888029df8000 RSI: ffffffff855d0bca RDI: ffff888029df8000 [ 831.371407][T19160] RBP: ffff88801c6e5000 R08: 0000000000000005 R09: 0000000000000000 [ 831.373864][T19160] R10: 00000000ffffffea R11: 0000000000000001 R12: ffff888021945028 [ 831.376473][T19160] R13: ffff888021945000 R14: 0000000000000001 R15: ffff8880219dc000 [ 831.378931][T19160] FS: 0000000000000000(0000) GS:ffff888096cbd000(0063) knlGS:00000000f5406b40 [ 831.381708][T19160] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 831.383777][T19160] CR2: 00000000f7f44000 CR3: 00000000609a7000 CR4: 0000000000352ef0 [ 831.387513][T19160] Call Trace: [ 831.389014][T19160] [ 831.390090][T19160] ? __pfx_pci_device_add+0x10/0x10 [ 831.392271][T19160] ? __raw_spin_lock_init+0x3a/0x110 [ 831.394124][T19160] pci_scan_single_device+0x1d0/0x240 [ 831.395823][T19160] ? __pfx_pci_scan_single_device+0x10/0x10 [ 831.397820][T19160] pci_scan_slot+0x1c9/0x7c0 [ 831.399286][T19160] ? __pfx_pci_scan_slot+0x10/0x10 [ 831.400897][T19160] ? rcu_is_watching+0x13/0xc0 [ 831.402400][T19160] pci_scan_child_bus_extend+0x6b/0x7b0 [ 831.404129][T19160] ? pci_find_next_bus+0x60/0xb0 [ 831.405689][T19160] pci_rescan_bus+0x18/0x40 [ 831.407216][T19160] rescan_store+0xfb/0x130 [ 831.408629][T19160] ? __pfx_rescan_store+0x10/0x10 [ 831.410207][T19160] ? sysfs_file_kobj+0xe4/0x290 [ 831.411754][T19160] ? __pfx_rescan_store+0x10/0x10 [ 831.413352][T19160] bus_attr_store+0x74/0xb0 [ 831.414799][T19160] ? __pfx_bus_attr_store+0x10/0x10 [ 831.416555][T19160] sysfs_kf_write+0xf2/0x150 [ 831.418165][T19160] kernfs_fop_write_iter+0x3e0/0x5f0 [ 831.419845][T19160] ? __pfx_sysfs_kf_write+0x10/0x10 [ 831.421480][T19160] vfs_write+0x6af/0x1050 [ 831.422879][T19160] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 831.424719][T19160] ? __pfx_vfs_write+0x10/0x10 [ 831.426302][T19160] ? find_held_lock+0x2b/0x80 [ 831.427820][T19160] ksys_write+0x12a/0x250 [ 831.429184][T19160] ? __pfx_ksys_write+0x10/0x10 [ 831.430721][T19160] ? ksys_write+0x1ac/0x250 [ 831.432154][T19160] ? __pfx_ksys_write+0x10/0x10 [ 831.433698][T19160] __do_fast_syscall_32+0x13a/0x8b0 [ 831.435362][T19160] ? lockdep_hardirqs_on+0x7d/0x110 [ 831.437084][T19160] do_fast_syscall_32+0x32/0x70 [ 831.438666][T19160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 831.440649][T19160] RIP: 0023:0xf7f43fec [ 831.441959][T19160] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 831.444069][T19160] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 831.446725][T19160] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000800001c0 [ 831.449211][T19160] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 831.451689][T19160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 831.454141][T19160] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 831.456662][T19160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 831.459112][T19160] [ 831.460106][T19160] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 831.462371][T19160] CPU: 3 UID: 0 PID: 19160 Comm: syz.8.3492 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.465713][T19160] Tainted: [L]=SOFTLOCKUP [ 831.467075][T19160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 831.470184][T19160] Call Trace: [ 831.471252][T19160] [ 831.472213][T19160] dump_stack_lvl+0x100/0x190 [ 831.473734][T19160] vpanic+0x553/0x970 [ 831.474997][T19160] ? __pfx_vpanic+0x10/0x10 [ 831.476438][T19160] panic+0xd1/0xe0 [ 831.477627][T19160] ? __pfx_panic+0x10/0x10 [ 831.479029][T19160] check_panic_on_warn.cold+0x19/0x34 [ 831.480711][T19160] ? pci_device_add+0x133b/0x1810 [ 831.482287][T19160] __warn.cold+0x191/0x318 [ 831.483727][T19160] __report_bug+0x30f/0x440 [ 831.485153][T19160] ? pci_device_add+0x133b/0x1810 [ 831.486748][T19160] ? __pfx___report_bug+0x10/0x10 [ 831.488649][T19160] ? kasan_quarantine_put+0x104/0x240 [ 831.490399][T19160] ? lockdep_hardirqs_on+0x7d/0x110 [ 831.492296][T19160] ? device_add+0x2c0/0x1970 [ 831.493777][T19160] ? pci_device_add+0x133b/0x1810 [ 831.495364][T19160] report_bug+0xb3/0x220 [ 831.496708][T19160] ? pci_device_add+0x133b/0x1810 [ 831.498286][T19160] handle_bug+0x16a/0x2a0 [ 831.499657][T19160] exc_invalid_op+0x17/0x50 [ 831.501169][T19160] asm_exc_invalid_op+0x1a/0x20 [ 831.503124][T19160] RIP: 0010:pci_device_add+0x133b/0x1810 [ 831.504972][T19160] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 28 f4 ff ff e8 d8 2f ad fc 90 0f 0b 90 90 0f 0b 90 e9 0e f7 ff ff e8 c6 2f ad fc 90 <0f> 0b 90 e9 7e fa ff ff e8 b8 2f ad fc 90 0f 0b 90 e9 11 fa ff ff [ 831.510991][T19160] RSP: 0018:ffffc90003a97910 EFLAGS: 00010293 [ 831.512906][T19160] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: 0000000000000000 [ 831.515351][T19160] RDX: ffff888029df8000 RSI: ffffffff855d0bca RDI: ffff888029df8000 [ 831.517796][T19160] RBP: ffff88801c6e5000 R08: 0000000000000005 R09: 0000000000000000 [ 831.520252][T19160] R10: 00000000ffffffea R11: 0000000000000001 R12: ffff888021945028 [ 831.522696][T19160] R13: ffff888021945000 R14: 0000000000000001 R15: ffff8880219dc000 [ 831.525181][T19160] ? pci_device_add+0x133a/0x1810 [ 831.526785][T19160] ? __pfx_pci_device_add+0x10/0x10 [ 831.528424][T19160] ? __raw_spin_lock_init+0x3a/0x110 [ 831.530081][T19160] pci_scan_single_device+0x1d0/0x240 [ 831.531768][T19160] ? __pfx_pci_scan_single_device+0x10/0x10 [ 831.533635][T19160] pci_scan_slot+0x1c9/0x7c0 [ 831.535092][T19160] ? __pfx_pci_scan_slot+0x10/0x10 [ 831.536718][T19160] ? rcu_is_watching+0x13/0xc0 [ 831.538224][T19160] pci_scan_child_bus_extend+0x6b/0x7b0 [ 831.539960][T19160] ? pci_find_next_bus+0x60/0xb0 [ 831.541559][T19160] pci_rescan_bus+0x18/0x40 [ 831.543002][T19160] rescan_store+0xfb/0x130 [ 831.544418][T19160] ? __pfx_rescan_store+0x10/0x10 [ 831.546013][T19160] ? sysfs_file_kobj+0xe4/0x290 [ 831.547713][T19160] ? __pfx_rescan_store+0x10/0x10 [ 831.549290][T19160] bus_attr_store+0x74/0xb0 [ 831.550722][T19160] ? __pfx_bus_attr_store+0x10/0x10 [ 831.552402][T19160] sysfs_kf_write+0xf2/0x150 [ 831.553984][T19160] kernfs_fop_write_iter+0x3e0/0x5f0 [ 831.555695][T19160] ? __pfx_sysfs_kf_write+0x10/0x10 [ 831.557356][T19160] vfs_write+0x6af/0x1050 [ 831.558713][T19160] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 831.560538][T19160] ? __pfx_vfs_write+0x10/0x10 [ 831.562075][T19160] ? find_held_lock+0x2b/0x80 [ 831.563601][T19160] ksys_write+0x12a/0x250 [ 831.564962][T19160] ? __pfx_ksys_write+0x10/0x10 [ 831.566500][T19160] ? ksys_write+0x1ac/0x250 [ 831.567934][T19160] ? __pfx_ksys_write+0x10/0x10 [ 831.569461][T19160] __do_fast_syscall_32+0x13a/0x8b0 [ 831.571175][T19160] ? lockdep_hardirqs_on+0x7d/0x110 [ 831.572976][T19160] do_fast_syscall_32+0x32/0x70 [ 831.574505][T19160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 831.576487][T19160] RIP: 0023:0xf7f43fec [ 831.577793][T19160] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 831.579859][T19160] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 831.582475][T19160] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000800001c0 [ 831.584947][T19160] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 831.587412][T19160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 831.589862][T19160] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 831.592327][T19160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 831.594814][T19160] [ 831.596385][T19160] Kernel Offset: disabled [ 831.597774][T19160] Rebooting in 86400 seconds..